last executing test programs: 48m43.326750541s ago: executing program 1 (id=521): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000140)="eb", 0x4164, 0x4008004, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x100000000, &(0x7f0000000000)=[{0x400, 0x2, 0xfffffffffffffffc}], 0x1, 0x2, 0x2b, 0x2, 0x6e, 0x20}) 48m42.239401513s ago: executing program 1 (id=522): socket$kcm(0x2, 0xa, 0x2) r0 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r0, 0x0, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, 0x0, 0x0) 48m41.638858638s ago: executing program 1 (id=524): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xffe0, 0xffff}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (fail_nth: 5) 48m40.718828914s ago: executing program 1 (id=527): syz_usb_connect(0x0, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000009960810524711004f32010203010902160001000000000904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 48m39.017424611s ago: executing program 1 (id=534): socket$kcm(0x2, 0xa, 0x2) r0 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r0, 0x0, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, 0x0, 0x0) 48m38.645443582s ago: executing program 1 (id=537): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000380)={@remote, r1}, 0x14) syz_emit_ethernet(0x83, &(0x7f0000000ac0)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "018100", 0x4d, 0x11, 0x0, @local, @local, {[], {0x4e20, 0xe22, 0x4d, 0x0, @wg=@data={0x4, 0x100, 0x619, "b585ba3d127cd6f99826c4c0ab95cc5fd667b8b90ade7034ae33f84862e5a24c8d38dd74e3ab405cc4bfb041aff6ef7223e1437d94"}}}}}}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 48m38.065937881s ago: executing program 32 (id=537): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000380)={@remote, r1}, 0x14) syz_emit_ethernet(0x83, &(0x7f0000000ac0)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "018100", 0x4d, 0x11, 0x0, @local, @local, {[], {0x4e20, 0xe22, 0x4d, 0x0, @wg=@data={0x4, 0x100, 0x619, "b585ba3d127cd6f99826c4c0ab95cc5fd667b8b90ade7034ae33f84862e5a24c8d38dd74e3ab405cc4bfb041aff6ef7223e1437d94"}}}}}}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 43m42.226519785s ago: executing program 4 (id=1568): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="bc010000190001000000000003000000fe8800000000000080ff000000000001fe8000000000000000000000000000aa000a0000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000002000000000000000000000401050020010000000000000000000000000002000004d63c00000002000000e00000010000000000000000000000000735000004030700080000000400000001000000fe80000000000000000000000000000c000004d32b00000002"], 0x1bc}}, 0x0) 43m41.806325407s ago: executing program 4 (id=1569): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff5", 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}}) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000000c0)={r7, @in={{0x2, 0x0, @empty}}, 0x0, 0x1f4, 0x0, 0x0, 0xce024d}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r9 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000000)=r8, 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x102c0) r10 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r10, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @multicast2}}}], 0x20}, 0x0) unshare(0x42000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x10}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xe}}]}, 0x38}}, 0x0) 43m39.468278326s ago: executing program 4 (id=1574): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0xf]}}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x4}]}}]}, 0xac}}, 0x48004) 43m38.858490961s ago: executing program 4 (id=1576): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f00000003c0)=""/33) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r5, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0103000000000000000001000000050a03000000000000000000010020000900030073797a320000000014000000110001"], 0x68}}, 0x200000d4) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r6, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9"], 0x0}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r8 = syz_open_pts(r7, 0x101) r9 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000001200)={0x20000001}) dup3(r8, r7, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3f, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x4, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x824, 0xd, 0x1, 0x2, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x24c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0xfffffffa, 0x3fc, 0x80, 0x0, 0x2, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0xf292, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x78, 0x6e7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x31, 0xe, 0x312, 0x78, 0xea4, 0x2, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfdfffffd, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x7, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x2], [0x7, 0x408, 0x4, 0x5, 0xffffffff, 0x100, 0x8d2, 0x9, 0x6, 0x7ff7, 0x0, 0x5, 0xb, 0x3, 0x5, 0x409, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x3e, 0xd9, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1002, 0xa2, 0x7, 0x953a, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x6, 0xb, 0x5, 0x893a, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x149, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x1, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x8af, 0x8, 0x6, 0x226, 0x5, 0x5, 0x28, 0x30b1d693, 0xa1f, 0xf43, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r10, 0xffffffffffffffff, 0xc, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xe0f, 0x0, 0x1}}, 0x40) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x20, 0x21, 0x3a, {0x3a, 0x4, "13710fb0dbf4d069b238bf70b5289a9c094a65ba7f20d2ead98dfb2d46c5a8c0a2b01c43230392fb284d1ed484d52fc3c77173226296c444"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x1c, &(0x7f00000001c0)={0x20, 0x5, 0x5c, "15fadd12fb20c171c479ca45ac063fa5ab30eaaa04b3f62436a67a5a19f67e5fedb44ca64411f7b98685d3110a8be65b325ebdea6ed6e7ddd52e86b8c56a87157295584f18eb3779d291f6e681d37891bd9014ec87f7caf031b5189d"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xfb}}) 43m35.323819933s ago: executing program 4 (id=1585): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, 0x0) 43m34.975690755s ago: executing program 4 (id=1586): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c, &(0x7f0000001440)=[{&(0x7f00000000c0)="a2", 0x1}], 0x1}}], 0x1, 0x6001) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0xfffd, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x89}, 0x9c) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) write$dsp(r4, &(0x7f0000002000)='`', 0x88020) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000040)=0x7) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$unix(r2, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x1, 0x6}, {0x0, 0xb}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c, &(0x7f0000001440)=[{&(0x7f00000000c0)="a2", 0x1}], 0x1}}], 0x1, 0x6001) (async) shutdown(r3, 0x1) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0xfffd, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x89}, 0x9c) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) (async) write$dsp(r4, &(0x7f0000002000)='`', 0x88020) (async) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000040)=0x7) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bind$unix(r2, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x1, 0x6}, {0x0, 0xb}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) 43m19.39994548s ago: executing program 33 (id=1586): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c, &(0x7f0000001440)=[{&(0x7f00000000c0)="a2", 0x1}], 0x1}}], 0x1, 0x6001) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0xfffd, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x89}, 0x9c) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) write$dsp(r4, &(0x7f0000002000)='`', 0x88020) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000040)=0x7) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$unix(r2, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x1, 0x6}, {0x0, 0xb}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c, &(0x7f0000001440)=[{&(0x7f00000000c0)="a2", 0x1}], 0x1}}], 0x1, 0x6001) (async) shutdown(r3, 0x1) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0xfffd, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x89}, 0x9c) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) (async) write$dsp(r4, &(0x7f0000002000)='`', 0x88020) (async) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000040)=0x7) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bind$unix(r2, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x1, 0x6}, {0x0, 0xb}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) 7m54.403977825s ago: executing program 5 (id=9018): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x7bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x2, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x100, 0x0, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x4], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x14, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) rt_sigpending(0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x70000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4040041}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000068000100030010000000008000000000000000000c00020001000000150000000c000c80f2ffffffffffffff0600030001"], 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000240)=""/210) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYBLOB], 0x50) r5 = syz_io_uring_setup(0x88d, &(0x7f00000005c0)={0x0, 0x1423, 0x0, 0x2, 0xbfdffffc, 0x0, r3}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000040)={0x1b, 0x1, 0x0, "093d4a3b5b7bc69a21cfb7f5eaac46dbe89b13471a0488a6679f9a2102249341", 0x34524742}) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x11, 0x0, @fd, 0x0, 0x0, 0x0, {0x40}}) io_uring_enter(r5, 0x75fa, 0xe475, 0x0, 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r9, &(0x7f0000000180)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r9, &(0x7f0000000140)="eb", 0x34000, 0x4008004, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 7m53.014343399s ago: executing program 5 (id=9022): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x1, 0x8010000000000084) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/handlers\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0], 0x20) 7m52.718519118s ago: executing program 5 (id=9024): syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0cc5605, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x5, 0x2, 0x1, "f7b817716daef7e53fa4f998da1907309f97630a33ea3b6bd13c74c37001fd36", 0x35315241}) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef00000000000000000800380001000400"], 0x78) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000900160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14}}, 0x3c}, 0x1, 0x1200}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', r7, 0x7800, 0x7800, 0x0, 0xfffffffb, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x0, 0x0, 0x9, 0x4, 0x0, @remote, @multicast2}}}}) 7m49.416758072s ago: executing program 5 (id=9030): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4000000000000007311320000000000166400000000010095007400000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$kcm(0x2d, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00000000047c000008004280040008000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000080)={r5}) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r7, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xc9, 0x1) madvise(&(0x7f00005ce000/0x3000)=nil, 0x3000, 0xb) pread64(r4, &(0x7f0000000400)=""/154, 0x9a, 0x51) pipe2$watch_queue(0x0, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) 7m48.414820864s ago: executing program 5 (id=9037): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f0000000200)}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 7m48.098626314s ago: executing program 5 (id=9039): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xb, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x18, 0x2, 0x1e}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/206, 0xce, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x5, 0x1, 0x18}}, &(0x7f0000000240)={0x0, 0x48, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 7m47.194091993s ago: executing program 34 (id=9039): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xb, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x18, 0x2, 0x1e}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/206, 0xce, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x5, 0x1, 0x18}}, &(0x7f0000000240)={0x0, 0x48, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 8.553269464s ago: executing program 3 (id=10677): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x48f, &(0x7f0000000000)={0x11, @private, 0x0, 0x0, 'lc\x00', 0x0, 0x0, 0x14}, 0x2c) unshare(0x22020600) r1 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r1, 0x207a98, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 8.283016613s ago: executing program 3 (id=10679): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) socket$rxrpc(0x21, 0x2, 0xa) (async) socket$rxrpc(0x21, 0x2, 0xa) accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x50a1, 0x4) connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1, 0x0, 0x4, {}, {}, {0x4, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x3, 0x1, 0x1, 0x1}, 0x39, 0x1, 0x0, 0x0, "1ac5e4bf07dae5ff36b8348538d72ae4200e8f22089d5d35984dd77c596fd7c4748554155c7c6639a67cc0657af95de406197a6b112c8dd945311f8cd23c2d0e"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x240400c6) 7.994735918s ago: executing program 3 (id=10681): r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c9301ffffffff0000000000000000fdff00000000000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac14140d7b64"], 0x50}}], 0x1, 0xc080) 7.62077469s ago: executing program 3 (id=10682): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000020180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa3c4886dd600a843500140601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = fsopen(&(0x7f0000000100)='omfs\x00', 0x1) r4 = fcntl$dupfd(r3, 0x406, r3) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r5, 0x0, 0x17, 0x0, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0xc, 0x0, &(0x7f0000000040)) r8 = socket(0x2, 0x80805, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) sendmmsg$inet(r8, &(0x7f0000000cc0)=[{{&(0x7f0000000140)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000003040)=[{0x0}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000280)="41902256", 0x4}, {0x0}], 0x2}}], 0x2, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904"], 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x42801, 0x0) socket(0x10, 0x803, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r6, 0x80045104, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x5, 0x6, 0x53a, 0x9, 0x3ff}, &(0x7f0000000300)=0x14) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x3, 0x0, @remote}, 0x1c) 6.347318241s ago: executing program 6 (id=10686): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800070000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}}, 0x8000) 6.1244053s ago: executing program 6 (id=10688): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000100)="33e0", 0x2}], 0x2, 0x3, 0x0) sched_setattr(r2, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x1000000, 0x0, 0x400000000002b47, 0x100000000000002, 0xffbffffffffffffe, 0x0, 0xfffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x89, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @local, {[@routing={0x84}]}}}}}, 0x0) io_setup(0xffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="6400000000010104000000000000000002000000240001801400018008000100e000000208000200ac1414000c0002800500012000000000240002800c00028005000100000000001400018008000100e000000208000200e00000020800074000000000"], 0x64}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000004000800000", @ANYBLOB="feffffff00"/14, @ANYRES32, @ANYBLOB="0300"/13], 0x50) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/51, 0x33, 0x0) r6 = gettid() r7 = syz_io_uring_setup(0x17af, &(0x7f0000000500)={0x0, 0xbc48, 0x13290, 0x0, 0x1e1}, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7}) io_uring_enter(r7, 0x1, 0x2, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r6}, &(0x7f0000bbdffc)=0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) timer_settime(r10, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 6.054598778s ago: executing program 2 (id=10689): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a010000fff50000000000010000000900010073797a30000000000900020073797a300000000040000380080001400000000008000240000000002c0003801400010063616966300000000000000000000000140001006d61"], 0x110}}, 0x800) 5.790816457s ago: executing program 2 (id=10690): socket$kcm(0xa, 0x2, 0x73) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000006800e97800000000000000000a000000884700000800", @ANYRES64=r0], 0x20}}, 0x0) 5.6170939s ago: executing program 2 (id=10691): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/config', 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r2, 0x1, 0x10, 0x0, &(0x7f00000001c0)) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) r3 = openat$cgroup_ro(r1, &(0x7f0000001780)='devices.list\x00', 0x275a, 0x0) unshare(0x2040400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x2c000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) getsockname$packet(r9, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newtfilter={0xe84, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xa}, {0x6}, {0x0, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xe58, 0x2, [@TCA_BPF_ACT={0xe54, 0x1, [@m_pedit={0xe50, 0x0, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0xa, 0x2, 0x1, 0x2}, 0x1}, [{0xe, 0x800, 0x10, 0xa1f, 0x2, 0x70}, {0xb, 0x101, 0x6, 0x1, 0xa, 0x4}, {0x2, 0x8, 0x2, 0x9, 0x400, 0xaa}, {0x5, 0x8, 0x7, 0x7, 0x0, 0x1000}, {0x87e4, 0xe, 0x6, 0x9, 0x3, 0x5}, {0x1, 0x40, 0x1, 0x0, 0xfff, 0x81}, {0x1f70, 0x9, 0x8, 0x4, 0x0, 0x3}, {0x7, 0x4, 0xe, 0xe94e, 0x7f, 0x7}, {0xff, 0x101, 0x9, 0xc, 0x10000, 0x4}, {0x6, 0x4, 0x6, 0x9, 0x4, 0x8}, {0x3, 0x3, 0xb22b, 0xff, 0x800, 0x9a7}, {0xffff, 0x7f, 0x8, 0x18, 0x10}, {0x10000, 0x400, 0xcfac, 0x6, 0x2, 0x5}, {0xfffffff1, 0x98, 0x3ff, 0x3, 0x9, 0x80000001}, {0x9, 0x200, 0x8, 0x5, 0x9, 0x8}, {0x80000000, 0xfd6, 0x4, 0xa, 0x5, 0x31}, {0x9, 0x3ff, 0x7ff, 0x3, 0x1800, 0x3}, {0x1, 0x7, 0x4, 0x9, 0xe2, 0x401}, {0x0, 0xfffffff4, 0x3, 0x1400, 0x2, 0x3}, {0x8000, 0x4eca, 0xffffffae, 0x200, 0xe13, 0x31f5}, {0x0, 0x7fffffff, 0xffffaccd, 0x80000001, 0x7, 0x1}, {0x0, 0x0, 0x3, 0x7ff, 0x100, 0xd78}, {0x0, 0x6, 0x4, 0xb9, 0x1ff, 0x6}, {0x1, 0x7, 0x4, 0x6, 0x3, 0xf216}, {0x81, 0x7, 0x9a6, 0x8, 0x2, 0x4}, {0x857, 0x1, 0x2, 0x8, 0x0, 0x5}, {0x328fa6d7, 0x9, 0x3, 0x9, 0x7fff, 0x5}, {0x4, 0xfffffff7, 0x4, 0x3ff, 0xfffffffc, 0x9}, {0x3, 0x9, 0x6, 0x9, 0x8, 0x5}, {0x8, 0x5, 0x5, 0xffffffff, 0xffffffff, 0x7}, {0xfffffff7, 0x6, 0x5fb0, 0x401, 0x4, 0x80000001}, {0xb2, 0x7, 0x9, 0x3, 0x1, 0x8}, {0x9, 0x1, 0x8001, 0x101, 0x1, 0x12a1}, {0x8, 0x8, 0x3, 0xc0, 0x3, 0x2}, {0x3, 0xc5, 0x8, 0x5, 0xfffffff9, 0x8}, {0xcd, 0x2, 0x5, 0x7, 0x4, 0xfffffffb}, {0x2, 0xec57, 0x2, 0xfd, 0x1ff, 0x3}, {0x8, 0x1, 0x6, 0x0, 0x4, 0x2}, {0x800, 0xfff, 0x0, 0x45, 0x1, 0x8}, {0x2, 0x3e94afff, 0x4, 0x10000}, {0x5, 0x852f, 0x1, 0x10, 0x10000, 0x4}, {0x4bd, 0x3ff, 0x81, 0x764, 0x8, 0x9}, {0xfffffffe, 0x2, 0xc, 0x1, 0xfffffff8, 0x8}, {0x1, 0x7fff, 0x9, 0xf3, 0x4, 0x551d}, {0xffff, 0x1, 0x3, 0x7fffffff, 0x7, 0x5}, {0x9, 0x7, 0x0, 0x1, 0x0, 0x2}, {0x5, 0x46d, 0x5, 0x8000, 0x1, 0x1}, {0x5, 0xbd9, 0x8, 0x2, 0x7f, 0x2}, {0x1000, 0x6, 0x0, 0x2, 0xad, 0x3}, {0xfff, 0x5, 0x8, 0x7, 0x7fff, 0x1}, {0x7, 0x8, 0x4, 0x2, 0x800, 0x5}, {0xdf4, 0x7, 0x54a, 0xf192, 0x7}, {0x5, 0x7fffffff, 0x5, 0x80, 0x2, 0xd}, {0x8000, 0x2, 0x0, 0x28, 0xe, 0x3}, {0x1, 0x0, 0x9, 0x37c, 0x91, 0x7}, {0x6, 0x5, 0x2, 0x7, 0x10, 0x2}, {0x80000001, 0x569e9fbc, 0x4e, 0xffffffff, 0x1, 0x8000}, {0x7, 0x1, 0x2, 0x7, 0x5, 0x8001}, {0x8, 0x5, 0x400000, 0x5, 0xabc3, 0x9}, {0x4, 0xfb1d, 0x467, 0x3, 0x0, 0x800}, {0x3817, 0x4, 0x3, 0x5, 0xea1, 0x2}, {0x5, 0x0, 0xffffffff, 0x6, 0x6, 0x10}, {0x1, 0xfffffffc, 0x0, 0x1, 0x9, 0x4}, {0x350, 0x2, 0xa, 0xa90, 0x7, 0x4}, {0x4, 0x0, 0x9, 0x4, 0x0, 0x8}, {0x81, 0x4, 0x7, 0x5, 0x100, 0x14c}, {0x10000, 0x4, 0x0, 0x7ff, 0xffffffff, 0x9}, {0x401, 0x94, 0x7, 0x400, 0x60000000, 0xb}, {0xa, 0x1000, 0x6, 0x8, 0x9, 0x6}, {0x6fe, 0x6, 0x80000000, 0x8, 0x80000000, 0x447}, {0xc373, 0xc8c, 0x7, 0x0, 0x8, 0x7fffffff}, {0x4, 0x3, 0x0, 0xf7e2, 0x6, 0xa924}, {0x2, 0x2, 0x7fff, 0x6, 0x8, 0x7}, {0x10000, 0x3ff, 0xffffffda, 0x8, 0x100, 0x7}, {0x8001, 0xffff8001, 0x7, 0xb66, 0x1, 0x8}, {0x7fffffff, 0x2, 0x200, 0x9, 0x0, 0x2}, {0x5, 0xaba6, 0x800, 0x3ff, 0x2, 0x10001}, {0x6, 0x0, 0x4, 0x80, 0x4, 0x8}, {0x8, 0x6, 0x4, 0x1, 0x7, 0x2}, {0x7, 0x5, 0x9, 0x75, 0x200, 0x8001}, {0xb, 0xfffffff7, 0xffffff81, 0xa, 0x3, 0x3be9}, {0x10, 0xfffffff8, 0x80000000, 0xfffffffb, 0x3, 0x80a}, {0x9, 0x4, 0x7, 0x0, 0x8001, 0x3}, {0x8, 0x7fffffff, 0x1, 0x10000, 0x9, 0x3ff}, {0x9, 0xad17, 0x2, 0xaf8, 0x3, 0x7}, {0xe9, 0x4800, 0x5, 0x7, 0xc000, 0x9}, {0xff, 0xfffffff7, 0x5, 0x758, 0x5, 0x8}, {0x4, 0x3, 0x7, 0x3, 0x0, 0x1ff}, {0x8, 0x3b, 0x6c94, 0xf1, 0x2, 0x2}, {0x1, 0x9, 0x1ff, 0x3, 0xc, 0xd}, {0x8, 0xdcd4, 0x1, 0x10, 0x0, 0x800}, {0xd9e, 0x0, 0x1, 0x7ff, 0x400, 0x56}, {0x3, 0xf85, 0x2095, 0x3, 0x0, 0x3}, {0x9, 0x8, 0x960b, 0x80000000, 0x4d4, 0x80}, {0x0, 0x8, 0x2, 0x7f, 0x0, 0x3}, {0x7, 0x1, 0xe5a, 0x9, 0x2d, 0x9}, {0x8, 0x8c, 0x1, 0x2, 0x9, 0x1}, {0x9, 0x0, 0x400, 0x5, 0x9, 0x9}, {0x4, 0xa5, 0x6, 0x2, 0x3, 0x8001}, {0x101, 0x1, 0x800, 0x100000, 0x5, 0xfffffffa}, {0x9, 0xffff, 0x400, 0x7fffffff, 0x2a3, 0xacf}, {0x6c, 0x3, 0x2, 0x9, 0x3, 0xa}, {0x10001, 0x4, 0x9, 0x1, 0x4b, 0x2}, {0x4, 0x5, 0x800, 0x9, 0x400, 0x9}, {0x8, 0x2, 0x2, 0x321b285c, 0x4, 0xaba}, {0x0, 0x9, 0x7fffffff, 0xa000000, 0x8000000, 0x2}, {0x4, 0x8000, 0x8001, 0x9, 0x7, 0x6}, {0x5, 0x3, 0x1, 0x4, 0x7}, {0x5, 0x5, 0x6, 0x9, 0x1, 0x1}, {0x3, 0x8, 0x2, 0x10001, 0x8, 0x2}, {0x2, 0x7f, 0x9d9, 0x5, 0x8, 0x3}, {0x1ff, 0x7e, 0xd, 0x2, 0x17e, 0x1}, {0x6, 0x5, 0x1ff, 0x3, 0x7fffffff, 0x74ae}, {0x3, 0xffffff7f, 0x0, 0x3, 0x5b23, 0x4}, {0x2, 0x0, 0xa5f, 0x0, 0x5665, 0x8}, {0x9, 0x3c47, 0x6, 0xff, 0x7fffffff, 0x7f}, {0x20d9, 0x2, 0x101, 0x4, 0x8, 0x5}, {0xc, 0x5, 0x5, 0x8, 0x1, 0x3}, {0x101, 0x2, 0x3ff, 0x7, 0x8001, 0x4}, {0x8, 0x77d0, 0xf, 0xf, 0x7, 0x9}, {0x0, 0x80000000, 0x3, 0x4, 0x6, 0x5}, {0xffffffd7, 0x5, 0x5, 0x6, 0x4, 0xf84}, {0x0, 0x200, 0x100, 0x78, 0x5, 0x7d}, {0x97f3, 0x0, 0x5, 0x5, 0xd452, 0x1}, {0x1666, 0x100, 0x3b5, 0x1, 0x4, 0x9}, {0x2, 0x8, 0xf2e, 0x0, 0x4, 0x3}, {0x9, 0xd, 0x3, 0x0, 0x7fffffff, 0x9}, {0x8, 0xa7bf, 0x7, 0x5, 0x0, 0x1}], [{0x4}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x7}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x6, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0xaef7805504711bcb, 0x1}, {}, {0x3, 0x1}, {0x4}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x6}, {0x2}, {0x0, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x3}, {0x3, 0x1}, {0x5}, {0x2}, {0x5}, {0x2}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x20000041}, 0x40) r11 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000380)={0x0, &(0x7f00000017c0)=[@cpuid={0x2, 0x18, {0x4, 0x9fa5}}, @cpuid={0x2, 0x18, {0xd22d}}, @uexit={0x0, 0x18, 0x7}, @uexit={0x0, 0x18, 0x9}, @code={0x1, 0x4b, {"6566f3daaf00000000460f01c2440f0726670fc77d00c4427979497567f30f01ea65f3f4640f01cb3e0f71e200b805000000b9234740630f01d9"}}, @cpuid={0x2, 0x18, {0x9, 0x2}}, @code={0x1, 0x82, {"f3420f1a2bc744240008000000c744240200000000c7442406000000000f011c2466baf80cb8daba6681ef66bafc0c66ed4233e6660f001ff3470f0966ba2100b000ee48b80078ffffffffffff0f23d00f21f835300000000f23f8c4217a6f37b9ac030000b8f9120d62ba555ca0150f30"}}, @uexit={0x0, 0x18, 0xa}, @cpuid={0x2, 0x18, {0x2, 0x6}}, @code={0x1, 0x69, {"0f799500000100c441b01295607880f1c4e27933c7640f0948b845030000000000000f23c80f21f8350c0090000f23f8420fc7b48fb9f60000b941060000b87e8f0000ba000000000f3046e5ff470f71e4e566b853008ec8"}}, @cpuid={0x2, 0x18, {0x10, 0x87a}}, @cpuid={0x2, 0x18, {0x7, 0x1}}, @cpuid={0x2, 0x18, {0x80000000}}, @code={0x1, 0x84, {"65f39066b862000f00d80f01ef0f20c035100000000f22c00f78f1c744240090450000c7442402be000000c7442406000000000f011c240f019c38ee24000066b805010f00d8c744240045194c4fc7442402bbd34930c7442406000000000f011c24b9a9020000b895000000ba000000000f30"}}, @cpuid={0x2, 0x18, {0x3, 0xffffffff}}, @cpuid={0x2, 0x18, {0xe5, 0x1}}, @code={0x1, 0x59, {"3e266744d9eb420f01c3c401e5f558aa440f083e440fc7b30a0000000f2214450f01cfc463890a2500000000240f01c248b806000000000000000f23c00f21f835010009000f23f8"}}, @uexit={0x0, 0x18, 0x4}, @cpuid={0x2, 0x18, {0xc25, 0x401}}], 0x363}) ioctl$KVM_SET_FPU(r11, 0x41a0ae8d, &(0x7f0000000480)={'\x00', 0x81, 0xffff, 0x14, 0x0, 0x10, 0x1, 0xf000, '\x00', 0x7ff}) sendmsg$nl_route(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74008d82a8bd3d4de0a84608a300001900100029bd7000fbdbdf251c144008fe01fe0700280000140012000f00b9c4ad05a24ce5d28fa41b1bbda1140012001e005bbceb90d827abc89cbffd98ee1f0c00090040001208", @ANYRES32=r10, @ANYBLOB="140012001d0041ff8d05b185a8c0631bf03fe81d05001a000b00000008000100000f0000"], 0x74}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000000) 4.694444778s ago: executing program 0 (id=10692): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x34}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {0x0, 0x0, 0x0, 0x40000}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 4.490816756s ago: executing program 0 (id=10693): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x9dece93493136c35, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffff}, {0x10, 0x7}, {0x0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c014}, 0x41) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'vlan1\x00'}) r1 = socket$rxrpc(0x21, 0x2, 0xa) syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0xffff030c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000180), 0x4e, 0x181240) fadvise64(r4, 0x8000000000000002, 0x9, 0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x3}, 0x0) fsopen(&(0x7f0000000380)='pipefs\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipv4_newroute={0x30, 0x18, 0x4a2499fd4c68d2f3, 0x2, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x4, 0xfd, 0x0, 0xc8, 0x7}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x5}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x30}}, 0x0) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @dev={0xfe, 0x80, '\x00', 0x26}, 0x1}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x0) (fail_nth: 3) 4.391302763s ago: executing program 3 (id=10694): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x3500000000000000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x2, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e", 0x1b}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000280)={[0x6]}, 0x8) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x8) ioctl$KVM_SET_MSRS(r4, 0x5000aea5, &(0x7f0000000080)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0xc, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') connect$pppoe(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x8) syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c800"], 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0285628, &(0x7f0000000040)={0x404, 0x1, 0x0, 0x40, 0x7}) r6 = shmget(0x2, 0x10000, 0x8, &(0x7f00006a0000/0x10000)=nil) shmctl$IPC_INFO(r6, 0x3, 0x0) 3.555270268s ago: executing program 7 (id=10696): r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c9301ffffffff0000000000000000000000010000000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac14140d7b64"], 0x50}}], 0x1, 0xc080) 3.274623591s ago: executing program 7 (id=10697): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="cc010000100001000000000000000000ac1414aa0000000000000000000000000000000000000000000000000000000044030000000300030000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000000006c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000002040000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000500000000000000000000000a000100000000000000000008002300f8ffffff4800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002c0017000400000029bd700029bd700029bd700029bd70000900000009000000000000800800000001000000550003"], 0x1cc}}, 0x0) 3.188418233s ago: executing program 2 (id=10698): r0 = fsopen(&(0x7f0000000240)='xfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000080)='discard', &(0x7f0000000200)='\t', 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcca) map_shadow_stack(&(0x7f00005b5000/0x3000)=nil, 0x3000, 0x0) write$binfmt_elf32(r1, &(0x7f0000001040)=ANY=[@ANYBLOB="7f454c460000000101000074507a7f680000000000030006000000000000000000380000000000000000191bda00002000212672bf392cfef86e875c82a82d5e45ec599ba56fdea2ddc5743af35aa23a9ef23bdc55ae6e64665365748f51d62605fe3d2a5e1f621766ab5307fdefc6f3283d2728110bc93bbfac35f999b5"], 0x69) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", 0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000010c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000010c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) read$FUSE(r1, &(0x7f0000001100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000003140)={0x50, 0x0, r5, {0x7, 0x2b, 0xfffffff8, 0x41000, 0x0, 0x1000, 0x40, 0x7, 0x0, 0x0, 0x10, 0x1}}, 0x50) tkill(r3, 0x16) (async) tkill(r3, 0x16) prctl$PR_SCHED_CORE(0x4d, 0x3, r3, 0x1, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)) (async) timer_create(0x3, 0x0, &(0x7f00000000c0)) close(r1) (async) close(r1) ioctl$KVM_GET_XSAVE2(r1, 0x9000aecf, &(0x7f00005ea000/0x2000)=nil) (async) ioctl$KVM_GET_XSAVE2(r1, 0x9000aecf, &(0x7f00005ea000/0x2000)=nil) 3.026080501s ago: executing program 7 (id=10699): syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0cc5605, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x5, 0x2, 0x1, "f7b817716daef7e53fa4f998da1907309f97630a33ea3b6bd13c74c37001fd36", 0x35315241}) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef00000000000000000800380001000400"], 0x78) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a0900090000f4ff000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14}}, 0x3c}, 0x1, 0x1200}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', r7, 0x7800, 0x7800, 0x0, 0xfffffffb, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x0, 0x0, 0x9, 0x4, 0x0, @remote, @multicast2}}}}) 2.886819054s ago: executing program 2 (id=10700): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x6, 0x3, "91ab"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x84}, 0x1, 0xfffffffffffffff5}, 0x0) 2.886648764s ago: executing program 0 (id=10701): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 2.749591992s ago: executing program 2 (id=10702): userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) memfd_create(0x0, 0xd) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x0, 0x0, 0x195}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x19, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x200}, 0x1}) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r5, &(0x7f0000001000)=""/4075, 0xfeb) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) socket$kcm(0x2, 0x3, 0x2) syz_usb_connect(0x0, 0x36, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) 2.518809125s ago: executing program 0 (id=10703): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}, {0xfffffffc}, {}, {0x0, 0x8, 0x1}, 0x0, 0x3f0, 0x5, 0x400000, 0x1, 0x0, 0x80000000, 0x2, 0x1, 0x0, 0x9, 0x0, 0x1e, 0x0, 0x0, 0x6}) 1.854812092s ago: executing program 7 (id=10704): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x10, 0x40, 0x7, 0x9, {{0x6, 0x4, 0x2, 0x26, 0x18, 0x68, 0x0, 0x7, 0x4, 0x0, @empty, @empty, {[@ra={0x94, 0x4}]}}}}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @loopback}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x58}}, 0x0) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$UHID_CREATE2(r2, &(0x7f0000000100)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0xfd, 0x2, 0x80000000, 0x81, 0xfffffffe, 0xbca6, "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"}}, 0x215) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x31, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f00000000c0)) 1.793233542s ago: executing program 0 (id=10705): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) splice(r0, &(0x7f0000000600)=0x3, r0, 0x0, 0x2, 0xf) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660278cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda2724091c98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec400346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb18f9b6f8c1d4fe4ea71f492175fc9e", 0xfd}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b", 0xe6}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd5a6d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf0161", 0xac}], 0x3}}], 0x1, 0x8800) sendmmsg$inet(r0, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="13cb7554c847b58e7969517dad32c5c2e94548de333a55a64713ce9e7039f53a606a2e90c1eb82fb5ac1f1634d29ca5c90113f78ca2e3a201f9bfaa5d4af8a877c2e61f1abe36689c050363e7b9a34d9e89a6a55dbdde73d24f730e594a493395a2ca4c6e63174de4c3a9ed1a40c53378bd9b2ede573346bb8042b333662e6", 0x7f}, {&(0x7f0000000240)="3f9b0f7005f6705cbda9fc0976b05cb82d5424e434e3e46845d934cb79b6987ff7c05cd5d948a051f1bf52d40825ada66ce0ea2d3e9c62761187066494e5011c9358c9869d8e", 0x46}, {0x0}, {0x0}], 0x4, &(0x7f0000000d00)=ANY=[@ANYBLOB="140000000000000000000000010000400500000000000000640000000000000000000000070000008617ffffffff07110cd42dcdfae81a1168946bdbb575bd832340ac1e01017f000001ac1e0001ffffffff64010100ac1414270a010101ac1e0001891755ac1414aae000000264010102ac1e0101ffffffff00000000000000fc000000000000000000"], 0x180}}], 0x1, 0x4008840) 1.639469254s ago: executing program 6 (id=10706): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}, 0x1, 0x0, 0x0, 0xfff5}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000500012800800010067726500440002"], 0x70}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_wolinfo={0x3, 0x8, 0xfffffffd, "8f1151239582"}}) preadv(r2, 0x0, 0x0, 0x0, 0x0) 1.5529699s ago: executing program 0 (id=10707): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x2, {0x1, 0x0, 0x3}, 0xfd}, 0x18) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000140), &(0x7f0000000300)=0x8) sendmmsg$sock(r2, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}], 0x206c, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@getchain={0x24, 0x66, 0xfff1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xf}, {0xfff2, 0xfff1}, {0xffea, 0xffe1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) poll(&(0x7f0000000200), 0x51, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x80ffffd, 0x0, 0x1, 0xa, 0x7f, 0x7}, 0x20) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000200)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @value=0x100}}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r5, 0x80845663, &(0x7f0000000240)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x12, 0x60a, 0x0, 0x202, 0x2b0, 0x2e8, 0x2e8, 0x2b0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@inet=@socket2={{0x28}, 0x2}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x9002, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 1.502250757s ago: executing program 7 (id=10708): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0x4) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000080)=0x0) (async) connect$can_bcm(r1, &(0x7f0000000000), 0x10) (async) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={0x0, @vsock={0x28, 0x0, 0x2711, @host}, @l2tp={0x2, 0x0, @local}, @tipc=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0xf, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)='veth0\x00', 0x9, 0x4, 0x4a}) io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x20000238}]) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) (async, rerun: 64) bind$tipc(r3, &(0x7f0000000100)=@id={0x1e, 0x3, 0x3, {0x200, 0x2}}, 0x10) (async, rerun: 64) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) (async, rerun: 64) r4 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 64) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (async) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x80000009}}}, 0x10, 0x0}, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000000)) 1.450320298s ago: executing program 6 (id=10709): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000000870600000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x64000000, @void, @value}, 0x94) 1.266492546s ago: executing program 6 (id=10710): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000064000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="6fb794593ccb97a081b4910f4b8b3c1055d018a4515ee8e2bd398c602434cc9e5c5cc08c283173126f63297443da489b58008ecc3c20d569c959178c1f393748a5fc89cf47537b30aee2d4de78caa39f9adc186a9a141d162c3e9117c0b33b9ea4fa12aaa6409921b9b8e7fb9b1d137437ba9132c4", 0x75}, {&(0x7f0000000280)="e6664a18239f2dd7171a04301503c8c97086ba14a7113ce72c23bc2419cb6b48002fcd61d4ec87319f6de9827a684095fde78869ae974b4ef9503349460fdee16337856d180186e93193423bc3a670abb8808d96db2cae18014cd433fba80ae488b70561830d56f942480b9414f26d295b594e567b9a9360c33a92fe7517fc86fce4eea3920ea59874fe4e3442f619c036fc", 0x92}, {&(0x7f0000000340)="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", 0x461}], 0x3, &(0x7f0000001340)=ANY=[], 0x110}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000880)="b03e2cf377b008743dd4cda76e2f4de152d072826aa31a7f811789e11974c19bdca095e1d2565d04d39bebc397c429eb6622f1ac3b9e8de17870e59048e09549bf243c2619", 0x45}], 0x1}}], 0x3, 0x931766f6319eed40) 1.150562184s ago: executing program 7 (id=10711): keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$loop(&(0x7f0000000100), 0xdf6, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x1d, 0x0, 0x4f) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb}, 0x18) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d960720003f1ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x0, 0x2000000000001]}}) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, r7, 0x431, 0x70bd28, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.040020754s ago: executing program 6 (id=10712): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x100000002) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce01020301090224"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000080", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800390008000000060002000100000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, 0x0) 0s ago: executing program 3 (id=10713): unshare(0x6a040000) (async) syz_io_uring_setup(0x837, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0500000005000000008000005c00000000000000", @ANYRES32, @ANYBLOB="0000d0452e"], 0x50) (async) r0 = io_uring_setup(0x7d2e, &(0x7f0000002380)={0x0, 0xffffffff, 0x1046}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 32) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040), 0x4) socket$vsock_stream(0x28, 0x1, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x437, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r5, 0x54583, 0x1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x10) (async) sendmmsg$inet(r2, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty}}}], 0x20}}], 0x1, 0x80) kernel console output (not intermixed with test programs): number 60 [ 2973.529249][T10131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2973.543259][T10131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2973.643358][T15716] peak_usb 4-1:0.149 can0: unable to request usb[type=0 value=1] err=-71 [ 2973.691858][T15716] peak_usb 4-1:0.149: unable to read PCAN-Chip USB firmware info (err -71) [ 2973.825467][T15716] peak_usb 4-1:0.149: probe with driver peak_usb failed with error -71 [ 2973.876897][T15716] usb 4-1: USB disconnect, device number 107 [ 2975.023099][ T5975] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 2975.241494][ T5975] usb 1-1: Using ep0 maxpacket: 16 [ 2975.263572][ T5975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2975.303983][ T5975] usb 1-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 2975.342517][ T5975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2975.376129][ T5975] usb 1-1: config 0 descriptor?? [ 2975.817369][ T5975] betop 0003:11C0:5506.0087: unknown main item tag 0x0 [ 2975.853083][ T5975] betop 0003:11C0:5506.0087: unknown main item tag 0x0 [ 2975.858717][T10180] FAULT_INJECTION: forcing a failure. [ 2975.858717][T10180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2975.870381][ T5975] betop 0003:11C0:5506.0087: unknown main item tag 0x0 [ 2975.898289][ T5975] betop 0003:11C0:5506.0087: unknown main item tag 0x0 [ 2975.933190][ T5975] betop 0003:11C0:5506.0087: unknown main item tag 0x0 [ 2975.964424][ T9117] usb 7-1: new high-speed USB device number 113 using dummy_hcd [ 2975.982464][T10180] CPU: 0 UID: 0 PID: 10180 Comm: syz.2.10072 Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) [ 2975.982495][T10180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2975.982509][T10180] Call Trace: [ 2975.982518][T10180] [ 2975.982528][T10180] dump_stack_lvl+0x189/0x250 [ 2975.982564][T10180] ? __pfx____ratelimit+0x10/0x10 [ 2975.982596][T10180] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2975.982628][T10180] ? __pfx__printk+0x10/0x10 [ 2975.982650][T10180] ? __might_fault+0xb0/0x130 [ 2975.982682][T10180] should_fail_ex+0x414/0x560 [ 2975.982714][T10180] _copy_from_iter+0x1db/0x16f0 [ 2975.982749][T10180] ? rcu_is_watching+0x15/0xb0 [ 2975.982783][T10180] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 2975.982806][T10180] ? __pfx__copy_from_iter+0x10/0x10 [ 2975.982838][T10180] ? __build_skb_around+0x257/0x3e0 [ 2975.982867][T10180] ? netlink_sendmsg+0x642/0xb30 [ 2975.982888][T10180] ? skb_put+0x11b/0x210 [ 2975.982917][T10180] netlink_sendmsg+0x6b2/0xb30 [ 2975.982951][T10180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2975.982979][T10180] ? aa_sock_msg_perm+0x94/0x160 [ 2975.983007][T10180] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2975.983034][T10180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2975.983057][T10180] __sock_sendmsg+0x219/0x270 [ 2975.983098][T10180] ____sys_sendmsg+0x505/0x830 [ 2975.983130][T10180] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2975.983163][T10180] ? import_iovec+0x74/0xa0 [ 2975.983187][T10180] ___sys_sendmsg+0x21f/0x2a0 [ 2975.983216][T10180] ? __pfx____sys_sendmsg+0x10/0x10 [ 2975.983280][T10180] ? __fget_files+0x2a/0x420 [ 2975.983301][T10180] ? __fget_files+0x3a0/0x420 [ 2975.983335][T10180] __x64_sys_sendmsg+0x19b/0x260 [ 2975.983364][T10180] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2975.983401][T10180] ? __pfx_ksys_write+0x10/0x10 [ 2975.983417][T10180] ? rcu_is_watching+0x15/0xb0 [ 2975.983454][T10180] ? do_syscall_64+0xbe/0x3b0 [ 2975.983477][T10180] do_syscall_64+0xfa/0x3b0 [ 2975.983495][T10180] ? lockdep_hardirqs_on+0x9c/0x150 [ 2975.983525][T10180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2975.983545][T10180] ? clear_bhb_loop+0x60/0xb0 [ 2975.983571][T10180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2975.983591][T10180] RIP: 0033:0x7f7fe3f8e929 [ 2975.983610][T10180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2975.983627][T10180] RSP: 002b:00007f7fe4d62038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2975.983650][T10180] RAX: ffffffffffffffda RBX: 00007f7fe41b5fa0 RCX: 00007f7fe3f8e929 [ 2975.983665][T10180] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 2975.983679][T10180] RBP: 00007f7fe4d62090 R08: 0000000000000000 R09: 0000000000000000 [ 2975.983692][T10180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2975.983704][T10180] R13: 0000000000000000 R14: 00007f7fe41b5fa0 R15: 00007f7fe42dfa28 [ 2975.983736][T10180] [ 2975.993792][ T5975] betop 0003:11C0:5506.0087: hidraw1: USB HID v0.05 Device [HID 11c0:5506] on usb-dummy_hcd.0-1/input0 [ 2976.389652][ T5975] betop 0003:11C0:5506.0087: no inputs found [ 2976.413932][ T9117] usb 7-1: Using ep0 maxpacket: 32 [ 2976.428181][ T9117] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 2976.436555][ T9117] usb 7-1: config 0 has no interface number 0 [ 2976.453428][ T9117] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2976.531515][ T9117] usb 7-1: config 0 interface 85 has no altsetting 0 [ 2976.616343][ T9117] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 2976.686658][ T9117] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2976.885590][ T9117] usb 7-1: Product: syz [ 2977.050661][ T9117] usb 7-1: Manufacturer: syz [ 2977.096345][ T9117] usb 7-1: SerialNumber: syz [ 2977.133274][ T9117] usb 7-1: config 0 descriptor?? [ 2977.243061][T10189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10074'. [ 2977.514620][ T5975] usb 1-1: USB disconnect, device number 117 [ 2977.680249][T10197] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10077'. [ 2977.704326][T10197] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10077'. [ 2977.888631][ T9117] appletouch 7-1:0.85: Geyser mode initialized. [ 2977.898643][ T9117] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input268 [ 2977.914007][ T5975] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 2977.961620][T10202] loop3: detected capacity change from 0 to 7 [ 2977.971175][T10202] Dev loop3: unable to read RDB block 7 [ 2977.978902][T10202] loop3: AHDI p1 p2 p3 [ 2977.983303][T10202] loop3: partition table partially beyond EOD, truncated [ 2977.993090][T10202] loop3: p1 start 1601398130 is beyond EOD, truncated [ 2978.017511][T10202] loop3: p2 start 1702059890 is beyond EOD, truncated [ 2978.087158][ T5975] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2978.095559][T15716] usb 7-1: USB disconnect, device number 113 [ 2978.108527][ T5975] usb 1-1: config 0 has no interfaces? [ 2978.120197][T15716] appletouch 7-1:0.85: input: appletouch disconnected [ 2978.122190][ T5975] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2978.142427][ T5975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2978.160311][ T5975] usb 1-1: config 0 descriptor?? [ 2978.306397][ T9117] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 2978.437266][T10193] program syz.0.10076 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2978.462568][T10193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10076'. [ 2978.529678][ T9117] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2978.538011][ T9117] usb 3-1: config 0 has no interface number 0 [ 2978.549513][ T9117] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 2978.574190][ T9117] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2978.623022][ T9117] usb 3-1: config 0 descriptor?? [ 2978.638485][ T9117] usb 3-1: selecting invalid altsetting 1 [ 2978.650254][ T9117] dvb_ttusb_budget: ttusb_init_controller: error [ 2978.660896][ T9117] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2979.152065][ T9117] DVB: Unable to find symbol cx22700_attach() [ 2979.240955][T15716] usb 1-1: USB disconnect, device number 118 [ 2979.306957][ T9117] DVB: Unable to find symbol tda10046_attach() [ 2979.323424][ T9117] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 2979.360830][ T9117] usb 3-1: USB disconnect, device number 61 [ 2980.275701][T10248] vivid-000: disconnect [ 2980.667961][T10225] vivid-000: reconnect [ 2983.067910][T10272] netlink: 212 bytes leftover after parsing attributes in process `syz.2.10099'. [ 2983.185562][ T9117] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 2983.343951][ T9117] usb 1-1: device descriptor read/64, error -71 [ 2983.362915][T10275] x_tables: duplicate underflow at hook 2 [ 2983.457102][T10278] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10102'. [ 2983.517885][T10278] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10102'. [ 2983.614467][ T9117] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 2983.774098][ T9117] usb 1-1: device descriptor read/64, error -71 [ 2983.791058][T10284] netdevsim netdevsim7 netdevsim0: left allmulticast mode [ 2983.798683][T10284] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2983.984739][ T9117] usb usb1-port1: attempt power cycle [ 2984.015760][T10290] xt_bpf: check failed: parse error [ 2984.150783][T10288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10105'. [ 2984.354334][ T9117] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 2984.387420][ T9117] usb 1-1: device descriptor read/8, error -71 [ 2984.653993][ T9117] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 2984.744676][ T9117] usb 1-1: device descriptor read/8, error -71 [ 2984.754128][T11776] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 2984.965168][T10307] binder: 10306:10307 ioctl c0306201 2000000003c0 returned -14 [ 2984.972960][ T9117] usb usb1-port1: unable to enumerate USB device [ 2984.979533][T11776] usb 4-1: Using ep0 maxpacket: 16 [ 2984.999689][T11776] usb 4-1: config 2 has an invalid interface number: 142 but max is 0 [ 2985.017160][T11776] usb 4-1: config 2 has no interface number 0 [ 2985.024430][T11776] usb 4-1: config 2 interface 142 altsetting 0 has an endpoint descriptor with address 0xEA, changing to 0x8A [ 2985.092735][T11776] usb 4-1: config 2 interface 142 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2985.121472][T11776] usb 4-1: config 2 interface 142 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2985.242456][T11776] usb 4-1: config 2 interface 142 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2985.432673][T11776] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c6.6e [ 2985.442137][T11776] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2985.462850][T11776] usb 4-1: Product: syz [ 2985.482472][T11776] usb 4-1: Manufacturer: syz [ 2985.490306][T11776] usb 4-1: SerialNumber: syz [ 2985.538552][T11776] usb 4-1: NFC: intf ffff8880580c4000 id ffffffff8eb52f80 [ 2985.742767][T11776] usb 4-1: USB disconnect, device number 108 [ 2986.298622][T10312] delete_channel: no stack [ 2986.433973][ T9117] usb 1-1: new full-speed USB device number 123 using dummy_hcd [ 2986.632706][ T9117] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 2986.651278][ T9117] usb 1-1: config 0 has no interface number 0 [ 2986.695621][ T9117] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 2986.794208][ T9117] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2986.812440][ T9117] usb 1-1: config 0 descriptor?? [ 2987.059495][ T9117] usb 1-1: selecting invalid altsetting 1 [ 2987.093633][ T9117] dvb_ttusb_budget: ttusb_init_controller: error [ 2987.143391][ T9117] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2987.369311][ T9117] DVB: Unable to find symbol cx22700_attach() [ 2987.640145][T10331] xt_bpf: check failed: parse error [ 2987.842144][ T9117] DVB: Unable to find symbol tda10046_attach() [ 2987.842159][ T9117] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 2987.945363][ T9117] usb 1-1: USB disconnect, device number 123 [ 2988.545901][ T6801] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 2988.607238][T10344] netlink: 212 bytes leftover after parsing attributes in process `syz.3.10124'. [ 2988.723085][T10346] xt_bpf: check failed: parse error [ 2988.730687][ T6801] usb 3-1: Using ep0 maxpacket: 8 [ 2988.740489][ T6801] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 2988.760906][ T6801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2988.785617][ T6801] usb 3-1: Product: syz [ 2988.817825][ T6801] usb 3-1: Manufacturer: syz [ 2988.850869][ T6801] usb 3-1: SerialNumber: syz [ 2988.932596][T10349] netlink: 'syz.6.10125': attribute type 4 has an invalid length. [ 2988.965674][ T6801] usb 3-1: config 0 descriptor?? [ 2988.980639][T10349] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10125'. [ 2989.255802][ T6801] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 2989.998812][T10358] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2990.619819][T10360] binder: 10359:10360 ioctl c0306201 2000000003c0 returned -14 [ 2990.747427][ T6801] gspca_sunplus: reg_r err -71 [ 2990.752280][ T6801] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 2990.762768][ T6801] usb 3-1: USB disconnect, device number 62 [ 2991.115417][T10365] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 2991.690954][T10372] loop3: detected capacity change from 0 to 7 [ 2991.707735][T10372] Dev loop3: unable to read RDB block 7 [ 2991.713330][T10372] loop3: AHDI p1 p2 p3 [ 2991.805014][T10372] loop3: partition table partially beyond EOD, truncated [ 2991.945151][T10372] loop3: p1 start 1601398130 is beyond EOD, truncated [ 2991.952440][T10372] loop3: p2 start 1702059890 is beyond EOD, truncated [ 2991.974039][ T9117] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 2992.164130][ T9117] usb 4-1: Using ep0 maxpacket: 16 [ 2992.194231][ T9117] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 2992.202489][ T9117] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2992.291745][ T9117] usb 4-1: config 0 has no interface number 0 [ 2992.323043][ T9117] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 2992.358619][ T9117] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2992.383519][ T9117] usb 4-1: Product: syz [ 2992.400962][ T9117] usb 4-1: Manufacturer: syz [ 2992.417423][ T9117] usb 4-1: SerialNumber: syz [ 2992.434739][ T9117] usb 4-1: config 0 descriptor?? [ 2992.664038][T15716] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 2992.772363][ T9117] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 2992.962663][ T9117] usb 4-1: No valid video chain found. [ 2992.988917][ T9117] usb 4-1: USB disconnect, device number 109 [ 2993.116922][T15716] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 2993.132570][T15716] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2993.311461][T15716] usb 3-1: config 0 has no interface number 0 [ 2993.379230][T15716] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 15403, setting to 1024 [ 2993.529232][T15716] usb 3-1: config 0 interface 106 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2993.660014][T15716] usb 3-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 2993.757364][T15716] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 2994.019893][T15716] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2994.103601][T15716] usb 3-1: config 0 descriptor?? [ 2994.289146][T10389] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2994.476953][T15716] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2994.502225][T10389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2994.587754][T10389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2994.691135][T10389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10138'. [ 2994.766133][T10389] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10138'. [ 2995.011224][T10414] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10145'. [ 2995.088070][T10414] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10145'. [ 2995.120284][T15716] usb 3-1: USB disconnect, device number 63 [ 2995.128923][T32326] usb 3-1: Failed to submit usb control message: -71 [ 2995.156412][T32326] usb 3-1: unable to send the bmi data to the device: -71 [ 2995.168108][T32326] usb 3-1: unable to get target info from device [ 2995.211305][T32326] usb 3-1: could not get target info (-71) [ 2995.239965][T32326] usb 3-1: could not probe fw (-71) [ 2995.961844][T10432] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10148'. [ 2996.263112][T10441] x_tables: duplicate underflow at hook 2 [ 2996.272183][T10443] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2996.471218][T10446] loop3: detected capacity change from 0 to 7 [ 2996.488951][T10446] Dev loop3: unable to read RDB block 7 [ 2996.501479][T10446] loop3: AHDI p1 p2 p3 [ 2996.511662][T10446] loop3: partition table partially beyond EOD, truncated [ 2996.523506][T10446] loop3: p1 start 1601398130 is beyond EOD, truncated [ 2996.548750][T10446] loop3: p2 start 1702059890 is beyond EOD, truncated [ 2996.914682][T11776] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 2996.983999][ T9117] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 2997.076084][T11776] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2997.107614][T11776] usb 4-1: config 0 has no interface number 0 [ 2997.131556][T11776] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 2997.141056][ T9117] usb 3-1: device descriptor read/64, error -71 [ 2997.167520][T11776] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2997.192893][T11776] usb 4-1: config 0 descriptor?? [ 2997.213242][T11776] usb 4-1: selecting invalid altsetting 1 [ 2997.238668][T11776] dvb_ttusb_budget: ttusb_init_controller: error [ 2997.260251][T11776] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2997.393123][ T9117] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 2997.564045][ T9117] usb 3-1: device descriptor read/64, error -71 [ 2997.702080][ T9117] usb usb3-port1: attempt power cycle [ 2997.917930][T11776] DVB: Unable to find symbol cx22700_attach() [ 2997.972992][T10458] ALSA: seq fatal error: cannot create timer (-19) [ 2998.071620][ T9117] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 2998.132141][ T9117] usb 3-1: device descriptor read/8, error -71 [ 2998.168209][T11776] DVB: Unable to find symbol tda10046_attach() [ 2998.183906][T11776] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 2998.207386][T11776] usb 4-1: USB disconnect, device number 110 [ 2998.514117][ T9117] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 2998.564513][ T9117] usb 3-1: device descriptor read/8, error -71 [ 2998.674363][ T9117] usb usb3-port1: unable to enumerate USB device [ 2998.816976][T11776] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 2998.986512][T11776] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 2999.003462][T11776] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2999.047782][T11776] usb 4-1: config 0 has no interface number 0 [ 2999.073042][T11776] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 15403, setting to 1024 [ 2999.095544][T11776] usb 4-1: config 0 interface 106 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2999.117115][T11776] usb 4-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 2999.198567][T11776] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 2999.232459][T11776] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2999.269950][T11776] usb 4-1: config 0 descriptor?? [ 2999.280852][T10468] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2999.294129][ T9117] usb 7-1: new full-speed USB device number 114 using dummy_hcd [ 2999.325865][T11776] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2999.347144][T10487] binder: 10485:10487 ioctl c0306201 2000000003c0 returned -14 [ 2999.456392][ T9117] usb 7-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2999.465836][ T9117] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2999.476239][ T9117] usb 7-1: config 0 descriptor?? [ 2999.518112][T10468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2999.527579][T10468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2999.786412][T10468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10161'. [ 2999.799554][T10468] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10161'. [ 2999.809432][ T9117] pegasus 7-1:0.0: probe with driver pegasus failed with error -71 [ 2999.843696][ T9117] usb 7-1: USB disconnect, device number 114 [ 2999.941966][T10493] netlink: 'syz.7.10167': attribute type 2 has an invalid length. [ 3000.003453][T10497] loop3: detected capacity change from 0 to 7 [ 3000.015408][T10493] netlink: 44 bytes leftover after parsing attributes in process `syz.7.10167'. [ 3000.048566][T10497] Dev loop3: unable to read RDB block 7 [ 3000.106231][ T6801] usb 4-1: USB disconnect, device number 111 [ 3000.107605][ T4353] usb 4-1: Failed to submit usb control message: -71 [ 3000.160682][T10497] loop3: AHDI p1 p2 p3 [ 3000.170913][ T4353] usb 4-1: unable to send the bmi data to the device: -71 [ 3000.186574][T10497] loop3: partition table partially beyond EOD, truncated [ 3000.201278][ T4353] usb 4-1: unable to get target info from device [ 3000.222976][T10497] loop3: p1 start 1601398130 is beyond EOD, truncated [ 3000.230143][ T4353] usb 4-1: could not get target info (-71) [ 3000.243936][T10497] loop3: p2 start 1702059890 is beyond EOD, truncated [ 3000.259124][ T4353] usb 4-1: could not probe fw (-71) [ 3000.294088][T10503] netlink: 260 bytes leftover after parsing attributes in process `syz.2.10170'. [ 3000.684289][ T9117] usb 7-1: new full-speed USB device number 115 using dummy_hcd [ 3000.848951][ T9117] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 3000.866421][ T9117] usb 7-1: config 0 has no interface number 0 [ 3000.905832][ T9117] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 3001.178572][ T9117] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3001.357099][ T9117] usb 7-1: config 0 descriptor?? [ 3001.380250][ T9117] usb 7-1: selecting invalid altsetting 1 [ 3001.386363][ T9117] dvb_ttusb_budget: ttusb_init_controller: error [ 3001.421336][ T9117] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 3001.642475][ T9117] DVB: Unable to find symbol cx22700_attach() [ 3001.741634][ T9117] DVB: Unable to find symbol tda10046_attach() [ 3001.769709][ T9117] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 3002.021355][ T9117] usb 7-1: USB disconnect, device number 115 [ 3002.150770][T10516] delete_channel: no stack [ 3002.156823][ T4228] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 3002.304161][T10530] xt_cgroup: invalid path, errno=-2 [ 3002.334158][ T4228] usb 4-1: Using ep0 maxpacket: 16 [ 3002.456725][ T4228] usb 4-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 3002.538425][T10532] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10178'. [ 3002.592620][T10532] netlink: 36 bytes leftover after parsing attributes in process `syz.6.10178'. [ 3002.612846][ T4228] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3002.645740][T10532] vlan3: entered allmulticast mode [ 3002.702999][ T4228] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3002.753259][ T4228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3002.854421][ T4228] usb 4-1: Product: syz [ 3002.864836][T10536] program syz.0.10179 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3002.903944][ T4228] usb 4-1: Manufacturer: syz [ 3002.908631][ T4228] usb 4-1: SerialNumber: syz [ 3004.224876][ T6801] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 3004.486215][ T6801] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 3004.507316][ T6801] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3004.560132][ T6801] usb 1-1: config 0 has no interface number 0 [ 3004.596575][ T6801] usb 1-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 15403, setting to 1024 [ 3004.731102][ T6801] usb 1-1: config 0 interface 106 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 3004.802444][ T6801] usb 1-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 3004.861788][T10563] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 3004.911524][ T6801] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 3004.933632][ T6801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3004.953896][T25600] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 3004.994830][T10565] loop3: detected capacity change from 0 to 7 [ 3005.055025][ T6801] usb 1-1: config 0 descriptor?? [ 3005.103209][T10565] Dev loop3: unable to read RDB block 7 [ 3005.121137][T10565] loop3: AHDI p1 p2 p3 [ 3005.142150][T10551] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 3005.154516][T25600] usb 3-1: Using ep0 maxpacket: 16 [ 3005.182829][T10565] loop3: partition table partially beyond EOD, truncated [ 3005.240171][ T6801] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 3005.267011][T10565] loop3: p1 start 1601398130 is beyond EOD, truncated [ 3005.404123][T10551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3005.425131][T10565] loop3: p2 start 1702059890 is beyond EOD, truncated [ 3005.494735][T10551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3005.536545][T10551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10184'. [ 3005.547426][ T4228] usb 4-1: 0:2 : does not exist [ 3005.582761][ T4228] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 3005.598360][T10577] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10184'. [ 3005.638849][ T4228] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 3005.744861][ T4228] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 3005.834689][ T4228] usb 4-1: 5:0: cannot get min/max values for control 8 (id 5) [ 3005.887843][T20646] usb 1-1: Failed to submit usb control message: -71 [ 3005.889475][ T300] usb 1-1: USB disconnect, device number 124 [ 3006.001719][T20646] usb 1-1: unable to send the bmi data to the device: -71 [ 3006.016993][T20646] usb 1-1: unable to get target info from device [ 3006.033527][T20646] usb 1-1: could not get target info (-71) [ 3006.039752][ T4228] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 3006.089693][T20646] usb 1-1: could not probe fw (-71) [ 3006.106396][ T4228] usb 4-1: USB disconnect, device number 112 [ 3006.159536][T10583] netlink: 260 bytes leftover after parsing attributes in process `syz.3.10191'. [ 3007.045376][T10591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10195'. [ 3007.264269][T25600] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3007.327877][T25600] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 3007.362092][T10593] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10196'. [ 3007.371087][T25600] usb 3-1: can't read configurations, error -71 [ 3007.404018][T10593] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10196'. [ 3007.483512][T10597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10198'. [ 3007.628706][T10599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10200'. [ 3007.734290][T25600] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 3007.914434][T25600] usb 3-1: Using ep0 maxpacket: 32 [ 3007.935420][T25600] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 3007.949327][T25600] usb 3-1: config 0 has no interface number 0 [ 3008.038735][T10611] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 3008.141184][T25600] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 3008.189488][T25600] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3008.209914][T25600] usb 3-1: Product: syz [ 3008.235437][T25600] usb 3-1: Manufacturer: syz [ 3008.252624][T25600] usb 3-1: SerialNumber: syz [ 3008.272527][T25600] usb 3-1: config 0 descriptor?? [ 3008.295862][T25600] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 3008.494031][ T9117] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 3008.528272][T25600] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 3008.559901][T25600] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 3008.688355][ T9117] usb 1-1: device descriptor read/64, error -71 [ 3008.910905][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 3008.920026][T25600] usb 3-1: USB disconnect, device number 69 [ 3008.924101][ T9117] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 3008.941136][T25600] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 3008.999121][T25600] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 3009.013207][T25600] quatech2 3-1:0.51: device disconnected [ 3009.135243][ T9117] usb 1-1: device descriptor read/64, error -71 [ 3009.264407][ T9117] usb usb1-port1: attempt power cycle [ 3009.406023][T10625] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 3009.651998][T10628] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10209'. [ 3009.661409][T10628] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10209'. [ 3009.692044][ T9117] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 3009.785342][ T9117] usb 1-1: device descriptor read/8, error -71 [ 3010.034023][ T9117] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 3010.064524][ T5975] usb 4-1: new full-speed USB device number 113 using dummy_hcd [ 3010.073503][ T9117] usb 1-1: device descriptor read/8, error -71 [ 3010.205013][ T9117] usb usb1-port1: unable to enumerate USB device [ 3010.238428][ T5975] usb 4-1: config 15 has too many interfaces: 124, using maximum allowed: 32 [ 3010.267742][ T5975] usb 4-1: config 15 has 1 interface, different from the descriptor's value: 124 [ 3010.291090][ T5975] usb 4-1: config 15 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3010.334154][ T5975] usb 4-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 3010.363087][ T5975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3010.857031][T10636] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10212'. [ 3010.883946][T10636] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10212'. [ 3010.925258][T10638] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.10210'. [ 3011.262456][T10641] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3011.332198][T10640] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 3011.564758][T10645] loop3: detected capacity change from 0 to 7 [ 3011.577909][T10645] Dev loop3: unable to read RDB block 7 [ 3011.583712][T10645] loop3: AHDI p1 p2 p3 [ 3011.597366][T10645] loop3: partition table partially beyond EOD, truncated [ 3011.607703][T10645] loop3: p1 start 1601398130 is beyond EOD, truncated [ 3011.620243][T10645] loop3: p2 start 1702059890 is beyond EOD, truncated [ 3012.114119][ T300] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 3012.369794][ T300] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 3012.414758][ T300] usb 1-1: config 0 has no interface number 0 [ 3012.454485][ T300] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 3012.507365][ T300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3012.616951][ T300] usb 1-1: config 0 descriptor?? [ 3012.631847][T10666] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10221'. [ 3012.638098][ T300] usb 1-1: selecting invalid altsetting 1 [ 3012.684721][T10666] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10221'. [ 3012.767971][ T300] dvb_ttusb_budget: ttusb_init_controller: error [ 3012.797349][ T300] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 3012.890744][T10669] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 3013.088314][ T300] DVB: Unable to find symbol cx22700_attach() [ 3013.445070][ T300] DVB: Unable to find symbol tda10046_attach() [ 3013.518721][ T300] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 3013.640601][ T300] usb 1-1: USB disconnect, device number 3 [ 3013.774135][ T9117] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 3013.784161][ T5975] usb 4-1: string descriptor 0 read error: -71 [ 3013.841836][ T5975] usbhid 4-1:15.0: can't add hid device: -71 [ 3013.883918][ T5975] usbhid 4-1:15.0: probe with driver usbhid failed with error -71 [ 3013.893949][ T6801] usb 7-1: new high-speed USB device number 116 using dummy_hcd [ 3013.937409][ T5975] usb 4-1: USB disconnect, device number 113 [ 3014.073130][ T6801] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3014.111944][ T6801] usb 7-1: config 0 interface 0 has no altsetting 0 [ 3014.126417][ T6801] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 3014.130803][ T9117] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3014.818737][ T6801] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 3014.824256][ T9117] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3014.837460][T10693] netlink: 212 bytes leftover after parsing attributes in process `syz.3.10228'. [ 3014.843993][ T6801] usb 7-1: Product: syz [ 3014.850818][ T6801] usb 7-1: Manufacturer: syz [ 3014.864213][ T6801] usb 7-1: SerialNumber: syz [ 3014.878679][ T6801] usb 7-1: config 0 descriptor?? [ 3014.887407][ T6801] usb 7-1: selecting invalid altsetting 0 [ 3014.954018][ T9117] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 3014.991751][ T9117] usb 3-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 3015.014195][ T9117] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3015.078158][ T9117] usb 3-1: config 0 descriptor?? [ 3015.526504][T11776] usb 7-1: USB disconnect, device number 116 [ 3016.177614][T10711] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 3016.583652][T10715] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 3017.195708][ T9117] usbhid 3-1:0.0: can't add hid device: -71 [ 3017.201818][ T9117] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 3017.253443][ T9117] usb 3-1: USB disconnect, device number 70 [ 3017.474323][T10719] loop3: detected capacity change from 0 to 7 [ 3017.561192][T10719] Dev loop3: unable to read RDB block 7 [ 3017.603978][T10719] loop3: AHDI p1 p2 p3 [ 3017.608432][T10719] loop3: partition table partially beyond EOD, truncated [ 3017.665021][T10719] loop3: p1 start 1601398130 is beyond EOD, truncated [ 3017.693048][T10719] loop3: p2 start 1702059890 is beyond EOD, truncated [ 3017.923003][T10724] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 3018.053949][ T9117] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 3018.235901][ T9117] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 3018.249504][ T9117] usb 1-1: config 0 has no interface number 0 [ 3018.256417][ T9117] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 3018.266077][ T9117] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3018.292735][ T9117] usb 1-1: config 0 descriptor?? [ 3018.302760][ T9117] usb 1-1: selecting invalid altsetting 1 [ 3018.315334][ T9117] dvb_ttusb_budget: ttusb_init_controller: error [ 3018.321959][ T9117] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 3018.419605][ T9117] DVB: Unable to find symbol cx22700_attach() [ 3018.486213][T10739] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 4, id = 0 [ 3018.742848][ T9117] DVB: Unable to find symbol tda10046_attach() [ 3018.757871][T10741] IPv6: Can't replace route, no match found [ 3018.769362][ T9117] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 3018.807976][ T9117] usb 1-1: USB disconnect, device number 4 [ 3018.870224][T10726] delete_channel: no stack [ 3018.992844][T10748] netlink: 260 bytes leftover after parsing attributes in process `syz.2.10243'. [ 3020.505172][ T9117] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 3020.548619][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.562477][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 3020.574398][ T5975] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 3020.634030][T11776] usb 7-1: new high-speed USB device number 117 using dummy_hcd [ 3020.655688][ T9117] usb 1-1: device descriptor read/64, error -71 [ 3020.784187][T11776] usb 7-1: Using ep0 maxpacket: 8 [ 3020.925046][ T9117] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 3020.942097][T11776] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 3020.963900][T11776] usb 7-1: config 179 has no interface number 0 [ 3020.991004][T11776] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 3021.013121][T11776] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 3021.084245][ T9117] usb 1-1: device descriptor read/64, error -71 [ 3021.121042][T11776] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3021.262995][ T9117] usb usb1-port1: attempt power cycle [ 3021.312251][T11776] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 3021.342863][T11776] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 3021.431339][T11776] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 3021.529514][T11776] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3021.596962][T10775] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 3021.644229][ T9117] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 3021.908543][T11776] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input269 [ 3021.931373][ T9117] usb 1-1: device descriptor read/8, error -71 [ 3022.254082][ T9117] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 3022.693702][ T9117] usb 1-1: device descriptor read/8, error -71 [ 3022.825967][ T9117] usb usb1-port1: unable to enumerate USB device [ 3024.910249][T10808] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 3025.344200][ T9117] usb 7-1: USB disconnect, device number 117 [ 3025.351867][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 3025.373976][ T9117] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 3025.770758][T10788] delete_channel: no stack [ 3025.877628][T10815] netlink: 260 bytes leftover after parsing attributes in process `syz.0.10265'. [ 3025.974472][T10823] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 3026.465604][T11776] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 3026.656431][T11776] usb 1-1: config 0 interface 0 has no altsetting 0 [ 3026.678792][T10838] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10273'. [ 3026.692070][T11776] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 3026.731452][T10838] netlink: 36 bytes leftover after parsing attributes in process `syz.7.10273'. [ 3026.739568][T11776] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3026.792058][T11776] usb 1-1: config 0 descriptor?? [ 3026.824458][T10838] vlan2: entered allmulticast mode [ 3027.023312][T11776] (null): keene_cmd_main failed (-71) [ 3027.047296][T11776] video4linux radio48: keene_cmd_main failed (-71) [ 3027.082659][T11776] radio-keene 1-1:0.0: V4L2 device registered as radio48 [ 3027.122596][T11776] usb 1-1: USB disconnect, device number 9 [ 3027.326007][T10851] netlink: 212 bytes leftover after parsing attributes in process `syz.7.10278'. [ 3027.936419][T10866] netlink: 'syz.3.10280': attribute type 1 has an invalid length. [ 3028.113156][T10866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3031.274117][T11776] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 3031.435183][T11776] usb 4-1: Using ep0 maxpacket: 32 [ 3031.448064][T11776] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 3031.461603][T11776] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 3031.480056][T11776] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 3031.498453][T11776] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 3031.504240][ T6801] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 3031.530299][T11776] usb 4-1: Product: syz [ 3031.548315][T11776] usb 4-1: Manufacturer: syz [ 3031.565020][T11776] usb 4-1: SerialNumber: syz [ 3031.588924][T11776] usb 4-1: config 0 descriptor?? [ 3031.685579][ T6801] usb 1-1: Using ep0 maxpacket: 16 [ 3031.708521][ T6801] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3031.737253][ T6801] usb 1-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 3031.783049][ T6801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3031.840187][ T6801] usb 1-1: config 0 descriptor?? [ 3031.886229][T10889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3032.002932][T10890] ALSA: mixer_oss: invalid OSS volume '2' [ 3032.009098][T10890] ALSA: mixer_oss: invalid OSS volume 'Ip6InAddrErrors' [ 3032.016755][T10890] ALSA: mixer_oss: invalid OSS volume 'Ip6InUnknownProtos' [ 3032.024804][T10889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3032.033914][T10890] ALSA: mixer_oss: invalid OSS volume 'Ip6InTruncatedPkts' [ 3032.051719][T10890] ALSA: mixer_oss: invalid OSS volume 'Ip6InDiscards' [ 3032.084829][T10890] ALSA: mixer_oss: invalid OSS volume 'Ip6InDelivers' [ 3033.552153][ T6801] betop 0003:11C0:5506.0088: unknown main item tag 0x0 [ 3033.577172][ T6801] betop 0003:11C0:5506.0088: unknown main item tag 0x0 [ 3033.601860][ T6801] betop 0003:11C0:5506.0088: unknown main item tag 0x0 [ 3033.624671][ T6801] betop 0003:11C0:5506.0088: unknown main item tag 0x0 [ 3033.652285][ T6801] betop 0003:11C0:5506.0088: unknown main item tag 0x0 [ 3033.680120][ T6801] betop 0003:11C0:5506.0088: hidraw1: USB HID v0.05 Device [HID 11c0:5506] on usb-dummy_hcd.0-1/input0 [ 3033.707569][ T6801] betop 0003:11C0:5506.0088: no inputs found [ 3034.089065][T10899] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10287'. [ 3034.228105][ T4228] usb 4-1: USB disconnect, device number 115 [ 3034.845270][T10903] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10289'. [ 3034.924855][T10903] Cannot find add_set index 1 as target [ 3035.000909][ T6801] usb 1-1: USB disconnect, device number 10 [ 3035.383959][ T6801] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 3035.593021][T10914] netlink: 212 bytes leftover after parsing attributes in process `syz.6.10292'. [ 3035.602670][ T6801] usb 1-1: Using ep0 maxpacket: 16 [ 3035.646249][ T6801] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3035.684364][ T4228] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 3035.694390][ T6801] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3035.749231][ T6801] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3035.759754][T10903] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10289'. [ 3036.147013][ T4228] usb 4-1: config 0 interface 0 has no altsetting 0 [ 3036.153766][ T4228] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 3036.156745][ T6801] usb 1-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 3036.219167][ T4228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3036.240621][ T6801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3036.266120][ T6801] usb 1-1: config 0 descriptor?? [ 3036.315532][ T4228] usb 4-1: config 0 descriptor?? [ 3036.363081][T10920] x_tables: duplicate underflow at hook 2 [ 3036.767828][ T6801] elecom 0003:056E:010C.0089: unknown main item tag 0x0 [ 3036.806406][ T6801] elecom 0003:056E:010C.0089: unknown main item tag 0x0 [ 3036.850494][ T6801] elecom 0003:056E:010C.0089: unknown main item tag 0x0 [ 3036.879042][ T6801] elecom 0003:056E:010C.0089: unknown main item tag 0x0 [ 3036.907257][ T4228] (null): keene_cmd_main failed (-110) [ 3036.924311][ T6801] elecom 0003:056E:010C.0089: unknown main item tag 0x0 [ 3036.933388][ T4228] video4linux radio48: keene_cmd_main failed (-32) [ 3036.964287][T10907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3036.971495][ T4228] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 3036.991208][T10907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3037.001705][ T6801] elecom 0003:056E:010C.0089: hidraw1: USB HID vff.fc Device [HID 056e:010c] on usb-dummy_hcd.0-1/input0 [ 3037.050409][T10907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3037.150756][T10907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3037.201282][T10931] xt_bpf: check failed: parse error [ 3037.208438][ T6801] usb 1-1: USB disconnect, device number 11 [ 3037.274193][T11776] usb 4-1: USB disconnect, device number 116 [ 3037.904521][ T9117] usb 7-1: new high-speed USB device number 118 using dummy_hcd [ 3038.036237][ T9117] usb 7-1: device descriptor read/64, error -71 [ 3038.307912][ T9117] usb 7-1: new high-speed USB device number 119 using dummy_hcd [ 3038.484199][ T9117] usb 7-1: device descriptor read/64, error -71 [ 3038.555160][T10916] syz.7.10289 (10916): drop_caches: 2 [ 3038.637067][ T9117] usb usb7-port1: attempt power cycle [ 3038.791111][T10946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10301'. [ 3038.810278][T10945] netlink: 192 bytes leftover after parsing attributes in process `syz.0.10300'. [ 3039.007469][ T9117] usb 7-1: new high-speed USB device number 120 using dummy_hcd [ 3039.047342][ T9117] usb 7-1: device descriptor read/8, error -71 [ 3039.111754][T10953] FAULT_INJECTION: forcing a failure. [ 3039.111754][T10953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3039.119723][T10954] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 3039.158477][T10953] CPU: 1 UID: 0 PID: 10953 Comm: syz.2.10303 Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) [ 3039.158499][T10953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3039.158513][T10953] Call Trace: [ 3039.158525][T10953] [ 3039.158532][T10953] dump_stack_lvl+0x189/0x250 [ 3039.158559][T10953] ? __pfx____ratelimit+0x10/0x10 [ 3039.158583][T10953] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3039.158607][T10953] ? __pfx__printk+0x10/0x10 [ 3039.158623][T10953] ? __might_fault+0xb0/0x130 [ 3039.158658][T10953] should_fail_ex+0x414/0x560 [ 3039.158681][T10953] _copy_from_user+0x2d/0xb0 [ 3039.158697][T10953] __sys_bpf+0x1ed/0x860 [ 3039.158719][T10953] ? __pfx___sys_bpf+0x10/0x10 [ 3039.158748][T10953] ? ksys_write+0x22a/0x250 [ 3039.158764][T10953] ? __pfx_ksys_write+0x10/0x10 [ 3039.158776][T10953] ? rcu_is_watching+0x15/0xb0 [ 3039.158804][T10953] __x64_sys_bpf+0x7c/0x90 [ 3039.158823][T10953] do_syscall_64+0xfa/0x3b0 [ 3039.158836][T10953] ? lockdep_hardirqs_on+0x9c/0x150 [ 3039.158858][T10953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3039.158872][T10953] ? clear_bhb_loop+0x60/0xb0 [ 3039.158890][T10953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3039.158908][T10953] RIP: 0033:0x7f7fe3f8e929 [ 3039.158921][T10953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3039.158934][T10953] RSP: 002b:00007f7fe4d62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3039.158951][T10953] RAX: ffffffffffffffda RBX: 00007f7fe41b5fa0 RCX: 00007f7fe3f8e929 [ 3039.158962][T10953] RDX: 0000000000000020 RSI: 0000200000000140 RDI: 0000000000000008 [ 3039.158972][T10953] RBP: 00007f7fe4d62090 R08: 0000000000000000 R09: 0000000000000000 [ 3039.158981][T10953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3039.158990][T10953] R13: 0000000000000000 R14: 00007f7fe41b5fa0 R15: 00007f7fe42dfa28 [ 3039.159012][T10953] [ 3039.703896][ T9117] usb 7-1: new high-speed USB device number 121 using dummy_hcd [ 3039.725137][ T9117] usb 7-1: device descriptor read/8, error -71 [ 3039.839375][ T9117] usb usb7-port1: unable to enumerate USB device [ 3039.971677][T10967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10308'. [ 3039.991383][T10967] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10308'. [ 3040.072590][T10967] vlan3: entered allmulticast mode [ 3040.774881][ T6801] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 3040.881087][T10990] netlink: 212 bytes leftover after parsing attributes in process `syz.6.10315'. [ 3040.902730][T10992] netlink: 9 bytes leftover after parsing attributes in process `syz.3.10317'. [ 3040.930106][T10992] gretap0: entered promiscuous mode [ 3040.948508][ T6801] usb 3-1: Using ep0 maxpacket: 16 [ 3040.957798][ T6801] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3040.974474][ T6801] usb 3-1: config 0 has no interfaces? [ 3041.037629][ T6801] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 3041.046870][ T6801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3041.054938][ T6801] usb 3-1: Product: syz [ 3041.060347][ T6801] usb 3-1: Manufacturer: syz [ 3041.065621][ T6801] usb 3-1: SerialNumber: syz [ 3041.073345][ T6801] usb 3-1: config 0 descriptor?? [ 3041.231162][T10998] x_tables: duplicate underflow at hook 2 [ 3041.317335][T10979] batadv0: entered promiscuous mode [ 3041.337037][T10979] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 3041.382563][T10979] batadv0: left promiscuous mode [ 3041.591884][T11776] usb 3-1: USB disconnect, device number 71 [ 3041.749321][T11008] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10322'. [ 3041.985076][ T6801] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 3042.064051][T11015] xt_bpf: check failed: parse error [ 3042.165909][ T6801] usb 4-1: Using ep0 maxpacket: 16 [ 3042.179145][ T6801] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 3042.179175][ T6801] usb 4-1: config 0 has no interface number 0 [ 3042.181207][ T6801] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 3042.181235][ T6801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3042.181257][ T6801] usb 4-1: Product: syz [ 3042.181273][ T6801] usb 4-1: Manufacturer: syz [ 3042.181316][ T6801] usb 4-1: SerialNumber: syz [ 3042.184680][ T6801] usb 4-1: config 0 descriptor?? [ 3042.189937][ T6801] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 3042.341695][T11022] vivid-000: disconnect [ 3042.399292][ T6801] usb 4-1: USB disconnect, device number 117 [ 3042.772495][T11012] vivid-000: reconnect [ 3043.109662][T11034] binder_alloc: binder_alloc_mmap_handler: 11031 2000003d8000-2000003d9000 already mapped failed -16 [ 3043.370117][T11039] fuse: Bad value for 'fd' [ 3043.489391][ T6801] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 3043.675789][ T6801] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 3043.701821][ T6801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3043.727050][ T6801] usb 1-1: config 0 descriptor?? [ 3043.757711][ T6801] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 3043.770257][T11048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10334'. [ 3043.966282][T11053] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10336'. [ 3043.986147][T11053] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10336'. [ 3044.592623][ T6801] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 3044.614122][ T6801] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 3044.855689][ T6801] usb 1-1: USB disconnect, device number 12 [ 3045.418436][T11079] x_tables: duplicate underflow at hook 2 [ 3045.984413][ T9117] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 3046.258236][ T9117] usb 1-1: Using ep0 maxpacket: 32 [ 3046.310608][ T9117] usb 1-1: config 0 interface 0 has no altsetting 0 [ 3046.329668][ T9117] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 3046.359549][ T9117] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3046.434258][ T9117] usb 1-1: Product: syz [ 3046.451671][ T9117] usb 1-1: Manufacturer: syz [ 3046.465409][ T9117] usb 1-1: SerialNumber: syz [ 3046.495234][ T9117] usb 1-1: config 0 descriptor?? [ 3046.673096][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 3046.673115][ T30] audit: type=1326 audit(1750445378.933:15024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.7.10349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4baed8e929 code=0x7ffc0000 [ 3046.716396][T11081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10344'. [ 3046.814905][ T30] audit: type=1326 audit(1750445378.933:15025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.7.10349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4baed8e929 code=0x7ffc0000 [ 3046.874876][ T30] audit: type=1326 audit(1750445378.933:15026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.7.10349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f4baed8e929 code=0x7ffc0000 [ 3046.931276][ T30] audit: type=1326 audit(1750445378.933:15027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.7.10349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4baed8e929 code=0x7ffc0000 [ 3046.969507][T11081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3046.978889][T11081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3047.034938][ T9117] gs_usb 1-1:0.0: Configuring for 243 interfaces [ 3047.041395][ T9117] gs_usb 1-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 3047.043958][ T6801] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 3047.057609][ T30] audit: type=1326 audit(1750445378.933:15028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.7.10349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4baed8d290 code=0x7ffc0000 [ 3047.153908][ T9117] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -22 [ 3047.190765][ T30] audit: type=1326 audit(1750445378.933:15029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.7.10349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4baed8e929 code=0x7ffc0000 [ 3047.256724][ T30] audit: type=1326 audit(1750445378.933:15030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.7.10349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f4baed8e929 code=0x7ffc0000 [ 3047.279223][ C0] vkms_vblank_simulate: vblank timer overrun [ 3047.288179][T11081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3047.303950][ T6801] usb 4-1: Using ep0 maxpacket: 16 [ 3047.309929][T11081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3047.339964][ T6801] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3047.370963][ T6801] usb 4-1: config 0 has no interfaces? [ 3047.379574][T31924] usb 1-1: USB disconnect, device number 13 [ 3047.385686][T15716] usb 7-1: new high-speed USB device number 122 using dummy_hcd [ 3047.409160][ T6801] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 3047.423962][ T6801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3047.432315][ T30] audit: type=1326 audit(1750445378.933:15031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.7.10349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4baed8e929 code=0x7ffc0000 [ 3047.475357][ T6801] usb 4-1: Product: syz [ 3047.486781][ T6801] usb 4-1: Manufacturer: syz [ 3047.499933][ T6801] usb 4-1: SerialNumber: syz [ 3047.516745][ T6801] usb 4-1: config 0 descriptor?? [ 3047.521899][ T30] audit: type=1326 audit(1750445378.933:15032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.7.10349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4baed8e929 code=0x7ffc0000 [ 3047.544340][ C0] vkms_vblank_simulate: vblank timer overrun [ 3047.556126][ T30] audit: type=1326 audit(1750445378.933:15033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.7.10349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4baed8e929 code=0x7ffc0000 [ 3047.578744][ C0] vkms_vblank_simulate: vblank timer overrun [ 3047.598870][T11100] xt_bpf: check failed: parse error [ 3047.614725][T15716] usb 7-1: config 0 has no interfaces? [ 3047.629798][T15716] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3047.656775][T15716] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3047.691233][T15716] usb 7-1: Product: syz [ 3047.697318][T15716] usb 7-1: Manufacturer: syz [ 3047.702199][T15716] usb 7-1: SerialNumber: syz [ 3047.719939][T15716] usb 7-1: config 0 descriptor?? [ 3047.762208][T11093] batadv0: entered promiscuous mode [ 3047.770581][T11093] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 3047.782302][T11093] batadv0: left promiscuous mode [ 3047.839859][T15716] usb 4-1: USB disconnect, device number 118 [ 3048.140865][T11109] loop4: detected capacity change from 0 to 7 [ 3048.200723][T11109] Dev loop4: unable to read RDB block 7 [ 3048.208222][T11109] loop4: AHDI p1 p2 [ 3048.212236][T11109] loop4: partition table partially beyond EOD, truncated [ 3048.223390][T11109] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 3050.440163][T15716] usb 7-1: USB disconnect, device number 122 [ 3051.046511][T11137] vivid-000: disconnect [ 3051.225674][T11131] vivid-000: reconnect [ 3051.856460][ T4228] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 3052.053869][ T4228] usb 1-1: Using ep0 maxpacket: 32 [ 3052.072583][T11150] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 3052.084277][ T6801] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 3052.116644][ T4228] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 3052.152832][ T4228] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 3052.185311][ T4228] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 3052.195004][ T4228] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3052.203027][ T4228] usb 1-1: Product: syz [ 3052.224208][ T4228] usb 1-1: Manufacturer: syz [ 3052.233833][ T4228] usb 1-1: SerialNumber: syz [ 3052.246622][ T6801] usb 4-1: Using ep0 maxpacket: 32 [ 3052.254880][ T4228] usb 1-1: config 0 descriptor?? [ 3052.262231][ T6801] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 3052.271388][ T6801] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3052.302181][ T6801] usb 4-1: config 0 has no interface number 0 [ 3052.310662][ T4228] hub 1-1:0.0: bad descriptor, ignoring hub [ 3052.339252][ T6801] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 3052.354244][ T4228] hub 1-1:0.0: probe with driver hub failed with error -5 [ 3052.385595][ T4228] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input270 [ 3052.415309][ T6801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3052.439499][ T6801] usb 4-1: Product: syz [ 3052.443751][ T6801] usb 4-1: Manufacturer: syz [ 3052.448157][ T4228] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 3052.479014][T11152] x_tables: duplicate underflow at hook 2 [ 3052.493914][ T6801] usb 4-1: SerialNumber: syz [ 3052.522936][ T6801] usb 4-1: config 0 descriptor?? [ 3052.629610][ T4228] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 3052.854387][ T4228] usb 1-1: USB disconnect, device number 14 [ 3053.535259][T11175] FAULT_INJECTION: forcing a failure. [ 3053.535259][T11175] name failslab, interval 1, probability 0, space 0, times 0 [ 3053.607442][T11173] SET target dimension over the limit! [ 3053.693884][T11175] CPU: 1 UID: 0 PID: 11175 Comm: syz.6.10371 Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) [ 3053.693908][T11175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3053.693918][T11175] Call Trace: [ 3053.693924][T11175] [ 3053.693931][T11175] dump_stack_lvl+0x189/0x250 [ 3053.693959][T11175] ? __pfx____ratelimit+0x10/0x10 [ 3053.693983][T11175] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3053.694007][T11175] ? __pfx__printk+0x10/0x10 [ 3053.694028][T11175] ? __pfx___might_resched+0x10/0x10 [ 3053.694050][T11175] ? fs_reclaim_acquire+0x7d/0x100 [ 3053.694073][T11175] should_fail_ex+0x414/0x560 [ 3053.694096][T11175] should_failslab+0xa8/0x100 [ 3053.694113][T11175] __kmalloc_cache_noprof+0x70/0x3d0 [ 3053.694129][T11175] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 3053.694148][T11175] tcp_sendmsg_fastopen+0x1de/0x5e0 [ 3053.694168][T11175] mptcp_sendmsg_fastopen+0x17d/0x580 [ 3053.694190][T11175] mptcp_sendmsg+0x176c/0x1970 [ 3053.694204][T11175] ? __pfx___might_resched+0x10/0x10 [ 3053.694227][T11175] ? __lock_acquire+0xab9/0xd20 [ 3053.694265][T11175] ? aa_sk_perm+0x81e/0x950 [ 3053.694286][T11175] ? __pfx_aa_sk_perm+0x10/0x10 [ 3053.694304][T11175] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 3053.694319][T11175] ? sock_rps_record_flow+0x19/0x410 [ 3053.694335][T11175] ? inet_sendmsg+0x2f4/0x370 [ 3053.694348][T11175] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3053.694370][T11175] __sock_sendmsg+0x19c/0x270 [ 3053.694396][T11175] ____sys_sendmsg+0x52d/0x830 [ 3053.694419][T11175] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3053.694446][T11175] ? import_iovec+0x74/0xa0 [ 3053.694463][T11175] ___sys_sendmsg+0x21f/0x2a0 [ 3053.694484][T11175] ? __pfx____sys_sendmsg+0x10/0x10 [ 3053.694533][T11175] ? __fget_files+0x2a/0x420 [ 3053.694549][T11175] ? __fget_files+0x3a0/0x420 [ 3053.694573][T11175] __sys_sendmmsg+0x227/0x430 [ 3053.694597][T11175] ? __pfx___sys_sendmmsg+0x10/0x10 [ 3053.694614][T11175] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 3053.694648][T11175] ? ksys_write+0x22a/0x250 [ 3053.694664][T11175] ? __pfx_ksys_write+0x10/0x10 [ 3053.694676][T11175] ? rcu_is_watching+0x15/0xb0 [ 3053.694704][T11175] __x64_sys_sendmmsg+0xa0/0xc0 [ 3053.694725][T11175] do_syscall_64+0xfa/0x3b0 [ 3053.694738][T11175] ? lockdep_hardirqs_on+0x9c/0x150 [ 3053.694759][T11175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3053.694777][T11175] ? clear_bhb_loop+0x60/0xb0 [ 3053.694804][T11175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3053.694825][T11175] RIP: 0033:0x7fa6d4b8e929 [ 3053.694840][T11175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3053.694853][T11175] RSP: 002b:00007fa6d5a04038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3053.694869][T11175] RAX: ffffffffffffffda RBX: 00007fa6d4db5fa0 RCX: 00007fa6d4b8e929 [ 3053.694880][T11175] RDX: 0000000000000001 RSI: 0000200000004980 RDI: 0000000000000003 [ 3053.694889][T11175] RBP: 00007fa6d5a04090 R08: 0000000000000000 R09: 0000000000000000 [ 3053.694899][T11175] R10: 000000002000c000 R11: 0000000000000246 R12: 0000000000000001 [ 3053.694908][T11175] R13: 0000000000000000 R14: 00007fa6d4db5fa0 R15: 00007fa6d4edfa28 [ 3053.694931][T11175] [ 3054.541618][T11181] FAULT_INJECTION: forcing a failure. [ 3054.541618][T11181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3054.641141][T11181] CPU: 0 UID: 0 PID: 11181 Comm: syz.0.10372 Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) [ 3054.641172][T11181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3054.641184][T11181] Call Trace: [ 3054.641192][T11181] [ 3054.641201][T11181] dump_stack_lvl+0x189/0x250 [ 3054.641235][T11181] ? __pfx____ratelimit+0x10/0x10 [ 3054.641265][T11181] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3054.641296][T11181] ? __pfx__printk+0x10/0x10 [ 3054.641320][T11181] ? __might_fault+0xb0/0x130 [ 3054.641350][T11181] should_fail_ex+0x414/0x560 [ 3054.641382][T11181] _copy_from_user+0x2d/0xb0 [ 3054.641404][T11181] ___sys_sendmsg+0x158/0x2a0 [ 3054.641441][T11181] ? __pfx____sys_sendmsg+0x10/0x10 [ 3054.641504][T11181] ? __fget_files+0x2a/0x420 [ 3054.641527][T11181] ? __fget_files+0x3a0/0x420 [ 3054.641560][T11181] __x64_sys_sendmsg+0x19b/0x260 [ 3054.641590][T11181] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3054.641626][T11181] ? __pfx_ksys_write+0x10/0x10 [ 3054.641643][T11181] ? rcu_is_watching+0x15/0xb0 [ 3054.641680][T11181] ? do_syscall_64+0xbe/0x3b0 [ 3054.641703][T11181] do_syscall_64+0xfa/0x3b0 [ 3054.641721][T11181] ? lockdep_hardirqs_on+0x9c/0x150 [ 3054.641755][T11181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3054.641775][T11181] ? clear_bhb_loop+0x60/0xb0 [ 3054.641800][T11181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3054.641820][T11181] RIP: 0033:0x7f25df78e929 [ 3054.641838][T11181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3054.641856][T11181] RSP: 002b:00007f25e064f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3054.641879][T11181] RAX: ffffffffffffffda RBX: 00007f25df9b5fa0 RCX: 00007f25df78e929 [ 3054.641894][T11181] RDX: 0000000024008084 RSI: 0000200000000200 RDI: 0000000000000004 [ 3054.641907][T11181] RBP: 00007f25e064f090 R08: 0000000000000000 R09: 0000000000000000 [ 3054.641921][T11181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3054.641933][T11181] R13: 0000000000000000 R14: 00007f25df9b5fa0 R15: 00007f25dfadfa28 [ 3054.641964][T11181] [ 3054.851392][ C0] vkms_vblank_simulate: vblank timer overrun [ 3055.932539][T11776] usb 4-1: USB disconnect, device number 119 [ 3056.269953][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 3056.269974][ T30] audit: type=1326 audit(1750445388.533:15039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11199 comm="syz.0.10380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25df78e929 code=0x7ffc0000 [ 3056.363962][ T30] audit: type=1326 audit(1750445388.533:15040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11199 comm="syz.0.10380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25df78e929 code=0x7ffc0000 [ 3056.897885][T11218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10385'. [ 3057.013925][ T6801] usb 7-1: new low-speed USB device number 123 using dummy_hcd [ 3057.208077][ T6801] usb 7-1: config index 0 descriptor too short (expected 6427, got 27) [ 3057.213905][T11776] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 3057.217205][ T6801] usb 7-1: config 0 has an invalid interface number: 21 but max is 0 [ 3057.252707][ T6801] usb 7-1: config 0 has no interface number 0 [ 3057.273052][ T6801] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 3057.315019][ T6801] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid maxpacket 4096, setting to 8 [ 3057.359474][ T6801] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 3057.394033][ T6801] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3057.422514][T11776] usb 4-1: Using ep0 maxpacket: 16 [ 3057.454367][T11776] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3057.471229][ T6801] usb 7-1: config 0 descriptor?? [ 3057.503869][T11776] usb 4-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 3057.547512][T11776] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3057.594916][T11776] usb 4-1: config 0 descriptor?? [ 3057.864603][ T6801] usb 7-1: USB disconnect, device number 123 [ 3058.035631][T11776] betop 0003:11C0:5506.008A: unknown main item tag 0x0 [ 3058.052005][T11776] betop 0003:11C0:5506.008A: unknown main item tag 0x0 [ 3058.062197][T11776] betop 0003:11C0:5506.008A: unknown main item tag 0x0 [ 3058.079849][T11776] betop 0003:11C0:5506.008A: unknown main item tag 0x0 [ 3058.100062][T11776] betop 0003:11C0:5506.008A: unknown main item tag 0x0 [ 3058.135994][T11776] betop 0003:11C0:5506.008A: hidraw1: USB HID v0.05 Device [HID 11c0:5506] on usb-dummy_hcd.3-1/input0 [ 3058.188045][T11776] betop 0003:11C0:5506.008A: no inputs found [ 3059.184163][ T300] usb 7-1: new high-speed USB device number 124 using dummy_hcd [ 3059.493955][ T300] usb 7-1: Using ep0 maxpacket: 8 [ 3059.502064][ T300] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3059.513507][ T300] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3059.532344][ T300] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3059.580030][ T300] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 3059.611787][ T300] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3059.643227][ T300] usb 7-1: config 0 descriptor?? [ 3059.986383][ T300] usb 4-1: USB disconnect, device number 120 [ 3060.255872][T11247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10393'. [ 3060.273937][T11776] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 3060.387074][T11247] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10393'. [ 3060.427006][T11247] vlan3: entered allmulticast mode [ 3060.456322][T11776] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 3060.465574][T11776] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3060.487198][T11776] usb 3-1: config 0 has no interface number 0 [ 3060.501372][T11776] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 15403, setting to 1024 [ 3060.553552][T11776] usb 3-1: config 0 interface 106 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 3060.589137][T11776] usb 3-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 3060.628778][T11776] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 3060.678480][T11776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3060.746863][T11776] usb 3-1: config 0 descriptor?? [ 3060.766356][T11243] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 3060.805292][T11776] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 3060.847507][T11254] FAULT_INJECTION: forcing a failure. [ 3060.847507][T11254] name failslab, interval 1, probability 0, space 0, times 0 [ 3060.870447][T11254] CPU: 0 UID: 0 PID: 11254 Comm: syz.3.10395 Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) [ 3060.870478][T11254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3060.870491][T11254] Call Trace: [ 3060.870501][T11254] [ 3060.870510][T11254] dump_stack_lvl+0x189/0x250 [ 3060.870546][T11254] ? __pfx____ratelimit+0x10/0x10 [ 3060.870576][T11254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3060.870607][T11254] ? __pfx__printk+0x10/0x10 [ 3060.870635][T11254] ? __pfx___might_resched+0x10/0x10 [ 3060.870671][T11254] should_fail_ex+0x414/0x560 [ 3060.870702][T11254] should_failslab+0xa8/0x100 [ 3060.870733][T11254] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 3060.870754][T11254] ? __alloc_skb+0x112/0x2d0 [ 3060.870782][T11254] __alloc_skb+0x112/0x2d0 [ 3060.870809][T11254] netlink_sendmsg+0x5c6/0xb30 [ 3060.870844][T11254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3060.870872][T11254] ? aa_sock_msg_perm+0x94/0x160 [ 3060.870900][T11254] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3060.870926][T11254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3060.870951][T11254] __sock_sendmsg+0x219/0x270 [ 3060.870986][T11254] ____sys_sendmsg+0x505/0x830 [ 3060.871018][T11254] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3060.871053][T11254] ? import_iovec+0x74/0xa0 [ 3060.871077][T11254] ___sys_sendmsg+0x21f/0x2a0 [ 3060.871106][T11254] ? __pfx____sys_sendmsg+0x10/0x10 [ 3060.871168][T11254] ? __fget_files+0x2a/0x420 [ 3060.871190][T11254] ? __fget_files+0x3a0/0x420 [ 3060.871224][T11254] __x64_sys_sendmsg+0x19b/0x260 [ 3060.871253][T11254] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3060.871289][T11254] ? __pfx_ksys_write+0x10/0x10 [ 3060.871306][T11254] ? rcu_is_watching+0x15/0xb0 [ 3060.871342][T11254] ? do_syscall_64+0xbe/0x3b0 [ 3060.871365][T11254] do_syscall_64+0xfa/0x3b0 [ 3060.871383][T11254] ? lockdep_hardirqs_on+0x9c/0x150 [ 3060.871412][T11254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3060.871432][T11254] ? clear_bhb_loop+0x60/0xb0 [ 3060.871457][T11254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3060.871476][T11254] RIP: 0033:0x7f073af8e929 [ 3060.871494][T11254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3060.871511][T11254] RSP: 002b:00007f073bd13038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3060.871533][T11254] RAX: ffffffffffffffda RBX: 00007f073b1b5fa0 RCX: 00007f073af8e929 [ 3060.871549][T11254] RDX: 0000000024008084 RSI: 0000200000000200 RDI: 0000000000000004 [ 3060.871563][T11254] RBP: 00007f073bd13090 R08: 0000000000000000 R09: 0000000000000000 [ 3060.871576][T11254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3060.871588][T11254] R13: 0000000000000000 R14: 00007f073b1b5fa0 R15: 00007f073b2dfa28 [ 3060.871619][T11254] [ 3061.142096][ C0] vkms_vblank_simulate: vblank timer overrun [ 3061.162262][T11243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3061.209980][T11243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3061.262538][T11243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10391'. [ 3061.272675][T11243] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10391'. [ 3061.826040][T32326] usb 3-1: Failed to submit usb control message: -110 [ 3061.833493][T32326] usb 3-1: unable to send the bmi data to the device: -110 [ 3061.894109][T32326] usb 3-1: unable to get target info from device [ 3061.926522][T32326] usb 3-1: could not get target info (-110) [ 3061.932524][T32326] usb 3-1: could not probe fw (-110) [ 3061.993912][T15716] usb 3-1: USB disconnect, device number 72 [ 3062.030718][T11776] usb 7-1: USB disconnect, device number 124 [ 3062.196559][T11272] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3 [ 3062.281532][T11275] loop3: detected capacity change from 0 to 7 [ 3062.321573][T11275] Dev loop3: unable to read RDB block 7 [ 3062.509143][T11275] loop3: AHDI p1 p2 p3 [ 3062.544989][T11275] loop3: partition table partially beyond EOD, truncated [ 3062.586492][T11275] loop3: p1 start 1601398130 is beyond EOD, truncated [ 3062.652556][T11275] loop3: p2 start 1702059890 is beyond EOD, truncated [ 3062.854506][ T4228] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 3062.964897][T11776] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 3063.044117][T15716] usb 7-1: new high-speed USB device number 125 using dummy_hcd [ 3063.066263][ T4228] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 3063.088337][ T4228] usb 1-1: config 0 has no interface number 0 [ 3063.142185][ T4228] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 3063.172286][T11776] usb 3-1: config 4 has an invalid interface number: 231 but max is 0 [ 3063.196659][T11776] usb 3-1: config 4 has no interface number 0 [ 3063.202824][ T4228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3063.205663][T15716] usb 7-1: Using ep0 maxpacket: 16 [ 3063.226150][T11776] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 3063.236224][ T4228] usb 1-1: config 0 descriptor?? [ 3063.251809][T11776] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3063.260986][ T4228] usb 1-1: selecting invalid altsetting 1 [ 3063.272020][ T4228] dvb_ttusb_budget: ttusb_init_controller: error [ 3063.281554][T11776] usb 3-1: Product: syz [ 3063.294084][ T4228] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 3063.302597][T11776] usb 3-1: Manufacturer: syz [ 3063.311890][T15716] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3063.323573][T11776] usb 3-1: SerialNumber: syz [ 3063.343383][T15716] usb 7-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 3063.362928][T15716] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3063.383549][T11776] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 3063.397116][T15716] usb 7-1: config 0 descriptor?? [ 3063.588143][ T4228] DVB: Unable to find symbol cx22700_attach() [ 3063.725737][T11776] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 3063.772191][T11776] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 3063.799990][ T4228] DVB: Unable to find symbol tda10046_attach() [ 3063.823031][T15716] betop 0003:11C0:5506.008B: unknown main item tag 0x0 [ 3063.823062][T15716] betop 0003:11C0:5506.008B: unknown main item tag 0x0 [ 3063.823082][T15716] betop 0003:11C0:5506.008B: unknown main item tag 0x0 [ 3063.823101][T15716] betop 0003:11C0:5506.008B: unknown main item tag 0x0 [ 3063.823120][T15716] betop 0003:11C0:5506.008B: unknown main item tag 0x0 [ 3063.834240][T15716] betop 0003:11C0:5506.008B: hidraw1: USB HID v0.05 Device [HID 11c0:5506] on usb-dummy_hcd.6-1/input0 [ 3063.834268][T15716] betop 0003:11C0:5506.008B: no inputs found [ 3063.840733][ T4228] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 3063.845455][ T4228] usb 1-1: USB disconnect, device number 15 [ 3063.927892][T11776] usb 3-1: USB disconnect, device number 73 [ 3064.259654][T11306] netlink: 'syz.3.10407': attribute type 9 has an invalid length. [ 3064.267979][T11306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10407'. [ 3064.288314][T11306] macvlan4: entered promiscuous mode [ 3064.294360][T11306] macvlan4: entered allmulticast mode [ 3064.611705][T11315] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 3064.619652][T11315] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 3064.969633][T11299] delete_channel: no stack [ 3065.404140][T11776] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 3065.577951][T11776] usb 3-1: Using ep0 maxpacket: 8 [ 3065.599366][T11776] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3065.619970][T11776] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3065.762703][ T4228] usb 7-1: USB disconnect, device number 125 [ 3065.777263][T11776] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3065.852198][T11776] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 3065.943755][T11776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3065.986854][T11776] usb 3-1: config 0 descriptor?? [ 3066.604377][T11776] usb 7-1: new full-speed USB device number 126 using dummy_hcd [ 3066.786577][T11776] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3066.799214][T11776] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 3067.191263][T11776] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 3067.306302][T11776] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3067.354696][T31924] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 3067.484610][T11776] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 3067.512571][T31924] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 3067.531981][T11776] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 3067.542170][T31924] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3067.553603][T11776] usb 7-1: Product: syz [ 3067.565661][T11776] usb 7-1: Manufacturer: syz [ 3067.570879][T11776] usb 7-1: SerialNumber: syz [ 3067.599303][T31924] usb 4-1: config 0 has no interface number 0 [ 3067.607624][T11776] usb 7-1: config 0 descriptor?? [ 3067.628357][T31924] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 15403, setting to 1024 [ 3067.656541][T11776] radio-si470x 7-1:0.0: could not find interrupt in endpoint [ 3067.669446][T31924] usb 4-1: config 0 interface 106 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 3067.776597][T11340] netlink: 212 bytes leftover after parsing attributes in process `syz.0.10416'. [ 3067.790997][T31924] usb 4-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 3067.791615][T11776] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -5 [ 3067.813884][T31924] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 3067.910938][T11776] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 3067.983487][T31924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3068.023284][T31924] usb 4-1: config 0 descriptor?? [ 3068.101598][T11344] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 3068.154712][T11334] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 3068.210824][T31924] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 3068.415374][T11334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3068.429749][T11334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3068.485593][T11334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10414'. [ 3068.525821][T11334] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10414'. [ 3069.275481][T20646] usb 4-1: Failed to submit usb control message: -110 [ 3069.284051][T20646] usb 4-1: unable to send the bmi data to the device: -110 [ 3069.291316][T20646] usb 4-1: unable to get target info from device [ 3069.297943][T20646] usb 4-1: could not get target info (-110) [ 3069.304229][T20646] usb 4-1: could not probe fw (-110) [ 3069.329171][T11776] usb 4-1: USB disconnect, device number 121 [ 3069.411688][ T4228] usb 3-1: USB disconnect, device number 74 [ 3069.774645][T31924] usb 7-1: USB disconnect, device number 126 [ 3069.781866][T11330] delete_channel: no stack [ 3070.548848][T11382] netlink: 'syz.6.10425': attribute type 10 has an invalid length. [ 3070.564793][T11382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3070.584257][T11382] bond0: entered promiscuous mode [ 3070.589365][T11382] bond_slave_0: entered promiscuous mode [ 3070.614548][T11382] bond_slave_1: entered promiscuous mode [ 3070.652885][T11382] team0: Port device bond0 added [ 3070.669211][T11383] xt_bpf: check failed: parse error [ 3071.243484][T11394] loop4: detected capacity change from 0 to 7 [ 3071.279972][T11394] Dev loop4: unable to read RDB block 7 [ 3071.289389][T11394] loop4: AHDI p1 p2 [ 3071.439165][T11396] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10427'. [ 3071.718746][T11394] loop4: partition table partially beyond EOD, truncated [ 3071.910208][T11394] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 3073.465171][ T6801] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 3073.594673][T11406] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.10430'. [ 3073.654123][ T6801] usb 3-1: Using ep0 maxpacket: 8 [ 3073.713474][T11406] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 3073.714453][ T6801] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3073.772724][ T6801] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3073.829232][ T6801] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3073.890986][T11406] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 3073.900685][ T6801] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 3073.951349][ T6801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3073.979529][ T6801] usb 3-1: config 0 descriptor?? [ 3074.393461][T11415] netlink: 260 bytes leftover after parsing attributes in process `syz.3.10434'. [ 3074.694024][T11421] netlink: 212 bytes leftover after parsing attributes in process `syz.0.10435'. [ 3076.923132][T11423] xt_cgroup: invalid path, errno=-2 [ 3076.934100][T11776] usb 3-1: USB disconnect, device number 75 [ 3077.236802][T11444] FAULT_INJECTION: forcing a failure. [ 3077.236802][T11444] name failslab, interval 1, probability 0, space 0, times 0 [ 3077.341103][T11444] CPU: 0 UID: 0 PID: 11444 Comm: syz.2.10440 Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) [ 3077.341135][T11444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3077.341148][T11444] Call Trace: [ 3077.341158][T11444] [ 3077.341169][T11444] dump_stack_lvl+0x189/0x250 [ 3077.341206][T11444] ? __pfx____ratelimit+0x10/0x10 [ 3077.341240][T11444] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3077.341273][T11444] ? __pfx__printk+0x10/0x10 [ 3077.341303][T11444] ? ref_tracker_alloc+0x318/0x460 [ 3077.341339][T11444] should_fail_ex+0x414/0x560 [ 3077.341372][T11444] should_failslab+0xa8/0x100 [ 3077.341397][T11444] kmem_cache_alloc_noprof+0x73/0x3c0 [ 3077.341429][T11444] ? skb_clone+0x212/0x3a0 [ 3077.341463][T11444] skb_clone+0x212/0x3a0 [ 3077.341496][T11444] __netlink_deliver_tap+0x404/0x850 [ 3077.341534][T11444] ? netlink_deliver_tap+0x2e/0x1b0 [ 3077.341561][T11444] netlink_deliver_tap+0x19c/0x1b0 [ 3077.341588][T11444] netlink_unicast+0x72f/0x8d0 [ 3077.341623][T11444] netlink_sendmsg+0x805/0xb30 [ 3077.341659][T11444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3077.341688][T11444] ? aa_sock_msg_perm+0x94/0x160 [ 3077.341717][T11444] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3077.341742][T11444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3077.341769][T11444] __sock_sendmsg+0x219/0x270 [ 3077.341806][T11444] ____sys_sendmsg+0x505/0x830 [ 3077.341857][T11444] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3077.341890][T11444] ? import_iovec+0x74/0xa0 [ 3077.341915][T11444] ___sys_sendmsg+0x21f/0x2a0 [ 3077.341944][T11444] ? __pfx____sys_sendmsg+0x10/0x10 [ 3077.342007][T11444] ? __fget_files+0x2a/0x420 [ 3077.342027][T11444] ? __fget_files+0x3a0/0x420 [ 3077.342060][T11444] __x64_sys_sendmsg+0x19b/0x260 [ 3077.342089][T11444] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3077.342126][T11444] ? __pfx_ksys_write+0x10/0x10 [ 3077.342143][T11444] ? rcu_is_watching+0x15/0xb0 [ 3077.342180][T11444] ? do_syscall_64+0xbe/0x3b0 [ 3077.342202][T11444] do_syscall_64+0xfa/0x3b0 [ 3077.342220][T11444] ? lockdep_hardirqs_on+0x9c/0x150 [ 3077.342251][T11444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3077.342271][T11444] ? clear_bhb_loop+0x60/0xb0 [ 3077.342295][T11444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3077.342314][T11444] RIP: 0033:0x7f7fe3f8e929 [ 3077.342332][T11444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3077.342350][T11444] RSP: 002b:00007f7fe4d62038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3077.342371][T11444] RAX: ffffffffffffffda RBX: 00007f7fe41b5fa0 RCX: 00007f7fe3f8e929 [ 3077.342387][T11444] RDX: 0000000024008084 RSI: 0000200000000200 RDI: 0000000000000004 [ 3077.342400][T11444] RBP: 00007f7fe4d62090 R08: 0000000000000000 R09: 0000000000000000 [ 3077.342413][T11444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3077.342425][T11444] R13: 0000000000000000 R14: 00007f7fe41b5fa0 R15: 00007f7fe42dfa28 [ 3077.342456][T11444] [ 3077.632295][ C0] vkms_vblank_simulate: vblank timer overrun [ 3078.238205][T11460] netlink: 60 bytes leftover after parsing attributes in process `syz.6.10442'. [ 3078.297906][T11461] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 3079.117748][T11467] vivid-000: disconnect [ 3079.331885][T11454] vivid-000: reconnect [ 3079.404842][T11470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10448'. [ 3079.427646][T11470] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10448'. [ 3079.510924][T11470] vlan3: entered allmulticast mode [ 3080.293254][T11479] netlink: 212 bytes leftover after parsing attributes in process `syz.7.10451'. [ 3081.070994][T15716] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 3081.114996][T11487] netlink: 'syz.7.10453': attribute type 9 has an invalid length. [ 3081.123170][T11487] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10453'. [ 3081.190189][T11487] macvlan3: entered promiscuous mode [ 3081.233928][T15716] usb 1-1: Using ep0 maxpacket: 8 [ 3081.276674][T15716] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3081.287192][T11487] macvlan3: entered allmulticast mode [ 3081.447909][T15716] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3081.527024][T15716] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3081.577436][T15716] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 3081.618460][T15716] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3081.664451][T15716] usb 1-1: config 0 descriptor?? [ 3081.740283][T11484] delete_channel: no stack [ 3082.019941][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 3082.027234][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 3082.049656][T11493] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10455'. [ 3084.436077][T11510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10460'. [ 3084.672429][T11776] usb 1-1: USB disconnect, device number 16 [ 3084.702061][T11514] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10462'. [ 3084.784071][T11514] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10462'. [ 3085.266355][T11776] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 3085.447315][T11776] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 3085.479036][T11776] usb 1-1: config 0 interface 0 has no altsetting 0 [ 3085.497454][T11776] usb 1-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 3085.524019][T11776] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3085.554942][T11776] usb 1-1: config 0 descriptor?? [ 3085.567760][T11518] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3086.554347][T11776] usbhid 1-1:0.0: can't add hid device: -71 [ 3086.564834][T11776] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 3086.604621][T11776] usb 1-1: USB disconnect, device number 17 [ 3087.105670][ T4228] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 3087.298034][ T4228] usb 4-1: Using ep0 maxpacket: 32 [ 3087.308988][ T4228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 3087.334233][T15716] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 3087.339856][ T4228] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 3087.388920][ T4228] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 3087.411754][ T4228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3087.439292][ T4228] usb 4-1: Product: syz [ 3087.455885][ T4228] usb 4-1: Manufacturer: syz [ 3087.465104][ T4228] usb 4-1: SerialNumber: syz [ 3087.495014][ T4228] usb 4-1: config 0 descriptor?? [ 3087.515374][T15716] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3087.528418][ T4228] hub 4-1:0.0: bad descriptor, ignoring hub [ 3087.550327][ T4228] hub 4-1:0.0: probe with driver hub failed with error -5 [ 3087.568525][T15716] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 3087.582942][ T4228] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input272 [ 3087.611787][T15716] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 3087.665258][ T4228] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 3087.724569][ T4228] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 3087.748269][ T9117] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 3087.770875][T15716] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3087.914078][ T9117] usb 1-1: device descriptor read/64, error -71 [ 3087.980143][T15716] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 3088.066960][T15716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 3088.130224][T15716] usb 3-1: Product: syz [ 3088.163440][T15716] usb 3-1: Manufacturer: syz [ 3088.164263][ T9117] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 3088.193929][T15716] usb 3-1: SerialNumber: syz [ 3088.241031][T15716] usb 3-1: config 0 descriptor?? [ 3088.248569][T11561] xt_cgroup: invalid path, errno=-2 [ 3088.269078][T15716] radio-si470x 3-1:0.0: could not find interrupt in endpoint [ 3088.283944][T15716] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 3088.296167][T15716] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 3088.324263][ T9117] usb 1-1: device descriptor read/64, error -71 [ 3088.447411][ T9117] usb usb1-port1: attempt power cycle [ 3088.524682][T15716] usb 4-1: USB disconnect, device number 122 [ 3088.876503][ T9117] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 3088.905117][ T9117] usb 1-1: device descriptor read/8, error -71 [ 3089.113490][T11570] netlink: 'syz.3.10480': attribute type 2 has an invalid length. [ 3089.154306][ T9117] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 3089.187282][ T9117] usb 1-1: device descriptor read/8, error -71 [ 3089.314760][ T9117] usb usb1-port1: unable to enumerate USB device [ 3090.669972][T11580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10484'. [ 3090.794013][T11582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10482'. [ 3090.966365][T11776] usb 3-1: USB disconnect, device number 76 [ 3090.980926][T11544] delete_channel: no stack [ 3091.734000][T15716] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 3091.905020][T15716] usb 1-1: Using ep0 maxpacket: 32 [ 3091.912100][T15716] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 3091.928106][T15716] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 3091.982890][T15716] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 3092.017236][ T30] audit: type=1326 audit(1750445424.273:15041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11617 comm="syz.2.10498" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7fe3f8e929 code=0x0 [ 3092.039992][T15716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3092.085663][T15716] usb 1-1: Product: syz [ 3092.102484][T15716] usb 1-1: Manufacturer: syz [ 3092.129913][T15716] usb 1-1: SerialNumber: syz [ 3092.166844][T15716] usb 1-1: config 0 descriptor?? [ 3092.210810][T15716] hub 1-1:0.0: bad descriptor, ignoring hub [ 3092.246940][T15716] hub 1-1:0.0: probe with driver hub failed with error -5 [ 3092.414152][ T4228] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 3092.424489][T15716] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input273 [ 3092.479880][T15716] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 3092.537105][T15716] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 3092.586649][ T4228] usb 3-1: Using ep0 maxpacket: 16 [ 3092.612524][ T4228] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 3092.643823][ T4228] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 3092.687635][ T4228] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 3092.747874][ T4228] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 3092.788526][ T4228] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3092.844080][ T4228] usb 3-1: config 0 has no interface number 0 [ 3092.853408][ T4228] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 3092.885545][T15716] usb 1-1: USB disconnect, device number 22 [ 3092.889921][ T4228] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 3092.922256][ T4228] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 3092.943366][ T4228] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3092.988735][ T4228] usb 3-1: too many endpoints for config 0 interface 125 altsetting 190: 72, using maximum allowed: 30 [ 3093.019375][ T4228] usb 3-1: config 0 interface 125 altsetting 190 has 0 endpoint descriptors, different from the interface descriptor's value: 72 [ 3093.053519][ T4228] usb 3-1: config 0 interface 125 has no altsetting 0 [ 3093.088278][ T4228] usb 3-1: config 0 interface 125 has no altsetting 2 [ 3093.111281][ T4228] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 3093.126342][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3093.149378][ T4228] usb 3-1: Product: syz [ 3093.153622][ T4228] usb 3-1: Manufacturer: syz [ 3093.187373][ T4228] usb 3-1: SerialNumber: syz [ 3093.211435][ T4228] usb 3-1: config 0 descriptor?? [ 3093.226831][ T4228] usb 3-1: selecting invalid altsetting 2 [ 3093.497449][T11633] netlink: 'syz.3.10499': attribute type 9 has an invalid length. [ 3093.505860][T11633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10499'. [ 3093.528247][T11633] macvlan5: entered promiscuous mode [ 3093.533973][T11633] macvlan5: entered allmulticast mode [ 3094.200463][T11628] delete_channel: no stack [ 3095.429077][T31924] usb 3-1: USB disconnect, device number 77 [ 3096.202670][T11657] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3096.613493][T11673] vivid-000: disconnect [ 3096.831727][T11652] vivid-000: reconnect [ 3096.954720][T31924] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 3097.134010][T31924] usb 1-1: Using ep0 maxpacket: 16 [ 3097.177917][T31924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3097.209923][T31924] usb 1-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 3097.242840][T31924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3097.308388][T31924] usb 1-1: config 0 descriptor?? [ 3097.736945][T31924] betop 0003:11C0:5506.008C: unknown main item tag 0x0 [ 3097.791088][T31924] betop 0003:11C0:5506.008C: unknown main item tag 0x0 [ 3097.823030][T31924] betop 0003:11C0:5506.008C: unknown main item tag 0x0 [ 3097.853629][T31924] betop 0003:11C0:5506.008C: unknown main item tag 0x0 [ 3097.880446][T31924] betop 0003:11C0:5506.008C: unknown main item tag 0x0 [ 3097.931849][T31924] betop 0003:11C0:5506.008C: hidraw1: USB HID v0.05 Device [HID 11c0:5506] on usb-dummy_hcd.0-1/input0 [ 3098.063936][T31924] betop 0003:11C0:5506.008C: no inputs found [ 3100.203560][T31924] usb 1-1: USB disconnect, device number 23 [ 3100.580232][T11704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10516'. [ 3100.993843][T11713] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10520'. [ 3101.193912][T31924] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 3101.256568][T11717] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 3101.788107][T11726] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 3102.673880][ T300] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 3103.146061][ T300] usb 3-1: Using ep0 maxpacket: 16 [ 3103.173979][ T300] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3103.193951][ T300] usb 3-1: config 0 has no interfaces? [ 3103.203418][ T300] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 3103.214076][ T300] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3103.260640][ T300] usb 3-1: Product: syz [ 3103.280405][ T300] usb 3-1: Manufacturer: syz [ 3103.305916][ T300] usb 3-1: SerialNumber: syz [ 3103.353172][ T300] usb 3-1: config 0 descriptor?? [ 3103.909860][T11732] batadv0: entered promiscuous mode [ 3103.921228][T11746] netlink: 60 bytes leftover after parsing attributes in process `syz.6.10527'. [ 3103.935610][T11732] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 3104.023658][T11732] batadv0: left promiscuous mode [ 3104.211277][T11776] usb 3-1: USB disconnect, device number 78 [ 3105.251308][T11766] xt_bpf: check failed: parse error [ 3106.894799][T11779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10535'. [ 3106.991806][T11779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10535'. [ 3107.934121][T11776] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 3108.106764][T11776] usb 1-1: config 0 has no interfaces? [ 3108.126126][T11776] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3108.178552][T11776] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3108.328167][T11776] usb 1-1: Product: syz [ 3108.368652][T11776] usb 1-1: Manufacturer: syz [ 3108.373326][T11776] usb 1-1: SerialNumber: syz [ 3108.496646][T11776] usb 1-1: config 0 descriptor?? [ 3109.354312][T11812] loop4: detected capacity change from 0 to 7 [ 3109.487214][T11812] Dev loop4: unable to read RDB block 7 [ 3109.510382][T11812] loop4: AHDI p1 p2 [ 3109.510427][T11812] loop4: partition table partially beyond EOD, truncated [ 3109.510661][T11812] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 3110.105960][T11821] netlink: 260 bytes leftover after parsing attributes in process `syz.2.10546'. [ 3111.454520][T31924] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 3111.856774][T31924] usb 4-1: config 0 has no interfaces? [ 3111.880884][T31924] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3111.962298][T31924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3111.991505][T31924] usb 4-1: Product: syz [ 3112.436549][T31924] usb 4-1: Manufacturer: syz [ 3112.441212][T31924] usb 4-1: SerialNumber: syz [ 3112.449007][T31924] usb 4-1: config 0 descriptor?? [ 3112.621077][T11776] usb 1-1: USB disconnect, device number 24 [ 3112.639702][T11806] delete_channel: no stack [ 3112.766690][T11843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10551'. [ 3112.963933][T11843] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10551'. [ 3113.082683][T11843] vlan3: entered allmulticast mode [ 3113.602437][T11852] xt_bpf: check failed: parse error [ 3113.850183][ T4228] usb 4-1: USB disconnect, device number 124 [ 3114.584627][ T4228] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 3114.828691][ T4228] usb 1-1: config 0 has no interfaces? [ 3114.910079][T11890] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 3115.089752][ T4228] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3115.125232][ T4228] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3115.149797][ T4228] usb 1-1: Product: syz [ 3115.172327][ T4228] usb 1-1: Manufacturer: syz [ 3115.273971][ T4228] usb 1-1: SerialNumber: syz [ 3115.292757][ T4228] usb 1-1: config 0 descriptor?? [ 3116.228410][T11909] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10574'. [ 3116.296711][T11909] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10574'. [ 3116.700083][T11917] netlink: 'syz.3.10575': attribute type 9 has an invalid length. [ 3116.708482][T11917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10575'. [ 3116.727656][T11917] macvlan6: entered promiscuous mode [ 3116.733375][T11917] macvlan6: entered allmulticast mode [ 3117.459132][T11912] delete_channel: no stack [ 3117.817124][T11921] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 3117.890614][ T6801] usb 1-1: USB disconnect, device number 25 [ 3118.853560][T11937] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 3118.908875][T11939] ptrace attach of "./syz-executor exec"[1706] was attempted by "./syz-executor exec"[11939] [ 3118.969890][T11939] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10579'. [ 3119.203106][T11953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10589'. [ 3122.258767][T11987] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10597'. [ 3122.374305][ T4228] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 3122.567944][T11987] macsec1: entered allmulticast mode [ 3122.601689][T11987] vlan0: entered allmulticast mode [ 3122.627901][T11987] veth0_vlan: entered allmulticast mode [ 3122.658409][ T4228] usb 1-1: config 0 has no interfaces? [ 3122.691137][T11992] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 3122.718579][ T4228] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3122.824150][ T4228] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3122.854489][ T4228] usb 1-1: Product: syz [ 3122.872415][ T4228] usb 1-1: Manufacturer: syz [ 3122.893525][ T4228] usb 1-1: SerialNumber: syz [ 3122.999635][ T4228] usb 1-1: config 0 descriptor?? [ 3124.884430][ T9117] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 3125.048783][ T9117] usb 3-1: Using ep0 maxpacket: 16 [ 3125.066004][ T9117] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 3125.077214][ T9117] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3125.107741][ T9117] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3125.122942][ T9117] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3125.149883][ T9117] usb 3-1: Product: syz [ 3125.162312][ T9117] usb 3-1: Manufacturer: syz [ 3125.176441][ T9117] usb 3-1: SerialNumber: syz [ 3125.409203][ T9117] usb 3-1: 0:2 : does not exist [ 3125.420958][ T9117] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 3125.447042][ T9117] usb 3-1: USB disconnect, device number 79 [ 3125.736453][ T6801] usb 1-1: USB disconnect, device number 26 [ 3125.885843][T12025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10610'. [ 3126.104964][T12030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10613'. [ 3126.120455][T12030] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10613'. [ 3126.131723][T12031] ptrace attach of "./syz-executor exec"[4217] was attempted by "./syz-executor exec"[12031] [ 3126.141333][T12030] vlan3: entered allmulticast mode [ 3126.175080][ T6801] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 3126.221091][T12032] macvlan0: mtu greater than device maximum [ 3126.344086][ T6801] usb 1-1: Using ep0 maxpacket: 16 [ 3126.361835][ T6801] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3126.387360][ T6801] usb 1-1: config 0 has no interfaces? [ 3126.431570][ T6801] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 3126.500065][ T6801] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3126.549442][ T6801] usb 1-1: Product: syz [ 3126.567354][ T6801] usb 1-1: Manufacturer: syz [ 3126.572103][ T6801] usb 1-1: SerialNumber: syz [ 3126.600609][ T6801] usb 1-1: config 0 descriptor?? [ 3126.907615][T12044] loop3: detected capacity change from 0 to 7 [ 3126.908700][T12044] Dev loop3: unable to read RDB block 7 [ 3126.908752][T12044] loop3: AHDI p1 p2 p3 [ 3126.908782][T12044] loop3: partition table partially beyond EOD, truncated [ 3126.908985][T12044] loop3: p1 start 1601398130 is beyond EOD, truncated [ 3126.909010][T12044] loop3: p2 start 1702059890 is beyond EOD, truncated [ 3126.916582][T12023] batadv0: entered promiscuous mode [ 3126.918113][T12023] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 3126.919669][T12023] batadv0: left promiscuous mode [ 3127.036450][ T9117] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 3127.134823][ T6801] usb 1-1: USB disconnect, device number 27 [ 3127.254313][ T9117] usb 4-1: Using ep0 maxpacket: 16 [ 3127.272631][ T9117] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3127.296290][ T9117] usb 4-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 3127.325385][ T9117] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3127.353021][ T9117] usb 4-1: config 0 descriptor?? [ 3127.858999][ T9117] betop 0003:11C0:5506.008D: unknown main item tag 0x0 [ 3127.898212][ T9117] betop 0003:11C0:5506.008D: unknown main item tag 0x0 [ 3127.959314][ T9117] betop 0003:11C0:5506.008D: unknown main item tag 0x0 [ 3128.020536][ T9117] betop 0003:11C0:5506.008D: unknown main item tag 0x0 [ 3128.051458][ T9117] betop 0003:11C0:5506.008D: unknown main item tag 0x0 [ 3128.198261][ T9117] betop 0003:11C0:5506.008D: hidraw1: USB HID v0.05 Device [HID 11c0:5506] on usb-dummy_hcd.3-1/input0 [ 3128.214216][ T9117] betop 0003:11C0:5506.008D: no inputs found [ 3128.766213][T12064] netlink: 260 bytes leftover after parsing attributes in process `syz.2.10621'. [ 3129.755216][T31924] usb 4-1: USB disconnect, device number 125 [ 3130.059636][T12080] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10626'. [ 3130.115390][T12081] netlink: 36 bytes leftover after parsing attributes in process `syz.6.10626'. [ 3130.225868][T12081] batadv0: entered promiscuous mode [ 3130.336833][T31924] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 3130.441535][T12085] loop3: detected capacity change from 0 to 7 [ 3130.458151][T12085] Dev loop3: unable to read RDB block 7 [ 3130.477598][T12085] loop3: AHDI p1 p2 p3 [ 3130.484318][T12085] loop3: partition table partially beyond EOD, truncated [ 3130.507601][T12085] loop3: p1 start 1601398130 is beyond EOD, truncated [ 3130.527388][T31924] usb 4-1: config 0 has an invalid interface number: 144 but max is 0 [ 3130.543892][T31924] usb 4-1: config 0 has no interface number 0 [ 3130.553480][T31924] usb 4-1: too many endpoints for config 0 interface 144 altsetting 138: 68, using maximum allowed: 30 [ 3130.577836][T12085] loop3: p2 start 1702059890 is beyond EOD, truncated [ 3130.599093][T31924] usb 4-1: config 0 interface 144 altsetting 138 has 0 endpoint descriptors, different from the interface descriptor's value: 68 [ 3130.633289][T31924] usb 4-1: config 0 interface 144 has no altsetting 0 [ 3130.651779][T31924] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 3130.673976][T31924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3130.715770][T31924] usb 4-1: config 0 descriptor?? [ 3130.730318][T31924] cp210x 4-1:0.144: cp210x converter detected [ 3130.794336][ T9117] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 3130.934167][T12074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3130.943398][T12074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3130.966460][ T9117] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 3131.004247][ T9117] usb 1-1: config 0 has no interface number 0 [ 3131.020960][ T9117] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 3131.053144][ T9117] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3131.086749][ T9117] usb 1-1: config 0 descriptor?? [ 3131.117019][ T9117] usb 1-1: selecting invalid altsetting 1 [ 3131.122996][ T9117] dvb_ttusb_budget: ttusb_init_controller: error [ 3131.132039][T31924] cp210x 4-1:0.144: failed to get vendor val 0x000e size 3: -71 [ 3131.160466][ T9117] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 3131.164810][T31924] usb 4-1: cp210x converter now attached to ttyUSB0 [ 3131.175572][T12096] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 3131.273227][T31924] usb 4-1: USB disconnect, device number 126 [ 3131.328696][T31924] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 3131.366324][T31924] cp210x 4-1:0.144: device disconnected [ 3131.390810][ T9117] DVB: Unable to find symbol cx22700_attach() [ 3131.569094][T12103] netlink: 104 bytes leftover after parsing attributes in process `syz.7.10629'. [ 3131.775179][ T9117] DVB: Unable to find symbol tda10046_attach() [ 3131.820468][ T9117] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 3132.046438][ T9117] usb 1-1: USB disconnect, device number 28 [ 3132.374004][T11776] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 3132.398622][T12117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10638'. [ 3132.412333][T12115] loop3: detected capacity change from 0 to 7 [ 3132.427415][T12115] Dev loop3: unable to read RDB block 7 [ 3132.433362][T12115] loop3: AHDI p1 p2 p3 [ 3132.449371][T12115] loop3: partition table partially beyond EOD, truncated [ 3132.464717][T12118] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 3132.496865][T12115] loop3: p1 start 1601398130 is beyond EOD, truncated [ 3132.537245][T12115] loop3: p2 start 1702059890 is beyond EOD, truncated [ 3132.574102][T11776] usb 3-1: Using ep0 maxpacket: 16 [ 3132.630459][T11776] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3132.696700][T11776] usb 3-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 3132.757016][T11776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3132.828385][T11776] usb 3-1: config 0 descriptor?? [ 3132.974531][ T300] usb 4-1: new full-speed USB device number 127 using dummy_hcd [ 3133.327122][T11776] betop 0003:11C0:5506.008E: unknown main item tag 0x0 [ 3133.345521][T11776] betop 0003:11C0:5506.008E: unknown main item tag 0x0 [ 3133.350248][ T300] usb 4-1: unable to get BOS descriptor or descriptor too short [ 3133.368962][ T300] usb 4-1: not running at top speed; connect to a high speed hub [ 3133.384681][T11776] betop 0003:11C0:5506.008E: unknown main item tag 0x0 [ 3133.388811][ T300] usb 4-1: config 5 has an invalid interface number: 246 but max is 0 [ 3133.420583][T11776] betop 0003:11C0:5506.008E: unknown main item tag 0x0 [ 3133.423615][ T300] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 3133.446920][T11776] betop 0003:11C0:5506.008E: unknown main item tag 0x0 [ 3133.468920][ T300] usb 4-1: config 5 has no interface number 0 [ 3133.478966][T11776] betop 0003:11C0:5506.008E: hidraw1: USB HID v0.05 Device [HID 11c0:5506] on usb-dummy_hcd.2-1/input0 [ 3133.500611][ T300] usb 4-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 3133.534654][ T300] usb 4-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3133.558442][T11776] betop 0003:11C0:5506.008E: no inputs found [ 3133.583928][ T300] usb 4-1: config 5 interface 246 has no altsetting 0 [ 3133.618211][ T300] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 3133.641486][ T300] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3133.661929][ T300] usb 4-1: Product: syz [ 3133.683456][ T300] usb 4-1: Manufacturer: syz [ 3133.892700][ T300] usb 4-1: SerialNumber: syz [ 3134.024129][T15716] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 3134.263956][T15716] usb 1-1: Using ep0 maxpacket: 8 [ 3134.277488][T15716] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3134.468388][T15716] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3134.496995][ T300] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 3134.522670][T20646] usb 4-1: Failed to submit usb control message: -71 [ 3134.543038][T20646] usb 4-1: unable to send the bmi data to the device: -71 [ 3134.551132][T15716] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3134.587181][ T300] usb 4-1: USB disconnect, device number 127 [ 3134.596478][T20646] usb 4-1: unable to get target info from device [ 3134.605269][T20646] usb 4-1: could not get target info (-71) [ 3134.605312][T20646] usb 4-1: could not probe fw (-71) [ 3134.798156][T12137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3134.808541][T12137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3135.059531][T12141] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 3135.094465][ T300] usb 3-1: USB disconnect, device number 80 [ 3135.625606][ T300] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 3135.801562][ T300] usb 3-1: config 0 has no interfaces? [ 3135.869250][ T300] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3135.884986][ T300] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3135.954013][ T300] usb 3-1: Product: syz [ 3135.962102][ T300] usb 3-1: Manufacturer: syz [ 3135.993830][ T300] usb 3-1: SerialNumber: syz [ 3136.013323][ T300] usb 3-1: config 0 descriptor?? [ 3136.028176][T12154] syz_tun: entered allmulticast mode [ 3136.122550][T12154] syz_tun: left allmulticast mode [ 3137.164934][T12175] netlink: 60 bytes leftover after parsing attributes in process `syz.6.10649'. [ 3138.860825][T12184] xt_bpf: check failed: parse error [ 3138.926959][T15716] usb 1-1: string descriptor 0 read error: -71 [ 3138.961724][T15716] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3138.998587][T15716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3139.041115][T15716] usb 1-1: can't set config #1, error -71 [ 3139.068596][T15716] usb 1-1: USB disconnect, device number 29 [ 3140.361700][T11776] usb 3-1: USB disconnect, device number 81 [ 3140.596443][T12204] openvswitch: netlink: IPv4 tunnel dst address is zero [ 3141.021604][T12211] netlink: 212 bytes leftover after parsing attributes in process `syz.7.10662'. [ 3141.144865][T11776] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 3141.316372][T11776] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3141.325890][T11776] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 3141.475541][T11776] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3141.550925][T11776] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3141.642062][T11776] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3141.768360][T11776] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3141.947286][T12230] loop4: detected capacity change from 0 to 7 [ 3142.024389][T12230] Dev loop4: unable to read RDB block 7 [ 3142.030596][T12230] loop4: AHDI p1 p2 [ 3142.162893][T11776] usb 1-1: Product: syz [ 3142.177395][T12230] loop4: partition table partially beyond EOD, truncated [ 3142.231080][T11776] usb 1-1: Manufacturer: syz [ 3142.345400][T11776] cdc_wdm 1-1:1.0: skipping garbage [ 3142.350745][T11776] cdc_wdm 1-1:1.0: skipping garbage [ 3142.356873][T12230] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 3142.394275][T11776] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 3142.611139][T11776] usb 1-1: USB disconnect, device number 30 [ 3143.173463][ T30] audit: type=1326 audit(1750445475.433:15042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12245 comm="syz.6.10671" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6d4b8e929 code=0x0 [ 3143.254346][ T30] audit: type=1326 audit(1750445475.433:15043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12245 comm="syz.6.10671" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6d4b8e929 code=0x0 [ 3143.438422][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.447393][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 3143.798799][T12258] xt_bpf: check failed: parse error [ 3144.191180][T12264] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3144.457112][T12269] vivid-000: disconnect [ 3144.482001][ T4228] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 3144.673882][ T4228] usb 3-1: device descriptor read/64, error -71 [ 3144.886488][T12259] vivid-000: reconnect [ 3145.043991][ T4228] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 3145.204013][ T4228] usb 3-1: device descriptor read/64, error -71 [ 3145.339737][ T4228] usb usb3-port1: attempt power cycle [ 3145.695098][ T4228] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 3145.728415][ T4228] usb 3-1: device descriptor read/8, error -71 [ 3146.187208][ T4228] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 3146.229330][ T4228] usb 3-1: device descriptor read/8, error -71 [ 3146.365029][ T4228] usb usb3-port1: unable to enumerate USB device [ 3146.464526][T15716] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 3146.580959][T12273] syz.7.10678 (12273): drop_caches: 2 [ 3146.604386][T15716] usb 4-1: device descriptor read/64, error -71 [ 3146.874225][T15716] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 3147.026140][T15716] usb 4-1: device descriptor read/64, error -71 [ 3147.134405][T15716] usb usb4-port1: attempt power cycle [ 3147.474908][T15716] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 3147.514566][T15716] usb 4-1: device descriptor read/8, error -71 [ 3147.763918][T15716] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 3147.801306][T15716] usb 4-1: device descriptor read/8, error -71 [ 3147.954588][T15716] usb usb4-port1: unable to enumerate USB device [ 3149.061720][T12311] xt_bpf: check failed: parse error [ 3149.387152][T12307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10691'. [ 3150.035010][T12325] netlink: 260 bytes leftover after parsing attributes in process `syz.7.10695'. [ 3150.244266][ T9117] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 3150.427225][T12330] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10697'. [ 3150.454025][ T9117] usb 4-1: Using ep0 maxpacket: 8 [ 3150.471020][ T9117] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3150.491671][ T9117] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3150.529329][ T9117] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3150.566810][ T9117] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 3150.599562][ T9117] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3150.647055][ T9117] usb 4-1: config 0 descriptor?? [ 3151.919493][T12355] netlink: 'syz.7.10704': attribute type 5 has an invalid length. [ 3152.849373][T12376] vivid-000: disconnect [ 3153.017320][T12377] loop4: detected capacity change from 0 to 7 [ 3153.029498][T12360] vivid-000: reconnect [ 3153.052106][T12377] Dev loop4: unable to read RDB block 7 [ 3153.069118][T12377] loop4: AHDI p1 p2 [ 3153.073852][T12377] loop4: partition table partially beyond EOD, truncated [ 3153.084736][T12377] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 3153.484953][ T4228] usb 4-1: USB disconnect, device number 6 [ 3154.079205][T12384] ------------[ cut here ]------------ [ 3154.085570][T12384] WARNING: CPU: 1 PID: 12384 at kernel/fork.c:731 __put_task_struct+0x2e0/0x460 [ 3154.095306][T12384] Modules linked in: [ 3154.099609][T12384] CPU: 1 UID: 0 PID: 12384 Comm: syz.3.10713 Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) [ 3154.112313][T12384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3154.122717][T12384] RIP: 0010:__put_task_struct+0x2e0/0x460 [ 3154.128704][T12384] Code: 20 11 4c 89 f6 e8 50 ed 95 00 48 89 df e8 58 0a 19 00 48 89 df 5b 41 5c 41 5d 41 5e 41 5f 5d e9 f6 f3 ff ff e8 71 36 3d 00 90 <0f> 0b 90 e9 6c fd ff ff e8 63 36 3d 00 90 0f 0b 90 e9 9c fd ff ff [ 3154.148965][T12384] RSP: 0018:ffffc90003d5fc28 EFLAGS: 00010293 [ 3154.155328][T12384] RAX: ffffffff818325df RBX: ffff8880308b0000 RCX: ffff88802a2b0000 [ 3154.163345][T12384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3154.171475][T12384] RBP: 0000000000000000 R08: 000000000000ff00 R09: 00000000d06f8e0c [ 3154.179740][T12384] R10: 00000000851db375 R11: 000000003d4e2d16 R12: dffffc0000000000 [ 3154.187796][T12384] R13: ffff8880308b0028 R14: ffff8880308b0570 R15: ffff8880308b0000 [ 3154.195811][T12384] FS: 00007f0738dd56c0(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 3154.205080][T12384] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3154.211670][T12384] CR2: 0000555569ecd5c8 CR3: 00000000786e2000 CR4: 00000000003526f0 [ 3154.219727][T12384] Call Trace: [ 3154.223016][T12384] [ 3154.226046][T12384] ? io_sq_offload_create+0xc7e/0x10e0 [ 3154.231521][T12384] io_sq_offload_create+0xcaa/0x10e0 [ 3154.237079][T12384] ? __pfx_io_sq_offload_create+0x10/0x10 [ 3154.242821][T12384] ? security_capable+0xbd/0x2e0 [ 3154.247835][T12384] io_uring_create+0x60d/0xb60 [ 3154.252629][T12384] __se_sys_io_uring_setup+0x264/0x270 [ 3154.258132][T12384] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 3154.264361][T12384] ? do_user_addr_fault+0xc8a/0x1390 [ 3154.269683][T12384] ? do_syscall_64+0xbe/0x3b0 [ 3154.274504][T12384] do_syscall_64+0xfa/0x3b0 [ 3154.279035][T12384] ? lockdep_hardirqs_on+0x9c/0x150 [ 3154.284321][T12384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3154.290415][T12384] ? clear_bhb_loop+0x60/0xb0 [ 3154.295355][T12384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3154.301259][T12384] RIP: 0033:0x7f073af8e929 [ 3154.305828][T12384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3154.325762][T12384] RSP: 002b:00007f0738dd5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 3154.334239][T12384] RAX: ffffffffffffffda RBX: 00007f073b1b6160 RCX: 00007f073af8e929 [ 3154.342234][T12384] RDX: 0000000000000000 RSI: 0000200000002380 RDI: 0000000000007d2e [ 3154.350280][T12384] RBP: 00007f073b010b39 R08: 0000000000000000 R09: 0000000000000000 [ 3154.358502][T12384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3154.366604][T12384] R13: 0000000000000001 R14: 00007f073b1b6160 R15: 00007f073b2dfa28 [ 3154.374683][T12384] [ 3154.377732][T12384] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 3154.385016][T12384] CPU: 1 UID: 0 PID: 12384 Comm: syz.3.10713 Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) [ 3154.397173][T12384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3154.407259][T12384] Call Trace: [ 3154.410544][T12384] [ 3154.413480][T12384] dump_stack_lvl+0x99/0x250 [ 3154.418087][T12384] ? __asan_memcpy+0x40/0x70 [ 3154.422691][T12384] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3154.427904][T12384] ? __pfx__printk+0x10/0x10 [ 3154.432509][T12384] panic+0x2db/0x790 [ 3154.436423][T12384] ? __pfx_panic+0x10/0x10 [ 3154.440852][T12384] ? show_trace_log_lvl+0x4fb/0x550 [ 3154.446089][T12384] __warn+0x31b/0x4b0 [ 3154.450085][T12384] ? __put_task_struct+0x2e0/0x460 [ 3154.455238][T12384] ? __put_task_struct+0x2e0/0x460 [ 3154.460389][T12384] report_bug+0x2be/0x4f0 [ 3154.464737][T12384] ? __put_task_struct+0x2e0/0x460 [ 3154.469878][T12384] ? __put_task_struct+0x2e0/0x460 [ 3154.475009][T12384] ? __put_task_struct+0x2e2/0x460 [ 3154.480140][T12384] handle_bug+0x84/0x160 [ 3154.484412][T12384] exc_invalid_op+0x1a/0x50 [ 3154.488942][T12384] asm_exc_invalid_op+0x1a/0x20 [ 3154.493817][T12384] RIP: 0010:__put_task_struct+0x2e0/0x460 [ 3154.499563][T12384] Code: 20 11 4c 89 f6 e8 50 ed 95 00 48 89 df e8 58 0a 19 00 48 89 df 5b 41 5c 41 5d 41 5e 41 5f 5d e9 f6 f3 ff ff e8 71 36 3d 00 90 <0f> 0b 90 e9 6c fd ff ff e8 63 36 3d 00 90 0f 0b 90 e9 9c fd ff ff [ 3154.519179][T12384] RSP: 0018:ffffc90003d5fc28 EFLAGS: 00010293 [ 3154.525257][T12384] RAX: ffffffff818325df RBX: ffff8880308b0000 RCX: ffff88802a2b0000 [ 3154.533235][T12384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3154.541218][T12384] RBP: 0000000000000000 R08: 000000000000ff00 R09: 00000000d06f8e0c [ 3154.549210][T12384] R10: 00000000851db375 R11: 000000003d4e2d16 R12: dffffc0000000000 [ 3154.557191][T12384] R13: ffff8880308b0028 R14: ffff8880308b0570 R15: ffff8880308b0000 [ 3154.565176][T12384] ? __put_task_struct+0x2df/0x460 [ 3154.570306][T12384] ? __put_task_struct+0x2df/0x460 [ 3154.575427][T12384] ? io_sq_offload_create+0xc7e/0x10e0 [ 3154.580888][T12384] io_sq_offload_create+0xcaa/0x10e0 [ 3154.586182][T12384] ? __pfx_io_sq_offload_create+0x10/0x10 [ 3154.591902][T12384] ? security_capable+0xbd/0x2e0 [ 3154.596851][T12384] io_uring_create+0x60d/0xb60 [ 3154.601638][T12384] __se_sys_io_uring_setup+0x264/0x270 [ 3154.607103][T12384] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 3154.613096][T12384] ? do_user_addr_fault+0xc8a/0x1390 [ 3154.618394][T12384] ? do_syscall_64+0xbe/0x3b0 [ 3154.623081][T12384] do_syscall_64+0xfa/0x3b0 [ 3154.627588][T12384] ? lockdep_hardirqs_on+0x9c/0x150 [ 3154.632791][T12384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3154.638859][T12384] ? clear_bhb_loop+0x60/0xb0 [ 3154.643546][T12384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3154.649453][T12384] RIP: 0033:0x7f073af8e929 [ 3154.653972][T12384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3154.673680][T12384] RSP: 002b:00007f0738dd5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 3154.682122][T12384] RAX: ffffffffffffffda RBX: 00007f073b1b6160 RCX: 00007f073af8e929 [ 3154.690101][T12384] RDX: 0000000000000000 RSI: 0000200000002380 RDI: 0000000000007d2e [ 3154.698078][T12384] RBP: 00007f073b010b39 R08: 0000000000000000 R09: 0000000000000000 [ 3154.706053][T12384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3154.714033][T12384] R13: 0000000000000001 R14: 00007f073b1b6160 R15: 00007f073b2dfa28 [ 3154.722060][T12384] [ 3154.725429][T12384] Kernel Offset: disabled [ 3154.729766][T12384] Rebooting in 86400 seconds..