last executing test programs: 10.671483953s ago: executing program 0 (id=1000): r0 = syz_usb_connect$hid(0x2, 0xffffffffffffffd2, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x566, 0x3004, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xf}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x5, {0x5, 0xf, "00f400"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 7.684219303s ago: executing program 2 (id=1010): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x100) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8000000}) r1 = msgget$private(0x0, 0x44) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0)=0x4, 0x4) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) recvmmsg(r4, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/5, 0x5}], 0x1}}], 0x1, 0x12102, 0x0) msgsnd(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="59cc4caf00000000"], 0x8, 0x800) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x4, 0x4, 0x68, @local, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x80, 0x6, 0x2}}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xcf, 0x0, &(0x7f0000000140)=0xa4ffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x8400, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x100) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8000000}) (async) msgget$private(0x0, 0x44) (async) socket$inet6(0xa, 0x5, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) (async) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0)=0x4, 0x4) (async) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) (async) recvmmsg(r4, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/5, 0x5}], 0x1}}], 0x1, 0x12102, 0x0) (async) msgsnd(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="59cc4caf00000000"], 0x8, 0x800) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x4, 0x4, 0x68, @local, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x80, 0x6, 0x2}}) (async) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xcf, 0x0, &(0x7f0000000140)=0xa4ffffff) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x8400, 0x0) (async) 7.549332768s ago: executing program 0 (id=1011): r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x3a, 0x37, 0x5, 0x20, 0x781, 0x5, 0x5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe6, 0x2, 0x0, 0x5b, 0xbd, 0x97}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x0, 0xa, 0x8, {0x8, 0x3, "c051a63ec77f"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x39}}}, &(0x7f0000000380)={0x44, &(0x7f00000000c0)={0x40, 0xa, 0xcf, "201bcd809eb5c394f073e6dc2fdad12e7a05abbd15458c408914c41b3939b9ce6fa198a4c679bf4051961f198eaf21fc19a74980bf81893a8fc772e5bc5ebb11257f391a93cd9d80937f2fb7b6e082a4773bacba79aba38e6d6b67b9d397b674d4584398ed0b74c73d8577189c04cf39ff9e80709ae3e258bf18f1fc8e664ce9c33164eae2c945485a668b95a9c96cb59551e9f221d24b73034ceaa41945438e7c5c16faae61b10480b20f97381206af38022b1536814b2f430bacc7fab5672381f824dba62ee1863783b76478e999"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000200)={0x0, 0x8, 0x1}, &(0x7f0000000240)={0x20, 0x81, 0x1, "ed"}, &(0x7f0000000280)={0x20, 0x82, 0x2, "fd5d"}, &(0x7f00000002c0)={0x20, 0x83, 0x1, 'h'}, &(0x7f0000000300)={0x20, 0x84, 0x2, "ab98"}, &(0x7f0000000340)={0x20, 0x85, 0x3, "798acd"}}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000780)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.548267219s ago: executing program 3 (id=1013): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x8000000, 0x10100, 0x100000}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x20008080, 0x1}) syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000340)=ANY=[], 0xffc9) syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x3300}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000500)={0xf127, 0x1, 0x4, 0xffff, r6}, 0x10) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000000)={0x0, 0x0, 0x6}) 7.303337573s ago: executing program 2 (id=1014): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x3) (async) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0xe89b1ba254ccdb64, 0xb5, 0xa9c1, 0xeffffdff, 0x0, [{0x0, 0x7, 0x0, '\x00', 0x4}, {0x9, 0x5, 0x0, '\x00', 0x10}, {0xfc, 0x4}, {0xfe, 0x90, 0x9}, {0xc, 0x2, 0x5, '\x00', 0x9}, {0x0, 0x60}, {0x0, 0xbb, 0xbe}, {0x0, 0x6, 0x7f, '\x00', 0xb9}, {0x0, 0xff, 0x0, '\x00', 0xff}, {0xc, 0x4, 0xfe, '\x00', 0x42}, {0x0, 0x2}, {0x4, 0x50, 0xb}, {0x2, 0x0, 0x31, '\x00', 0x3}, {0x1, 0x6, 0x0, '\x00', 0x5}, {0x2, 0x2, 0x4, '\x00', 0xfe}, {0x0, 0x3, 0x1}, {0x1, 0x0, 0x4, '\x00', 0x4}, {0x0, 0x0, 0x0, '\x00', 0xdd}, {0x3, 0x1, 0x7, '\x00', 0x6}, {0x88, 0x0, 0xe, '\x00', 0x7}, {0x5, 0xe5}, {0x1, 0x40, 0x0, '\x00', 0x70}, {0x1, 0x0, 0xfe, '\x00', 0xe}, {0x10, 0x83, 0xb, '\x00', 0xf4}]}}) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000040)={0xbc, 0x0, 0xa}) (async) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000040)={0xbc, 0x0, 0xa}) 6.563189609s ago: executing program 2 (id=1016): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xe2}}, './file0\x00'}) dup2(r0, r1) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) r3 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x358, 0xffff8880b870dfff) ptrace$getregset(0x4204, r6, 0x200, &(0x7f0000000140)={&(0x7f0000000380)=""/237, 0xed}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/timer_list\x00', 0x0, 0x0) r7 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x440080) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0xc, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r11}}) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r12, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) syz_open_dev$sndpcmp(&(0x7f0000000180), 0x7fff, 0x800) io_uring_enter(r7, 0x627, 0x4c1, 0x43, 0x0, 0x30) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000340)="000088a8", 0x5dc, 0x14008b00, &(0x7f0000000200)={0x11, 0x86dd, r13, 0x1, 0x97, 0x6, @multicast}, 0x14) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) 5.751343905s ago: executing program 3 (id=1018): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'pimreg1\x00', {0x2, 0x4e20, @broadcast}}) (async, rerun: 64) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x5, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0xdc60}, @TCA_FLOW_MODE={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040045}, 0x0) 5.543720266s ago: executing program 4 (id=1019): fsopen(&(0x7f0000000040)='sysfs\x00', 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000140)={0xc}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r3, 0x3b8b, &(0x7f0000000040)={0x10, 0x1}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xff00) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000440)="1d8bfbebc83184576eb8b253998380ea458ef99b282bb753734d59b4b34e009118de6cae186e05531039b6c130e7309cbdc5bfbdd17265b73ec441c2385f981f6c54f86e2e8c839f6b14d18528d6f34d4cd5f09319567906dea22d7279f5ffe3d4088dcfe32c4cfb28d639e01c8452800ab8444f31cbcc0e24c4a98188da8109ff95a57109f79a114fc7d7e2957e2ddbbedcf6d63e613b7bb5ce4c57c16cf4630e8f94063f0a2633a0", 0xa9}], 0x1, 0x0, 0x0, 0xa6820000}, 0x0) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000980)={0x2, 0x3234564e, 0x1, @stepwise={0x3cff, 0x9, 0x80000001, 0xfff, 0x5e50, 0x7fffffff}}) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf0}) 5.472215629s ago: executing program 3 (id=1020): syz_usb_connect(0x5, 0x35, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x0) 5.00434893s ago: executing program 1 (id=1021): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x0, 0x10, &(0x7f0000000000), 0x45, 0xffffffffffffffff, 0xffffffffffffffff, 0xf, 0x0, 0x0, 0x10, 0x1}, 0x48) 4.762099586s ago: executing program 2 (id=1022): listxattr(&(0x7f0000000180)='./cgroup\x00', &(0x7f0000000140)=""/31, 0x1f) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0xff, 0x4, 0x6d, 0xc9fa, 0x3}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb, 0x4}}}}]}, 0x40}}, 0x4010004) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.499454076s ago: executing program 1 (id=1023): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0xffffffffffffffda}, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f00000000c0)={{@hyper, 0x2}, @local, 0x0, 0x0, 0x100, 0x6, 0x10, 0x3}) r3 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x43, 0x0, 0x0) getitimer(0x1, &(0x7f0000000080)) 4.416383161s ago: executing program 2 (id=1024): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x7, 0x10, 0x0, 0x0, 0xb47, 0x9, 0x8, 0xffffeffc, 0x3}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x2) mknod$loop(0x0, 0x0, 0x1) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="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", 0xfc) syz_genetlink_get_family_id$ethtool(0x0, r3) r4 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) shutdown(0xffffffffffffffff, 0x1) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x8000, 0x0, 0x0, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYRES8=r0], 0x7c}}, 0x2000cc50) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES32=r1], 0xe0}, 0x1, 0x0, 0x0, 0x440c4}, 0x0) 4.302151729s ago: executing program 4 (id=1025): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port0\x00', 0x0, 0x60004, 0x0, 0xffffffff, 0x6, 0xfffffffc}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001e00)={{0x80, 0x80}, 'port0\x00', 0x8719470d9569919, 0x0, 0x7ffc, 0x1, 0x4, 0x1, 0x5, 0x0, 0x1, 0x9}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x7f}, 'port1\x00', 0x80, 0x14, 0x4, 0xfffffeff, 0x0, 0xc, 0x200000, 0x0, 0x4875c99660ff2b2d}) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) pipe2(&(0x7f0000000300), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x29, 0x2, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f5, &(0x7f0000000200)={'gretap0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4084005) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000280)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x4, 0x4a}, @generic={0x7, 0x7, "04030e004b"}]}}, {{0x0, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0xfffe}}}}}}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00040005c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x8008551d, &(0x7f0000000140)=ANY=[@ANYBLOB="6bd200000100000048"]) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x54, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bond={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x1974}, @IFLA_BOND_ARP_IP_TARGET={0x8, 0x8, 0x0, 0x1, [@broadcast]}, @IFLA_BOND_UPDELAY={0x8}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x2}]}}}]}, 0x54}}, 0x0) 3.535206734s ago: executing program 1 (id=1026): mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x0, &(0x7f0000a00000/0x600000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000440)={0x0, &(0x7f0000000a80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x8, 0x81, 0x2, 0x5600, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x2, 0x4, 0x1, 0x209}, 0x50) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) tee(r7, r9, 0x3, 0x0) write$FUSE_INIT(r8, &(0x7f00000006c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0x22911c0, 0x1, 0xc36, 0x4, 0xffffbe9e, 0x0, 0x0, 0x2, 0xe}}, 0x50) ioctl$KVM_RUN(r6, 0xae80, 0x0) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r11, 0x0, 0x0, 0x0) recvmmsg(r10, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_io_uring_setup(0x802c9c, &(0x7f0000000640)={0x0, 0x40ec25, 0x80, 0x1, 0x333, 0x0, r9}, &(0x7f00000006c0), &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.398559892s ago: executing program 1 (id=1027): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe02e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x4, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffc, 0x789], 0x1, 0x400}) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca4198914"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) syz_open_dev$sg(&(0x7f0000000040), 0x8, 0x80000) 3.370602958s ago: executing program 4 (id=1028): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x208, 0x4) sendmmsg$inet(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a1427c84262ff67b6797cac305b5cea1dcd151", 0x44}, {&(0x7f0000000780)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e430bcb03", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="12", 0x1}], 0x1}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) syz_open_dev$video(&(0x7f0000000040), 0x1, 0x400) sendto$inet(r0, &(0x7f0000001280)="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", 0xfdc, 0x200440c1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f00000001c0)) sendto$inet(r0, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a2000000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e1d0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000007e050000fdffffffe80a000000000000000000000a00020070000000000000001c000400ffff4e234e220000e000000200"/196], 0x10c}}, 0x0) 3.015410124s ago: executing program 0 (id=1029): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff77aaaaaaaabb08060001080006040001"], 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f0000000000)={0x80, 0x0, 0x1000}) 2.982873966s ago: executing program 4 (id=1030): syz_emit_ethernet(0xca, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x94, 0x2c, 0x0, @dev={0xfe, 0x80, '\x00', 0x8}, @local, {[@hopopts={0x3c, 0x9, '\x00', [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x38, {0x1, 0xc, 0x5, 0x40, [0x3, 0x2, 0x1, 0x8, 0x6, 0x6]}}]}, @routing={0x32, 0x4, 0x1, 0xa5, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @private2]}], {{0x2c00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000004a00010000000000000000000a", @ANYRESOCT], 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)={0x8, 0xc, '\x00', [@calipso={0x7, 0x48, {0x1, 0x10, 0x8, 0x5, [0x2e, 0x3, 0x3, 0x6, 0x5, 0xfffffffffffffffc, 0x2, 0x5]}}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}, @ra]}, 0x68) 2.892493795s ago: executing program 1 (id=1031): syz_open_dev$video(0x0, 0x485, 0x40000) socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) nanosleep(&(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000140)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000740)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x3c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x6e22, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x40, 0x606d, 0x0, 0x1ff, {[@md5sig={0x13, 0x12, "0e95cd0fb083e7d135ecec0400000041"}]}}}}}}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x800) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xe2) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000000280)) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20020}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x78}]}}}, @IFLA_NET_NS_PID={0x8}]}, 0x48}}, 0x880) 2.863450686s ago: executing program 2 (id=1032): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x3, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r2, 0x5420, 0x0) r3 = add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x80010, r0, 0x2c9af000) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f0000001180)={0x23d, 0x7d, 0x0, {{0x500, 0xfc, 0x0, 0xfffffffd, {}, 0x1bac0000, 0x0, 0x0, 0x0, 0x25, '\x04no\xc8f\xc9}`\x99\x06\x00\x00\x00\x00\x00\x00\x00\x90\x00\x00\x1d\xf6\xdb\x00\x00\x00\x00\x00\x00=\xd3\x00\x00\x00\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x17, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x0fX\x05\x02\xb6n\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x05\x00\x00\x00\x00\x00\x00\x00\xc2g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x23d) syz_open_dev$sg(&(0x7f0000000000), 0x4, 0x200000) msgget$private(0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r5, 0x5646, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) socket$inet_sctp(0x2, 0x1, 0x84) unshare(0x66000080) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r8, 0x890c, &(0x7f0000000840)={0x0, {0x2, 0x4e20, @empty}, {0x2, 0x4e24, @remote}, {0x2, 0x4e2f, @broadcast}, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403}) keyctl$KEYCTL_PKEY_QUERY(0x18, r7, 0x0, &(0x7f0000001940)='\x00', 0x0) keyctl$link(0x8, r3, r7) 2.747240955s ago: executing program 4 (id=1033): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x808000, 0x0, 0x0, 0x8fc0, 0x65f40}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x4bc, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x2, 0x0, 0x6}, 0xc) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r4, 0x2000) read(r4, &(0x7f00000000c0)=""/163, 0xd0140f23) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000380), 0x900, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x5, 0x0, 0x1, "bf631e4b"}, 0x0, 0x1, {}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000140)=@multiplanar_userptr={0x8e, 0x2, 0x4, 0x20, 0xffffff37, {}, {0x5, 0x1, 0x3, 0x7, 0x2, 0x4, "94cebbeb"}, 0xa9, 0x2, {&(0x7f0000000240)=[{0xfffff002, 0x6, {&(0x7f00000001c0)}, 0x10000}, {0x5, 0x5, {&(0x7f0000000200)}, 0xa}]}, 0x100, 0x0, r5}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x409, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4008084}, 0x604c000) 2.74508678s ago: executing program 0 (id=1034): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) userfaultfd(0x801) syz_open_dev$ttys(0xc, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto(r4, &(0x7f00000001c0)="68ca1ae6f1a302cbae4747447418ad3152b4128dfc4652d24ea6dfe82ea976e4186771166d743e160325175cf01c7fc7494baad0bab8b1e6b51241737f61cf688ad9b5e142d9e1ea4c06ed81a2b3b377e3b79aa0c42f6cb97c977920a4f6e7a11275a02c0340cf58c928a1be79dc", 0x6e, 0x7946e6f654694066, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24040884) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000330c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) close_range(r1, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4040) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010003904000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="000000000040000020001280080001006774700014040280080004000000000008000300ad00d7a2"], 0x40}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366060c000280080001400000000424000180090001006d657461000000001400028008400000000e08000340000000042c0001800a0001006c696d69740000001c0002800c00014000000000000000640c00024000000000000000010900010073797a30000000000900020073797a3200000000140000001100010000000000000000000100000a0000"], 0xc0}}, 0x0) close(r6) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r9, 0x8, 0x70bd2f, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_NOLEARN={0x5}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000004}, 0x14040050) 2.422285723s ago: executing program 0 (id=1035): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x101001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000035c0)=[{{&(0x7f0000000180)=@isdn, 0x80, &(0x7f0000000040)=[{&(0x7f0000000380)=""/233, 0xe9}], 0x1, &(0x7f0000000480)=""/158, 0x9e}, 0x4}, {{&(0x7f0000000540)=@generic, 0x80, &(0x7f0000000700)=[{&(0x7f00000005c0)=""/58, 0x3a}, {&(0x7f0000000600)=""/161, 0xa1}, {&(0x7f00000006c0)=""/37, 0x25}], 0x3, &(0x7f0000000740)=""/11, 0xb}, 0xd000}, {{&(0x7f0000000780)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000800)=""/245, 0xf5}, {&(0x7f0000000900)=""/168, 0xa8}, {&(0x7f00000009c0)=""/233, 0xe9}, {&(0x7f0000000ac0)=""/13, 0xd}, {&(0x7f0000000b00)=""/77, 0x4d}, {&(0x7f0000000b80)=""/28, 0x1c}, {&(0x7f0000000bc0)=""/98, 0x62}, {&(0x7f0000000c40)=""/44, 0x2c}, {&(0x7f0000000c80)=""/78, 0x4e}, {&(0x7f0000000d00)=""/106, 0x6a}], 0xa, &(0x7f0000001480)=""/4096, 0x1000}, 0x257}, {{&(0x7f0000000e40)=@generic, 0x80, &(0x7f0000003500)=[{&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000000ec0)=""/118, 0x76}, {&(0x7f0000003480)=""/65, 0x41}], 0x3, &(0x7f0000003540)=""/96, 0x60}}], 0x4, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) io_uring_setup(0x191a, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000f40)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x130, 0x0, 0x200, 0x398, 0x98, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@ip={@local, @broadcast, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {0xff}, {}, 0x0, 0x0, 0x18}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x2000000}}, @inet=@DSCP={0x28}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @private=0xa010101, 0x0, 0x0, 'dvmrp0\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0xffffffff, 0x8000, 0x8d84, 0xcafc, 0xffffff8e, 0x70, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @local, 0x0, 0x0, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x8, @ipv4=@multicast1, 0x5e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1000) msgsnd(0x0, &(0x7f0000000340)=ANY=[], 0xf1, 0x800) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a140000001100"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000102, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@loopback, @in=@multicast2, 0xfffd, 0xfffe, 0x4e20, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0xffffffffffff235b, 0x0, 0x9, 0x1000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x4}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d5, 0x2b}, 0x2, @in6=@loopback, 0x0, 0x1, 0x0, 0x0, 0xffdffffc, 0xfffffc}}, 0xe8) dup(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) 2.391880033s ago: executing program 3 (id=1036): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2a, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf091000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000280)=@usbdevfs_driver={0x0, 0x4, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000002c0)={0x6, 0x0, [{0x80000008, 0x4, 0xb, 0xfffffffd, 0x7, 0x0, 0x3}, {0x80000000, 0x168, 0x2, 0xe, 0x7, 0x3cb, 0x3}, {0x7, 0xf78a, 0x1, 0x4, 0x5, 0x5}, {0xa, 0x7, 0x2, 0x2, 0x7fffffff, 0x3, 0x6}, {0x6, 0x2, 0x0, 0x7, 0x7, 0x6, 0x200}, {0x0, 0x4, 0x5, 0x6, 0x3, 0xfffff001, 0x79}]}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000003680)=[{&(0x7f00000000c0)="ab8c16e645c2", 0x6}], 0x1000000000000231, 0xe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b020000000000000c116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.14334906s ago: executing program 3 (id=1037): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r2 = syz_io_uring_setup(0x24f8, &(0x7f0000000140)={0x0, 0x10c4, 0x80, 0xfffffbfd, 0x180000, 0x0, r1}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x2800491, 0x0, 0x4, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r5) close(r5) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.902610007s ago: executing program 1 (id=1038): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_delneigh={0x30, 0x1d, 0x405, 0x70bd27, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, 0x80, 0x49, 0x8}, [@NDA_DST_IPV6={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xb, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f00000097c0)={0xffff1000, 0x11b000, 0x8}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6}}}]}, 0x38}}, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0x3c, 0x2c, 0x409, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r10, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000080)={0x40, 0x30, 0x71, {0x71, 0x21, "ef0029685f1c2d3627d7e2c678d7a7b4c4995dc7169a3e227fb5ae8b342ffabf284dc943ce51b60891148056e32c2f5ea3f98494ad1ecdec39563db6dc3d15e5db20f2d0a4bf01935356dfb12fd1138eb1aaa7ef5f160950d79f7e18cd471cfc34234dc74896d06690320cb6080bfe"}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="41af4fe4e82e42b27c29820c3438c825b2c9433525fa3fd22d94bc7b17d3e4b8d93cb5219b364b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x1c, 0x1, 0x1d}, 0x0, 0x0}) 1.510530747s ago: executing program 3 (id=1039): r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x2}, 0x10) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) modify_ldt$read(0x0, &(0x7f0000001100)=""/4130, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4a2000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) select(0x40, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffff2}, &(0x7f00000000c0)={0x4}, 0x0, &(0x7f0000000100)={0x7fffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet6_int(r3, 0x29, 0x4, &(0x7f0000000000)=0x6568, 0x4) recvmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x102, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r7, r5}, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) 671.408173ms ago: executing program 0 (id=1040): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_emit_ethernet(0x52, 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/18, @ANYBLOB="ebffffffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb3, 0x83, 0x51, 0x8, 0x686, 0x4011, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x3f, 0x0, 0x0, 0x5d, 0x88, 0x6d}}]}}]}}, 0x0) 0s ago: executing program 4 (id=1041): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000001440)=0x9) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) pipe2(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x80000000}, {0xfffffff9}]}}) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x6) ioctl$KVM_CLEAR_DIRTY_LOG(r5, 0xc018aec0, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235004000000f30b9fa000000130f01d9d90f78c4020a1bf7b805000000b90000c0fe0f3cae0a41d941d9000f32ba000000000f30660fc775022e0fba600c9864660ffc76002f3166b857000f00d0", 0x55}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f00000001c0)=ANY=[]) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x40, &(0x7f0000000000)=ANY=[@ANYRES64=r3, @ANYRES32=r3, @ANYRESHEX=r3, @ANYRESOCT=r3, @ANYBLOB="f2ed8b4027ff902a87a629"]) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}}}, 0x0, 0x0, 0x0, 0x0, 0x32, 0x1}, 0x9c) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x20) keyctl$clear(0x4, 0xfffffffffffffffc) kernel console output (not intermixed with test programs): 0 ip=0x7f435af8eec9 code=0x7ffc0000 [ 258.547258][ T30] audit: type=1326 audit(1760166678.119:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8384 comm="syz.3.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f435af8eec9 code=0x7ffc0000 [ 258.740926][ T8390] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 258.759357][ T5948] usb 4-1: Using ep0 maxpacket: 32 [ 258.762864][ T5918] microsoft 0003:045E:07DA.0012: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 258.789732][ T30] audit: type=1326 audit(1760166678.119:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8384 comm="syz.3.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435af8eec9 code=0x7ffc0000 [ 258.790588][ T5948] usb 4-1: config 0 has no interfaces? [ 258.819643][ T5918] microsoft 0003:045E:07DA.0012: no inputs found [ 258.824525][ T8393] loop6: detected capacity change from 0 to 7 [ 258.833961][ T5918] microsoft 0003:045E:07DA.0012: could not initialize ff, continuing anyway [ 258.850963][ T5922] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 258.860717][ T9] usb 3-1: Expected 3 endpoints, found: 0 [ 258.868148][ T5948] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 258.877907][ T5833] Dev loop6: unable to read RDB block 7 [ 258.890698][ T5833] loop6: unable to read partition table [ 258.902304][ T5833] loop6: partition table beyond EOD, truncated [ 258.917285][ T9] usb 3-1: USB disconnect, device number 29 [ 258.919139][ T5948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.939992][ T8393] Dev loop6: unable to read RDB block 7 [ 258.945822][ T8393] loop6: unable to read partition table [ 258.954325][ T8393] loop6: partition table beyond EOD, truncated [ 258.985043][ T8393] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 259.000247][ T5948] usb 4-1: config 0 descriptor?? [ 259.069537][ T5922] usb 1-1: Using ep0 maxpacket: 16 [ 259.120107][ T5922] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 259.159763][ T5922] usb 1-1: config 0 has no interface number 0 [ 259.176357][ T5922] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 259.185729][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.194104][ T5922] usb 1-1: Product: syz [ 259.198430][ T5922] usb 1-1: Manufacturer: syz [ 259.207126][ T5922] usb 1-1: SerialNumber: syz [ 259.216683][ T5922] usb 1-1: config 0 descriptor?? [ 259.235411][ T5922] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 259.328524][ T8386] 8021q: VLANs not supported on caif0 [ 259.353101][ T9] usb 5-1: USB disconnect, device number 31 [ 259.760246][ T5922] gspca_spca1528: reg_w err -110 [ 259.789232][ T5922] spca1528 1-1:0.1: probe with driver spca1528 failed with error -110 [ 260.771483][ T8421] fuse: Unknown parameter '' [ 260.884512][ T5948] usb 4-1: USB disconnect, device number 38 [ 260.979433][ T5922] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 261.053341][ T8426] capability: warning: `syz.2.685' uses 32-bit capabilities (legacy support in use) [ 261.143991][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.193646][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.203679][ T5922] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 261.213157][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.230300][ T5922] usb 5-1: config 0 descriptor?? [ 261.289270][ T5948] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 261.317638][ T9] usb 1-1: USB disconnect, device number 43 [ 261.326142][ T8429] loop6: detected capacity change from 0 to 7 [ 261.335663][ T8429] Dev loop6: unable to read RDB block 7 [ 261.366673][ T8429] loop6: unable to read partition table [ 261.383266][ T8429] loop6: partition table beyond EOD, truncated [ 261.409323][ T8429] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 261.443205][ T8419] vivid-000: ================= START STATUS ================= [ 261.469950][ T8419] vivid-000: Generate PTS: true [ 261.485264][ T5948] usb 4-1: config 0 interface 0 altsetting 198 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.493810][ T8419] vivid-000: Generate SCR: [ 261.514145][ T5948] usb 4-1: config 0 interface 0 altsetting 198 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.539814][ T8419] true [ 261.542667][ T8419] tpg source WxH: 320x240 (Y'CbCr) [ 261.559188][ T5948] usb 4-1: config 0 interface 0 has no altsetting 0 [ 261.566962][ T5948] usb 4-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 261.604338][ T8419] tpg field: 1 [ 261.604589][ T5948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.607757][ T8419] tpg crop: (0,0)/320x240 [ 261.607790][ T8419] tpg compose: (0,0)/320x240 [ 261.607804][ T8419] tpg colorspace: 8 [ 261.607812][ T8419] tpg transfer function: 0/0 [ 261.607822][ T8419] tpg Y'CbCr encoding: 0/0 [ 261.607832][ T8419] tpg quantization: 0/0 [ 261.713082][ T5948] usb 4-1: config 0 descriptor?? [ 261.831425][ T8419] tpg RGB range: 0/2 [ 261.852302][ T8439] netlink: 20 bytes leftover after parsing attributes in process `syz.0.690'. [ 261.869214][ T8419] vivid-000: ================== END STATUS ================== [ 261.934998][ T8425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.944058][ T8425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.954042][ T8425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.965382][ T5922] usbhid 5-1:0.0: can't add hid device: -71 [ 261.971662][ T5922] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 261.983456][ T8425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.999639][ T5922] usb 5-1: USB disconnect, device number 32 [ 262.113641][ T5948] usbhid 4-1:0.0: can't add hid device: -71 [ 262.150368][ T5948] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 262.164220][ T5921] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 262.181829][ T5948] usb 4-1: USB disconnect, device number 39 [ 262.325500][ T8448] xt_bpf: check failed: parse error [ 262.351778][ T5921] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 262.367779][ T5921] usb 2-1: config 0 has no interface number 0 [ 262.397089][ T5921] usb 2-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 262.430586][ T5921] usb 2-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 262.449011][ T5921] usb 2-1: config 0 interface 113 has no altsetting 0 [ 262.463125][ T5921] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 262.482569][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.499772][ T5922] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 262.507481][ T5921] usb 2-1: Product: syz [ 262.517736][ T5921] usb 2-1: Manufacturer: syz [ 262.527749][ T5921] usb 2-1: SerialNumber: syz [ 262.532064][ T8450] FAULT_INJECTION: forcing a failure. [ 262.532064][ T8450] name failslab, interval 1, probability 0, space 0, times 0 [ 262.549311][ T8450] CPU: 0 UID: 0 PID: 8450 Comm: syz.0.694 Not tainted syzkaller #0 PREEMPT(full) [ 262.549328][ T8450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 262.549335][ T8450] Call Trace: [ 262.549340][ T8450] [ 262.549345][ T8450] dump_stack_lvl+0x189/0x250 [ 262.549360][ T8450] ? __pfx____ratelimit+0x10/0x10 [ 262.549374][ T8450] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.549384][ T8450] ? __pfx__printk+0x10/0x10 [ 262.549396][ T8450] ? __pfx___might_resched+0x10/0x10 [ 262.549408][ T8450] ? fs_reclaim_acquire+0x7d/0x100 [ 262.549426][ T8450] should_fail_ex+0x414/0x560 [ 262.549443][ T8450] should_failslab+0xa8/0x100 [ 262.549454][ T8450] __kmalloc_noprof+0xcb/0x7f0 [ 262.549469][ T8450] ? io_cache_alloc_new+0x40/0x100 [ 262.549483][ T8450] io_cache_alloc_new+0x40/0x100 [ 262.549494][ T8450] __io_prep_rw+0x23f/0xe20 [ 262.549513][ T8450] ? __pfx___io_prep_rw+0x10/0x10 [ 262.549528][ T8450] ? __pfx_io_write+0x10/0x10 [ 262.549545][ T8450] io_prep_rwv+0x91/0x3e0 [ 262.549557][ T8450] ? __io_issue_sqe+0x1f9/0x4b0 [ 262.549570][ T8450] ? __pfx_io_prep_rwv+0x10/0x10 [ 262.549584][ T8450] ? io_issue_sqe+0x417/0x1060 [ 262.549597][ T8450] ? __asan_memset+0x22/0x50 [ 262.549613][ T8450] io_submit_sqes+0x932/0x1e60 [ 262.549642][ T8450] __se_sys_io_uring_enter+0x2df/0x2b20 [ 262.549666][ T8450] ? ksys_write+0x1cb/0x250 [ 262.549682][ T8450] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 262.549694][ T8450] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 262.549708][ T8450] ? __pfx_vfs_write+0x10/0x10 [ 262.549724][ T8450] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 262.549740][ T8450] ? __fget_files+0x3a0/0x420 [ 262.549753][ T8450] ? fput+0xa0/0xd0 [ 262.549764][ T8450] ? ksys_write+0x22a/0x250 [ 262.549779][ T8450] ? __pfx_ksys_write+0x10/0x10 [ 262.549795][ T8450] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 262.549810][ T8450] do_syscall_64+0xfa/0xfa0 [ 262.549823][ T8450] ? lockdep_hardirqs_on+0x9c/0x150 [ 262.549835][ T8450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.549846][ T8450] ? clear_bhb_loop+0x60/0xb0 [ 262.549858][ T8450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.549868][ T8450] RIP: 0033:0x7ffb6af8eec9 [ 262.549879][ T8450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.549888][ T8450] RSP: 002b:00007ffb6be34038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 262.549900][ T8450] RAX: ffffffffffffffda RBX: 00007ffb6b1e5fa0 RCX: 00007ffb6af8eec9 [ 262.549907][ T8450] RDX: 0000000000000000 RSI: 0000000000003516 RDI: 0000000000000004 [ 262.549913][ T8450] RBP: 00007ffb6be34090 R08: 0000000000000000 R09: 0000000000000000 [ 262.549920][ T8450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 262.549926][ T8450] R13: 00007ffb6b1e6038 R14: 00007ffb6b1e5fa0 R15: 00007ffb6b30fa28 [ 262.549942][ T8450] [ 262.564279][ T5921] usb 2-1: config 0 descriptor?? [ 262.861816][ C1] usb 2-1: NFC: Urb failure (status -71) [ 262.869854][ T5921] usb 2-1: NFC: Unable to get FW version [ 262.883375][ T5921] pn533_usb 2-1:0.113: probe with driver pn533_usb failed with error -90 [ 262.930657][ T5922] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 262.938950][ T5922] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 262.957565][ T8456] loop2: detected capacity change from 0 to 7 [ 262.971005][ T5922] usb 5-1: config 220 has no interface number 2 [ 262.977396][ T8456] Dev loop2: unable to read RDB block 7 [ 262.983164][ T8456] loop2: unable to read partition table [ 262.995426][ T5922] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 263.019382][ T8456] loop2: partition table beyond EOD, truncated [ 263.032981][ T8456] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 263.042412][ T5922] usb 5-1: config 220 interface 0 has no altsetting 0 [ 263.051331][ T5922] usb 5-1: config 220 interface 76 has no altsetting 0 [ 263.081166][ T5922] usb 5-1: config 220 interface 1 has no altsetting 0 [ 263.091282][ T8437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.689'. [ 263.116207][ T5922] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 263.136748][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.168965][ T5922] usb 5-1: Product: syz [ 263.197116][ T5922] usb 5-1: Manufacturer: syz [ 263.229896][ T5922] usb 5-1: SerialNumber: syz [ 263.273535][ T8459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.697'. [ 263.490820][ T8462] kvm: user requested TSC rate below hardware speed [ 263.684480][ T5921] usb 2-1: USB disconnect, device number 43 [ 263.780880][ T8466] loop6: detected capacity change from 0 to 7 [ 263.810688][ T8466] Dev loop6: unable to read RDB block 7 [ 263.827680][ T8466] loop6: unable to read partition table [ 263.850322][ T8466] loop6: partition table beyond EOD, truncated [ 263.892647][ T8466] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 264.069512][ T8474] tap0: tun_chr_ioctl cmd 2147767507 [ 264.109490][ T5921] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 264.112261][ T8474] netlink: 28 bytes leftover after parsing attributes in process `syz.0.702'. [ 264.298842][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 264.314886][ T5921] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 264.346292][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 264.356814][ T5921] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 264.367827][ T5921] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 264.377702][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.397736][ T5921] usb 2-1: config 0 descriptor?? [ 264.487318][ T8486] kvm: user requested TSC rate below hardware speed [ 264.625604][ T5921] hdpvr 2-1:0.0: firmware version 0xd dated l;S11!vOp [ 264.625604][ T5921] (r [ 264.625604][ T5921] d2}d~٭^r [ 264.827456][ T5921] hdpvr 2-1:0.0: device init failed [ 264.870999][ T5921] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 264.926176][ T5921] usb 2-1: USB disconnect, device number 44 [ 265.081780][ T5922] usb 5-1: selecting invalid altsetting 0 [ 265.100982][ T5922] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 265.296800][ T5922] uvcvideo 5-1:220.0: No valid video chain found. [ 265.328307][ T5922] usb 5-1: selecting invalid altsetting 0 [ 265.335302][ T5922] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 265.346890][ T5922] usb 5-1: USB disconnect, device number 33 [ 266.679353][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 266.685486][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout [ 266.717145][ T8489] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 267.344388][ T8489] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 267.350792][ T8489] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 267.357080][ T8489] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 267.367577][ T8489] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 267.750133][ T8528] netlink: 20 bytes leftover after parsing attributes in process `syz.0.714'. [ 267.962575][ T5921] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 267.963417][ T5918] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 268.189217][ T5918] usb 2-1: Using ep0 maxpacket: 8 [ 268.197658][ T5918] usb 2-1: config 0 has an invalid interface number: 151 but max is 1 [ 268.197684][ T5918] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.197695][ T5918] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 268.197707][ T5918] usb 2-1: config 0 has no interface number 0 [ 268.197730][ T5918] usb 2-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 268.197743][ T5918] usb 2-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 268.197762][ T5918] usb 2-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 210 [ 268.197774][ T5918] usb 2-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 268.205388][ T5918] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 268.205409][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.205424][ T5918] usb 2-1: Product: syz [ 268.205432][ T5918] usb 2-1: Manufacturer: syz [ 268.205440][ T5918] usb 2-1: SerialNumber: syz [ 268.207346][ T5918] usb 2-1: config 0 descriptor?? [ 268.209020][ T8525] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 268.211370][ T5918] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 268.606429][ T5922] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 268.739198][ T5922] usb 3-1: device descriptor read/64, error -71 [ 268.759176][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 268.787594][ T8541] sctp: [Deprecated]: syz.1.716 (pid 8541) Use of int in maxseg socket option. [ 268.787594][ T8541] Use struct sctp_assoc_value instead [ 268.999478][ T5922] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 269.201488][ T5922] usb 3-1: device descriptor read/64, error -71 [ 269.253297][ T8546] netlink: 20 bytes leftover after parsing attributes in process `syz.4.715'. [ 269.406646][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 269.406692][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout [ 269.406715][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 269.421322][ T5922] usb usb3-port1: attempt power cycle [ 269.522443][ T8548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.719'. [ 269.522532][ T8548] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 269.522611][ T8548] IPv6: NLM_F_CREATE should be set when creating new route [ 269.526159][ T8548] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.719'. [ 269.861028][ T5922] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 269.900364][ T5922] usb 3-1: device descriptor read/8, error -71 [ 270.149189][ T5922] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 270.181258][ T5922] usb 3-1: device descriptor read/8, error -71 [ 270.290938][ T5922] usb usb3-port1: unable to enumerate USB device [ 270.646381][ T8558] netlink: 'syz.0.723': attribute type 10 has an invalid length. [ 270.659527][ T10] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 270.693066][ T8558] netlink: 40 bytes leftover after parsing attributes in process `syz.0.723'. [ 270.725542][ T8558] batadv0: entered promiscuous mode [ 270.747114][ T8558] batadv0: entered allmulticast mode [ 270.770694][ T8558] bridge0: port 3(batadv0) entered blocking state [ 270.788817][ T8558] bridge0: port 3(batadv0) entered disabled state [ 270.820349][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 270.862590][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 270.885722][ T8558] netlink: 28 bytes leftover after parsing attributes in process `syz.0.723'. [ 270.928301][ T10] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 270.978390][ T10] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 270.997245][ T10] usb 4-1: Product: syz [ 271.014064][ T10] usb 4-1: Manufacturer: syz [ 271.021576][ T4999] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 271.031122][ T4999] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 271.050490][ T10] usb 4-1: SerialNumber: syz [ 271.070124][ T5921] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 271.082976][ T10] usb 4-1: config 0 descriptor?? [ 271.122064][ T8554] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 271.140706][ T10] hub 4-1:0.0: bad descriptor, ignoring hub [ 271.152584][ T10] hub 4-1:0.0: probe with driver hub failed with error -5 [ 271.239914][ T5921] usb 5-1: Using ep0 maxpacket: 8 [ 271.255665][ T5921] usb 5-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 271.265442][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.276217][ T5922] usb 2-1: USB disconnect, device number 45 [ 271.296273][ T5921] usb 5-1: Product: syz [ 271.311146][ T5921] usb 5-1: Manufacturer: syz [ 271.322840][ T5921] usb 5-1: SerialNumber: syz [ 271.391686][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 271.391702][ T30] audit: type=1326 audit(1760166691.609:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8569 comm="syz.1.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a3d8eec9 code=0x7ffc0000 [ 271.434096][ T5921] usb 5-1: config 0 descriptor?? [ 271.442205][ T8571] netlink: 48 bytes leftover after parsing attributes in process `syz.3.721'. [ 271.483718][ T30] audit: type=1326 audit(1760166691.649:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8569 comm="syz.1.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a3d8eec9 code=0x7ffc0000 [ 271.574844][ T30] audit: type=1326 audit(1760166691.669:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8569 comm="syz.1.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fb6a3d8eec9 code=0x7ffc0000 [ 271.607840][ T5921] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 271.621782][ T30] audit: type=1326 audit(1760166691.669:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8569 comm="syz.1.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a3d8eec9 code=0x7ffc0000 [ 271.636293][ T8576] netlink: 20 bytes leftover after parsing attributes in process `syz.2.729'. [ 271.644199][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.647604][ T30] audit: type=1326 audit(1760166691.669:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8569 comm="syz.1.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a3d8eec9 code=0x7ffc0000 [ 271.683780][ T30] audit: type=1326 audit(1760166691.669:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8569 comm="syz.1.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb6a3d8eec9 code=0x7ffc0000 [ 271.705970][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.779181][ T30] audit: type=1326 audit(1760166691.669:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8569 comm="syz.1.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a3d8eec9 code=0x7ffc0000 [ 271.802701][ T5921] gspca_vc032x: reg_w err -71 [ 271.808427][ T5921] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 271.829628][ T5921] usb 5-1: USB disconnect, device number 34 [ 271.837171][ T30] audit: type=1326 audit(1760166691.669:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8569 comm="syz.1.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a3d8eec9 code=0x7ffc0000 [ 271.859808][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.873239][ T30] audit: type=1326 audit(1760166691.689:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8569 comm="syz.1.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb6a3d8eec9 code=0x7ffc0000 [ 271.898654][ T5922] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 271.907665][ T30] audit: type=1326 audit(1760166691.689:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8569 comm="syz.1.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a3d8eec9 code=0x7ffc0000 [ 271.970418][ T8582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.730'. [ 271.979505][ T8582] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 271.987106][ T8582] IPv6: NLM_F_CREATE should be set when creating new route [ 272.005391][ T8582] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.730'. [ 272.089229][ T5922] usb 2-1: Using ep0 maxpacket: 32 [ 272.132403][ T5922] usb 2-1: config 0 has no interfaces? [ 272.137927][ T5922] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 272.157029][ T8587] FAULT_INJECTION: forcing a failure. [ 272.157029][ T8587] name failslab, interval 1, probability 0, space 0, times 0 [ 272.165388][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.169963][ T8587] CPU: 0 UID: 0 PID: 8587 Comm: syz.4.733 Not tainted syzkaller #0 PREEMPT(full) [ 272.169986][ T8587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 272.169997][ T8587] Call Trace: [ 272.170004][ T8587] [ 272.170012][ T8587] dump_stack_lvl+0x189/0x250 [ 272.170037][ T8587] ? __pfx____ratelimit+0x10/0x10 [ 272.170061][ T8587] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.170081][ T8587] ? __pfx__printk+0x10/0x10 [ 272.170102][ T8587] ? __pfx___might_resched+0x10/0x10 [ 272.170122][ T8587] ? fs_reclaim_acquire+0x7d/0x100 [ 272.170155][ T8587] should_fail_ex+0x414/0x560 [ 272.170183][ T8587] should_failslab+0xa8/0x100 [ 272.170204][ T8587] __kmalloc_noprof+0xcb/0x7f0 [ 272.170228][ T8587] ? io_cache_alloc_new+0x40/0x100 [ 272.170255][ T8587] io_cache_alloc_new+0x40/0x100 [ 272.170275][ T8587] __io_prep_rw+0x23f/0xe20 [ 272.170308][ T8587] ? __pfx___io_prep_rw+0x10/0x10 [ 272.170335][ T8587] ? __pfx_io_write+0x10/0x10 [ 272.170366][ T8587] io_prep_rwv+0x91/0x3e0 [ 272.170389][ T8587] ? __io_issue_sqe+0x1f9/0x4b0 [ 272.170413][ T8587] ? __pfx_io_prep_rwv+0x10/0x10 [ 272.170442][ T8587] ? io_issue_sqe+0x417/0x1060 [ 272.170466][ T8587] ? __asan_memset+0x22/0x50 [ 272.170495][ T8587] io_submit_sqes+0x932/0x1e60 [ 272.170556][ T8587] __se_sys_io_uring_enter+0x2df/0x2b20 [ 272.170599][ T8587] ? ksys_write+0x1cb/0x250 [ 272.170628][ T8587] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 272.170650][ T8587] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 272.170676][ T8587] ? __pfx_vfs_write+0x10/0x10 [ 272.170704][ T8587] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 272.170733][ T8587] ? __fget_files+0x3a0/0x420 [ 272.170757][ T8587] ? fput+0xa0/0xd0 [ 272.170778][ T8587] ? ksys_write+0x22a/0x250 [ 272.170805][ T8587] ? __pfx_ksys_write+0x10/0x10 [ 272.170833][ T8587] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 272.170860][ T8587] do_syscall_64+0xfa/0xfa0 [ 272.170883][ T8587] ? lockdep_hardirqs_on+0x9c/0x150 [ 272.170907][ T8587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.170926][ T8587] ? clear_bhb_loop+0x60/0xb0 [ 272.170948][ T8587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.170966][ T8587] RIP: 0033:0x7fc25c78eec9 [ 272.170983][ T8587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.171000][ T8587] RSP: 002b:00007fc25d54e038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 272.171020][ T8587] RAX: ffffffffffffffda RBX: 00007fc25c9e5fa0 RCX: 00007fc25c78eec9 [ 272.171033][ T8587] RDX: 0000000000000000 RSI: 0000000000003516 RDI: 0000000000000004 [ 272.171045][ T8587] RBP: 00007fc25d54e090 R08: 0000000000000000 R09: 0000000000000000 [ 272.171057][ T8587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 272.171068][ T8587] R13: 00007fc25c9e6038 R14: 00007fc25c9e5fa0 R15: 00007fc25cb0fa28 [ 272.171100][ T8587] [ 272.470722][ T8554] usb 4-1: reset high-speed USB device number 41 using dummy_hcd [ 272.517002][ T5922] usb 2-1: config 0 descriptor?? [ 272.659288][ T8554] usb 4-1: device descriptor read/64, error -71 [ 272.751886][ T8574] 8021q: VLANs not supported on caif0 [ 272.949621][ T8554] usb 4-1: reset high-speed USB device number 41 using dummy_hcd [ 273.089230][ T8554] usb 4-1: device descriptor read/64, error -71 [ 273.339254][ T8554] usb 4-1: reset high-speed USB device number 41 using dummy_hcd [ 273.362796][ T8554] usb 4-1: device descriptor read/8, error -71 [ 273.639323][ T8554] usb 4-1: reset high-speed USB device number 41 using dummy_hcd [ 273.668140][ T8610] netlink: 20 bytes leftover after parsing attributes in process `syz.4.741'. [ 273.678097][ T8610] netlink: 24 bytes leftover after parsing attributes in process `syz.4.741'. [ 273.742949][ T8612] netlink: 100 bytes leftover after parsing attributes in process `syz.4.742'. [ 274.373426][ T8620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.744'. [ 274.383970][ T8620] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 274.395269][ T8620] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.744'. [ 274.525213][ T5918] usb 2-1: USB disconnect, device number 46 [ 274.623994][ T8625] netlink: 'syz.4.745': attribute type 1 has an invalid length. [ 274.631846][ T8625] netlink: 'syz.4.745': attribute type 2 has an invalid length. [ 274.731979][ T8627] ip6tnl1: entered allmulticast mode [ 274.879383][ T8632] netlink: 40 bytes leftover after parsing attributes in process `syz.2.747'. [ 274.879502][ T8632] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 274.895659][ T8632] IPv6: NLM_F_CREATE should be set when creating new route [ 275.747543][ T8639] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 275.761821][ T8639] block device autoloading is deprecated and will be removed. [ 275.812837][ T8641] loop2: detected capacity change from 0 to 7 [ 275.824808][ T8641] Dev loop2: unable to read RDB block 7 [ 275.845431][ T8641] loop2: unable to read partition table [ 275.858352][ T8641] loop2: partition table beyond EOD, truncated [ 275.906668][ T8641] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 277.935098][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 277.935109][ T30] audit: type=1326 audit(1760166698.149:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8665 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25c78eec9 code=0x7ffc0000 [ 277.966109][ T30] audit: type=1326 audit(1760166698.189:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8665 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fc25c78eec9 code=0x7ffc0000 [ 277.988318][ C1] vkms_vblank_simulate: vblank timer overrun [ 277.999304][ T30] audit: type=1326 audit(1760166698.189:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8665 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25c78eec9 code=0x7ffc0000 [ 278.021560][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.030269][ T30] audit: type=1326 audit(1760166698.189:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8665 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc25c78eec9 code=0x7ffc0000 [ 278.054969][ T30] audit: type=1326 audit(1760166698.189:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8665 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25c78eec9 code=0x7ffc0000 [ 278.149270][ T30] audit: type=1326 audit(1760166698.189:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8665 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25c78eec9 code=0x7ffc0000 [ 278.171730][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.214280][ T30] audit: type=1326 audit(1760166698.219:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8665 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc25c78eec9 code=0x7ffc0000 [ 278.236639][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.259575][ T30] audit: type=1326 audit(1760166698.219:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8665 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25c78eec9 code=0x7ffc0000 [ 278.288451][ T30] audit: type=1326 audit(1760166698.219:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8665 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc25c78eec9 code=0x7ffc0000 [ 278.312775][ T30] audit: type=1326 audit(1760166698.219:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8665 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25c78eec9 code=0x7ffc0000 [ 278.360608][ T8670] binder: 8669:8670 ioctl c0306201 200000000040 returned -14 [ 278.419731][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 278.482226][ T8677] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 278.597762][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 278.611072][ T9] usb 5-1: config 0 has no interfaces? [ 278.616605][ T9] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 278.639028][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.652311][ T9] usb 5-1: config 0 descriptor?? [ 278.673743][ T8684] loop2: detected capacity change from 0 to 7 [ 278.680301][ T8554] usb 4-1: device descriptor read/8, error -110 [ 278.690346][ T5830] Dev loop2: unable to read RDB block 7 [ 278.696124][ T5830] loop2: unable to read partition table [ 278.702251][ T5830] loop2: partition table beyond EOD, truncated [ 278.713235][ T8684] Dev loop2: unable to read RDB block 7 [ 278.718977][ T8684] loop2: unable to read partition table [ 278.724984][ T8684] loop2: partition table beyond EOD, truncated [ 278.731357][ T8684] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 278.794157][ T10] usb 4-1: USB disconnect, device number 41 [ 278.944525][ T984] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 278.959051][ T8667] 8021q: VLANs not supported on caif0 [ 279.129231][ T984] usb 1-1: Using ep0 maxpacket: 8 [ 279.140068][ T984] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 279.155065][ T984] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.317360][ T984] usb 1-1: Product: syz [ 279.337526][ T984] usb 1-1: Manufacturer: syz [ 279.360906][ T984] usb 1-1: SerialNumber: syz [ 279.432337][ T984] usb 1-1: config 0 descriptor?? [ 279.647521][ T984] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 279.886315][ T8703] netlink: 136 bytes leftover after parsing attributes in process `syz.3.769'. [ 280.917968][ T8682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.930471][ T8682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.166963][ T8682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.178228][ T9] usb 5-1: USB disconnect, device number 35 [ 281.187784][ T8682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.300040][ T984] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 281.368481][ T984] usb 1-1: USB disconnect, device number 44 [ 281.382795][ T8726] loop2: detected capacity change from 0 to 7 [ 281.393954][ T8726] Dev loop2: unable to read RDB block 7 [ 281.417029][ T8726] loop2: unable to read partition table [ 281.429440][ T8726] loop2: partition table beyond EOD, truncated [ 281.443993][ T8726] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 281.518797][ T5198] Dev loop2: unable to read RDB block 7 [ 281.527601][ T5198] loop2: unable to read partition table [ 281.536455][ T5198] loop2: partition table beyond EOD, truncated [ 281.893717][ T8740] loop6: detected capacity change from 0 to 7 [ 281.901721][ T8740] Dev loop6: unable to read RDB block 7 [ 281.907728][ T8740] loop6: unable to read partition table [ 281.917814][ T8742] netlink: 20 bytes leftover after parsing attributes in process `syz.1.778'. [ 282.000288][ T8740] loop6: partition table beyond EOD, truncated [ 282.008301][ T8740] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 282.889279][ T5921] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 283.073346][ T8762] netlink: 20 bytes leftover after parsing attributes in process `syz.1.787'. [ 283.090411][ T5921] usb 5-1: Using ep0 maxpacket: 8 [ 283.101171][ T5921] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 283.112180][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.314791][ T5921] pvrusb2: Hardware description: Terratec Grabster AV400 [ 283.324792][ T5921] pvrusb2: ********** [ 283.335645][ T5921] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 283.399460][ T5921] pvrusb2: Important functionality might not be entirely working. [ 283.407406][ T5921] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 283.418951][ T5921] pvrusb2: ********** [ 283.572731][ T2344] pvrusb2: Invalid write control endpoint [ 283.812776][ T5921] usb 5-1: USB disconnect, device number 36 [ 284.182323][ T2344] pvrusb2: Invalid write control endpoint [ 284.189226][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 284.255483][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 284.298925][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 284.338650][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 284.368778][ T2344] pvrusb2: Device being rendered inoperable [ 284.376319][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 284.392666][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.406871][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 284.448191][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 284.466657][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 284.509664][ T8785] loop6: detected capacity change from 0 to 7 [ 284.551130][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 284.634009][ T8785] Dev loop6: unable to read RDB block 7 [ 284.634043][ T8785] loop6: unable to read partition table [ 284.634169][ T8785] loop6: partition table beyond EOD, truncated [ 284.634181][ T8785] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 284.665654][ T2344] pvrusb2: Attached sub-driver cx25840 [ 284.665698][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 284.665709][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 284.665760][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 284.665788][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 284.668134][ T9] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 284.668164][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 284.668183][ T9] usb 3-1: Product: syz [ 284.668198][ T9] usb 3-1: Manufacturer: syz [ 284.668213][ T9] usb 3-1: SerialNumber: syz [ 284.671165][ T9] usb 3-1: config 0 descriptor?? [ 284.876942][ T9] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 284.876970][ T9] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 284.877804][ T9] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 284.877827][ T9] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 284.877848][ T9] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 285.169786][ T9] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 285.299224][ T984] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 285.509255][ T984] usb 2-1: Using ep0 maxpacket: 32 [ 285.569601][ T984] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 285.618328][ T984] usb 2-1: config 0 has no interface number 0 [ 285.639319][ T984] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 285.665534][ T984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.683988][ T984] usb 2-1: Product: syz [ 285.703617][ T984] usb 2-1: Manufacturer: syz [ 285.731758][ T984] usb 2-1: SerialNumber: syz [ 285.761235][ T984] usb 2-1: config 0 descriptor?? [ 285.768302][ T984] smsc95xx v2.0.0 [ 286.429716][ T8799] netlink: 68 bytes leftover after parsing attributes in process `syz.1.797'. [ 286.859694][ T9] usb 3-1: USB disconnect, device number 34 [ 287.137357][ T984] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 287.150881][ T984] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 287.184410][ T984] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 287.288496][ T8824] loop6: detected capacity change from 0 to 7 [ 287.305803][ T8824] Dev loop6: unable to read RDB block 7 [ 287.312533][ T8824] loop6: unable to read partition table [ 287.318511][ T8824] loop6: partition table beyond EOD, truncated [ 287.335741][ T8824] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 287.377560][ T8823] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 287.569430][ T984] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 287.645224][ T984] usb 2-1: USB disconnect, device number 47 [ 287.974626][ T8842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.809'. [ 288.831669][ T8847] FAULT_INJECTION: forcing a failure. [ 288.831669][ T8847] name failslab, interval 1, probability 0, space 0, times 0 [ 288.967883][ T8847] CPU: 1 UID: 0 PID: 8847 Comm: syz.0.810 Not tainted syzkaller #0 PREEMPT(full) [ 288.967900][ T8847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 288.967907][ T8847] Call Trace: [ 288.967914][ T8847] [ 288.967919][ T8847] dump_stack_lvl+0x189/0x250 [ 288.967942][ T8847] ? __pfx____ratelimit+0x10/0x10 [ 288.967956][ T8847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.967966][ T8847] ? __pfx__printk+0x10/0x10 [ 288.967978][ T8847] ? __pfx___might_resched+0x10/0x10 [ 288.967990][ T8847] ? fs_reclaim_acquire+0x7d/0x100 [ 288.968009][ T8847] should_fail_ex+0x414/0x560 [ 288.968025][ T8847] should_failslab+0xa8/0x100 [ 288.968036][ T8847] __kmalloc_noprof+0xcb/0x7f0 [ 288.968051][ T8847] ? io_cache_alloc_new+0x40/0x100 [ 288.968065][ T8847] io_cache_alloc_new+0x40/0x100 [ 288.968077][ T8847] __io_prep_rw+0x23f/0xe20 [ 288.968096][ T8847] ? __pfx___io_prep_rw+0x10/0x10 [ 288.968111][ T8847] ? __pfx_io_write+0x10/0x10 [ 288.968128][ T8847] io_prep_rwv+0x91/0x3e0 [ 288.968141][ T8847] ? __io_issue_sqe+0x1f9/0x4b0 [ 288.968154][ T8847] ? __pfx_io_prep_rwv+0x10/0x10 [ 288.968168][ T8847] ? io_issue_sqe+0x417/0x1060 [ 288.968181][ T8847] ? __asan_memset+0x22/0x50 [ 288.968197][ T8847] io_submit_sqes+0x932/0x1e60 [ 288.968226][ T8847] __se_sys_io_uring_enter+0x2df/0x2b20 [ 288.968250][ T8847] ? ksys_write+0x1cb/0x250 [ 288.968266][ T8847] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 288.968278][ T8847] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 288.968293][ T8847] ? __pfx_vfs_write+0x10/0x10 [ 288.968308][ T8847] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 288.968324][ T8847] ? __fget_files+0x3a0/0x420 [ 288.968337][ T8847] ? fput+0xa0/0xd0 [ 288.968349][ T8847] ? ksys_write+0x22a/0x250 [ 288.968364][ T8847] ? __pfx_ksys_write+0x10/0x10 [ 288.968379][ T8847] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 288.968394][ T8847] do_syscall_64+0xfa/0xfa0 [ 288.968409][ T8847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.968418][ T8847] ? asm_sysvec_call_function_single+0x1a/0x20 [ 288.968430][ T8847] ? clear_bhb_loop+0x60/0xb0 [ 288.968451][ T8847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.968469][ T8847] RIP: 0033:0x7ffb6af8eec9 [ 288.968486][ T8847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.968497][ T8847] RSP: 002b:00007ffb6be34038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 288.968509][ T8847] RAX: ffffffffffffffda RBX: 00007ffb6b1e5fa0 RCX: 00007ffb6af8eec9 [ 288.968516][ T8847] RDX: 0000000000000000 RSI: 0000000000003516 RDI: 0000000000000004 [ 288.968523][ T8847] RBP: 00007ffb6be34090 R08: 0000000000000000 R09: 0000000000000000 [ 288.968529][ T8847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 288.968535][ T8847] R13: 00007ffb6b1e6038 R14: 00007ffb6b1e5fa0 R15: 00007ffb6b30fa28 [ 288.968553][ T8847] [ 289.079670][ T8819] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 289.097222][ T5829] Bluetooth: hci0: command 0x0c1a tx timeout [ 289.786230][ T8819] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 289.792742][ T8819] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 289.798966][ T8819] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 289.806615][ T8819] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 290.069642][ T984] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 290.229285][ T5881] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 290.239518][ T984] usb 5-1: Using ep0 maxpacket: 32 [ 290.247817][ T984] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 290.258455][ T984] usb 5-1: config 0 has no interface number 0 [ 290.266892][ T984] usb 5-1: config 0 interface 184 has no altsetting 0 [ 290.309254][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 290.345390][ T8863] pim6reg: entered allmulticast mode [ 290.367434][ T984] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 290.417505][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 290.417522][ T30] audit: type=1800 audit(1760166710.629:2150): pid=8852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.811" name="bus" dev="ramfs" ino=28822 res=0 errno=0 [ 290.418678][ T984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.482211][ T5881] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 290.490674][ T5881] usb 2-1: config 1 has no interface number 0 [ 290.549741][ T5881] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 290.552975][ T984] usb 5-1: Product: syz [ 290.669357][ T984] usb 5-1: Manufacturer: syz [ 290.674481][ T984] usb 5-1: SerialNumber: syz [ 290.681308][ T9] usb 3-1: config 0 has an invalid interface number: 217 but max is 0 [ 290.689826][ T9] usb 3-1: config 0 has no interface number 0 [ 290.697865][ T9] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 290.707575][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.717716][ T984] usb 5-1: config 0 descriptor?? [ 290.728505][ T5881] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 290.734896][ T984] smsc75xx v1.0.0 [ 290.749272][ T9] usb 3-1: Product: syz [ 290.756847][ T9] usb 3-1: Manufacturer: syz [ 290.763803][ T9] usb 3-1: SerialNumber: syz [ 290.801532][ T5881] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.803208][ T9] usb 3-1: config 0 descriptor?? [ 290.820997][ T9] hub 3-1:0.217: bad descriptor, ignoring hub [ 290.830459][ T9] hub 3-1:0.217: probe with driver hub failed with error -5 [ 290.851338][ T5881] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 290.861127][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.879420][ T5881] usb 2-1: Product: syz [ 290.893903][ T5881] usb 2-1: Manufacturer: syz [ 290.912531][ T5881] usb 2-1: SerialNumber: syz [ 290.941498][ T984] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 290.969778][ T984] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 290.990016][ T984] usb 5-1: USB disconnect, device number 37 [ 291.009557][ T8855] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 291.024519][ T9] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 291.078633][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 291.125937][ T9] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 291.143971][ T9] usb 3-1: media controller created [ 291.181868][ T8866] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 291.205719][ T8866] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 291.244779][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 291.254070][ T8855] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 291.319296][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 291.381363][ T9] DVB: Unable to find symbol dib7000p_attach() [ 291.397462][ T9] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 291.485028][ T8855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.529241][ T9] rc_core: IR keymap rc-dib0700-rc5 not found [ 291.533235][ T8855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.535373][ T9] Registered IR keymap rc-empty [ 291.561528][ T5881] usb 2-1: Incompatible driver and firmware versions [ 291.562463][ T9] dvb-usb: could not initialize remote control. [ 291.590549][ T9] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 291.616423][ T9] usb 3-1: USB disconnect, device number 35 [ 291.629281][ T5881] usb 2-1: USB disconnect, device number 48 [ 291.671875][ T9] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 291.884840][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 291.891574][ T5149] Bluetooth: hci2: command 0x0c1a tx timeout [ 291.897857][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout [ 291.957956][ T8884] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 292.106651][ T8886] FAULT_INJECTION: forcing a failure. [ 292.106651][ T8886] name failslab, interval 1, probability 0, space 0, times 0 [ 292.120380][ T8886] CPU: 1 UID: 0 PID: 8886 Comm: syz.2.822 Not tainted syzkaller #0 PREEMPT(full) [ 292.120405][ T8886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 292.120412][ T8886] Call Trace: [ 292.120419][ T8886] [ 292.120424][ T8886] dump_stack_lvl+0x189/0x250 [ 292.120440][ T8886] ? __pfx____ratelimit+0x10/0x10 [ 292.120454][ T8886] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.120465][ T8886] ? __pfx__printk+0x10/0x10 [ 292.120477][ T8886] ? __pfx___might_resched+0x10/0x10 [ 292.120489][ T8886] ? fs_reclaim_acquire+0x7d/0x100 [ 292.120508][ T8886] should_fail_ex+0x414/0x560 [ 292.120524][ T8886] should_failslab+0xa8/0x100 [ 292.120535][ T8886] __kmalloc_noprof+0xcb/0x7f0 [ 292.120554][ T8886] ? io_cache_alloc_new+0x40/0x100 [ 292.120568][ T8886] io_cache_alloc_new+0x40/0x100 [ 292.120580][ T8886] __io_prep_rw+0x23f/0xe20 [ 292.120598][ T8886] ? __pfx___io_prep_rw+0x10/0x10 [ 292.120613][ T8886] ? __pfx_io_write+0x10/0x10 [ 292.120630][ T8886] io_prep_rwv+0x91/0x3e0 [ 292.120643][ T8886] ? __io_issue_sqe+0x1f9/0x4b0 [ 292.120656][ T8886] ? __pfx_io_prep_rwv+0x10/0x10 [ 292.120675][ T8886] ? io_issue_sqe+0x417/0x1060 [ 292.120688][ T8886] ? __asan_memset+0x22/0x50 [ 292.120704][ T8886] io_submit_sqes+0x932/0x1e60 [ 292.120733][ T8886] __se_sys_io_uring_enter+0x2df/0x2b20 [ 292.120757][ T8886] ? ksys_write+0x1cb/0x250 [ 292.120773][ T8886] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 292.120786][ T8886] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 292.120800][ T8886] ? __pfx_vfs_write+0x10/0x10 [ 292.120816][ T8886] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 292.120832][ T8886] ? __fget_files+0x3a0/0x420 [ 292.120845][ T8886] ? fput+0xa0/0xd0 [ 292.120857][ T8886] ? ksys_write+0x22a/0x250 [ 292.120876][ T8886] ? __pfx_ksys_write+0x10/0x10 [ 292.120892][ T8886] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 292.120907][ T8886] do_syscall_64+0xfa/0xfa0 [ 292.120919][ T8886] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.120932][ T8886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.120942][ T8886] ? clear_bhb_loop+0x60/0xb0 [ 292.120954][ T8886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.120964][ T8886] RIP: 0033:0x7f3dc958eec9 [ 292.120974][ T8886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.120983][ T8886] RSP: 002b:00007f3dca4ea038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 292.120995][ T8886] RAX: ffffffffffffffda RBX: 00007f3dc97e5fa0 RCX: 00007f3dc958eec9 [ 292.121003][ T8886] RDX: 0000000000000000 RSI: 0000000000003516 RDI: 0000000000000004 [ 292.121009][ T8886] RBP: 00007f3dca4ea090 R08: 0000000000000000 R09: 0000000000000000 [ 292.121015][ T8886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 292.121021][ T8886] R13: 00007f3dc97e6038 R14: 00007f3dc97e5fa0 R15: 00007f3dc990fa28 [ 292.121038][ T8886] [ 295.079482][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 295.099214][ T8901] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 296.547308][ T8901] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 296.553767][ T8901] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 296.560053][ T8901] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 296.566283][ T8901] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 296.851457][ T8945] sctp: [Deprecated]: syz.1.839 (pid 8945) Use of int in maxseg socket option. [ 296.851457][ T8945] Use struct sctp_assoc_value instead [ 296.860716][ T8944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.838'. [ 296.865840][ T5922] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 296.882776][ T30] audit: type=1326 audit(1760166717.059:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.0.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6af8eec9 code=0x7ffc0000 [ 296.889299][ T8940] nvme_fabrics: missing parameter 'transport=%s' [ 296.926182][ T30] audit: type=1326 audit(1760166717.099:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.0.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb6af8eec9 code=0x7ffc0000 [ 296.976374][ T30] audit: type=1326 audit(1760166717.099:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.0.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6af8eec9 code=0x7ffc0000 [ 296.990313][ T8940] nvme_fabrics: missing parameter 'nqn=%s' [ 297.070854][ T30] audit: type=1326 audit(1760166717.099:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.0.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6af8eec9 code=0x7ffc0000 [ 297.147904][ T5922] usb 4-1: device descriptor read/all, error -71 [ 297.159451][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 297.277082][ T8960] wireguard0: entered promiscuous mode [ 297.291672][ T8960] wireguard0: entered allmulticast mode [ 297.369235][ T5881] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 297.407963][ T8970] netlink: 28 bytes leftover after parsing attributes in process `syz.4.845'. [ 297.489203][ T10] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 297.539219][ T5881] usb 2-1: Using ep0 maxpacket: 8 [ 297.550415][ T5881] usb 2-1: config 0 has an invalid interface number: 250 but max is 0 [ 297.567920][ T5881] usb 2-1: config 0 has no interface number 0 [ 297.574184][ T5922] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 297.593287][ T5881] usb 2-1: New USB device found, idVendor=a168, idProduct=0614, bcdDevice=1b.10 [ 297.602712][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.612661][ T5881] usb 2-1: Product: syz [ 297.616935][ T5881] usb 2-1: Manufacturer: syz [ 297.626007][ T5881] usb 2-1: SerialNumber: syz [ 297.634910][ T5881] usb 2-1: config 0 descriptor?? [ 297.643402][ T10] usb 3-1: config 0 has an invalid interface number: 187 but max is 0 [ 297.645817][ T5881] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0614 [ 297.658745][ T10] usb 3-1: config 0 has no interface number 0 [ 297.665337][ T10] usb 3-1: config 0 interface 187 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 297.678947][ T10] usb 3-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=22.4e [ 297.688578][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=29 [ 297.697506][ T10] usb 3-1: Product: syz [ 297.702452][ T10] usb 3-1: Manufacturer: syz [ 297.707127][ T10] usb 3-1: SerialNumber: syz [ 297.712596][ T8972] netlink: 128 bytes leftover after parsing attributes in process `syz.0.846'. [ 297.726587][ T8972] netlink: 20 bytes leftover after parsing attributes in process `syz.0.846'. [ 297.736858][ T10] usb 3-1: config 0 descriptor?? [ 297.741538][ T5922] usb 4-1: config index 0 descriptor too short (expected 63186, got 210) [ 297.754726][ T8961] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 297.754979][ T5922] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 297.786965][ T5922] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.797726][ T5922] usb 4-1: config 0 has no interface number 0 [ 297.804357][ T5922] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 297.814817][ T5922] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 297.825336][ T5922] usb 4-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 297.840379][ T5922] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 297.854263][ T5881] gspca_sn9c20x: Write register 1000 failed -71 [ 297.862637][ T5881] gspca_sn9c20x: Device initialization failed [ 297.869029][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.877934][ T5881] gspca_sn9c20x 2-1:0.250: probe with driver gspca_sn9c20x failed with error -71 [ 297.896375][ T5922] usb 4-1: config 0 descriptor?? [ 297.917647][ T5881] usb 2-1: USB disconnect, device number 49 [ 297.931012][ T5922] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 298.165207][ T30] audit: type=1326 audit(1760166718.379:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.0.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6af8eec9 code=0x7ffc0000 [ 298.210092][ T30] audit: type=1326 audit(1760166718.379:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.0.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7ffb6af8eec9 code=0x7ffc0000 [ 298.232696][ T30] audit: type=1326 audit(1760166718.379:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.0.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6af8eec9 code=0x7ffc0000 [ 298.259918][ T30] audit: type=1326 audit(1760166718.379:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.0.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffb6af8eec9 code=0x7ffc0000 [ 298.287250][ T30] audit: type=1326 audit(1760166718.379:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.0.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6af8eec9 code=0x7ffc0000 [ 298.311229][ T30] audit: type=1326 audit(1760166718.379:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.0.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffb6af8eec9 code=0x7ffc0000 [ 298.337271][ T12] usb 4-1: Failed to submit usb control message: -71 [ 298.347168][ T10] usb 4-1: USB disconnect, device number 44 [ 298.361179][ T12] usb 4-1: unable to send the bmi data to the device: -71 [ 298.368803][ T12] usb 4-1: unable to get target info from device [ 298.376052][ T12] usb 4-1: could not get target info (-71) [ 298.382223][ T12] usb 4-1: could not probe fw (-71) [ 298.517299][ T8993] IPv6: NLM_F_CREATE should be specified when creating new route [ 298.529409][ T5881] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 298.595680][ T8994] vivid-003: disconnect [ 298.603670][ T8994] vivid-003: reconnect [ 298.609898][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout [ 298.616237][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 298.622479][ T5149] Bluetooth: hci2: command 0x0c1a tx timeout [ 298.689202][ T5881] usb 1-1: Using ep0 maxpacket: 32 [ 298.696324][ T5881] usb 1-1: config 0 has no interfaces? [ 298.705774][ T5881] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 298.715068][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.722411][ T9000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.854'. [ 298.726699][ T5881] usb 1-1: config 0 descriptor?? [ 298.829618][ T10] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 298.889234][ T9] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 298.954750][ T8988] 8021q: VLANs not supported on caif0 [ 298.969324][ T10] usb 4-1: device descriptor read/64, error -71 [ 299.019214][ T9] usb 5-1: device descriptor read/64, error -71 [ 299.159361][ T5881] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 299.209245][ T10] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 299.259217][ T9] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 299.313005][ T5881] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 299.322727][ T5881] usb 2-1: config 0 has no interface number 0 [ 299.328888][ T5881] usb 2-1: config 0 interface 128 altsetting 6 endpoint 0x5 has invalid maxpacket 1024, setting to 1023 [ 299.340788][ T10] usb 4-1: device descriptor read/64, error -71 [ 299.341045][ T5881] usb 2-1: config 0 interface 128 has no altsetting 0 [ 299.356389][ T5881] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 299.366822][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.374950][ T5881] usb 2-1: Product: syz [ 299.379163][ T5881] usb 2-1: Manufacturer: syz [ 299.383764][ T5881] usb 2-1: SerialNumber: syz [ 299.390577][ T5881] usb 2-1: config 0 descriptor?? [ 299.399213][ T9] usb 5-1: device descriptor read/64, error -71 [ 299.460823][ T10] usb usb4-port1: attempt power cycle [ 299.509568][ T9] usb usb5-port1: attempt power cycle [ 299.602127][ T5881] radio-si470x 2-1:0.128: could not find interrupt in endpoint [ 299.609941][ T5881] radio-si470x 2-1:0.128: probe with driver radio-si470x failed with error -5 [ 299.620816][ T5881] usbhid 2-1:0.128: couldn't find an input interrupt endpoint [ 299.635349][ T5881] usb 2-1: USB disconnect, device number 50 [ 299.800340][ T10] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 299.819874][ T10] usb 4-1: device descriptor read/8, error -71 [ 299.849262][ T9] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 299.869957][ T9] usb 5-1: device descriptor read/8, error -71 [ 300.059186][ T10] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 300.082378][ T10] usb 4-1: device descriptor read/8, error -71 [ 300.109256][ T9] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 300.134982][ T9] usb 5-1: device descriptor read/8, error -71 [ 300.174598][ T5881] usb 3-1: USB disconnect, device number 36 [ 300.196661][ T10] usb usb4-port1: unable to enumerate USB device [ 300.250560][ T9] usb usb5-port1: unable to enumerate USB device [ 300.459228][ T5948] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 300.619180][ T5948] usb 2-1: Using ep0 maxpacket: 8 [ 300.632503][ T5948] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.676050][ T5948] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 300.691914][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.705096][ T5948] usb 2-1: Product: syz [ 300.713935][ T5948] usb 2-1: Manufacturer: syz [ 300.724826][ T5948] usb 2-1: SerialNumber: syz [ 300.739818][ T5948] usb 2-1: config 0 descriptor?? [ 300.752338][ T5948] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 300.762127][ T5948] usb 2-1: selecting invalid altsetting 1 [ 301.012108][ T5948] gspca_stk014: init reg: 0x00 [ 301.017173][ T5948] stk014 2-1:0.0: probe with driver stk014 failed with error -5 [ 301.222843][ T5881] usb 2-1: USB disconnect, device number 51 [ 301.239001][ T10] usb 1-1: USB disconnect, device number 45 [ 301.660136][ T9030] loop6: detected capacity change from 0 to 7 [ 301.667791][ T9030] Dev loop6: unable to read RDB block 7 [ 301.674046][ T9030] loop6: unable to read partition table [ 301.680923][ T9030] loop6: partition table beyond EOD, truncated [ 301.691827][ T9030] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 301.978463][ T9033] netlink: 72 bytes leftover after parsing attributes in process `syz.4.863'. [ 302.001572][ T9033] netlink: 72 bytes leftover after parsing attributes in process `syz.4.863'. [ 302.260806][ T5881] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 302.388204][ T9043] loop2: detected capacity change from 0 to 7 [ 302.396805][ T9043] Dev loop2: unable to read RDB block 7 [ 302.404621][ T9043] loop2: unable to read partition table [ 302.411596][ T9043] loop2: partition table beyond EOD, truncated [ 302.428093][ T9043] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 302.457038][ T5198] Dev loop2: unable to read RDB block 7 [ 302.467251][ T5198] loop2: unable to read partition table [ 302.473415][ T5198] loop2: partition table beyond EOD, truncated [ 302.493987][ T5881] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 302.523675][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.550363][ T5881] usb 4-1: Product: syz [ 302.565123][ T5881] usb 4-1: Manufacturer: syz [ 302.576478][ T9047] FAULT_INJECTION: forcing a failure. [ 302.576478][ T9047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.604524][ T5881] usb 4-1: SerialNumber: syz [ 302.623798][ T9047] CPU: 0 UID: 0 PID: 9047 Comm: syz.1.868 Not tainted syzkaller #0 PREEMPT(full) [ 302.623823][ T9047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 302.623836][ T9047] Call Trace: [ 302.623844][ T9047] [ 302.623853][ T9047] dump_stack_lvl+0x189/0x250 [ 302.623879][ T9047] ? __pfx____ratelimit+0x10/0x10 [ 302.623904][ T9047] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.623925][ T9047] ? __pfx__printk+0x10/0x10 [ 302.623958][ T9047] should_fail_ex+0x414/0x560 [ 302.623988][ T9047] _copy_to_user+0x31/0xb0 [ 302.624010][ T9047] bpf_test_finish+0x56f/0x700 [ 302.624042][ T9047] ? __pfx_bpf_test_finish+0x10/0x10 [ 302.624064][ T9047] ? skb_checksum+0x7ba/0x8c0 [ 302.624102][ T9047] bpf_prog_test_run_skb+0xef8/0x1550 [ 302.624142][ T9047] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 302.624168][ T9047] bpf_prog_test_run+0x2c4/0x340 [ 302.624194][ T9047] __sys_bpf+0x562/0x860 [ 302.624215][ T9047] ? __pfx___sys_bpf+0x10/0x10 [ 302.624251][ T9047] ? ksys_write+0x22a/0x250 [ 302.624280][ T9047] ? __pfx_ksys_write+0x10/0x10 [ 302.624313][ T9047] __x64_sys_bpf+0x7c/0x90 [ 302.624342][ T9047] do_syscall_64+0xfa/0xfa0 [ 302.624366][ T9047] ? lockdep_hardirqs_on+0x9c/0x150 [ 302.624391][ T9047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.624410][ T9047] ? clear_bhb_loop+0x60/0xb0 [ 302.624440][ T9047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.624459][ T9047] RIP: 0033:0x7fb6a3d8eec9 [ 302.624477][ T9047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.624494][ T9047] RSP: 002b:00007fb6a4bb8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 302.624516][ T9047] RAX: ffffffffffffffda RBX: 00007fb6a3fe5fa0 RCX: 00007fb6a3d8eec9 [ 302.624531][ T9047] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 302.624544][ T9047] RBP: 00007fb6a4bb8090 R08: 0000000000000000 R09: 0000000000000000 [ 302.624557][ T9047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.624569][ T9047] R13: 00007fb6a3fe6038 R14: 00007fb6a3fe5fa0 R15: 00007fb6a410fa28 [ 302.624602][ T9047] [ 302.853558][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 302.853581][ T30] audit: type=1326 audit(1760166723.059:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9049 comm="syz.4.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25c78eec9 code=0x7ffc0000 [ 302.882113][ C1] vkms_vblank_simulate: vblank timer overrun [ 302.962370][ T30] audit: type=1326 audit(1760166723.069:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9049 comm="syz.4.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25c78eec9 code=0x7ffc0000 [ 302.985478][ T30] audit: type=1326 audit(1760166723.069:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9049 comm="syz.4.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fc25c78eec9 code=0x7ffc0000 [ 303.008757][ T30] audit: type=1326 audit(1760166723.069:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9049 comm="syz.4.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25c78eec9 code=0x7ffc0000 [ 303.033041][ T30] audit: type=1326 audit(1760166723.069:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9049 comm="syz.4.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25c78eec9 code=0x7ffc0000 [ 303.058404][ T30] audit: type=1326 audit(1760166723.069:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9049 comm="syz.4.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc25c78eec9 code=0x7ffc0000 [ 303.090425][ T30] audit: type=1326 audit(1760166723.069:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9049 comm="syz.4.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25c78eec9 code=0x7ffc0000 [ 303.182116][ T30] audit: type=1326 audit(1760166723.069:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9049 comm="syz.4.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25c78eec9 code=0x7ffc0000 [ 303.237550][ T5881] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 303.249908][ T30] audit: type=1326 audit(1760166723.179:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9049 comm="syz.4.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc25c78eec9 code=0x7ffc0000 [ 303.280540][ T30] audit: type=1326 audit(1760166723.179:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9049 comm="syz.4.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25c78eec9 code=0x7ffc0000 [ 303.318038][ T5881] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 303.409233][ T10] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 303.439349][ T5948] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 303.461747][ T5881] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 303.481027][ T5881] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 303.542489][ T9066] IPVS: set_ctl: invalid protocol: 29 172.20.20.187:20004 [ 303.550522][ T9066] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 303.579204][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 303.590406][ T10] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 303.600936][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 303.612119][ T5922] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 303.657973][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 303.718895][ T5948] usb 5-1: Using ep0 maxpacket: 32 [ 303.738211][ T5881] usb 4-1: USB disconnect, device number 49 [ 303.763995][ T5948] usb 5-1: config 0 has no interfaces? [ 303.771459][ T5948] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 303.813428][ T10] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 303.838350][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.871904][ T10] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 303.894315][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 303.920970][ T5948] usb 5-1: config 0 descriptor?? [ 303.926354][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 303.938779][ T5922] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 303.955905][ T10] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 303.979219][ T5922] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 303.997682][ T10] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 304.026287][ T5922] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 304.038439][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 304.057243][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.086752][ T9061] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 304.100010][ T5922] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 304.108300][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 304.155017][ T9051] 8021q: VLANs not supported on caif0 [ 304.174010][ T10] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 304.285468][ T10] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 304.297904][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.306065][ T10] usb 2-1: Product: syz [ 304.310674][ T10] usb 2-1: Manufacturer: syz [ 304.311205][ T9073] loop6: detected capacity change from 0 to 7 [ 304.315290][ T10] usb 2-1: SerialNumber: syz [ 304.355159][ T9073] Dev loop6: unable to read RDB block 7 [ 304.405700][ T9073] loop6: unable to read partition table [ 304.469375][ T9073] loop6: partition table beyond EOD, truncated [ 304.475874][ T9073] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 304.764938][ T10] adutux 2-1:168.0: interrupt endpoints not found [ 304.786062][ T10] usb 2-1: USB disconnect, device number 52 [ 304.826043][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.876'. [ 304.841841][ T9078] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.876'. [ 305.589250][ T10] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 305.691096][ T9093] netlink: 68 bytes leftover after parsing attributes in process `syz.3.878'. [ 305.702193][ T9093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.878'. [ 305.880045][ T9] usb 5-1: USB disconnect, device number 42 [ 305.957008][ T10] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 305.971811][ T10] usb 1-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 305.986545][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 305.998231][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.125157][ T984] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 306.156324][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 306.350646][ T984] usb 2-1: config 0 has an invalid interface number: 151 but max is 1 [ 306.358997][ T984] usb 2-1: config 0 has an invalid descriptor of length 6, skipping remainder of the config [ 306.370318][ T10] usb 1-1: invalid MIDI out EP 0 [ 306.390931][ T984] usb 2-1: config 0 has no interface number 1 [ 306.462532][ T984] usb 2-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 306.515155][ T984] usb 2-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 306.527726][ T984] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 64 [ 306.540496][ T984] usb 2-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 306.639004][ T984] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 124, using maximum allowed: 30 [ 306.683629][ T10] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 306.734020][ T984] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 124 [ 306.777382][ T984] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 306.787320][ T984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.795482][ T984] usb 2-1: Product: syz [ 306.799830][ T984] usb 2-1: Manufacturer: syz [ 306.805151][ T984] usb 2-1: SerialNumber: syz [ 306.817431][ T984] usb 2-1: config 0 descriptor?? [ 306.834962][ T9089] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 306.850851][ T984] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 306.866270][ T984] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 306.913117][ T984] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 307.098589][ T9103] FAULT_INJECTION: forcing a failure. [ 307.098589][ T9103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.123933][ T9103] CPU: 1 UID: 0 PID: 9103 Comm: syz.3.882 Not tainted syzkaller #0 PREEMPT(full) [ 307.123969][ T9103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 307.123992][ T9103] Call Trace: [ 307.124000][ T9103] [ 307.124009][ T9103] dump_stack_lvl+0x189/0x250 [ 307.124034][ T9103] ? __pfx____ratelimit+0x10/0x10 [ 307.124058][ T9103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.124079][ T9103] ? __pfx__printk+0x10/0x10 [ 307.124111][ T9103] should_fail_ex+0x414/0x560 [ 307.124140][ T9103] _copy_to_user+0x31/0xb0 [ 307.124162][ T9103] simple_read_from_buffer+0xe1/0x170 [ 307.124195][ T9103] proc_fail_nth_read+0x1b3/0x220 [ 307.124226][ T9103] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 307.124252][ T9103] ? rw_verify_area+0x2a6/0x4d0 [ 307.124275][ T9103] ? __lock_acquire+0xab9/0xd20 [ 307.124288][ T9103] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 307.124301][ T9103] vfs_read+0x1fd/0xa30 [ 307.124314][ T9103] ? fdget_pos+0x247/0x320 [ 307.124326][ T9103] ? __pfx___mutex_lock+0x10/0x10 [ 307.124340][ T9103] ? __pfx_vfs_read+0x10/0x10 [ 307.124354][ T9103] ? __fget_files+0x2a/0x420 [ 307.124366][ T9103] ? __fget_files+0x3a0/0x420 [ 307.124374][ T9103] ? __fget_files+0x2a/0x420 [ 307.124388][ T9103] ksys_read+0x145/0x250 [ 307.124403][ T9103] ? __pfx_ksys_read+0x10/0x10 [ 307.124419][ T9103] ? do_syscall_64+0xbe/0xfa0 [ 307.124434][ T9103] do_syscall_64+0xfa/0xfa0 [ 307.124446][ T9103] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.124459][ T9103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.124469][ T9103] ? clear_bhb_loop+0x60/0xb0 [ 307.124482][ T9103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.124492][ T9103] RIP: 0033:0x7f435af8d8dc [ 307.124503][ T9103] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 307.124512][ T9103] RSP: 002b:00007f435bede030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 307.124524][ T9103] RAX: ffffffffffffffda RBX: 00007f435b1e5fa0 RCX: 00007f435af8d8dc [ 307.124531][ T9103] RDX: 000000000000000f RSI: 00007f435bede0a0 RDI: 0000000000000005 [ 307.124538][ T9103] RBP: 00007f435bede090 R08: 0000000000000000 R09: 0000000000000000 [ 307.124544][ T9103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 307.124551][ T9103] R13: 00007f435b1e6038 R14: 00007f435b1e5fa0 R15: 00007f435b30fa28 [ 307.124567][ T9103] [ 307.362497][ C1] vkms_vblank_simulate: vblank timer overrun [ 307.382024][ T5948] usb 3-1: USB disconnect, device number 37 [ 307.424791][ T5922] usb 2-1: USB disconnect, device number 53 [ 307.485306][ T9104] bond1: option mode: invalid value (255) [ 307.498440][ T9104] bond1 (unregistering): Released all slaves [ 307.555903][ T9110] loop2: detected capacity change from 0 to 7 [ 307.569948][ T9110] Dev loop2: unable to read RDB block 7 [ 307.579871][ T9110] loop2: AHDI p1 p2 p3 [ 307.606666][ T9110] loop2: partition table partially beyond EOD, truncated [ 307.618798][ T9110] loop2: p1 start 1601398130 is beyond EOD, truncated [ 307.638464][ T9110] loop2: p2 start 1702059890 is beyond EOD, truncated [ 307.685373][ T9108] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 307.769198][ T5881] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 307.945621][ T5881] usb 5-1: Using ep0 maxpacket: 8 [ 307.971387][ T9120] loop6: detected capacity change from 0 to 7 [ 307.991291][ T5881] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 308.001046][ T9120] Dev loop6: unable to read RDB block 7 [ 308.001942][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.014711][ T9120] loop6: unable to read partition table [ 308.022147][ T9120] loop6: partition table beyond EOD, truncated [ 308.028870][ T9120] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 308.073059][ T5881] usb 5-1: Product: syz [ 308.074203][ T984] usb 1-1: USB disconnect, device number 46 [ 308.088111][ T5881] usb 5-1: Manufacturer: syz [ 308.095079][ T5881] usb 5-1: SerialNumber: syz [ 308.113904][ T9122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.887'. [ 308.151081][ T9118] netlink: 20 bytes leftover after parsing attributes in process `syz.2.885'. [ 308.161614][ T5881] usb 5-1: config 0 descriptor?? [ 308.226629][ T9122] netlink: 4400 bytes leftover after parsing attributes in process `syz.1.887'. [ 308.242594][ T5881] gspca_main: sq905-2.14.0 probing 2770:9120 [ 308.520726][ T9133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.890'. [ 308.534188][ T9133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.890'. [ 308.909225][ T5922] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 309.039615][ T5922] usb 4-1: device descriptor read/64, error -71 [ 309.583411][ T5881] gspca_sq905: sq905_read_data: usb_control_msg failed (-110) [ 309.973400][ T5881] sq905 5-1:0.0: probe with driver sq905 failed with error -110 [ 309.979859][ T9154] loop2: detected capacity change from 0 to 7 [ 309.987482][ T5922] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 309.999532][ T9154] Dev loop2: unable to read RDB block 7 [ 310.005117][ T9154] loop2: AHDI p1 p2 p3 [ 310.015636][ T9154] loop2: partition table partially beyond EOD, truncated [ 310.055545][ T9154] loop2: p1 start 1601398130 is beyond EOD, truncated [ 310.087349][ T9154] loop2: p2 start 1702059890 is beyond EOD, truncated [ 310.159737][ T5922] usb 4-1: device descriptor read/64, error -71 [ 310.315105][ T984] usb 5-1: USB disconnect, device number 43 [ 310.337909][ T5922] usb usb4-port1: attempt power cycle [ 310.719173][ T5922] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 310.903604][ T9171] netlink: 20 bytes leftover after parsing attributes in process `syz.0.899'. [ 310.961585][ T984] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 311.013126][ T5922] usb 4-1: device descriptor read/8, error -71 [ 311.099317][ T984] usb 5-1: device descriptor read/64, error -71 [ 311.259193][ T5922] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 311.285756][ T5922] usb 4-1: device descriptor read/8, error -71 [ 311.345953][ T984] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 311.402817][ T5922] usb usb4-port1: unable to enumerate USB device [ 311.519234][ T984] usb 5-1: device descriptor read/64, error -71 [ 311.608223][ T9190] loop2: detected capacity change from 0 to 7 [ 311.628529][ T9190] Dev loop2: unable to read RDB block 7 [ 311.641902][ T984] usb usb5-port1: attempt power cycle [ 311.647053][ T9190] loop2: AHDI p1 p2 p3 [ 311.662443][ T9190] loop2: partition table partially beyond EOD, truncated [ 311.674723][ T9190] loop2: p1 start 1601398130 is beyond EOD, truncated [ 311.692941][ T9190] loop2: p2 start 1702059890 is beyond EOD, truncated [ 311.892448][ T9200] fuse: Bad value for 'rootmode' [ 311.988341][ T9195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.907'. [ 312.099209][ T984] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 312.170653][ T5922] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 312.199684][ T984] usb 5-1: device descriptor read/8, error -71 [ 312.237794][ T9203] tipc: Enabling of bearer rejected, failed to enable media [ 312.329160][ T5922] usb 4-1: device descriptor read/64, error -71 [ 312.449280][ T984] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 312.471486][ T984] usb 5-1: device descriptor read/8, error -71 [ 312.571663][ T5922] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 312.581373][ T984] usb usb5-port1: unable to enumerate USB device [ 312.742611][ T5922] usb 4-1: device descriptor read/64, error -71 [ 312.877208][ T5922] usb usb4-port1: attempt power cycle [ 313.261464][ T5922] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 313.291769][ T5922] usb 4-1: device descriptor read/8, error -71 [ 313.549281][ T5922] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 313.569891][ T5922] usb 4-1: device descriptor read/8, error -71 [ 313.679830][ T5922] usb usb4-port1: unable to enumerate USB device [ 313.875669][ T9226] netlink: 68 bytes leftover after parsing attributes in process `syz.4.916'. [ 313.875853][ T9225] netlink: 68 bytes leftover after parsing attributes in process `syz.4.916'. [ 314.842036][ T9230] FAULT_INJECTION: forcing a failure. [ 314.842036][ T9230] name failslab, interval 1, probability 0, space 0, times 0 [ 314.855068][ T9230] CPU: 1 UID: 0 PID: 9230 Comm: syz.2.917 Not tainted syzkaller #0 PREEMPT(full) [ 314.855115][ T9230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 314.855138][ T9230] Call Trace: [ 314.855153][ T9230] [ 314.855170][ T9230] dump_stack_lvl+0x189/0x250 [ 314.855195][ T9230] ? __pfx____ratelimit+0x10/0x10 [ 314.855219][ T9230] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.855239][ T9230] ? __pfx__printk+0x10/0x10 [ 314.855261][ T9230] ? __pfx_fib_validate_source+0x10/0x10 [ 314.855292][ T9230] should_fail_ex+0x414/0x560 [ 314.855320][ T9230] should_failslab+0xa8/0x100 [ 314.855341][ T9230] kmem_cache_alloc_noprof+0x74/0x6e0 [ 314.855366][ T9230] ? dst_alloc+0x105/0x170 [ 314.855397][ T9230] dst_alloc+0x105/0x170 [ 314.855428][ T9230] ip_route_input_rcu+0x1ec2/0x30d0 [ 314.855472][ T9230] ? __pfx_ip_route_input_rcu+0x10/0x10 [ 314.855531][ T9230] ? ipt_do_table+0x13dd/0x1640 [ 314.855561][ T9230] ? ip_route_input_noref+0x98/0x250 [ 314.855591][ T9230] ip_route_input_noref+0x167/0x250 [ 314.855622][ T9230] ? __pfx_ip_route_input_noref+0x10/0x10 [ 314.855657][ T9230] ? ipt_do_table+0x2a3/0x1640 [ 314.855679][ T9230] ? __pfx_ipt_do_table+0x10/0x10 [ 314.855706][ T9230] ip_rcv_finish_core+0x5af/0x1c00 [ 314.855742][ T9230] ip_rcv_finish+0x14c/0x2f0 [ 314.855768][ T9230] NF_HOOK+0x309/0x3a0 [ 314.855792][ T9230] ? __pfx_ip_rcv_finish+0x10/0x10 [ 314.855813][ T9230] ? NF_HOOK+0x9a/0x3a0 [ 314.855833][ T9230] ? __pfx_NF_HOOK+0x10/0x10 [ 314.855852][ T9230] ? ip_rcv_core+0x7f7/0xd00 [ 314.855876][ T9230] ? __pfx_ip_rcv_finish+0x10/0x10 [ 314.855908][ T9230] ? __pfx_ip_rcv+0x10/0x10 [ 314.855927][ T9230] __netif_receive_skb+0x143/0x380 [ 314.855963][ T9230] ? netif_receive_skb+0x115/0x790 [ 314.855989][ T9230] netif_receive_skb+0x1cb/0x790 [ 314.856016][ T9230] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 314.856038][ T9230] ? __pfx_netif_receive_skb+0x10/0x10 [ 314.856071][ T9230] ? tun_rx_batched+0x160/0x730 [ 314.856092][ T9230] tun_rx_batched+0x1b9/0x730 [ 314.856110][ T9230] ? __lock_acquire+0xab9/0xd20 [ 314.856134][ T9230] ? __pfx_tun_rx_batched+0x10/0x10 [ 314.856156][ T9230] ? tun_get_user+0x272f/0x3e90 [ 314.856189][ T9230] tun_get_user+0x2b65/0x3e90 [ 314.856215][ T9230] ? tun_get_user+0x6f6/0x3e90 [ 314.856234][ T9230] ? tun_get_user+0x272f/0x3e90 [ 314.856255][ T9230] ? aa_file_perm+0x44d/0x1550 [ 314.856284][ T9230] ? __pfx_tun_get_user+0x10/0x10 [ 314.856314][ T9230] ? __lock_acquire+0xab9/0xd20 [ 314.856338][ T9230] ? ref_tracker_alloc+0x318/0x460 [ 314.856361][ T9230] ? __lock_acquire+0xab9/0xd20 [ 314.856381][ T9230] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 314.856413][ T9230] ? tun_get+0x1c/0x2f0 [ 314.856455][ T9230] ? tun_get+0x1c/0x2f0 [ 314.856483][ T9230] ? tun_get+0x1c/0x2f0 [ 314.856522][ T9230] tun_chr_write_iter+0x113/0x200 [ 314.856555][ T9230] vfs_write+0x5c9/0xb30 [ 314.856587][ T9230] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 314.856617][ T9230] ? __pfx_vfs_write+0x10/0x10 [ 314.856655][ T9230] ? __fget_files+0x2a/0x420 [ 314.856682][ T9230] ksys_write+0x145/0x250 [ 314.856710][ T9230] ? __pfx_ksys_write+0x10/0x10 [ 314.856741][ T9230] ? do_syscall_64+0xbe/0xfa0 [ 314.856770][ T9230] do_syscall_64+0xfa/0xfa0 [ 314.856793][ T9230] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.856817][ T9230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.856837][ T9230] ? clear_bhb_loop+0x60/0xb0 [ 314.856861][ T9230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.856880][ T9230] RIP: 0033:0x7f3dc958d97f [ 314.856898][ T9230] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 314.856915][ T9230] RSP: 002b:00007f3dca4ea000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 314.856936][ T9230] RAX: ffffffffffffffda RBX: 00007f3dc97e5fa0 RCX: 00007f3dc958d97f [ 314.856951][ T9230] RDX: 0000000000000042 RSI: 00002000000000c0 RDI: 00000000000000c8 [ 314.856963][ T9230] RBP: 00007f3dca4ea090 R08: 0000000000000000 R09: 0000000000000000 [ 314.856976][ T9230] R10: 0000000000000042 R11: 0000000000000293 R12: 0000000000000001 [ 314.856988][ T9230] R13: 00007f3dc97e6038 R14: 00007f3dc97e5fa0 R15: 00007f3dc990fa28 [ 314.857020][ T9230] [ 315.268401][ T9213] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 315.275646][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 315.397222][ T9213] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 315.404640][ T9213] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 315.411201][ T9213] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 315.417342][ T9213] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 315.826121][ T9246] loop2: detected capacity change from 0 to 7 [ 315.852361][ T9246] Dev loop2: unable to read RDB block 7 [ 315.878051][ T9246] loop2: AHDI p1 p2 p3 [ 315.890671][ T9246] loop2: partition table partially beyond EOD, truncated [ 315.918836][ T9246] loop2: p1 start 1601398130 is beyond EOD, truncated [ 315.928654][ T9246] loop2: p2 start 1702059890 is beyond EOD, truncated [ 316.155730][ T9256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.921'. [ 316.166049][ T984] usb 4-1: new low-speed USB device number 58 using dummy_hcd [ 316.319173][ T10] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 316.377271][ T984] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 252, changing to 4 [ 316.409208][ T984] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0 [ 316.497681][ T9256] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 316.561737][ T984] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 4 [ 316.575090][ T984] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 511, setting to 0 [ 316.617162][ T10] usb 3-1: device descriptor read/64, error -71 [ 316.809384][ T9267] input: syz0 as /devices/virtual/input/input19 [ 316.859520][ T10] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 317.012167][ T10] usb 3-1: device descriptor read/64, error -71 [ 317.120194][ T10] usb usb3-port1: attempt power cycle [ 317.242633][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.249107][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.319500][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 317.459157][ T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 317.479606][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout [ 317.488453][ T5149] Bluetooth: hci3: command 0x0c1a tx timeout [ 317.494649][ T5149] Bluetooth: hci2: command 0x0c1a tx timeout [ 317.529833][ T10] usb 3-1: device descriptor read/8, error -71 [ 317.716776][ T9282] FAULT_INJECTION: forcing a failure. [ 317.716776][ T9282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.769200][ T10] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 317.800070][ T10] usb 3-1: device descriptor read/8, error -71 [ 317.807223][ T9282] CPU: 1 UID: 0 PID: 9282 Comm: syz.0.929 Not tainted syzkaller #0 PREEMPT(full) [ 317.807256][ T9282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 317.807268][ T9282] Call Trace: [ 317.807276][ T9282] [ 317.807284][ T9282] dump_stack_lvl+0x189/0x250 [ 317.807311][ T9282] ? __pfx____ratelimit+0x10/0x10 [ 317.807335][ T9282] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.807356][ T9282] ? __pfx__printk+0x10/0x10 [ 317.807377][ T9282] ? __might_fault+0xb0/0x130 [ 317.807416][ T9282] should_fail_ex+0x414/0x560 [ 317.807444][ T9282] _copy_from_user+0x2d/0xb0 [ 317.807465][ T9282] kstrtouint_from_user+0xc4/0x170 [ 317.807494][ T9282] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 317.807535][ T9282] proc_fail_nth_write+0x88/0x200 [ 317.807560][ T9282] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 317.807590][ T9282] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 317.807616][ T9282] vfs_write+0x27e/0xb30 [ 317.807650][ T9282] ? __pfx_vfs_write+0x10/0x10 [ 317.807678][ T9282] ? __fget_files+0x2a/0x420 [ 317.807700][ T9282] ? __fget_files+0x3a0/0x420 [ 317.807717][ T9282] ? __fget_files+0x2a/0x420 [ 317.807743][ T9282] ksys_write+0x145/0x250 [ 317.807772][ T9282] ? __pfx_ksys_write+0x10/0x10 [ 317.807803][ T9282] ? do_syscall_64+0xbe/0xfa0 [ 317.807832][ T9282] do_syscall_64+0xfa/0xfa0 [ 317.807855][ T9282] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.807879][ T9282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.807899][ T9282] ? clear_bhb_loop+0x60/0xb0 [ 317.807923][ T9282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.807942][ T9282] RIP: 0033:0x7ffb6af8d97f [ 317.807960][ T9282] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 317.807977][ T9282] RSP: 002b:00007ffb6be34030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 317.807997][ T9282] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ffb6af8d97f [ 317.808012][ T9282] RDX: 0000000000000001 RSI: 00007ffb6be340a0 RDI: 0000000000000003 [ 317.808024][ T9282] RBP: 00007ffb6be34090 R08: 0000000000000000 R09: 0000000000000000 [ 317.808036][ T9282] R10: 0000000000000042 R11: 0000000000000293 R12: 0000000000000001 [ 317.808049][ T9282] R13: 00007ffb6b1e6038 R14: 00007ffb6b1e5fa0 R15: 00007ffb6b30fa28 [ 317.808083][ T9282] [ 318.040314][ T10] usb usb3-port1: unable to enumerate USB device [ 318.907727][ T984] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 318.927323][ T984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.952243][ T984] usb 4-1: Product: ﳿ [ 318.969241][ T984] usb 4-1: Manufacturer: 澌䓢㪉滌᪾⽏㲓숝់⊎낅䛠粨呒앓Ⓨ민逖ꤾ嘥 [ 319.124510][ T984] usb 4-1: can't set config #1, error -71 [ 319.166291][ T984] usb 4-1: USB disconnect, device number 58 [ 319.239200][ T5149] Bluetooth: hci0: command 0x0c1a tx timeout [ 319.253585][ T5922] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 319.273537][ T5922] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 319.415945][ T9319] loop2: detected capacity change from 0 to 7 [ 319.464468][ T9319] Dev loop2: unable to read RDB block 7 [ 319.527780][ T9319] loop2: AHDI p1 p2 p3 [ 319.541411][ T9319] loop2: partition table partially beyond EOD, truncated [ 319.556971][ T9319] loop2: p1 start 1601398130 is beyond EOD, truncated [ 319.572472][ T9319] loop2: p2 start 1702059890 is beyond EOD, truncated [ 319.795302][ T9334] netlink: 'syz.2.938': attribute type 21 has an invalid length. [ 320.008948][ T9331] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.044796][ T9340] vim2m vim2m.0: vidioc_s_fmt queue busy [ 320.106460][ T9331] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 320.140903][ T9334] netlink: 'syz.2.938': attribute type 6 has an invalid length. [ 320.250169][ T9334] netlink: 132 bytes leftover after parsing attributes in process `syz.2.938'. [ 320.439428][ T5149] Bluetooth: hci4: command 0x0c1a tx timeout [ 320.519904][ T9298] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 320.530443][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 320.871088][ T9348] loop2: detected capacity change from 0 to 7 [ 320.881107][ T5830] Dev loop2: unable to read RDB block 7 [ 320.886826][ T5830] loop2: unable to read partition table [ 320.894792][ T5830] loop2: partition table beyond EOD, truncated [ 320.908131][ T9348] Dev loop2: unable to read RDB block 7 [ 320.914283][ T9348] loop2: unable to read partition table [ 320.922343][ T9348] loop2: partition table beyond EOD, truncated [ 320.947509][ T9348] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 321.186220][ T9298] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 321.193356][ T9298] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 321.200568][ T9298] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 321.645356][ T984] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 321.809255][ T984] usb 5-1: Using ep0 maxpacket: 32 [ 321.816490][ T984] usb 5-1: too many endpoints for config 64 interface 0 altsetting 8: 33, using maximum allowed: 30 [ 321.859943][ T984] usb 5-1: config 64 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.922350][ T984] usb 5-1: config 64 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.950818][ T984] usb 5-1: config 64 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 322.028144][ T984] usb 5-1: config 64 interface 0 has no altsetting 0 [ 322.153994][ T984] usb 5-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 322.203990][ T984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.606889][ T9388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.623226][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 322.630003][ T5922] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 322.630009][ T5149] Bluetooth: hci2: command 0x0c1a tx timeout [ 322.642726][ T9388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.686356][ T5922] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 322.708416][ T984] hid_parser_main: 2 callbacks suppressed [ 322.708437][ T984] hid-rmi 0003:17EF:6085.0013: unknown main item tag 0x0 [ 322.735208][ T984] hid-rmi 0003:17EF:6085.0013: unknown main item tag 0x0 [ 322.749977][ T984] hid-rmi 0003:17EF:6085.0013: unknown main item tag 0x0 [ 322.779287][ T984] hid-rmi 0003:17EF:6085.0013: unknown main item tag 0x0 [ 322.786590][ T984] hid-rmi 0003:17EF:6085.0013: unknown main item tag 0x0 [ 322.804270][ T984] hid-rmi 0003:17EF:6085.0013: hidraw0: USB HID v0.00 Device [HID 17ef:6085] on usb-dummy_hcd.4-1/input0 [ 322.924562][ T984] usb 5-1: USB disconnect, device number 48 [ 323.239229][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 323.245297][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 323.616527][ T9412] dvmrp0: entered allmulticast mode [ 323.707180][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 323.707195][ T30] audit: type=1400 audit(1760166743.919:2183): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=9410 comm="syz.4.951" [ 324.299160][ T5881] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 324.459183][ T5881] usb 3-1: Using ep0 maxpacket: 16 [ 324.468108][ T5881] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 324.477725][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.502736][ T5881] usb 3-1: Product: syz [ 324.507038][ T5881] usb 3-1: Manufacturer: syz [ 324.512015][ T5881] usb 3-1: SerialNumber: syz [ 324.526825][ T5881] usb 3-1: config 0 descriptor?? [ 324.534114][ T5881] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 324.769994][ T5149] Bluetooth: hci2: command 0x0c1a tx timeout [ 324.781578][ T5922] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 324.793415][ T5922] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 325.071440][ T5881] usb 3-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 325.797919][ T9454] fuse: Bad value for 'fd' [ 326.439715][ T5149] Bluetooth: hci4: command 0x0c1a tx timeout [ 326.599176][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 326.607232][ T9431] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 327.892277][ T9431] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 328.049758][ T5921] usb 3-1: USB disconnect, device number 42 [ 328.118008][ T5921] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 328.140436][ T5921] visor 3-1:0.0: device disconnected [ 328.192914][ T5881] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 328.681265][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 328.690396][ T5922] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 328.696622][ T5922] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 330.519221][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 330.525414][ T9480] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 330.779193][ T5881] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 330.789232][ T10] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 330.796957][ T984] usb 4-1: new low-speed USB device number 60 using dummy_hcd [ 330.929253][ T5881] usb 5-1: Using ep0 maxpacket: 16 [ 330.936590][ T5881] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 330.948333][ T5881] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 330.957526][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.965618][ T5881] usb 5-1: Product: syz [ 330.969825][ T9] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 330.969868][ T5881] usb 5-1: Manufacturer: syz [ 330.982041][ T5881] usb 5-1: SerialNumber: syz [ 330.986933][ T984] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 330.996901][ T5881] usb 5-1: config 0 descriptor?? [ 330.997330][ T10] usb 1-1: config 0 has an invalid interface number: 39 but max is 0 [ 331.015561][ T984] usb 4-1: config 0 has no interface number 0 [ 331.016430][ T5881] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 331.022813][ T984] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 331.034218][ T5881] usb 5-1: Detected FT232R [ 331.045725][ T10] usb 1-1: config 0 has no interface number 0 [ 331.052224][ T10] usb 1-1: config 0 interface 39 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 331.062386][ T984] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 331.076463][ T984] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 331.086147][ T10] usb 1-1: New USB device found, idVendor=0499, idProduct=4d3f, bcdDevice=d2.2a [ 331.096687][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.104830][ T984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.114282][ T10] usb 1-1: Product: syz [ 331.121125][ T984] usb 4-1: config 0 descriptor?? [ 331.121332][ T10] usb 1-1: Manufacturer: syz [ 331.131191][ T10] usb 1-1: SerialNumber: syz [ 331.136509][ T9487] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 331.139458][ T10] usb 1-1: config 0 descriptor?? [ 331.150052][ T9] usb 3-1: device descriptor read/64, error -71 [ 331.159907][ T984] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 331.235409][ T5881] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 331.254786][ T9501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.257872][ T10] usb 1-1: USB disconnect, device number 47 [ 331.283533][ T9501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.307562][ T5881] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 331.334811][ T6817] udevd[6817]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.39/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 331.353929][ T30] audit: type=1326 audit(1760166751.569:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9503 comm="syz.0.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6af8eec9 code=0x7ffc0000 [ 331.399305][ T5881] usb 4-1: USB disconnect, device number 60 [ 331.407790][ T30] audit: type=1326 audit(1760166751.599:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9503 comm="syz.0.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7ffb6af8eec9 code=0x7ffc0000 [ 331.440371][ T30] audit: type=1326 audit(1760166751.599:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9503 comm="syz.0.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6af8eec9 code=0x7ffc0000 [ 331.464448][ T9] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 331.476038][ T30] audit: type=1326 audit(1760166751.599:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9503 comm="syz.0.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffb6af8eec9 code=0x7ffc0000 [ 331.518256][ T10] usb 5-1: USB disconnect, device number 49 [ 331.535943][ T30] audit: type=1326 audit(1760166751.599:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9503 comm="syz.0.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6af8eec9 code=0x7ffc0000 [ 331.577173][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 331.590354][ T30] audit: type=1326 audit(1760166751.599:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9503 comm="syz.0.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffb6af8eec9 code=0x7ffc0000 [ 331.615317][ T10] ftdi_sio 5-1:0.0: device disconnected [ 331.625406][ T30] audit: type=1326 audit(1760166751.599:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9503 comm="syz.0.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6af8eec9 code=0x7ffc0000 [ 331.649059][ T9] usb 3-1: device descriptor read/64, error -71 [ 331.657396][ T30] audit: type=1326 audit(1760166751.599:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9503 comm="syz.0.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffb6af8eec9 code=0x7ffc0000 [ 331.684423][ T30] audit: type=1326 audit(1760166751.599:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9503 comm="syz.0.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6af8eec9 code=0x7ffc0000 [ 331.708474][ T30] audit: type=1326 audit(1760166751.599:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9503 comm="syz.0.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6af8eec9 code=0x7ffc0000 [ 331.759610][ T9] usb usb3-port1: attempt power cycle [ 331.819206][ T2151] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 331.969347][ T2151] usb 1-1: Using ep0 maxpacket: 32 [ 332.015921][ T2151] usb 1-1: config 0 has no interfaces? [ 332.021489][ T2151] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 332.067368][ T2151] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.078268][ T2151] usb 1-1: config 0 descriptor?? [ 332.142278][ T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 332.171403][ T9] usb 3-1: device descriptor read/8, error -71 [ 332.301860][ T9505] 8021q: VLANs not supported on caif0 [ 332.410362][ T2151] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 332.410400][ T9] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 332.450212][ T9] usb 3-1: device descriptor read/8, error -71 [ 332.559429][ T9] usb usb3-port1: unable to enumerate USB device [ 332.579194][ T2151] usb 5-1: Using ep0 maxpacket: 16 [ 332.587990][ T2151] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 332.598030][ T2151] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.613736][ T5149] Bluetooth: hci4: command 0x0c1a tx timeout [ 332.614644][ T5922] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 332.627854][ T5922] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 332.636048][ T2151] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 332.656405][ T2151] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 332.666479][ T2151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.675156][ T2151] usb 5-1: Product: syz [ 332.680495][ T2151] usb 5-1: Manufacturer: syz [ 332.691508][ T2151] usb 5-1: SerialNumber: syz [ 333.113998][ T9519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.122832][ T9519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.132949][ T9519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.141766][ T9519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.352493][ T9519] netlink: 16 bytes leftover after parsing attributes in process `syz.4.972'. [ 333.367491][ T2151] usb 5-1: 0:2 : does not exist [ 333.379641][ T2151] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 333.408910][ T2151] usb 5-1: USB disconnect, device number 50 [ 333.418585][ T9531] [U]  [ 333.435620][ T5830] udevd[5830]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory [ 333.447199][ T5830] udevd[5830]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 334.483249][ T10] usb 1-1: USB disconnect, device number 48 [ 334.527580][ T9568] netlink: 40 bytes leftover after parsing attributes in process `syz.2.988'. [ 334.563981][ T9568] bridge0: port 1(syz_tun) entered blocking state [ 334.575703][ T9568] bridge0: port 1(syz_tun) entered disabled state [ 334.585983][ T9568] syz_tun: entered allmulticast mode [ 334.597455][ T9568] syz_tun: entered promiscuous mode [ 334.603367][ T9568] bridge0: port 1(syz_tun) entered blocking state [ 334.610213][ T9568] bridge0: port 1(syz_tun) entered forwarding state [ 334.679172][ T5149] Bluetooth: hci4: command 0x0c1a tx timeout [ 334.819733][ T2151] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 334.894442][ T10] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 335.040230][ T9581] trusted_key: encrypted_key: master key parameter 'sbiWlCҠ0bBaޱTgwHX}\hpzc+taGqvb@N%%ay' is invalid [ 335.077372][ T2151] usb 4-1: config 0 has an invalid interface number: 138 but max is 0 [ 335.102327][ T2151] usb 4-1: config 0 has no interface number 0 [ 335.116639][ T2151] usb 4-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 335.131067][ T2151] usb 4-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x97, changing to 0x87 [ 335.131635][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.296621][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 335.307321][ T10] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 335.317011][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.318075][ T2151] usb 4-1: config 0 interface 138 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 335.365767][ T2151] usb 4-1: config 0 interface 138 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 335.376309][ T2151] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= f.66 [ 335.385949][ T2151] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.391076][ T10] usb 1-1: config 0 descriptor?? [ 335.415080][ T2151] usb 4-1: config 0 descriptor?? [ 335.429171][ T5895] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 335.590087][ T5895] usb 2-1: Using ep0 maxpacket: 16 [ 335.598600][ T5895] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 335.643807][ T2151] usb 4-1: string descriptor 0 read error: -71 [ 335.644630][ T5895] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 335.653509][ T2151] usbtest 4-1:0.138: Linux gadget zero [ 335.659691][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.673720][ T2151] usbtest 4-1:0.138: full-speed {control in/out bulk-out int-in} tests (+alt) [ 335.705086][ T2151] usb 4-1: USB disconnect, device number 61 [ 335.751038][ T5895] usb 2-1: Product: syz [ 335.755371][ T5895] usb 2-1: Manufacturer: syz [ 335.760279][ T5895] usb 2-1: SerialNumber: syz [ 335.767597][ T5895] usb 2-1: config 0 descriptor?? [ 335.806640][ T5895] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 335.834028][ T5895] usb 2-1: Detected FT232R [ 335.933255][ T10] Bluetooth: Can't get version to change to load ram patch err [ 335.941375][ T10] Bluetooth: Loading patch file failed [ 335.999190][ T5895] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 336.123517][ T10] ath3k 1-1:0.0: probe with driver ath3k failed with error -71 [ 336.164014][ T10] usb 1-1: USB disconnect, device number 49 [ 336.291616][ T9585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.316195][ T9585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.336062][ T5895] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 336.575555][ T5895] usb 2-1: USB disconnect, device number 54 [ 336.585535][ T5895] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 336.628881][ T5895] ftdi_sio 2-1:0.0: device disconnected [ 336.839245][ T5922] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 337.001666][ T5922] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 337.010057][ T5922] usb 1-1: can't read configurations, error -22 [ 337.169460][ T5922] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 337.353300][ T5922] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 337.362162][ T5922] usb 1-1: can't read configurations, error -22 [ 337.397038][ T5922] usb usb1-port1: attempt power cycle [ 337.469523][ T9629] trusted_key: syz.4.1006 sent an empty control message without MSG_MORE. [ 337.829433][ T5922] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 337.930977][ T5922] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 337.939310][ T5922] usb 1-1: can't read configurations, error -22 [ 338.008726][ T9632] netlink: 'syz.3.998': attribute type 12 has an invalid length. [ 338.079314][ T5922] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 338.102509][ T5922] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 338.112859][ T5922] usb 1-1: can't read configurations, error -22 [ 338.184357][ T5922] usb usb1-port1: unable to enumerate USB device [ 338.272118][ T9638] fuse: Bad value for 'fd' [ 338.410211][ T5922] IPVS: starting estimator thread 0... [ 338.552130][ T9641] IPVS: using max 25 ests per chain, 60000 per kthread [ 338.718654][ T9646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1008'. [ 338.744644][ T9644] veth1_to_bond: entered allmulticast mode [ 338.930410][ T9646] bond0: (slave bond_slave_1): Releasing backup interface [ 339.081006][ T9646] veth1_to_bond (unregistering): left allmulticast mode [ 339.723104][ T9658] syzkaller1: entered promiscuous mode [ 339.728787][ T9658] syzkaller1: entered allmulticast mode [ 340.349514][ T5895] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 340.549158][ T5895] usb 1-1: Using ep0 maxpacket: 32 [ 340.559933][ T5895] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 340.573082][ T5895] usb 1-1: config 0 has no interface number 0 [ 340.589243][ T5895] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 340.619839][ T5895] usb 1-1: config 0 interface 1 has no altsetting 0 [ 340.670412][ T5895] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 340.689170][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.714238][ T5895] usb 1-1: Product: syz [ 340.718524][ T5895] usb 1-1: Manufacturer: syz [ 340.764317][ T5895] usb 1-1: SerialNumber: syz [ 340.788523][ T5895] usb 1-1: config 0 descriptor?? [ 341.037363][ T5895] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 341.051355][ T5895] cx231xx 1-1:0.1: Failed to read PCB config [ 341.109223][ T5895] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 341.120312][ T5895] usb 1-1: USB disconnect, device number 54 [ 341.669429][ T5895] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 341.820520][ T5895] usb 1-1: Using ep0 maxpacket: 32 [ 341.836341][ T5895] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 341.853589][ T5895] usb 1-1: config 0 has no interface number 0 [ 341.869223][ T5895] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 341.880103][ T5895] usb 1-1: config 0 interface 1 has no altsetting 0 [ 342.072688][ T9695] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 342.157031][ T5918] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 342.172288][ T5895] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 342.205505][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.228157][ T5895] usb 1-1: Product: syz [ 342.244689][ T5895] usb 1-1: Manufacturer: syz [ 342.249811][ T5895] usb 1-1: SerialNumber: syz [ 342.311206][ T5918] usb 4-1: device descriptor read/64, error -71 [ 342.348168][ T5895] usb 1-1: config 0 descriptor?? [ 342.511818][ T9702] syzkaller0: entered promiscuous mode [ 342.521505][ T9702] syzkaller0: entered allmulticast mode [ 342.530237][ T9701] tipc: Started in network mode [ 342.535681][ T9701] tipc: Node identity 8a42c0f065f2, cluster identity 4711 [ 342.611120][ T5918] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 342.663011][ T5895] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 342.680023][ T9701] tipc: Enabled bearer , priority 0 [ 342.687818][ T5895] cx231xx 1-1:0.1: bad scenario!!!!! [ 342.687818][ T5895] config_info=0 [ 342.707398][ T5895] cx231xx 1-1:0.1: Failed to read PCB config [ 342.779208][ T5918] usb 4-1: device descriptor read/64, error -71 [ 342.899683][ T5918] usb usb4-port1: attempt power cycle [ 343.131984][ T9717] netlink: 'syz.2.1024': attribute type 12 has an invalid length. [ 343.269157][ T5918] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 343.289903][ T5918] usb 4-1: device descriptor read/8, error -71 [ 343.531466][ T5918] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 343.580797][ T5918] usb 4-1: device descriptor read/8, error -71 [ 343.692585][ T5918] usb usb4-port1: unable to enumerate USB device [ 343.821307][ T2151] tipc: Node number set to 4021338352 [ 344.113474][ T2151] usb 1-1: USB disconnect, device number 55 [ 344.154964][ T9724] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 344.495991][ T9741] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1034'. [ 344.660328][ T9741] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1034'. [ 344.699120][ T5895] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 344.869835][ T5895] usb 5-1: Using ep0 maxpacket: 8 [ 344.881320][ T5895] usb 5-1: config 0 has an invalid interface number: 122 but max is 0 [ 344.890975][ T5895] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.904345][ T5895] usb 5-1: config 0 has no interface number 0 [ 344.911506][ T5895] usb 5-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 344.927233][ T5895] usb 5-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 344.938977][ T5895] usb 5-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023 [ 344.951686][ T5895] usb 5-1: config 0 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 344.965413][ T9749] xt_l2tp: wrong L2TP version: 0 [ 344.994901][ T5895] usb 5-1: config 0 interface 122 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 345.050683][ T5895] usb 5-1: config 0 interface 122 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 345.087503][ T5895] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 345.119687][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.135773][ T5895] usb 5-1: Product: syz [ 345.162337][ T5895] usb 5-1: Manufacturer: syz [ 345.178843][ T5895] usb 5-1: SerialNumber: syz [ 345.203886][ T5895] usb 5-1: config 0 descriptor?? [ 345.227203][ T9738] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 345.236185][ T9738] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 345.475058][ T9744] vivid-007: ================= START STATUS ================= [ 345.483295][ T9744] vivid-007: Enable Output Cropping: true [ 345.489355][ T9744] vivid-007: Enable Output Composing: true [ 345.495330][ T9744] vivid-007: Enable Output Scaler: true [ 345.524918][ T9744] vivid-007: Tx RGB Quantization Range: Automatic [ 345.532701][ T9744] vivid-007: Transmit Mode: HDMI [ 345.538120][ T9744] vivid-007: Hotplug Present: 0x00000000 [ 345.550809][ T9744] vivid-007: RxSense Present: 0x00000000 [ 345.556561][ T9744] vivid-007: EDID Present: 0x00000000 [ 345.562326][ T9744] vivid-007: ================== END STATUS ================== [ 345.601833][ T9738] pim6reg9: entered allmulticast mode [ 345.902303][ T2151] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 345.934128][ T9753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1035'. [ 345.969312][ T5922] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 346.066420][ T9757] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 346.123775][ T2151] usb 2-1: Using ep0 maxpacket: 16 [ 346.170330][ T2151] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.180535][ T5922] usb 3-1: config 0 has no interfaces? [ 346.208168][ T5922] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 346.219152][ T2151] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 346.271608][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.281477][ T2151] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.290031][ T5895] usb 5-1: NFC: intf ffff88807d3a7000 id ffffffff8eb1e280 [ 346.306700][ T5922] usb 3-1: Product: syz [ 346.340659][ T5922] usb 3-1: Manufacturer: syz [ 346.345289][ T5922] usb 3-1: SerialNumber: syz [ 346.405849][ T2151] usb 2-1: config 0 descriptor?? [ 346.406632][ T5895] nfcmrvl 5-1:0.122: NFC: registered with nci successfully [ 346.609559][ T5895] usb 5-1: USB disconnect, device number 51 [ 346.625793][ T5922] usb 3-1: config 0 descriptor?? [ 346.644137][ T5895] usb 5-1: NFC: intf ffff88807d3a7000 [ 346.947097][ T2151] kye 0003:0458:5011.0014: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 346.982835][ T2151] kye 0003:0458:5011.0014: unknown main item tag 0x7 [ 347.058531][ T2151] kye 0003:0458:5011.0014: hidraw0: USB HID v0.0b Device [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 347.096625][ T2151] kye 0003:0458:5011.0014: tablet-enabling feature report not found [ 347.118635][ T2151] kye 0003:0458:5011.0014: tablet enabling failed [ 347.266391][ T984] usb 2-1: USB disconnect, device number 55 [ 347.331052][ T9774] fido_id[9774]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 347.511139][ T9778] [ 347.513500][ T9778] ============================================ [ 347.519628][ T9778] WARNING: possible recursive locking detected [ 347.525776][ T9778] syzkaller #0 Not tainted [ 347.530166][ T9778] -------------------------------------------- [ 347.536291][ T9778] syz.4.1041/9778 is trying to acquire lock: [ 347.542247][ T9778] ffff88807bcccd30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __netdev_update_features+0xcb1/0x1be0 [ 347.553198][ T9778] [ 347.553198][ T9778] but task is already holding lock: [ 347.560542][ T9778] ffff88807bcccd30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19c0 [ 347.570374][ T9778] and the lock comparison function returns 0: [ 347.576425][ T9778] [ 347.576425][ T9778] other info that might help us debug this: [ 347.584467][ T9778] Possible unsafe locking scenario: [ 347.584467][ T9778] [ 347.591914][ T9778] CPU0 [ 347.595175][ T9778] ---- [ 347.598428][ T9778] lock(&dev_instance_lock_key#20); [ 347.603720][ T9778] lock(&dev_instance_lock_key#20); [ 347.608990][ T9778] [ 347.608990][ T9778] *** DEADLOCK *** [ 347.608990][ T9778] [ 347.617136][ T9778] May be due to missing lock nesting notation [ 347.617136][ T9778] [ 347.625543][ T9778] 2 locks held by syz.4.1041/9778: [ 347.630649][ T9778] #0: ffffffff8f4dfb88 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x19c0 [ 347.639952][ T9778] #1: ffff88807bcccd30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19c0 [ 347.650221][ T9778] [ 347.650221][ T9778] stack backtrace: [ 347.656095][ T9778] CPU: 0 UID: 0 PID: 9778 Comm: syz.4.1041 Not tainted syzkaller #0 PREEMPT(full) [ 347.656115][ T9778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 347.656122][ T9778] Call Trace: [ 347.656128][ T9778] [ 347.656134][ T9778] dump_stack_lvl+0x189/0x250 [ 347.656149][ T9778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.656159][ T9778] ? __pfx__printk+0x10/0x10 [ 347.656171][ T9778] ? print_lock_name+0xde/0x100 [ 347.656181][ T9778] print_deadlock_bug+0x28b/0x2a0 [ 347.656195][ T9778] validate_chain+0x1a3f/0x2140 [ 347.656211][ T9778] __lock_acquire+0xab9/0xd20 [ 347.656222][ T9778] ? __netdev_update_features+0xcb1/0x1be0 [ 347.656236][ T9778] lock_acquire+0x120/0x360 [ 347.656245][ T9778] ? __netdev_update_features+0xcb1/0x1be0 [ 347.656258][ T9778] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 347.656272][ T9778] __mutex_lock+0x187/0x1350 [ 347.656285][ T9778] ? __netdev_update_features+0xcb1/0x1be0 [ 347.656299][ T9778] ? stack_depot_save_flags+0x41b/0x860 [ 347.656313][ T9778] ? __netdev_update_features+0xcb1/0x1be0 [ 347.656326][ T9778] ? __pfx___mutex_lock+0x10/0x10 [ 347.656339][ T9778] ? bond_fix_features+0x191/0x1d0 [ 347.656360][ T9778] __netdev_update_features+0xcb1/0x1be0 [ 347.656376][ T9778] ? __pfx___netdev_update_features+0x10/0x10 [ 347.656389][ T9778] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 347.656400][ T9778] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 347.656413][ T9778] ? cfg80211_netdev_notifier_call+0x1e5/0x1440 [ 347.656429][ T9778] ? __wake_up_common_lock+0x190/0x1f0 [ 347.656443][ T9778] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 347.656457][ T9778] ? consume_skb+0xce/0xf0 [ 347.656467][ T9778] ? netlink_broadcast_filtered+0xf55/0x1000 [ 347.656479][ T9778] netdev_change_features+0x72/0xd0 [ 347.656491][ T9778] ? __pfx_netdev_change_features+0x10/0x10 [ 347.656505][ T9778] ? netif_set_tso_max_size+0x10e/0x1d0 [ 347.656517][ T9778] bond_compute_features+0x615/0x680 [ 347.656531][ T9778] ? __pfx_bond_compute_features+0x10/0x10 [ 347.656544][ T9778] bond_netdev_event+0x72e/0xe80 [ 347.656555][ T9778] ? __pfx_bond_netdev_event+0x10/0x10 [ 347.656564][ T9778] ? inetdev_event+0x464/0x15b0 [ 347.656580][ T9778] ? igmp_netdev_event+0x7c/0x770 [ 347.656596][ T9778] notifier_call_chain+0x1b6/0x3e0 [ 347.656609][ T9778] netdev_features_change+0x85/0xc0 [ 347.656625][ T9778] ? __pfx_netdev_features_change+0x10/0x10 [ 347.656640][ T9778] ? security_capable+0x7e/0x2e0 [ 347.656654][ T9778] dev_ethtool+0x1541/0x19c0 [ 347.656669][ T9778] ? __pfx_dev_ethtool+0x10/0x10 [ 347.656684][ T9778] ? dev_load+0x21/0x1f0 [ 347.656694][ T9778] dev_ioctl+0x392/0x1150 [ 347.656704][ T9778] sock_do_ioctl+0x22c/0x300 [ 347.656718][ T9778] ? __pfx_sock_do_ioctl+0x10/0x10 [ 347.656735][ T9778] sock_ioctl+0x576/0x790 [ 347.656748][ T9778] ? __pfx_sock_ioctl+0x10/0x10 [ 347.656762][ T9778] ? __fget_files+0x3a0/0x420 [ 347.656771][ T9778] ? __fget_files+0x2a/0x420 [ 347.656780][ T9778] ? bpf_lsm_file_ioctl+0x9/0x20 [ 347.656790][ T9778] ? __pfx_sock_ioctl+0x10/0x10 [ 347.656803][ T9778] __se_sys_ioctl+0xf9/0x170 [ 347.656816][ T9778] do_syscall_64+0xfa/0xfa0 [ 347.656828][ T9778] ? lockdep_hardirqs_on+0x9c/0x150 [ 347.656840][ T9778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.656850][ T9778] ? clear_bhb_loop+0x60/0xb0 [ 347.656861][ T9778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.656872][ T9778] RIP: 0033:0x7fc25c78eec9 [ 347.656884][ T9778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.656893][ T9778] RSP: 002b:00007fc25a9d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 347.656905][ T9778] RAX: ffffffffffffffda RBX: 00007fc25c9e6180 RCX: 00007fc25c78eec9 [ 347.656913][ T9778] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006 [ 347.656920][ T9778] RBP: 00007fc25c811f91 R08: 0000000000000000 R09: 0000000000000000 [ 347.656927][ T9778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.656933][ T9778] R13: 00007fc25c9e6218 R14: 00007fc25c9e6180 R15: 00007fc25cb0fa28 [ 347.656944][ T9778] [ 348.054324][ C0] vkms_vblank_simulate: vblank timer overrun [ 348.217502][ T5895] usb 3-1: USB disconnect, device number 47 [ 348.419146][ T5881] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 348.569180][ T5881] usb 5-1: Using ep0 maxpacket: 32 [ 348.575698][ T5881] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 348.584069][ T5881] usb 5-1: config 0 has no interface number 0 [ 348.590525][ T5881] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 348.601525][ T5881] usb 5-1: config 0 interface 85 has no altsetting 0 [ 348.610290][ T5881] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 348.619372][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.627345][ T5881] usb 5-1: Product: syz [ 348.631597][ T5881] usb 5-1: Manufacturer: syz [ 348.636198][ T5881] usb 5-1: SerialNumber: syz [ 348.642515][ T5881] usb 5-1: config 0 descriptor?? [ 348.903464][ T5881] appletouch 5-1:0.85: Failed to read mode from device. [ 348.910710][ T5881] appletouch 5-1:0.85: probe with driver appletouch failed with error -5