last executing test programs: 14.183512353s ago: executing program 0 (id=3366): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) fallocate(0xffffffffffffffff, 0x3, 0x100000000, 0x80000000) (rerun: 32) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) (async, rerun: 32) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x400000000000000, 0x0, 0x0}, 0x0) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) (async) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) (async, rerun: 32) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, 0x0) (async, rerun: 32) syz_open_dev$loop(0x0, 0x75f, 0xa382) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r6, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) (async) openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x414301, 0x0) (async, rerun: 32) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 32) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0x2, 0x80000001, 0x0, [{0x1, 0x85, 0x1, '\x00', 0x4}, {0x5, 0x3, 0x0, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4e, 0xe, 0xd6, '\x00', 0x86}, {0xc, 0xb, 0x6, '\x00', 0x4}, {0xf, 0x8, 0xf5, '\x00', 0x3}, {0x2, 0xa, 0x50, '\x00', 0x6}, {0x88, 0x3, 0x2a, '\x00', 0x80}, {0x4, 0x0, 0xa, '\x00', 0x1}, {0x8, 0x9, 0x3, '\x00', 0x8}, {0x3, 0x6, 0x3, '\x00', 0x6}, {0x1, 0x9, 0x0, '\x00', 0x7f}, {0x14, 0x51, 0xa, '\x00', 0xfc}, {0xe, 0xfc, 0x5, '\x00', 0x1}, {0x9, 0x2, 0x6, '\x00', 0x9}, {0x1, 0x3, 0xfe, '\x00', 0x3}, {0x2, 0xb, 0xd6, '\x00', 0x7f}, {0x7, 0x15, 0xca, '\x00', 0x6}, {0x0, 0x1, 0x4, '\x00', 0x13}, {0x4, 0x0, 0x8, '\x00', 0xda}, {0x3, 0x3, 0x6, '\x00', 0x9}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x1, 0x4, '\x00', 0x8}, {0x8, 0xc, 0x0, '\x00', 0x6}]}}) (async, rerun: 64) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000040)) (async, rerun: 64) ioctl$KVM_RUN(r7, 0xae80, 0x0) 14.094629568s ago: executing program 0 (id=3367): setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2}, [@NDA_DST_MAC={0xa, 0x1, @remote}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40004) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000200)=""/57, 0x39, &(0x7f0000000000)={0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x2) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r4 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x200000000) socket$inet(0x2, 0x3, 0x2) syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa00080045800028006400000002907800000000e000000111009079e00000028000b8b4e92ac4e10eb17eca202f9a2f713397f43400000000"], 0x0) write$vhost_msg_v2(r4, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000000540)=""/152, 0x98, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f0000000440)=""/119, 0x77, 0x0, 0x0, 0x3}}, 0x48) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000001140)={0x80, 0x1}) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r5, r3, 0x0, 0x20000023893) r6 = getpgid(0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1ff8, 0x12) ptrace$ARCH_SET_CPUID(0x1e, r6, 0x1, 0x1012) 10.69475702s ago: executing program 0 (id=3373): r0 = dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) r4 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="add7cfb4f12f7830af8db2f36ee8923f75c2e026dab62905bac89aafdf3098afd5007fcf02b0e183eae7"], 0x6) r5 = syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_clone(0xd000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000010}, 0x20000040) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) syz_clone3(&(0x7f00000001c0)={0x2000000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d00, &(0x7f0000000300)) syz_usb_control_io$uac1(r8, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000100)={0x40, 0x11, 0xfffffffffffffd4f, "e9f8b7b62d0f1ee0670052141e010001"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) 10.122286477s ago: executing program 1 (id=3374): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf00b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xc, 0xfe, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x20, 0x12, 0x7, {0x7, 0x1, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x33455aed6cbf4c1b) r3 = open(0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) ioctl$RTC_PIE_ON(r3, 0x7005) 9.994002817s ago: executing program 2 (id=3375): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff"], 0x3}}, 0x2000c061) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0xed) 9.038240688s ago: executing program 2 (id=3380): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000300)={@random="99177fa54f29", @random="bcef5500", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00\x00 ', 0x16, 0x11, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {0x0, 0xe22, 0x16, 0x0, @opaque="224e535cd179b8261af2d88b92fc"}}}}}}, 0x0) 8.786179285s ago: executing program 2 (id=3381): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xffffffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x4000) 8.654433752s ago: executing program 2 (id=3382): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x9, 0x0, 0x0, 0x0, 0x5bd32288, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x1b}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) syz_io_uring_setup(0x3c, &(0x7f00000007c0)={0x0, 0xa56e, 0x13500, 0xfffffffe, 0x2cc}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x21, &(0x7f0000000180)=r3, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0x23, &(0x7f0000000000)=""/48, &(0x7f0000000040)=0x30) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) r5 = syz_io_uring_setup(0x1104, &(0x7f0000000240)={0x0, 0x100, 0x80, 0x2, 0x333}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)) r7 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x1ab}, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000300)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x0, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r7, 0x47f8, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r5, 0x47fa, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x496, &(0x7f0000000340)={0x0, 0x7079, 0x0, 0x200014, 0xce}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 8.593710843s ago: executing program 0 (id=3383): mknod$loop(&(0x7f0000000200)='./file0\x00', 0xfff, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) read$alg(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) r4 = socket$inet6(0xa, 0x3, 0x88) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff020000000000000000000000000001"], 0x0) getsockopt(r3, 0x4, 0x270c, &(0x7f000001eec0)=""/102389, &(0x7f0000000240)=0xffffffffffffff71) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv2(r8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x4, 0x8) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r7, r6, 0x0, 0x0, 0x0, 0x800, {0x4, 0x1, 0x3, 0x69, 0x200, 0x0, 0x0, 0x5, 0x4cab, 0xe156, 0x0, 0x0, 0x60ff, 0x0, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002a2b8d240bb2170200b87010203010902240001a00800040904c81e010103f70909050803ff030406090221072501", @ANYRES8], 0x0) 8.298062152s ago: executing program 1 (id=3384): bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000c0001800001a0000f7"], 0x48) 7.727674853s ago: executing program 4 (id=3385): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x8000000) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400220000000000005b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 6.162159076s ago: executing program 2 (id=3386): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r6 = add_key$user(0x0, &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x23, 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_open_dev$loop(0x0, 0x75f, 0xa382) mkdirat(0xffffffffffffffff, 0x0, 0xc0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r5, @ANYRESHEX=r6]) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="c800000000020104ba000000000000000a0000003c0001800c00028005000100210000002c000180140003000000000000000000000000000000000114639100fe8000000000000000000000000000bb3c0003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014000400"], 0xc8}}, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0x2, 0x80000001, 0x0, [{0x1, 0x85, 0x1, '\x00', 0x4}, {0x5, 0x3, 0x0, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4e, 0xe, 0xd6, '\x00', 0x86}, {0xc, 0xb, 0x6, '\x00', 0x4}, {0xf, 0x8, 0xf5, '\x00', 0x3}, {0x2, 0xa, 0x50, '\x00', 0x6}, {0x88, 0x3, 0x2a, '\x00', 0x80}, {0x4, 0x0, 0xa, '\x00', 0x1}, {0x8, 0x9, 0x3, '\x00', 0x8}, {0x3, 0x6, 0x3, '\x00', 0x6}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x14, 0x51, 0xa, '\x00', 0xfc}, {0xe, 0xfc, 0x5, '\x00', 0x1}, {0x9, 0x2, 0x6, '\x00', 0x9}, {0x1, 0x3, 0xfe, '\x00', 0x3}, {0x2, 0xb, 0xd6, '\x00', 0x7f}, {0x7, 0x15, 0xca, '\x00', 0x6}, {0x0, 0x1, 0x4, '\x00', 0x13}, {0x4, 0x0, 0x40, '\x00', 0xda}, {0x3, 0x3, 0x6, '\x00', 0x9}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x1, 0x4, '\x00', 0x8}, {0x8, 0xc, 0x0, '\x00', 0x6}]}}) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmsg$alg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="439db5", 0x3}], 0x1, &(0x7f0000000540)=[@op={0x18}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0x14}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/103, 0x67}], 0x1}, 0xe}], 0x2, 0x2021, 0x0) 6.149362499s ago: executing program 3 (id=3387): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_open_dev$loop(0x0, 0x75f, 0xa382) mkdirat(0xffffffffffffffff, 0x0, 0xc0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[]) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="c800000000020104ba000000000000000a0000003c0001800c00028005000100210000002c000180140003000000000000000000000000000000000114639100fe8000000000000000000000000000bb3c0003800c00028005000100"], 0xc8}}, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0x2, 0x80000001, 0x0, [{0x1, 0x85, 0x1, '\x00', 0x4}, {0x5, 0x3, 0x0, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4e, 0xe, 0xd6, '\x00', 0x86}, {0xc, 0xb, 0x6, '\x00', 0x4}, {0xf, 0x8, 0xf5, '\x00', 0x3}, {0x2, 0xa, 0x50, '\x00', 0x6}, {0x88, 0x3, 0x2a, '\x00', 0x80}, {0x4, 0x0, 0xa, '\x00', 0x1}, {0x8, 0x9, 0x3, '\x00', 0x8}, {0x3, 0x6, 0x3, '\x00', 0x6}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x14, 0x51, 0xa, '\x00', 0xfc}, {0xe, 0xfc, 0x5, '\x00', 0x1}, {0x9, 0x2, 0x6, '\x00', 0x9}, {0x1, 0x3, 0xfe, '\x00', 0x3}, {0x2, 0xb, 0xd6, '\x00', 0x7f}, {0x7, 0x15, 0xca, '\x00', 0x6}, {0x0, 0x1, 0x4, '\x00', 0x13}, {0x4, 0x0, 0x40, '\x00', 0xda}, {0x3, 0x3, 0x6, '\x00', 0x9}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x1, 0x4, '\x00', 0x8}, {0x8, 0xc, 0x0, '\x00', 0x6}]}}) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmsg$alg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="439db5", 0x3}], 0x1, &(0x7f0000000540)=[@op={0x18}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0x14}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/103, 0x67}], 0x1}, 0xe}], 0x2, 0x2021, 0x0) 5.018434958s ago: executing program 4 (id=3388): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000010001fff1400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="000000000080000008001f"], 0x58}}, 0x0) 4.695514879s ago: executing program 4 (id=3389): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e64000000003400028008000300810000000800050000000000080004000000000008000f00ff0100"], 0x64}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0xffffffffffffffea) 4.47141163s ago: executing program 0 (id=3390): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x3) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x2e0e, 0x0, 0x0, 0xffffffffffffffa2) mkdirat(r1, 0x0, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000751000/0x2000)=nil}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000280)=[{0x28, 0x0, 0x0, 0xfffff018}, {0x6, 0x3, 0x5, 0x80000000}]}, 0x10) r6 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r6, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000080)='disBard', &(0x7f0000000200)='\x00', 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 4.254332696s ago: executing program 1 (id=3391): socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000200)={0x0, 0xe3, 0x4, 0x1}, &(0x7f00000002c0)=0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x3b, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x80002101, 0x1}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x800}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_enter(r1, 0x7277, 0x0, 0x0, 0x0, 0x4b00) 3.646357784s ago: executing program 4 (id=3392): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x6}, @IFLA_MACVLAN_MACADDR_DATA={0x4}]}}}]}, 0x40}}, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="04", @ANYBLOB="2019"], 0x16) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x0, 0x7, 0x79, @ipv4={'\x00', '\xff\xff', @multicast2}, @initdev={0xfe, 0x88, '\x00', 0x9, 0x0}, 0x20, 0x10, 0x4e, 0x20}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000307cc46700000000000000000000000a40000000060a0b04000000000000000002000000200004801c0001800900010068617368000000000c000280080001400000000a0900010073797a3000000000140000001100010000000000000000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x24004094}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40) openat$cgroup_int(r2, &(0x7f0000000200)='cpu.max.burst\x00', 0x2, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}, 0x1, 0x0, 0x0, 0x51}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2.701822819s ago: executing program 4 (id=3393): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000440)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}}) (async) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 2.350103781s ago: executing program 2 (id=3394): syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000002c0)=r4, 0x4) set_mempolicy(0x0, &(0x7f0000000300)=0x1, 0x3) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094b24610b11342003d9d0102030109021b000100000000090400390009"], 0x0) r5 = syz_open_procfs(r2, &(0x7f0000000280)='fd/4\x00') preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x4) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000240)=0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) 2.338225386s ago: executing program 1 (id=3395): symlinkat(0x0, 0xffffffffffffff9c, 0x0) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_clone3(&(0x7f0000010240)={0x8000000, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ee527e004c3c00000000000003000000eaff0000000100ff02000000000000000000000000000133"], 0x0) 2.067943977s ago: executing program 3 (id=3396): r0 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000140)={{0x29, @loopback, 0x4e21, 0x4, 'lc\x00', 0x24, 0x7, 0x75}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x4e21, 0x2, 0xfffffffe, 0x3, 0x7}}, 0x44) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000000)=0x80, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x5, 0x9, 0x7, 0x3, 0x10000, 0x8001, 0xffff}, 0x1c) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x102, 0x0) sendfile(r7, r7, 0x0, 0x6) r8 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)={0x18, 0x5, 0xa, 0x201, 0x70bd2a, 0x25dfdbfb, {0x2, 0x0, 0x4}, [@generic="9f"]}, 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x10) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/reserved_size', 0x149a82, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, 0x0, 0x106, 0x3}}, 0xb2b9be84dc7d9995) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000380)={0x356, 0x78, 0x0, 0x730, 0x7, 0x4, 0x0, 0x0, {0x0, 0x0, 0x4}, {0xffffffff}, {}, {0x20000000, 0xfffffffd}, 0x0, 0x0, 0x3, 0x0, 0x1, 0x4, 0x7, 0x3, 0x1ff, 0x3f, 0x5, 0x3, 0x55, 0x202, 0x1, 0xc}) 1.72059611s ago: executing program 0 (id=3397): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, 0x0, 0x8080) socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) mknod$loop(&(0x7f0000000080)='./bus\x00', 0x2, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0), 0x0) syz_open_dev$ndb(0x0, 0x0, 0x10000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101840, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000000)="c65a697dc193404fa0e2f58f60b4a27b59b6ba2ced2a80952f4742cd184015cfff3ea1491931aa", 0x27}], 0x1) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r7, 0x0, 0x40, 0x0, &(0x7f00000000c0)) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904020002ffffff000905"], 0x0) 1.662328367s ago: executing program 1 (id=3398): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000012000000000000000a20000000000a03000000000000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000938001280340001800a0001006c696d6974000000240002800c00024000000000010010000c00014000000000000000b9d102a885fb3bea01080003400001"], 0xc4}}, 0x20050800) 1.522884858s ago: executing program 1 (id=3399): unshare(0x8040600) syz_usb_connect(0x1, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x0, 0x6e, 0xdb, 0x10, 0x8, 0x525, 0xa4a0, 0x6fb6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x41, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5f, 0x0, 0x0, 0x59, 0x71, 0x8, 0x20}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x1d, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 1.124246206s ago: executing program 3 (id=3400): pipe(&(0x7f0000000140)={0xffffffffffffffff}) close(0xffffffffffffffff) socket$inet(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60000000020601020000000000000000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000040008001240fffffffa11"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x248040) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000300)={{0x3c, 0x55}, 'port1\x00', 0x11, 0x20000, 0xfffffff4, 0x457, 0x40, 0xb, 0x0, 0x0, 0x3, 0x71}) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) 671.107018ms ago: executing program 3 (id=3401): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3e0, 0x3d8, 0x3d8, 0x3e0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x80, 0x0}, 'virt_wifi0\x00', {0x6dbf}}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x4, 0x1}, {0xffffffffffffffff, 0x3, 0x6}, 0x5, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c02000019000100000000000008000000000000000000000020ffff00000000be14144416000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x4000) 374.079937ms ago: executing program 4 (id=3402): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000200)={@empty, @remote, 0x0}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x60000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@newqdisc={0x70, 0x24, 0x10, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xf, 0xfff2}, {0x1, 0xb}, {0x5, 0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x20}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xf}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xfffffffb}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x4}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_RATE={0x6, 0x5, {0x3, 0x6a}}, @TCA_RATE={0x6, 0x5, {0x0, 0x6}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x70}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x60000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@newqdisc={0x70, 0x24, 0x10, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xf, 0xfff2}, {0x1, 0xb}, {0x5, 0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x20}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xf}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xfffffffb}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x4}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_RATE={0x6, 0x5, {0x3, 0x6a}}, @TCA_RATE={0x6, 0x5, {0x0, 0x6}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x70}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) (async) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd28, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4, 0x10000}}, 0x1c}}, 0x4044814) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500"], 0xfdef) (async) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500"], 0xfdef) 292.25242ms ago: executing program 3 (id=3403): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000540)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000940)=[@cswp={0x58, 0x114, 0x7, {{0x2, 0x7}, &(0x7f00000006c0)=0x7, &(0x7f0000000900)=0xb, 0x16, 0xfffffffffffffff7, 0x8, 0x5, 0x2, 0xb}}], 0x58}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x0, 0x5, 0x80000080, 0x1ff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x258a7313}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f0000000fc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYBLOB="040000007000fbdbdf25040000000900030073797a31000000000900030073797a31000000000900010073797a3200000000050004000100000009000100737f7a320000000005000400010000000900010073797a31000000000900010073797a3100000000"], 0x6c}, 0x1, 0x0, 0x0, 0x400c005}, 0x20004000) r5 = userfaultfd(0x80001) syz_io_uring_setup(0x98f, &(0x7f0000000140)={0x0, 0xaee2, 0x200, 0x0, 0x85}, &(0x7f0000000000)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) syz_memcpy_off$IO_URING_METADATA_FLAGS(r6, 0x118, &(0x7f0000000580), 0x0, 0x4) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r8 = socket(0x8, 0x3, 0x6) r9 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) r10 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') write$tcp_mem(r10, &(0x7f0000000180)={0x6, 0x20, 0x0, 0x20, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x14, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x8, &(0x7f0000000640), 0x8, 0x10, &(0x7f0000000000)={0x2, 0xe, 0x200}, 0x58, 0x0, r3}, 0xd0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x20010, r10, 0x4000) syz_clone(0xa20100, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)=ANY=[@ANYRES64=r6], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) 0s ago: executing program 3 (id=3404): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r6 = add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_open_dev$loop(0x0, 0x75f, 0xa382) mkdirat(0xffffffffffffffff, 0x0, 0xc0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r5, @ANYRESHEX=r6]) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="c800000000020104ba000000000000000a0000003c0001800c00028005000100210000002c000180140003000000000000000000000000000000000114639100fe8000000000000000000000000000bb3c0003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014000400"], 0xc8}}, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0x2, 0x80000001, 0x0, [{0x1, 0x85, 0x1, '\x00', 0x4}, {0x5, 0x3, 0x0, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4e, 0xe, 0xd6, '\x00', 0x86}, {0xc, 0xb, 0x6, '\x00', 0x4}, {0xf, 0x8, 0xf5, '\x00', 0x3}, {0x2, 0xa, 0x50, '\x00', 0x6}, {0x88, 0x3, 0x2a, '\x00', 0x80}, {0x4, 0x0, 0xa, '\x00', 0x1}, {0x8, 0x9, 0x3, '\x00', 0x8}, {0x3, 0x6, 0x3, '\x00', 0x6}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x14, 0x51, 0xa, '\x00', 0xfc}, {0xe, 0xfc, 0x5, '\x00', 0x1}, {0x9, 0x2, 0x6, '\x00', 0x9}, {0x1, 0x3, 0xfe, '\x00', 0x3}, {0x2, 0xb, 0xd6, '\x00', 0x7f}, {0x7, 0x15, 0xca, '\x00', 0x6}, {0x0, 0x1, 0x4, '\x00', 0x13}, {0x4, 0x0, 0x40, '\x00', 0xda}, {0x3, 0x3, 0x6, '\x00', 0x9}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x1, 0x4, '\x00', 0x8}, {0x8, 0xc, 0x0, '\x00', 0x6}]}}) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmsg$alg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="439db5", 0x3}], 0x1, &(0x7f0000000540)=[@op={0x18}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0x14}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/103, 0x67}], 0x1}, 0xe}], 0x2, 0x2021, 0x0) kernel console output (not intermixed with test programs): sconnect, device number 21 [ 791.356751][T14639] bond1 (unregistering): Released all slaves [ 791.388858][ T51] Bluetooth: hci1: command tx timeout [ 791.540583][T14639] bond2 (unregistering): Released all slaves [ 791.560362][T16027] team0: Port device team_slave_0 added [ 791.689900][T16027] team0: Port device team_slave_1 added [ 791.787983][T14639] tipc: Disabling bearer [ 791.797928][T14639] tipc: Disabling bearer [ 791.854143][T14639] tipc: Left network mode [ 791.874986][T16100] bond0: left promiscuous mode [ 791.902430][T16100] bridge_slave_1: left promiscuous mode [ 791.942928][T16100] team0: Port device bond0 removed [ 792.034148][T16100] bond0: (slave bridge_slave_1): Releasing backup interface [ 792.072855][T16099] fuse: Bad value for 'fd' [ 792.092933][T16100] bond5: (slave veth0_to_bond): Releasing active interface [ 792.102056][T10777] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 792.103326][T16099] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3025'. [ 792.169478][T16027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 792.176860][T16027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 792.211040][T16027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 792.242007][T16027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 792.250353][T16027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 792.276794][ C1] vkms_vblank_simulate: vblank timer overrun [ 792.289840][T16027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 792.303534][T10777] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.316248][T10777] usb 5-1: config 0 has no interfaces? [ 792.348506][T10777] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 792.371957][T10777] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 792.380030][T10777] usb 5-1: SerialNumber: syz [ 792.407099][T10777] usb 5-1: config 0 descriptor?? [ 792.462578][T10782] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 792.578361][T14639] mac80211_hwsim hwsim5 wlan0 (unregistering): left allmulticast mode [ 792.589602][T14639] mac80211_hwsim hwsim5 wlan0 (unregistering): left promiscuous mode [ 792.656782][T10777] usb 5-1: USB disconnect, device number 22 [ 792.673780][T10782] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 792.686206][T10782] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 792.717060][T10782] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 792.730602][T10782] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 792.754373][T10782] usb 3-1: SerialNumber: syz [ 792.870773][T16027] hsr_slave_0: entered promiscuous mode [ 792.891001][T16027] hsr_slave_1: entered promiscuous mode [ 792.901456][T16027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 792.914255][T16027] Cannot create hsr debugfs directory [ 792.985924][T10782] usb 3-1: skipping empty audio interface (v1) [ 793.084441][T10782] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 793.132309][T16117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3031'. [ 793.162721][T16117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3031'. [ 793.196580][T10782] usb 3-1: USB disconnect, device number 35 [ 793.249285][ T5893] udevd[5893]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 793.465003][ T51] Bluetooth: hci1: command tx timeout [ 793.757542][T10782] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 794.048722][T10777] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 794.231961][T10777] usb 4-1: device descriptor read/64, error -71 [ 794.521965][T10777] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 794.662307][T10767] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 794.692354][T10777] usb 4-1: device descriptor read/64, error -71 [ 794.808402][T10777] usb usb4-port1: attempt power cycle [ 794.825418][T10767] usb 5-1: Using ep0 maxpacket: 8 [ 794.833001][T10767] usb 5-1: config 6 has an invalid interface number: 2 but max is 0 [ 794.841761][T10767] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 794.856531][T10767] usb 5-1: config 6 has no interface number 0 [ 794.870812][T10767] usb 5-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 794.904926][T10767] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 794.938863][T10767] usb 5-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 795.031183][T10767] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 795.072138][T10767] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.080648][T10767] usb 5-1: Product: syz [ 795.120060][T10767] usb 5-1: Manufacturer: syz [ 795.131927][T10767] usb 5-1: SerialNumber: syz [ 795.173237][T10777] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 795.178417][T10767] hso 5-1:6.2: Failed to find INT IN ep [ 795.229315][T10777] usb 4-1: device descriptor read/8, error -71 [ 795.472347][T10777] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 795.510482][T10777] usb 4-1: device descriptor read/8, error -71 [ 795.548812][ T51] Bluetooth: hci1: command tx timeout [ 795.628065][T10777] usb usb4-port1: unable to enumerate USB device [ 795.860300][T16142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3036'. [ 796.316312][T16144] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3037'. [ 796.338673][T16142] vlan3: entered promiscuous mode [ 796.362251][T16142] team0: entered promiscuous mode [ 796.558891][T16149] netlink: 'syz.3.3038': attribute type 1 has an invalid length. [ 796.781220][T16149] 8021q: adding VLAN 0 to HW filter on device bond5 [ 796.866598][T16155] veth0_to_bond: left allmulticast mode [ 796.877786][T16155] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 796.899533][T16159] vlan4: entered allmulticast mode [ 796.905069][T16159] bond5: entered allmulticast mode [ 796.916218][T16159] bond5: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 797.092091][T10767] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 797.189240][T14639] IPVS: stop unused estimator thread 0... [ 797.287022][T16173] netlink: 'syz.3.3045': attribute type 1 has an invalid length. [ 797.318154][T10767] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 797.321987][T16173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3045'. [ 797.333241][T10767] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 797.368477][T10767] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 797.380450][T10767] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.408322][T10767] usb 3-1: config 0 descriptor?? [ 797.438986][T10767] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 797.454373][T10767] dvb-usb: bulk message failed: -22 (3/0) [ 797.505248][T10767] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 797.522028][T10767] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 797.529465][T10767] usb 3-1: media controller created [ 797.542001][T10767] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 797.643190][T16156] dvb-usb: bulk message failed: -22 (2/0) [ 797.677628][T10767] dvb-usb: bulk message failed: -22 (6/0) [ 797.714517][T10777] usb 5-1: USB disconnect, device number 23 [ 797.739854][T10767] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 797.781731][T10767] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input41 [ 797.834441][T10767] dvb-usb: schedule remote query interval to 150 msecs. [ 797.857507][T10767] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 798.029070][T10767] dvb-usb: bulk message failed: -22 (1/0) [ 798.041931][T10767] dvb-usb: error while querying for an remote control event. [ 798.073772][T16179] fuse: Bad value for 'fd' [ 798.138289][T16179] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3046'. [ 798.217483][T10766] dvb-usb: bulk message failed: -22 (1/0) [ 798.224364][T10766] dvb-usb: error while querying for an remote control event. [ 798.405237][T10766] dvb-usb: bulk message failed: -22 (1/0) [ 798.418342][T10766] dvb-usb: error while querying for an remote control event. [ 798.435578][T16189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3047'. [ 798.475064][T10767] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 798.534186][T16189] openvswitch: netlink: nsh attribute has 65520 unknown bytes. [ 798.548153][T16189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 798.646107][T10767] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 798.657864][ T5844] dvb-usb: bulk message failed: -22 (1/0) [ 798.666420][ T5844] dvb-usb: error while querying for an remote control event. [ 798.678148][T10767] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 798.717912][T10767] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 798.734112][T10767] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 798.769153][T10767] usb 4-1: SerialNumber: syz [ 798.866082][T10766] dvb-usb: bulk message failed: -22 (1/0) [ 798.916887][T10766] dvb-usb: error while querying for an remote control event. [ 799.049555][T10767] usb 4-1: skipping empty audio interface (v1) [ 799.092266][T10766] dvb-usb: bulk message failed: -22 (1/0) [ 799.100474][T10766] dvb-usb: error while querying for an remote control event. [ 799.140114][T10767] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 799.163186][T10767] usb 4-1: USB disconnect, device number 26 [ 799.211749][ T5893] udevd[5893]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 799.233638][T16027] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 799.279743][T16027] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 799.302246][T10766] dvb-usb: bulk message failed: -22 (1/0) [ 799.311347][T10766] dvb-usb: error while querying for an remote control event. [ 799.365170][T16027] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 799.406087][T16027] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 799.502115][T10767] dvb-usb: bulk message failed: -22 (1/0) [ 799.502151][T10767] dvb-usb: error while querying for an remote control event. [ 799.662237][ T5844] dvb-usb: bulk message failed: -22 (1/0) [ 799.663809][ T5844] dvb-usb: error while querying for an remote control event. [ 799.822240][ T5844] dvb-usb: bulk message failed: -22 (1/0) [ 799.822275][ T5844] dvb-usb: error while querying for an remote control event. [ 799.982169][T10766] dvb-usb: bulk message failed: -22 (1/0) [ 799.982206][T10766] dvb-usb: error while querying for an remote control event. [ 800.030553][T10766] usb 3-1: USB disconnect, device number 36 [ 800.095835][T10766] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 800.123038][T16027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 800.164591][T16027] 8021q: adding VLAN 0 to HW filter on device team0 [ 800.182182][ T5844] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 800.207860][ T3008] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.207980][ T3008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 800.214285][ T3008] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.214391][ T3008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 800.220618][T16207] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3050'. [ 800.328896][T16208] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3050'. [ 800.333026][ T5844] usb 4-1: Using ep0 maxpacket: 16 [ 800.338670][ T5844] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 800.338718][ T5844] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 800.340394][ T5844] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=f1.40 [ 800.340420][ T5844] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 800.340440][ T5844] usb 4-1: Product: syz [ 800.340453][ T5844] usb 4-1: Manufacturer: syz [ 800.351707][ T5844] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 800.370932][T16027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 800.513323][T16027] veth0_vlan: entered promiscuous mode [ 800.526727][T16027] veth1_vlan: entered promiscuous mode [ 800.561621][ T5844] usb 4-1: USB disconnect, device number 27 [ 800.678688][T16027] veth0_macvtap: entered promiscuous mode [ 800.705033][T16027] veth1_macvtap: entered promiscuous mode [ 800.745954][T16027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 800.793264][T16027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 800.890685][T16027] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.921198][T16027] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.941367][T16027] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.992890][T16027] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.049339][T16221] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3053'. [ 801.352243][T14639] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 801.360548][T14639] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 801.485489][T16223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3051'. [ 801.507194][ T3008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 801.554785][ T3008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 801.619895][T16235] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3055'. [ 801.853636][T16242] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3058'. [ 801.916789][T16242] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3058'. [ 801.966019][T16242] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3058'. [ 802.015374][T16242] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3058'. [ 802.222654][ T5844] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 802.422345][ T5844] usb 1-1: device descriptor read/64, error -71 [ 802.595389][T16255] 8021q: adding VLAN 0 to HW filter on device bond6 [ 802.670785][ T5844] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 802.681945][T10766] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 802.716937][T16259] bond6: (slave geneve4): Enslaving as an active interface with an up link [ 802.788684][T16255] bond6: entered promiscuous mode [ 802.815148][ T5844] usb 1-1: device descriptor read/64, error -71 [ 802.821903][T16255] geneve4: entered promiscuous mode [ 802.841919][T10766] usb 3-1: Using ep0 maxpacket: 16 [ 802.851382][T10766] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.875194][T10766] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 802.924015][T16025] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 802.936717][T16025] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 802.951641][T16025] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 802.963304][T10766] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 802.983737][ T5844] usb usb1-port1: attempt power cycle [ 802.993139][T10766] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.009511][T16025] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 803.021506][T16025] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 803.033752][T10766] usb 3-1: config 0 descriptor?? [ 803.111550][T15831] syz_tun (unregistering): left promiscuous mode [ 803.196518][T16275] vxcan3: entered promiscuous mode [ 803.213128][T16275] vxcan3: entered allmulticast mode [ 803.310093][T16281] No such timeout policy "syz1" [ 803.331995][ T5844] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 803.353532][ T5844] usb 1-1: device descriptor read/8, error -71 [ 803.360780][T16279] pim6reg: entered allmulticast mode [ 803.429758][ T51] Bluetooth: hci4: unexpected event 0x20 length: 19 > 7 [ 803.454593][T16286] __nla_validate_parse: 4 callbacks suppressed [ 803.454615][T16286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3066'. [ 803.488523][T16286] netlink: 'syz.3.3066': attribute type 2 has an invalid length. [ 803.515617][T16252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.527571][T16252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.545570][T16286] netlink: 'syz.3.3066': attribute type 1 has an invalid length. [ 803.554964][T16286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3066'. [ 803.592035][ T5844] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 803.613984][ T5844] usb 1-1: device descriptor read/8, error -71 [ 803.736848][ T5844] usb usb1-port1: unable to enumerate USB device [ 804.195729][T16273] chnl_net:caif_netlink_parms(): no params data found [ 804.615917][T16273] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.650367][T16273] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.666984][T16273] bridge_slave_0: entered allmulticast mode [ 804.681116][T16273] bridge_slave_0: entered promiscuous mode [ 804.808060][T16273] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.839091][T16273] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.855030][T16273] bridge_slave_1: entered allmulticast mode [ 804.866024][T16273] bridge_slave_1: entered promiscuous mode [ 805.169909][ T51] Bluetooth: hci5: command tx timeout [ 805.180329][T16321] loop6: detected capacity change from 0 to 7 [ 805.247268][T16321] Dev loop6: unable to read RDB block 7 [ 805.258580][T16321] loop6: unable to read partition table [ 805.298071][T16321] loop6: partition table beyond EOD, truncated [ 805.394220][T16321] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 805.658748][T10766] usbhid 3-1:0.0: can't add hid device: -71 [ 805.692286][T10766] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 805.774229][T10766] usb 3-1: USB disconnect, device number 37 [ 806.271265][T16336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3073'. [ 807.112372][T10777] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 807.197426][T14645] bond0 (unregistering): Released all slaves [ 807.233022][ T51] Bluetooth: hci5: command tx timeout [ 807.292345][T10782] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 807.326842][T10777] usb 4-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 807.342190][T10777] usb 4-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 807.355521][T10777] usb 4-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 807.365490][T10777] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.443163][T14645] bond1 (unregistering): Released all slaves [ 807.455980][T10782] usb 2-1: unable to get BOS descriptor or descriptor too short [ 807.464473][T10782] usb 2-1: not running at top speed; connect to a high speed hub [ 807.489516][T10782] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 807.515619][T10782] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 807.538168][T10782] usb 2-1: config 1 has no interface number 1 [ 807.547272][T10782] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 807.561208][T10782] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 807.587453][T10782] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 807.609376][T10782] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.620503][T10782] usb 2-1: Product: syz [ 807.625721][T10782] usb 2-1: Manufacturer: syz [ 807.643712][T10782] usb 2-1: SerialNumber: syz [ 807.758913][T14645] bond2 (unregistering): Released all slaves [ 807.806997][T10777] megaworld 0003:07B5:0312.0019: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.3-1/input0 [ 807.842337][T10777] megaworld 0003:07B5:0312.0019: no inputs found [ 807.908078][T10782] hub 2-1:1.0: Invalid hub with more than one config or interface [ 807.921688][T10782] hub 2-1:1.0: probe with driver hub failed with error -22 [ 807.948374][T10782] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 807.983011][T10782] usb 2-1: USB disconnect, device number 24 [ 808.055101][T10778] usb 4-1: USB disconnect, device number 28 [ 808.325378][T14645] bond3 (unregistering): Released all slaves [ 808.339035][T14645] bond4 (unregistering): Released all slaves [ 808.451978][T10778] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 808.518374][T14645] bond5 (unregistering): Released all slaves [ 808.536567][T16273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 808.559200][T16273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 808.605258][T10778] usb 4-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 808.648250][T10778] usb 4-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 808.670525][T10778] usb 4-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 808.698743][T10778] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.751927][T14645] : left promiscuous mode [ 808.829461][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.836194][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.903077][T10777] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 808.915202][T16273] team0: Port device team_slave_0 added [ 808.968850][T14645] tipc: Left network mode [ 808.978024][T16273] team0: Port device team_slave_1 added [ 808.996700][T10778] usbhid 4-1:8.0: can't add hid device: -71 [ 809.043273][T10778] usbhid 4-1:8.0: probe with driver usbhid failed with error -71 [ 809.084780][T10777] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 809.105733][T10778] usb 4-1: USB disconnect, device number 29 [ 809.114617][T10777] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.176984][T10777] usb 3-1: config 0 descriptor?? [ 809.281164][T16273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 809.302158][ T51] Bluetooth: hci5: command tx timeout [ 809.303632][T16273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 809.369296][T16273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 809.429494][T16273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 809.438435][T16273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 809.476600][T16273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 809.542206][T10782] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 809.682126][T10782] usb 1-1: device descriptor read/64, error -71 [ 809.815086][T14645] mac80211_hwsim hwsim4 wlan0 (unregistering): left allmulticast mode [ 809.842558][T14645] mac80211_hwsim hwsim4 wlan0 (unregistering): left promiscuous mode [ 809.866737][T16383] xt_hashlimit: max too large, truncated to 1048576 [ 809.932001][T10782] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 809.947408][T16273] hsr_slave_0: entered promiscuous mode [ 809.963054][T16273] hsr_slave_1: entered promiscuous mode [ 809.969856][T16273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 809.978151][T16273] Cannot create hsr debugfs directory [ 810.064464][T14645] batadv_slave_0: left promiscuous mode [ 810.091985][T10782] usb 1-1: device descriptor read/64, error -71 [ 810.202564][T10782] usb usb1-port1: attempt power cycle [ 810.443442][T10777] usb 3-1: Cannot set autoneg [ 810.463111][T10777] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 810.506529][T10777] usb 3-1: USB disconnect, device number 38 [ 810.551927][T10782] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 810.592537][T10782] usb 1-1: device descriptor read/8, error -71 [ 810.832136][T10782] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 810.864457][T10782] usb 1-1: device descriptor read/8, error -71 [ 810.972401][T10782] usb usb1-port1: unable to enumerate USB device [ 811.384511][ T51] Bluetooth: hci5: command tx timeout [ 811.722801][ T51] Bluetooth: hci3: unexpected event 0x20 length: 19 > 7 [ 811.727651][T16401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3092'. [ 811.751044][T16401] netlink: 'syz.2.3092': attribute type 2 has an invalid length. [ 811.759519][T16401] netlink: 'syz.2.3092': attribute type 1 has an invalid length. [ 811.797256][T16401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3092'. [ 811.903576][T16403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3091'. [ 812.082276][T14645] IPVS: stop unused estimator thread 0... [ 812.456466][T16419] FAULT_INJECTION: forcing a failure. [ 812.456466][T16419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 812.506799][T16419] CPU: 0 UID: 0 PID: 16419 Comm: syz.2.3095 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 812.506829][T16419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 812.506840][T16419] Call Trace: [ 812.506848][T16419] [ 812.506856][T16419] dump_stack_lvl+0x189/0x250 [ 812.506885][T16419] ? __pfx____ratelimit+0x10/0x10 [ 812.506907][T16419] ? __pfx_dump_stack_lvl+0x10/0x10 [ 812.506931][T16419] ? __pfx__printk+0x10/0x10 [ 812.506947][T16419] ? __might_fault+0xb0/0x130 [ 812.506972][T16419] should_fail_ex+0x414/0x560 [ 812.506998][T16419] _copy_from_user+0x2d/0xb0 [ 812.507016][T16419] ___sys_recvmsg+0x12e/0x510 [ 812.507040][T16419] ? __pfx____sys_recvmsg+0x10/0x10 [ 812.507084][T16419] ? __might_fault+0xb0/0x130 [ 812.507099][T16419] do_recvmmsg+0x307/0x770 [ 812.507121][T16419] ? __pfx_do_recvmmsg+0x10/0x10 [ 812.507152][T16419] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 812.507192][T16419] __x64_sys_recvmmsg+0x190/0x240 [ 812.507214][T16419] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 812.507239][T16419] ? rcu_is_watching+0x15/0xb0 [ 812.507279][T16419] ? do_syscall_64+0xbe/0x3b0 [ 812.507304][T16419] do_syscall_64+0xfa/0x3b0 [ 812.507326][T16419] ? lockdep_hardirqs_on+0x9c/0x150 [ 812.507347][T16419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.507365][T16419] ? clear_bhb_loop+0x60/0xb0 [ 812.507386][T16419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.507404][T16419] RIP: 0033:0x7fa2de78e929 [ 812.507420][T16419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 812.507436][T16419] RSP: 002b:00007fa2df616038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 812.507454][T16419] RAX: ffffffffffffffda RBX: 00007fa2de9b5fa0 RCX: 00007fa2de78e929 [ 812.507467][T16419] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000004 [ 812.507479][T16419] RBP: 00007fa2df616090 R08: 0000000000000000 R09: 0000000000000000 [ 812.507490][T16419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 812.507501][T16419] R13: 0000000000000000 R14: 00007fa2de9b5fa0 R15: 00007fa2deadfa28 [ 812.507530][T16419] [ 812.740870][T16273] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 812.772894][T16418] loop6: detected capacity change from 0 to 524287999 [ 812.854549][T16273] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 812.867878][T16273] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 812.889282][T16273] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 813.308828][T16273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 813.366168][T16273] 8021q: adding VLAN 0 to HW filter on device team0 [ 813.407844][ T3008] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.415040][ T3008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 813.490013][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.497244][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 813.672095][ T5844] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 813.728040][T16273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 813.822057][ T5844] usb 3-1: Using ep0 maxpacket: 16 [ 813.828867][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.883544][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.892424][T16273] veth0_vlan: entered promiscuous mode [ 813.894116][ T5844] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 813.916213][T16273] veth1_vlan: entered promiscuous mode [ 813.978922][T16273] veth0_macvtap: entered promiscuous mode [ 813.991642][T16273] veth1_macvtap: entered promiscuous mode [ 814.021195][T16273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 814.040253][T16273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 814.048245][ T5844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.070585][T16273] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.082924][T16273] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.092674][ T5844] usb 3-1: config 0 descriptor?? [ 814.099422][T16273] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.101994][T10777] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 814.109548][T16273] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.252509][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 814.283556][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 814.304150][T10777] usb 1-1: Using ep0 maxpacket: 8 [ 814.318188][T10777] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 814.342067][T10777] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.358510][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 814.381855][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 814.382683][T10777] usb 1-1: Product: syz [ 814.413318][T10777] usb 1-1: Manufacturer: syz [ 814.417994][T10777] usb 1-1: SerialNumber: syz [ 814.448918][T10777] usb 1-1: config 0 descriptor?? [ 814.465518][T10777] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 814.565445][T16468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 814.584242][T16468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 814.602886][T16466] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3057'. [ 815.172003][T10767] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 815.394030][T10767] usb 4-1: Using ep0 maxpacket: 8 [ 815.403197][T10767] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 815.461575][T10767] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 815.498718][T10767] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.531051][T10767] usb 4-1: Product: syz [ 815.541070][T10767] usb 4-1: Manufacturer: syz [ 815.552595][T10767] usb 4-1: SerialNumber: syz [ 815.553848][T16483] kvm: pic: non byte write [ 815.577932][T10767] usb 4-1: config 0 descriptor?? [ 815.614068][T10767] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 815.646180][T10767] usb 4-1: selecting invalid altsetting 1 [ 815.738058][T16025] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 815.756128][T16025] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 815.765430][T16025] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 815.800973][T10767] gspca_stk014: init reg: 0x00 [ 815.806202][T16025] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 815.815555][T16025] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 815.828454][T10767] stk014 4-1:0.0: probe with driver stk014 failed with error -5 [ 815.985709][T10767] usb 1-1: USB disconnect, device number 32 [ 816.077264][ T9588] usb 4-1: USB disconnect, device number 30 [ 816.276410][T10766] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 816.391514][ T5844] usbhid 3-1:0.0: can't add hid device: -71 [ 816.401301][ T5844] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 816.447316][ T5844] usb 3-1: USB disconnect, device number 39 [ 816.463135][T10766] usb 5-1: Using ep0 maxpacket: 32 [ 816.477549][T10766] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 816.487672][T10766] usb 5-1: config 0 has no interface number 0 [ 816.496061][T10766] usb 5-1: config 0 interface 85 has no altsetting 0 [ 816.508546][T10766] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 816.541895][T10766] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.549936][T10766] usb 5-1: Product: syz [ 816.567658][T10766] usb 5-1: Manufacturer: syz [ 816.575100][T10766] usb 5-1: SerialNumber: syz [ 816.583491][T10766] usb 5-1: config 0 descriptor?? [ 816.599246][T10766] appletouch 5-1:0.85: Could not find int-in endpoint [ 816.610159][T10766] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 816.636558][T10766] usbhid 5-1:0.85: couldn't find an input interrupt endpoint [ 816.802889][T10766] usb 5-1: USB disconnect, device number 24 [ 816.964713][T16496] chnl_net:caif_netlink_parms(): no params data found [ 817.102040][ T5844] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 817.305013][ T5844] usb 1-1: config 0 has no interfaces? [ 817.323478][ T5844] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 817.344281][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.364661][ T5844] usb 1-1: Product: syz [ 817.384861][ T5844] usb 1-1: Manufacturer: syz [ 817.389685][ T5844] usb 1-1: SerialNumber: syz [ 817.442693][ T5844] usb 1-1: config 0 descriptor?? [ 817.566502][T16496] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.602768][T16496] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.623566][T16496] bridge_slave_0: entered allmulticast mode [ 817.654083][T16496] bridge_slave_0: entered promiscuous mode [ 817.717101][T16496] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.745040][T16496] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.797257][T16496] bridge_slave_1: entered allmulticast mode [ 817.808399][T16496] bridge_slave_1: entered promiscuous mode [ 817.865120][ T51] Bluetooth: hci2: command tx timeout [ 817.984528][ T36] gretap0: left allmulticast mode [ 817.991952][T10766] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 818.009364][ T36] gretap0: left promiscuous mode [ 818.078466][ T36] bridge0: port 1(gretap0) entered disabled state [ 818.164173][T10766] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 818.203916][T10766] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 818.333695][T10766] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 818.346505][T10766] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.375259][T10766] usb 5-1: config 0 descriptor?? [ 818.729041][T16566] netlink: 'syz.2.3121': attribute type 1 has an invalid length. [ 818.799604][T10766] aquacomputer_d5next 0003:0C70:F00D.001A: unknown main item tag 0x0 [ 818.844379][T10766] aquacomputer_d5next 0003:0C70:F00D.001A: unknown main item tag 0x0 [ 818.855769][T10766] aquacomputer_d5next 0003:0C70:F00D.001A: unknown main item tag 0x0 [ 818.886856][T10766] aquacomputer_d5next 0003:0C70:F00D.001A: unknown main item tag 0x0 [ 818.904899][T10766] aquacomputer_d5next 0003:0C70:F00D.001A: unknown main item tag 0x0 [ 818.932617][T10766] aquacomputer_d5next 0003:0C70:F00D.001A: hidraw0: USB HID v0.00 Device [HID 0c70:f00d] on usb-dummy_hcd.4-1/input0 [ 819.151897][T16550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 819.205334][T16550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 819.361369][T10782] usb 5-1: USB disconnect, device number 25 [ 819.446693][ T36] bond0 (unregistering): Released all slaves [ 819.468971][ T36] bond1 (unregistering): Released all slaves [ 819.489377][ T36] bond2 (unregistering): Released all slaves [ 819.778894][ T36] bond3 (unregistering): Released all slaves [ 819.820281][ T36] bond4 (unregistering): Released all slaves [ 819.918951][T16496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 819.944090][ T51] Bluetooth: hci2: command tx timeout [ 819.951655][T16555] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3120'. [ 819.970000][T16555] tipc: Enabled bearer , priority 10 [ 820.007742][T16566] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 820.019540][T16567] bond2: (slave veth0_to_bond): Releasing active interface [ 820.077077][T16496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 820.322400][T10778] usb 1-1: USB disconnect, device number 33 [ 820.644825][T16496] team0: Port device team_slave_0 added [ 820.711080][T16496] team0: Port device team_slave_1 added [ 820.712031][T10782] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 820.891905][T10782] usb 4-1: Using ep0 maxpacket: 16 [ 820.900180][T10782] usb 4-1: config index 0 descriptor too short (expected 17170, got 18) [ 820.922107][ T36] mac80211_hwsim hwsim9 wlan0 (unregistering): left allmulticast mode [ 820.927876][T10782] usb 4-1: config 0 has too many interfaces: 63, using maximum allowed: 32 [ 820.948740][ T36] mac80211_hwsim hwsim9 wlan0 (unregistering): left promiscuous mode [ 820.958910][T10782] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 63 [ 821.015899][T10782] usb 4-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8d.90 [ 821.044747][T10782] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.065784][T10782] usb 4-1: Product: syz [ 821.070009][T10782] usb 4-1: Manufacturer: syz [ 821.098686][T10782] usb 4-1: SerialNumber: syz [ 821.115911][T10782] usb 4-1: config 0 descriptor?? [ 821.217442][T16608] fuse: Bad value for 'fd' [ 821.314330][ T36] batman_adv: batadv0: Interface deactivated: dummy0 [ 821.338864][ T36] batman_adv: batadv0: Removing interface: dummy0 [ 821.449371][ T36] pim6reg (unregistering): left allmulticast mode [ 821.493203][T16622] loop7: detected capacity change from 0 to 6 [ 821.558044][T16624] loop9: detected capacity change from 0 to 7 [ 821.597839][T16622] Dev loop7: unable to read RDB block 6 [ 821.642377][T16624] Dev loop9: unable to read RDB block 7 [ 821.648277][T16624] loop9: unable to read partition table [ 821.661390][T16622] loop7: unable to read partition table [ 821.674169][T16624] loop9: partition table beyond EOD, truncated [ 821.685828][T16622] loop7: partition table beyond EOD, truncated [ 821.720237][T16624] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 821.789715][T16622] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 822.025048][ T51] Bluetooth: hci2: command tx timeout [ 822.230333][T16636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3138'. [ 822.258054][T16638] FAULT_INJECTION: forcing a failure. [ 822.258054][T16638] name failslab, interval 1, probability 0, space 0, times 0 [ 822.276976][T16638] CPU: 1 UID: 0 PID: 16638 Comm: syz.0.3139 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 822.277002][T16638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 822.277013][T16638] Call Trace: [ 822.277021][T16638] [ 822.277030][T16638] dump_stack_lvl+0x189/0x250 [ 822.277058][T16638] ? __pfx____ratelimit+0x10/0x10 [ 822.277080][T16638] ? __pfx_dump_stack_lvl+0x10/0x10 [ 822.277102][T16638] ? __pfx__printk+0x10/0x10 [ 822.277121][T16638] ? __pfx___might_resched+0x10/0x10 [ 822.277143][T16638] ? fs_reclaim_acquire+0x7d/0x100 [ 822.277166][T16638] should_fail_ex+0x414/0x560 [ 822.277189][T16638] should_failslab+0xa8/0x100 [ 822.277208][T16638] __kmalloc_noprof+0xcb/0x4f0 [ 822.277222][T16638] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 822.277243][T16638] ? sock_kmalloc+0xd6/0x160 [ 822.277266][T16638] sock_kmalloc+0xd6/0x160 [ 822.277286][T16638] hash_recvmsg+0x1d4/0x840 [ 822.277312][T16638] ? __pfx_hash_recvmsg+0x10/0x10 [ 822.277331][T16638] sock_recvmsg_nosec+0x186/0x1c0 [ 822.277357][T16638] ____sys_recvmsg+0x3aa/0x460 [ 822.277384][T16638] ? __pfx_____sys_recvmsg+0x10/0x10 [ 822.277417][T16638] ? import_iovec+0x74/0xa0 [ 822.277436][T16638] ___sys_recvmsg+0x1b5/0x510 [ 822.277460][T16638] ? __pfx____sys_recvmsg+0x10/0x10 [ 822.277508][T16638] ? __might_fault+0xb0/0x130 [ 822.277527][T16638] do_recvmmsg+0x307/0x770 [ 822.277561][T16638] ? __pfx_do_recvmmsg+0x10/0x10 [ 822.277595][T16638] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 822.277634][T16638] __x64_sys_recvmmsg+0x190/0x240 [ 822.277656][T16638] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 822.277672][T16638] ? rcu_is_watching+0x15/0xb0 [ 822.277699][T16638] ? do_syscall_64+0xbe/0x3b0 [ 822.277724][T16638] do_syscall_64+0xfa/0x3b0 [ 822.277747][T16638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.277761][T16638] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 822.277777][T16638] ? clear_bhb_loop+0x60/0xb0 [ 822.277796][T16638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.277811][T16638] RIP: 0033:0x7fe1dbb8e929 [ 822.277827][T16638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 822.277840][T16638] RSP: 002b:00007fe1d99f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 822.277859][T16638] RAX: ffffffffffffffda RBX: 00007fe1dbdb5fa0 RCX: 00007fe1dbb8e929 [ 822.277871][T16638] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000004 [ 822.277881][T16638] RBP: 00007fe1d99f6090 R08: 0000000000000000 R09: 0000000000000000 [ 822.277891][T16638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 822.277900][T16638] R13: 0000000000000000 R14: 00007fe1dbdb5fa0 R15: 00007fe1dbedfa28 [ 822.277930][T16638] [ 822.332587][T16640] netlink: 'syz.2.3140': attribute type 1 has an invalid length. [ 822.335246][ C1] vkms_vblank_simulate: vblank timer overrun [ 822.565822][ C1] vkms_vblank_simulate: vblank timer overrun [ 822.671854][ C1] vkms_vblank_simulate: vblank timer overrun [ 822.685617][ T51] Bluetooth: hci1: unexpected event 0x20 length: 19 > 7 [ 822.696181][T16644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3141'. [ 822.715184][T16644] netlink: 'syz.0.3141': attribute type 2 has an invalid length. [ 822.739946][T16644] netlink: 'syz.0.3141': attribute type 1 has an invalid length. [ 822.758940][T16644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3141'. [ 823.095149][T16650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3142'. [ 823.175301][T10782] ums-freecom 4-1:0.0: USB Mass Storage device detected [ 823.381455][T10782] usb 4-1: USB disconnect, device number 31 [ 823.835623][T10782] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 824.004720][T10782] usb 4-1: Using ep0 maxpacket: 16 [ 824.028073][T10782] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 824.040799][T10782] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.067594][T10782] usb 4-1: Product: syz [ 824.074380][T10782] usb 4-1: Manufacturer: syz [ 824.079124][T10782] usb 4-1: SerialNumber: syz [ 824.097429][T10782] usb 4-1: config 0 descriptor?? [ 824.104470][ T51] Bluetooth: hci2: command tx timeout [ 824.120637][T10782] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 824.327547][T10778] usb 4-1: USB disconnect, device number 32 [ 824.501025][T16664] netlink: 'syz.0.3146': attribute type 4 has an invalid length. [ 824.511933][T16664] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3146'. [ 824.597188][T16496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 824.614454][T16496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 824.694033][T16496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 824.732047][T16623] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3134'. [ 824.733476][T16496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 824.825300][T16496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 824.851338][ C1] vkms_vblank_simulate: vblank timer overrun [ 824.967160][T16496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 825.028035][T16664] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 825.199399][ T5844] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 825.304882][T16672] $Hÿ: left promiscuous mode [ 825.316083][T16672] team0: Port device $Hÿ removed [ 825.332494][T16672] bond5: (slave veth0_to_bond): Releasing active interface [ 825.366262][ T5844] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 825.377813][ T5844] usb 5-1: can't read configurations, error -61 [ 825.399515][T16672] bond6: (slave geneve4): Releasing backup interface [ 825.411347][T16672] geneve4: left promiscuous mode [ 825.421937][T10782] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 825.513085][T16496] hsr_slave_0: entered promiscuous mode [ 825.531939][ T5844] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 825.566069][T16496] hsr_slave_1: entered promiscuous mode [ 825.585454][T16496] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 825.601435][T16682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3151'. [ 825.607014][T10782] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 825.620987][T16496] Cannot create hsr debugfs directory [ 825.649943][T16684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3152'. [ 825.675188][T10782] usb 4-1: config 0 has no interfaces? [ 825.699573][T10782] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 825.733098][T10782] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 825.742447][ T5844] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 825.768739][ T5844] usb 5-1: can't read configurations, error -61 [ 825.774369][T10782] usb 4-1: SerialNumber: syz [ 825.806340][ T5844] usb usb5-port1: attempt power cycle [ 825.814286][T10782] usb 4-1: config 0 descriptor?? [ 826.060828][ T36] IPVS: stop unused estimator thread 0... [ 826.104239][T16694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3153'. [ 826.178259][T10766] usb 4-1: USB disconnect, device number 33 [ 826.202206][ T5844] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 826.226670][ T5844] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 826.254121][ T5844] usb 5-1: can't read configurations, error -61 [ 826.288257][T16694] vlan3: entered promiscuous mode [ 826.293780][T16694] syz_tun: entered promiscuous mode [ 826.354186][ T51] Bluetooth: hci1: unexpected event 0x20 length: 19 > 7 [ 826.356412][T16702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3155'. [ 826.392123][T16702] netlink: 'syz.0.3155': attribute type 2 has an invalid length. [ 826.400508][T16702] netlink: 'syz.0.3155': attribute type 1 has an invalid length. [ 826.433989][ T5844] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 826.448870][T16702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3155'. [ 826.490482][ T5844] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 826.498502][ T5844] usb 5-1: can't read configurations, error -61 [ 826.511538][ T5844] usb usb5-port1: unable to enumerate USB device [ 827.022332][T16716] x_tables: duplicate underflow at hook 2 [ 827.039253][T16716] IPVS: set_ctl: invalid protocol: 41 100.1.1.0:20004 [ 827.055055][ T5894] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 827.229397][ T5894] usb 1-1: device descriptor read/64, error -71 [ 827.327383][T16496] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 827.347460][T16496] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 827.364564][T16496] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 827.381099][T16496] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 827.462346][ T5844] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 827.492003][ T5894] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 827.528179][T16496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 827.549775][T16496] 8021q: adding VLAN 0 to HW filter on device team0 [ 827.570520][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.577772][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 827.610759][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.618050][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 827.639963][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 827.652591][ T5894] usb 1-1: device descriptor read/64, error -71 [ 827.669603][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 827.699274][ T5844] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 827.722642][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.736721][T16496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 827.744546][ T5844] usb 4-1: config 0 descriptor?? [ 827.772200][ T5894] usb usb1-port1: attempt power cycle [ 827.834950][T16496] veth0_vlan: entered promiscuous mode [ 827.850037][T16496] veth1_vlan: entered promiscuous mode [ 827.914169][T16496] veth0_macvtap: entered promiscuous mode [ 827.930432][T16496] veth1_macvtap: entered promiscuous mode [ 827.954263][T16720] netlink: 'syz.3.3159': attribute type 3 has an invalid length. [ 828.004524][ T5844] usbhid 4-1:0.0: can't add hid device: -71 [ 828.037143][ T5844] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 828.050960][T16496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 828.074763][T16496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 828.094833][ T5844] usb 4-1: USB disconnect, device number 34 [ 828.095974][T16496] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.111393][T16496] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.121546][T16496] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.130837][T16747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3162'. [ 828.131141][T16496] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.148723][ T5894] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 828.164887][ T5894] usb 1-1: device descriptor read/8, error -71 [ 828.185862][T16747] macvtap1: entered promiscuous mode [ 828.191353][T16747] macvtap1: entered allmulticast mode [ 828.217443][T16747] team0: entered allmulticast mode [ 828.232578][T16747] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 828.350191][T16754] ip6tnl1: entered promiscuous mode [ 828.391350][T14639] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 828.408200][ T5894] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 828.439572][T14639] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 828.473580][ T5894] usb 1-1: device descriptor read/8, error -71 [ 828.516424][ T51] Bluetooth: hci5: unexpected event 0x20 length: 19 > 7 [ 828.518271][T16760] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3165'. [ 828.536853][ T3008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 828.547536][ T3008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 828.558923][T16760] netlink: 'syz.4.3165': attribute type 2 has an invalid length. [ 828.571247][T16760] netlink: 'syz.4.3165': attribute type 1 has an invalid length. [ 828.586352][ T5894] usb usb1-port1: unable to enumerate USB device [ 828.602228][T16760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3165'. [ 828.777974][T16771] No such timeout policy "syz1" [ 828.804527][T16772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3164'. [ 828.962270][ T5894] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 829.124194][ T5894] usb 5-1: Using ep0 maxpacket: 16 [ 829.132792][ T5894] usb 5-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 829.143350][ T5894] usb 5-1: config 0 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 829.160675][ T5894] usb 5-1: config 0 interface 0 has no altsetting 0 [ 829.171274][ T5894] usb 5-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.00 [ 829.180727][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.196233][ T5894] usb 5-1: config 0 descriptor?? [ 829.215857][ T5894] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 829.433266][T16782] netlink: 'syz.1.3169': attribute type 27 has an invalid length. [ 829.729148][T16788] gretap0: entered promiscuous mode [ 829.738113][T16788] vlan2: entered promiscuous mode [ 830.202432][ T51] Bluetooth: hci1: unexpected event 0x20 length: 19 > 7 [ 830.221695][ T6378] syz_tun (unregistering): left promiscuous mode [ 830.227108][T16799] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3176'. [ 830.248883][T16025] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 830.263794][T16025] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 830.273843][T16025] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 830.283373][T16799] netlink: 'syz.0.3176': attribute type 2 has an invalid length. [ 830.291155][T16799] netlink: 'syz.0.3176': attribute type 1 has an invalid length. [ 830.309610][T16025] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 830.318069][T16025] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 830.338505][T10778] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 830.553873][T10778] usb 2-1: Using ep0 maxpacket: 32 [ 830.565377][T10778] usb 2-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 830.638445][T16809] netlink: 'syz.0.3178': attribute type 1 has an invalid length. [ 830.801998][T10778] usb 2-1: config 1 interface 0 has no altsetting 0 [ 830.850833][T10778] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 830.864577][T10778] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.869160][ T60] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.884598][T10778] usb 2-1: Product: ÐŽ [ 830.890364][T10778] usb 2-1: Manufacturer: ㊕ì¹Ýžîžˆï¤á³†ì¦î ™èº¶ë ­ã’—啻臊都ï”ç±ì®¬í¦ê²¬å­—姌䞷쪷頔螽彻잆钪眵䶩몡咠넢⬷旀䞚䲆ᡩ冢íŠÙ³æ «Ê£ç‘¼ã¯€íŠ’౪챢ߗ旆ï•á…€Ô‚䜵嚴᩿䒘䬭誼츰좨겼⿶ [ 830.997720][T10778] usb 2-1: SerialNumber: ࡳ [ 831.015738][T16797] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 831.140904][T16809] 8021q: adding VLAN 0 to HW filter on device bond1 [ 831.164723][T16812] bond1: (slave veth0_to_bond): making interface the new active one [ 831.176263][T16812] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 831.187226][ T3008] tipc: Resetting bearer [ 831.210250][T16813] vlan2: entered allmulticast mode [ 831.216078][T16813] bond1: entered allmulticast mode [ 831.221445][T16813] veth0_to_bond: entered allmulticast mode [ 831.356217][T16813] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 831.366392][T16797] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 831.595608][ T60] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.717193][ T60] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.747392][T10782] usb 5-1: USB disconnect, device number 30 [ 831.960291][ T60] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.423582][T16025] Bluetooth: hci0: command tx timeout [ 832.535187][T16803] chnl_net:caif_netlink_parms(): no params data found [ 832.962001][T10783] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 833.081013][T10778] usb 2-1: USB disconnect, device number 25 [ 833.145646][T10783] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 833.185615][T10783] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 833.234809][T10783] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 833.248799][T10783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.268446][T10783] usb 3-1: config 0 descriptor?? [ 833.560384][T16868] __nla_validate_parse: 1 callbacks suppressed [ 833.560404][T16868] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3192'. [ 833.579660][T16868] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3192'. [ 833.674171][T16868] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3192'. [ 833.684889][T16868] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3192'. [ 833.781080][T16868] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3192'. [ 833.793311][T16868] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3192'. [ 834.202107][T16880] sctp: [Deprecated]: syz.0.3195 (pid 16880) Use of int in maxseg socket option. [ 834.202107][T16880] Use struct sctp_assoc_value instead [ 834.221350][T16880] netlink: 'syz.0.3195': attribute type 10 has an invalid length. [ 834.504638][T16025] Bluetooth: hci0: command tx timeout [ 834.760528][T16889] netlink: 'syz.1.3197': attribute type 4 has an invalid length. [ 834.856035][T16890] netlink: 'syz.1.3197': attribute type 4 has an invalid length. [ 834.896075][ T60] $Hÿ (unregistering): Released all slaves [ 835.283321][ T60] bond1 (unregistering): Released all slaves [ 835.329986][ T60] bond0 (unregistering): Released all slaves [ 835.521288][ T60] bond2 (unregistering): Released all slaves [ 835.538822][ T60] bond3 (unregistering): Released all slaves [ 835.704914][ T60] bond4 (unregistering): Released all slaves [ 835.885308][ T60] bond5 (unregistering): Released all slaves [ 836.078467][ T60] bond6 (unregistering): Released all slaves [ 836.139700][T16842] macsec2: entered promiscuous mode [ 836.145597][T16842] ip6gretap0: entered promiscuous mode [ 836.151594][T16842] macsec2: entered allmulticast mode [ 836.176594][T16842] ip6gretap0: entered allmulticast mode [ 836.200816][T16842] ip6gretap0: left allmulticast mode [ 836.232104][T16842] ip6gretap0: left promiscuous mode [ 836.403437][ T60] tipc: Disabling bearer [ 836.425739][ T60] tipc: Disabling bearer [ 836.436802][ T60] tipc: Left network mode [ 836.496738][T10783] usbhid 3-1:0.0: can't add hid device: -71 [ 836.518382][T10783] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 836.543405][T10783] usb 3-1: USB disconnect, device number 40 [ 836.582035][T16025] Bluetooth: hci0: command tx timeout [ 836.623514][T16901] syz_tun: entered promiscuous mode [ 836.631218][T16901] batadv_slave_0: entered promiscuous mode [ 836.639632][T16901] hsr1: entered allmulticast mode [ 836.648138][T16901] syz_tun: entered allmulticast mode [ 836.653734][T16901] batadv_slave_0: entered allmulticast mode [ 836.827947][T16908] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3202'. [ 836.858977][T16803] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.890462][T16803] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.919013][T16803] bridge_slave_0: entered allmulticast mode [ 836.929872][T16803] bridge_slave_0: entered promiscuous mode [ 836.958623][T16803] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.984114][T16803] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.021754][T16803] bridge_slave_1: entered allmulticast mode [ 837.049414][T16803] bridge_slave_1: entered promiscuous mode [ 837.096565][T16908] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 837.241161][ T9588] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 837.266958][ T60] batadv_slave_0: left promiscuous mode [ 837.444348][ T60] team0: left allmulticast mode [ 837.467162][ T60] veth1_macvtap: left promiscuous mode [ 837.513392][ T60] veth0_macvtap: left promiscuous mode [ 837.525977][ T60] veth0_vlan: left promiscuous mode [ 837.783609][T10777] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 837.935089][T10777] usb 3-1: device descriptor read/64, error -71 [ 837.945021][ T9588] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 838.196236][T10777] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 838.336509][T16952] netlink: 'syz.1.3210': attribute type 10 has an invalid length. [ 838.381899][T10777] usb 3-1: device descriptor read/64, error -71 [ 838.493740][T10777] usb usb3-port1: attempt power cycle [ 838.662163][T16025] Bluetooth: hci0: command tx timeout [ 838.851962][T10777] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 838.880985][T10777] usb 3-1: device descriptor read/8, error -71 [ 839.148049][T10777] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 839.172548][T10777] usb 3-1: device descriptor read/8, error -71 [ 839.285738][T10777] usb usb3-port1: unable to enumerate USB device [ 839.469488][T14641] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 839.511592][T16949] bridge_slave_0: left allmulticast mode [ 839.518826][T16949] bridge_slave_0: left promiscuous mode [ 839.528751][T16949] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.564419][T16949] bridge_slave_1: left allmulticast mode [ 839.570220][T16949] bridge_slave_1: left promiscuous mode [ 839.582927][T16949] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.599682][T16949] bond0: (slave bond_slave_0): Releasing backup interface [ 839.617193][T16949] bond0: (slave bond_slave_1): Releasing backup interface [ 839.667805][T16949] team0: Port device team_slave_0 removed [ 839.681646][T16949] team0: Port device team_slave_1 removed [ 839.694392][T16949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 839.704188][T16949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 839.716151][T16949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 839.732395][T16949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 839.769701][T16952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 839.784365][T16952] team0: Port device bond0 added [ 839.790163][T16953] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 839.792455][ T9588] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 839.804689][T16803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 839.849962][T16803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 839.928556][T16959] bridge_slave_0: left allmulticast mode [ 839.934567][T16959] bridge_slave_0: left promiscuous mode [ 839.940503][T16959] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.950728][T16959] bridge_slave_1: left allmulticast mode [ 839.959128][T16959] bridge_slave_1: left promiscuous mode [ 839.965216][T16959] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.978506][T16959] bond1: (slave veth0_to_bond): Releasing active interface [ 839.986847][T16959] veth0_to_bond: left allmulticast mode [ 839.995461][T16959] bond0: (slave bond_slave_0): Releasing backup interface [ 840.008929][T16959] bond0: (slave bond_slave_1): Releasing backup interface [ 840.030289][T16959] team0: Port device team_slave_0 removed [ 840.044611][T16959] team0: Port device team_slave_1 removed [ 840.051080][T16959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 840.059277][T16959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 840.068104][T16959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 840.076048][T16959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 840.092149][ T9588] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 840.138845][T16965] syzkaller0: entered promiscuous mode [ 840.144759][T16965] syzkaller0: entered allmulticast mode [ 840.225374][T16803] team0: Port device team_slave_0 added [ 840.238242][T16803] team0: Port device team_slave_1 added [ 840.272786][ T5894] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 840.282985][ T9588] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 840.322993][ T9588] usb 1-1: config 0 has no interfaces? [ 840.340127][ T9588] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 840.388843][ T9588] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 840.397882][ T9588] usb 1-1: SerialNumber: syz [ 840.427334][ T9588] usb 1-1: config 0 descriptor?? [ 840.537079][T16803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 840.557338][T10777] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0 [ 840.592335][T16803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 840.618487][T10777] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0 [ 840.643262][T10777] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0 [ 840.658669][ T9588] usb 1-1: USB disconnect, device number 38 [ 840.700473][T16803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 840.715049][T10777] hid-generic 0003:0004:0000.001B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 840.809908][T16988] fido_id[16988]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 840.852709][ T3008] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 840.868780][ T3008] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 840.881872][T10782] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 840.894038][T16803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 840.906541][T16803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 840.931914][T10783] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 840.999887][T16803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 841.072006][T10782] usb 5-1: Using ep0 maxpacket: 16 [ 841.079588][T10782] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 841.094714][T10782] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 841.131997][T10782] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 841.146008][T10782] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.158481][T10782] usb 5-1: config 0 descriptor?? [ 841.188845][T16803] hsr_slave_0: entered promiscuous mode [ 841.248821][T16803] hsr_slave_1: entered promiscuous mode [ 841.255496][T10783] usb 2-1: config 0 has no interfaces? [ 841.265408][T16803] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 841.274980][T10783] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 841.275663][T16803] Cannot create hsr debugfs directory [ 841.284724][T10783] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.310750][T10783] usb 2-1: Product: syz [ 841.323505][T10783] usb 2-1: Manufacturer: syz [ 841.340671][T10783] usb 2-1: SerialNumber: syz [ 841.393442][T10783] usb 2-1: config 0 descriptor?? [ 841.488217][ T9588] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 842.876291][T17022] kernel profiling enabled (shift: 17) [ 842.940820][T17022] bond_slave_1: entered promiscuous mode [ 842.977849][T17024] veth0_to_bridge: entered promiscuous mode [ 843.159416][T17024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3227'. [ 843.571554][T10783] usb 2-1: USB disconnect, device number 26 [ 843.729091][T17022] veth0_to_bridge: left promiscuous mode [ 843.738632][T17022] bond_slave_1: left promiscuous mode [ 843.800960][T10782] usbhid 5-1:0.0: can't add hid device: -71 [ 843.913824][T10782] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 843.983034][T10782] usb 5-1: USB disconnect, device number 31 [ 844.414491][T10777] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 844.515994][T16803] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 844.561999][T10777] usb 1-1: device descriptor read/64, error -71 [ 844.640335][T16803] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 844.715499][T16803] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 844.811432][T16803] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 844.902024][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 844.922440][T10777] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 845.081916][T10777] usb 1-1: device descriptor read/64, error -71 [ 845.116673][T16803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 845.212274][T10777] usb usb1-port1: attempt power cycle [ 845.452822][T16803] 8021q: adding VLAN 0 to HW filter on device team0 [ 845.471379][T17088] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3239'. [ 845.489072][T17088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3239'. [ 845.501911][T10778] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 845.516613][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.523791][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 845.591968][T10782] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 845.627636][T10777] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 845.660994][T14631] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.668288][T14631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 845.682666][T10777] usb 1-1: device descriptor read/8, error -71 [ 845.744082][T10778] usb 2-1: config 0 has no interfaces? [ 845.775746][T10778] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 845.801883][T10778] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.818244][T10782] usb 3-1: config 0 has no interfaces? [ 845.835731][T10782] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 845.889803][T16803] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 845.909300][T10782] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.917588][T10778] usb 2-1: Product: syz [ 845.921764][T10778] usb 2-1: Manufacturer: syz [ 845.937876][T10782] usb 3-1: Product: syz [ 845.964264][T10777] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 845.978349][T10778] usb 2-1: SerialNumber: syz [ 845.991161][T10782] usb 3-1: Manufacturer: syz [ 845.996516][T16803] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 846.042236][T10777] usb 1-1: device descriptor read/8, error -71 [ 846.049492][T10778] usb 2-1: config 0 descriptor?? [ 846.054661][T10782] usb 3-1: SerialNumber: syz [ 846.152394][T10777] usb usb1-port1: unable to enumerate USB device [ 846.217806][T10782] usb 3-1: config 0 descriptor?? [ 846.482622][T16803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 846.561958][T10783] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 846.724372][T10783] usb 5-1: device descriptor read/64, error -71 [ 847.032597][T10783] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 847.542493][T10783] usb 5-1: device descriptor read/64, error -71 [ 847.667805][T10783] usb usb5-port1: attempt power cycle [ 847.922008][T10777] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 848.048158][T16803] veth0_vlan: entered promiscuous mode [ 848.142947][T10783] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 848.176824][T10777] usb 1-1: no configurations [ 848.190410][T16803] veth1_vlan: entered promiscuous mode [ 848.261874][T10777] usb 1-1: can't read configurations, error -22 [ 848.273906][T10783] usb 5-1: device descriptor read/8, error -71 [ 848.442127][T10777] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 848.515963][T16803] veth0_macvtap: entered promiscuous mode [ 848.558858][T10778] usb 2-1: USB disconnect, device number 27 [ 848.572128][T16803] veth1_macvtap: entered promiscuous mode [ 848.616386][T17116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3242'. [ 848.632188][T10783] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 848.779157][T10782] usb 3-1: USB disconnect, device number 45 [ 848.809225][T16803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 848.869619][T10777] usb 1-1: no configurations [ 848.874537][T10777] usb 1-1: can't read configurations, error -22 [ 848.899279][T10777] usb usb1-port1: attempt power cycle [ 848.970311][T17116] mac80211_hwsim hwsim25 wlan0: entered promiscuous mode [ 848.993710][T17116] macsec1: entered promiscuous mode [ 848.999356][T17116] macsec1: entered allmulticast mode [ 849.049749][T17116] mac80211_hwsim hwsim25 wlan0: entered allmulticast mode [ 849.114252][T16803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 849.194315][T16803] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.226100][T16803] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.255079][T17125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3244'. [ 849.275656][T16803] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.286959][T10777] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 849.309078][T16803] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.342528][T10777] usb 1-1: no configurations [ 849.347261][T10777] usb 1-1: can't read configurations, error -22 [ 849.492139][T10777] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 849.536743][T10777] usb 1-1: no configurations [ 849.541404][T10777] usb 1-1: can't read configurations, error -22 [ 849.577958][T10777] usb usb1-port1: unable to enumerate USB device [ 849.758820][T14641] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 849.778829][T10783] usb 5-1: device descriptor read/8, error -71 [ 849.788845][T14641] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.956096][T10783] usb usb5-port1: unable to enumerate USB device [ 850.000236][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.046902][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.005812][T17164] bridge1: entered promiscuous mode [ 851.028779][T17164] bridge1: entered allmulticast mode [ 851.163673][ T5894] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 851.249124][T17164] team0: Port device bridge1 added [ 851.312877][T17172] netlink: 2052 bytes leftover after parsing attributes in process `syz.3.3172'. [ 851.424338][T17176] raw_sendmsg: syz.4.3254 forgot to set AF_INET. Fix it! [ 851.447959][T17172] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 851.612400][T17182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3255'. [ 851.660832][T16025] Bluetooth: hci2: unexpected event 0x20 length: 19 > 7 [ 851.662726][T17185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3256'. [ 851.681288][ T5894] usb 3-1: config 0 has no interfaces? [ 851.687706][T17185] netlink: 'syz.1.3256': attribute type 2 has an invalid length. [ 851.708189][ T5894] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 851.724626][T17185] netlink: 'syz.1.3256': attribute type 1 has an invalid length. [ 851.746834][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.764759][ T5894] usb 3-1: Product: syz [ 851.776453][ T5894] usb 3-1: Manufacturer: syz [ 851.792072][ T5894] usb 3-1: SerialNumber: syz [ 851.812068][T17185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3256'. [ 851.847758][ T5894] usb 3-1: config 0 descriptor?? [ 852.002881][T17194] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3258'. [ 852.229803][T17199] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3260'. [ 852.302047][T10783] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 852.552516][T10783] usb 2-1: unable to get BOS descriptor or descriptor too short [ 852.612116][T10783] usb 2-1: not running at top speed; connect to a high speed hub [ 852.653240][T10783] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 852.662992][T10783] usb 2-1: config 0 has no interface number 0 [ 852.681951][ T9588] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 852.700290][T10783] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 852.769607][T10783] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 852.780178][T10777] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 852.817595][T10783] usb 2-1: config 0 interface 88 has no altsetting 0 [ 852.836533][T10783] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 852.846442][T10783] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 852.855739][T10783] usb 2-1: Product: syz [ 852.863383][T10783] usb 2-1: Manufacturer: syz [ 852.899493][T10783] usb 2-1: SerialNumber: syz [ 852.931894][T10777] usb 5-1: Using ep0 maxpacket: 16 [ 852.939346][T10777] usb 5-1: config 8 has an invalid interface number: 39 but max is 0 [ 852.948280][T10777] usb 5-1: config 8 has no interface number 0 [ 852.956038][T10783] usb 2-1: config 0 descriptor?? [ 852.981982][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 853.008764][ T9588] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 853.010843][T10777] usb 5-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 853.016710][ T9588] usb 4-1: can't read configurations, error -61 [ 853.217668][ T9588] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 853.218506][T10777] usb 5-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 853.438443][ T9588] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 853.450020][ T9588] usb 4-1: can't read configurations, error -61 [ 853.485814][ T9588] usb usb4-port1: attempt power cycle [ 853.508328][T10783] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input45 [ 853.527185][T10777] usb 5-1: config 8 interface 39 has no altsetting 0 [ 853.666471][T10777] usb 5-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 853.742821][T10777] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.803712][ T5894] usb 3-1: USB disconnect, device number 46 [ 853.817360][T10777] usb 5-1: Product: syz [ 853.874886][ T9588] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 853.898845][T10783] usb 2-1: USB disconnect, device number 28 [ 853.935600][T10777] usb 5-1: Manufacturer: syz [ 853.940776][ T9588] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 853.963894][ T9588] usb 4-1: can't read configurations, error -61 [ 853.965007][T10777] usb 5-1: SerialNumber: syz [ 854.116196][ T9588] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 854.212094][ T9588] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 854.220760][ T9588] usb 4-1: can't read configurations, error -61 [ 854.282928][ T9588] usb usb4-port1: unable to enumerate USB device [ 854.286289][T10777] ipheth 5-1:8.39: Unable to find endpoints [ 854.362837][T17222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3266'. [ 854.395651][T17222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3266'. [ 854.520232][T17228] FAULT_INJECTION: forcing a failure. [ 854.520232][T17228] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 854.544563][T10777] usb 5-1: USB disconnect, device number 36 [ 854.576347][T17228] CPU: 1 UID: 0 PID: 17228 Comm: syz.1.3268 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 854.576377][T17228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 854.576388][T17228] Call Trace: [ 854.576397][T17228] [ 854.576405][T17228] dump_stack_lvl+0x189/0x250 [ 854.576448][T17228] ? __pfx____ratelimit+0x10/0x10 [ 854.576474][T17228] ? __pfx_dump_stack_lvl+0x10/0x10 [ 854.576500][T17228] ? __pfx__printk+0x10/0x10 [ 854.576521][T17228] ? fs_reclaim_acquire+0x7d/0x100 [ 854.576550][T17228] should_fail_ex+0x414/0x560 [ 854.576578][T17228] prepare_alloc_pages+0x213/0x610 [ 854.576608][T17228] __alloc_frozen_pages_noprof+0x123/0x370 [ 854.576634][T17228] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 854.576666][T17228] ? policy_nodemask+0x27c/0x720 [ 854.576691][T17228] alloc_pages_mpol+0x232/0x4a0 [ 854.576716][T17228] vma_alloc_folio_noprof+0xe4/0x200 [ 854.576756][T17228] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 854.576788][T17228] folio_prealloc+0x30/0x180 [ 854.576812][T17228] do_wp_page+0x1231/0x5800 [ 854.576860][T17228] ? __pfx_do_wp_page+0x10/0x10 [ 854.576882][T17228] ? do_raw_spin_lock+0x121/0x290 [ 854.576905][T17228] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 854.576936][T17228] __handle_mm_fault+0x1144/0x5620 [ 854.576980][T17228] ? __pfx___handle_mm_fault+0x10/0x10 [ 854.577026][T17228] ? find_vma+0xe7/0x160 [ 854.577041][T17228] ? __pfx_find_vma+0x10/0x10 [ 854.577060][T17228] handle_mm_fault+0x40a/0x8e0 [ 854.577096][T17228] do_user_addr_fault+0x764/0x1390 [ 854.577138][T17228] exc_page_fault+0x76/0xf0 [ 854.577165][T17228] asm_exc_page_fault+0x26/0x30 [ 854.577183][T17228] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 854.577215][T17228] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca e9 17 3b 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 854.577231][T17228] RSP: 0018:ffffc9000bd178b8 EFLAGS: 00050246 [ 854.577248][T17228] RAX: 0000000000000020 RBX: 0000000000000020 RCX: 0000200000004030 [ 854.577261][T17228] RDX: ffff88802d78da00 RSI: 0000000000000000 RDI: 00000000ffffffff [ 854.577273][T17228] RBP: ffffc9000bd17a30 R08: ffffffff8fa104f7 R09: 1ffffffff1f4209e [ 854.577286][T17228] R10: dffffc0000000000 R11: fffffbfff1f4209f R12: 0000000000000000 [ 854.577297][T17228] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000200000004000 [ 854.577325][T17228] ____sys_recvmsg+0x2ab/0x460 [ 854.577357][T17228] ? __pfx_____sys_recvmsg+0x10/0x10 [ 854.577394][T17228] ? import_iovec+0x74/0xa0 [ 854.577415][T17228] ___sys_recvmsg+0x1b5/0x510 [ 854.577443][T17228] ? __pfx____sys_recvmsg+0x10/0x10 [ 854.577498][T17228] ? __might_fault+0xb0/0x130 [ 854.577519][T17228] do_recvmmsg+0x307/0x770 [ 854.577551][T17228] ? __pfx_do_recvmmsg+0x10/0x10 [ 854.577583][T17228] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 854.577625][T17228] __x64_sys_recvmmsg+0x190/0x240 [ 854.577650][T17228] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 854.577669][T17228] ? rcu_is_watching+0x15/0xb0 [ 854.577696][T17228] ? do_syscall_64+0xbe/0x3b0 [ 854.577723][T17228] do_syscall_64+0xfa/0x3b0 [ 854.577743][T17228] ? lockdep_hardirqs_on+0x9c/0x150 [ 854.577765][T17228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.577783][T17228] ? clear_bhb_loop+0x60/0xb0 [ 854.577804][T17228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.577821][T17228] RIP: 0033:0x7fcfbff8e929 [ 854.577837][T17228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 854.577851][T17228] RSP: 002b:00007fcfc0dd9038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 854.577868][T17228] RAX: ffffffffffffffda RBX: 00007fcfc01b5fa0 RCX: 00007fcfbff8e929 [ 854.577881][T17228] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000004 [ 854.577893][T17228] RBP: 00007fcfc0dd9090 R08: 0000000000000000 R09: 0000000000000000 [ 854.577905][T17228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 854.577915][T17228] R13: 0000000000000000 R14: 00007fcfc01b5fa0 R15: 00007fcfc02dfa28 [ 854.577941][T17228] [ 855.055419][T17231] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3267'. [ 855.171268][T16025] Bluetooth: hci5: unexpected event 0x20 length: 19 > 7 [ 855.178308][T17236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3269'. [ 855.195275][T17236] netlink: 'syz.4.3269': attribute type 2 has an invalid length. [ 855.203248][T17236] netlink: 'syz.4.3269': attribute type 1 has an invalid length. [ 855.212248][T17236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3269'. [ 855.741941][T10778] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 855.754621][T17250] fuse: Unknown parameter '0x0000000000000003' [ 855.912039][T10778] usb 2-1: Using ep0 maxpacket: 8 [ 855.979062][T10778] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 856.097039][T10778] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 856.664900][T10778] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 856.692267][T10778] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.722700][T10778] usb 2-1: Product: syz [ 856.727249][T10778] usb 2-1: Manufacturer: syz [ 856.750470][T10778] usb 2-1: SerialNumber: syz [ 856.779486][T10778] usb 2-1: config 0 descriptor?? [ 857.041898][T10778] rc_core: IR keymap rc-streamzap not found [ 857.049541][T10778] Registered IR keymap rc-empty [ 857.059722][T10778] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 857.176281][T10778] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input46 [ 857.425382][ T5844] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 857.648938][ T5844] usb 3-1: config 0 has no interfaces? [ 857.663832][ T5844] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 857.712053][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.744964][ T5844] usb 3-1: Product: syz [ 857.756854][ T5844] usb 3-1: Manufacturer: syz [ 857.767071][ T5844] usb 3-1: SerialNumber: syz [ 857.795306][ T5844] usb 3-1: config 0 descriptor?? [ 858.179932][ T5894] usb 2-1: USB disconnect, device number 29 [ 858.455342][T17277] No such timeout policy "syz1" [ 859.055160][T16025] Bluetooth: hci2: unexpected event 0x20 length: 19 > 7 [ 859.065470][T17291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3282'. [ 859.195452][T17291] netlink: 'syz.1.3282': attribute type 2 has an invalid length. [ 859.281902][T17291] netlink: 'syz.1.3282': attribute type 1 has an invalid length. [ 859.350340][T17291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3282'. [ 859.492883][T17302] gretap0: entered promiscuous mode [ 859.501025][T17302] macsec1: entered promiscuous mode [ 859.546500][T17302] gretap0: left promiscuous mode [ 860.064422][T17316] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3284'. [ 860.231902][T10777] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 860.511209][T10777] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 860.529418][T10777] usb 2-1: can't read configurations, error -61 [ 860.861922][T10777] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 860.917887][T17329] sctp: [Deprecated]: syz.4.3288 (pid 17329) Use of int in maxseg socket option. [ 860.917887][T17329] Use struct sctp_assoc_value instead [ 860.966764][T17329] netlink: 'syz.4.3288': attribute type 10 has an invalid length. [ 861.027519][T17330] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3289'. [ 861.427224][ T5844] usb 3-1: USB disconnect, device number 47 [ 861.528391][T10777] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 861.540913][T17335] netlink: 'syz.0.3290': attribute type 1 has an invalid length. [ 861.630490][T10777] usb 2-1: can't read configurations, error -61 [ 861.689179][T10777] usb usb2-port1: attempt power cycle [ 861.701425][T17335] 8021q: adding VLAN 0 to HW filter on device bond2 [ 861.728495][T17341] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 861.851156][T17345] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3294'. [ 861.866544][T16025] Bluetooth: hci3: unexpected event 0x20 length: 19 > 7 [ 861.867825][T17347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3295'. [ 861.899531][T17347] netlink: 'syz.2.3295': attribute type 2 has an invalid length. [ 861.944784][T17347] netlink: 'syz.2.3295': attribute type 1 has an invalid length. [ 861.954965][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 861.955017][ T30] audit: type=1326 audit(1751209840.400:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17348 comm="syz.3.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153c18e929 code=0x7ffc0000 [ 861.990406][T17347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3295'. [ 862.001258][ T30] audit: type=1326 audit(1751209840.410:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17348 comm="syz.3.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f153c18e929 code=0x7ffc0000 [ 862.068254][ T30] audit: type=1326 audit(1751209840.410:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17348 comm="syz.3.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153c18e929 code=0x7ffc0000 [ 862.094218][T10777] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 862.128813][T10777] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 862.168901][T17358] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3296'. [ 862.190289][T10777] usb 2-1: can't read configurations, error -61 [ 862.270133][ T30] audit: type=1326 audit(1751209840.410:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17348 comm="syz.3.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f153c18e929 code=0x7ffc0000 [ 862.336488][ T30] audit: type=1326 audit(1751209840.410:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17348 comm="syz.3.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153c18e929 code=0x7ffc0000 [ 862.362106][T10777] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 862.380694][T17364] openvswitch: netlink: Multiple metadata blocks provided [ 862.402829][ T30] audit: type=1326 audit(1751209840.410:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17348 comm="syz.3.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153c18e929 code=0x7ffc0000 [ 862.476494][ T5844] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 862.599366][ T30] audit: type=1326 audit(1751209840.410:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17348 comm="syz.3.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f153c18e929 code=0x7ffc0000 [ 862.717534][ T30] audit: type=1326 audit(1751209840.410:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17348 comm="syz.3.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153c18e929 code=0x7ffc0000 [ 862.755035][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 862.799744][ T5844] usb 4-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 862.800701][ T30] audit: type=1326 audit(1751209840.410:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17348 comm="syz.3.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153c18e929 code=0x7ffc0000 [ 862.886428][T10777] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 862.888471][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.921334][T10777] usb 2-1: can't read configurations, error -71 [ 862.943724][T10777] usb usb2-port1: unable to enumerate USB device [ 862.972062][ T5844] usb 4-1: config 0 descriptor?? [ 863.223739][T17357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 863.245397][T17357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 863.792925][T10777] usb 4-1: USB disconnect, device number 39 [ 863.965867][T17379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3303'. [ 864.042530][T10783] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 864.401516][T17381] xt_CT: No such helper "syz1" [ 864.431917][T17379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3303'. [ 864.461441][T17383] netlink: 2052 bytes leftover after parsing attributes in process `syz.3.3304'. [ 864.487501][T17383] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 864.792254][T10783] usb 2-1: config 0 has no interfaces? [ 864.804447][T10783] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 864.815015][T10783] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.826597][T10783] usb 2-1: Product: syz [ 864.837204][T10783] usb 2-1: Manufacturer: syz [ 864.870326][T10783] usb 2-1: SerialNumber: syz [ 864.885151][T10783] usb 2-1: config 0 descriptor?? [ 865.241874][T16025] Bluetooth: hci5: unexpected event 0x20 length: 19 > 7 [ 865.244340][T17394] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3308'. [ 865.266325][T17394] netlink: 'syz.4.3308': attribute type 2 has an invalid length. [ 865.276469][T17394] netlink: 'syz.4.3308': attribute type 1 has an invalid length. [ 865.288819][T17394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3308'. [ 866.189507][T17410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3312'. [ 866.594718][T10783] usb 2-1: USB disconnect, device number 34 [ 866.596716][T17414] input: syz0 as /devices/virtual/input/input48 [ 866.621955][ T5844] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 866.852223][ T5844] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 866.871393][ T5844] usb 3-1: can't read configurations, error -61 [ 866.944900][T17423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3318'. [ 867.017476][T10778] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 867.020207][T16025] Bluetooth: hci1: unexpected event 0x20 length: 19 > 7 [ 867.031944][T10783] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 867.032052][ T5844] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 867.110690][T17425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3320'. [ 867.142498][T17425] netlink: 'syz.0.3320': attribute type 2 has an invalid length. [ 867.150878][T17425] netlink: 'syz.0.3320': attribute type 1 has an invalid length. [ 867.191576][T17425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3320'. [ 867.233655][T10783] usb 2-1: Using ep0 maxpacket: 8 [ 867.244929][T10783] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 867.258702][T10783] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 867.268809][T10778] usb 5-1: Using ep0 maxpacket: 16 [ 867.278886][T10778] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 867.288575][T10783] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 867.299273][T10778] usb 5-1: config 0 has no interface number 0 [ 867.306281][T10783] usb 2-1: Product: syz [ 867.312970][T10783] usb 2-1: Manufacturer: syz [ 867.318017][T10783] usb 2-1: SerialNumber: syz [ 867.325162][T10778] usb 5-1: New USB device found, idVendor=06e1, idProduct=0709, bcdDevice= 2.04 [ 867.342139][T10778] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.350353][T10778] usb 5-1: Product: syz [ 867.358716][T10778] usb 5-1: Manufacturer: syz [ 867.365502][T10778] usb 5-1: SerialNumber: syz [ 867.379292][T10778] usb 5-1: config 0 descriptor?? [ 867.478526][T17436] openvswitch: netlink: Multiple metadata blocks provided [ 867.571602][T17418] netlink: 83 bytes leftover after parsing attributes in process `syz.1.3316'. [ 867.672354][T10778] go7007 5-1:0.41: probe with driver go7007 failed with error -12 [ 867.735653][ T5844] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 867.746828][ T5844] usb 3-1: can't read configurations, error -61 [ 867.756970][ T5844] usb usb3-port1: attempt power cycle [ 867.765939][T10783] usb 2-1: palm_os_3_probe - error -110 getting connection information [ 867.783299][T10778] usb 5-1: USB disconnect, device number 37 [ 867.846235][T10783] visor 2-1:1.0: probe with driver visor failed with error -110 [ 867.994633][T17438] sctp: [Deprecated]: syz.1.3316 (pid 17438) Use of int in max_burst socket option deprecated. [ 867.994633][T17438] Use struct sctp_assoc_value instead [ 868.122361][ T5844] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 868.187323][ T5844] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 868.196481][ T5844] usb 3-1: can't read configurations, error -61 [ 868.363116][ T5844] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 868.429609][ T5844] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 868.438073][ T5844] usb 3-1: can't read configurations, error -61 [ 868.457580][ T5844] usb usb3-port1: unable to enumerate USB device [ 868.899936][ T5844] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 868.982008][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 869.137718][ T5844] usb 1-1: config 0 has no interfaces? [ 869.160953][ T5844] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 869.559029][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.727975][ T5844] usb 1-1: Product: syz [ 869.733595][ T5844] usb 1-1: Manufacturer: syz [ 869.739279][ T5844] usb 1-1: SerialNumber: syz [ 869.761197][ T5844] usb 1-1: config 0 descriptor?? [ 870.000949][T10778] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 870.296167][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.304304][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.321907][T10778] usb 5-1: config 0 has no interfaces? [ 870.338552][T10778] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 870.414142][T10778] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.445518][T10783] usb 2-1: USB disconnect, device number 35 [ 870.691987][T10778] usb 5-1: Product: syz [ 870.716150][T10778] usb 5-1: Manufacturer: syz [ 870.720817][T10778] usb 5-1: SerialNumber: syz [ 870.781632][T10778] usb 5-1: config 0 descriptor?? [ 871.212071][ T30] audit: type=1326 audit(1751209849.580:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17460 comm="syz.4.3329" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccf3b8e929 code=0x0 [ 871.235318][ C1] vkms_vblank_simulate: vblank timer overrun [ 871.531866][ T5894] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 871.536069][T17473] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3332'. [ 871.540061][T16025] Bluetooth: hci0: unexpected event 0x20 length: 19 > 7 [ 871.554181][T17473] netlink: 'syz.3.3332': attribute type 2 has an invalid length. [ 871.592593][T17473] netlink: 'syz.3.3332': attribute type 1 has an invalid length. [ 871.602909][T17473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3332'. [ 871.775260][ T5894] usb 3-1: Using ep0 maxpacket: 8 [ 871.799266][ T5894] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 871.829285][ T5894] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 871.861228][ T5894] usb 3-1: config 6 has no interface number 0 [ 871.904538][ T5894] usb 3-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 871.952970][ T5894] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 871.982005][ T5894] usb 3-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 872.084276][ T5894] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 872.104074][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.127062][ T5894] usb 3-1: Product: syz [ 872.131314][ T5894] usb 3-1: Manufacturer: syz [ 872.213421][ T5894] usb 3-1: SerialNumber: syz [ 872.264614][ T5894] hso 3-1:6.2: Failed to find INT IN ep [ 872.279244][T10766] usb 5-1: USB disconnect, device number 38 [ 872.392991][ T5844] usb 1-1: USB disconnect, device number 47 [ 872.535412][T17480] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3335'. [ 873.022901][T17492] macsec2: entered promiscuous mode [ 873.320200][T17502] openvswitch: netlink: Multiple metadata blocks provided [ 873.502129][T10783] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 873.520217][T16025] Bluetooth: hci2: unexpected event 0x20 length: 19 > 7 [ 873.527135][T17505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3343'. [ 873.776218][T17505] netlink: 'syz.1.3343': attribute type 2 has an invalid length. [ 873.819644][T17505] netlink: 'syz.1.3343': attribute type 1 has an invalid length. [ 873.836307][T10783] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 873.854351][T10783] usb 1-1: can't read configurations, error -61 [ 873.869318][T17505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3343'. [ 874.141943][T10783] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 874.288129][T10777] usb 3-1: USB disconnect, device number 52 [ 874.296443][T10778] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 874.302549][T17513] loop6: detected capacity change from 0 to 524287999 [ 874.424448][T10783] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 874.544050][T10783] usb 1-1: can't read configurations, error -61 [ 874.572125][T10783] usb usb1-port1: attempt power cycle [ 874.631890][T10778] usb 2-1: config 0 has no interfaces? [ 874.792883][T10778] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 874.806967][T10778] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.828639][T10778] usb 2-1: Product: syz [ 874.877314][T10778] usb 2-1: Manufacturer: syz [ 874.928324][T10778] usb 2-1: SerialNumber: syz [ 875.013417][T17522] netlink: 'syz.2.3346': attribute type 1 has an invalid length. [ 875.022916][T17522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3346'. [ 875.042373][T10783] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 875.064034][T10778] usb 2-1: config 0 descriptor?? [ 875.205518][T10783] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 875.226200][T10783] usb 1-1: can't read configurations, error -61 [ 875.505873][T17530] bridge0: port 3(gretap0) entered blocking state [ 875.517271][T17530] bridge0: port 3(gretap0) entered disabled state [ 875.526411][T17530] gretap0: entered allmulticast mode [ 875.539566][T17530] gretap0: entered promiscuous mode [ 875.549078][T17530] bridge0: port 3(gretap0) entered blocking state [ 875.555790][T17530] bridge0: port 3(gretap0) entered forwarding state [ 875.612078][T10783] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 875.634818][T17532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3349'. [ 875.909715][T10783] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 875.979599][T10783] usb 1-1: can't read configurations, error -61 [ 875.998574][T17538] tipc: Started in network mode [ 876.013778][T17538] tipc: Node identity -:, cluster identity 4711 [ 876.072785][T17538] tipc: Enabling of bearer rejected, failed to enable media [ 876.072783][T10783] usb usb1-port1: unable to enumerate USB device [ 876.389366][ T5894] IPVS: starting estimator thread 0... [ 876.503805][T17545] IPVS: using max 38 ests per chain, 91200 per kthread [ 876.561976][T10766] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 876.793705][T10766] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 876.822063][T10783] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 876.852031][T10766] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 876.872707][T10766] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 876.921034][T10766] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.969539][T10766] usb 3-1: config 0 descriptor?? [ 876.975243][T10783] usb 5-1: Using ep0 maxpacket: 32 [ 877.072213][T10783] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 877.145940][T10783] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 877.192164][T10783] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 877.211948][T10777] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 877.272092][T10783] usb 5-1: Product: syz [ 877.276440][T10783] usb 5-1: Manufacturer: syz [ 877.295240][T10783] usb 5-1: SerialNumber: syz [ 877.330736][T10783] usb 5-1: config 0 descriptor?? [ 877.365328][T17549] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 877.393380][T10783] hub 5-1:0.0: bad descriptor, ignoring hub [ 877.408498][T10783] hub 5-1:0.0: probe with driver hub failed with error -5 [ 877.464501][T10777] usb 4-1: Using ep0 maxpacket: 8 [ 877.506342][T10777] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 877.525989][T10777] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 877.531063][T10766] usb 3-1: USB disconnect, device number 53 [ 877.580303][T10777] usb 4-1: config 6 has no interface number 0 [ 877.598813][T10777] usb 4-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 877.644773][T10777] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 877.681953][T10777] usb 4-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 877.733142][T10780] usb 5-1: USB disconnect, device number 39 [ 877.761962][T17555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3358'. [ 877.761999][T10778] usb 2-1: USB disconnect, device number 36 [ 877.873074][T10777] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 877.898922][T17555] macvtap1: entered promiscuous mode [ 877.912301][T17555] team0: entered promiscuous mode [ 877.913203][T10777] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.918612][T17555] macvtap1: entered allmulticast mode [ 877.930844][T10777] usb 4-1: Product: syz [ 877.941373][T10777] usb 4-1: Manufacturer: syz [ 877.950547][T10777] usb 4-1: SerialNumber: syz [ 877.971083][T10777] hso 4-1:6.2: Failed to find INT IN ep [ 877.971217][T17555] team0: entered allmulticast mode [ 877.999420][T17555] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 878.139023][T17563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3362'. [ 878.383359][T10778] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 878.588721][T10778] usb 2-1: Using ep0 maxpacket: 16 [ 878.601187][T10778] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 878.621460][T10778] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 878.633642][T10778] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 878.644680][T10778] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.657063][T10778] usb 2-1: config 0 descriptor?? [ 878.712182][T10777] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 878.876139][T17582] openvswitch: netlink: Multiple metadata blocks provided [ 879.066185][T10777] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.083885][T10777] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 879.097282][T10777] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 879.133946][T10777] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.159504][T17586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 879.187522][T10777] usb 3-1: config 0 descriptor?? [ 879.208166][T17586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 879.562847][ T5894] usb 4-1: USB disconnect, device number 40 [ 879.631978][T17104] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 879.822489][T17570] macsec2: entered promiscuous mode [ 879.832124][T17570] ip6gretap0: entered promiscuous mode [ 879.838223][T17570] macsec2: entered allmulticast mode [ 879.844486][T17570] ip6gretap0: entered allmulticast mode [ 879.874697][T17104] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 879.882755][T17104] usb 5-1: can't read configurations, error -61 [ 879.982869][T17570] ip6gretap0: left allmulticast mode [ 880.000024][T17570] ip6gretap0: left promiscuous mode [ 880.011959][T17104] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 880.092010][T10780] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 880.152183][T10777] usbhid 3-1:0.0: can't add hid device: -71 [ 880.161048][T10777] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 880.201812][T17104] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 880.219077][T17104] usb 5-1: can't read configurations, error -61 [ 880.230031][T10777] usb 3-1: USB disconnect, device number 54 [ 880.249499][T17104] usb usb5-port1: attempt power cycle [ 880.335819][T10780] usb 4-1: config 0 has no interfaces? [ 880.346037][T10780] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 880.399393][T10780] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.489362][T10780] usb 4-1: Product: syz [ 880.501109][T10780] usb 4-1: Manufacturer: syz [ 880.526084][T10780] usb 4-1: SerialNumber: syz [ 880.556279][T10780] usb 4-1: config 0 descriptor?? [ 880.714885][T17597] xt_hashlimit: max too large, truncated to 1048576 [ 880.765106][T17104] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 880.801614][T17104] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 880.809707][T17104] usb 5-1: can't read configurations, error -61 [ 880.941920][T17104] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 881.002220][T17104] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 881.037093][T17104] usb 5-1: can't read configurations, error -61 [ 881.047784][T17104] usb usb5-port1: unable to enumerate USB device [ 881.199819][T10778] usbhid 2-1:0.0: can't add hid device: -71 [ 881.227899][T10778] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 881.305980][T10778] usb 2-1: USB disconnect, device number 37 [ 881.389017][T17605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3371'. [ 882.691977][T17104] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 882.841942][T17104] usb 1-1: Using ep0 maxpacket: 32 [ 882.862706][T10778] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 882.920908][T17104] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 882.929787][T17104] usb 1-1: config 0 has no interface number 0 [ 882.936224][T17104] usb 1-1: config 0 interface 12 has no altsetting 0 [ 882.949156][T17104] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 882.958979][T17104] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.969472][T17104] usb 1-1: Product: syz [ 882.975000][T17104] usb 1-1: Manufacturer: syz [ 882.981316][T17104] usb 1-1: SerialNumber: syz [ 883.004712][T10780] usb 4-1: USB disconnect, device number 41 [ 883.011190][T17104] usb 1-1: config 0 descriptor?? [ 883.065419][T10778] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 883.088657][T10778] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 883.106630][T10778] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.125917][T10778] usb 2-1: config 0 descriptor?? [ 883.157411][T17624] team_slave_0: entered promiscuous mode [ 883.163524][T17624] team_slave_1: entered promiscuous mode [ 883.175972][T17624] vlan2: entered promiscuous mode [ 883.181526][T17624] team0: entered promiscuous mode [ 883.442003][T17104] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 883.442000][T10766] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 883.442148][T17104] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 883.478482][T17104] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 883.490348][T17104] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 883.526348][T17104] usb 1-1: USB disconnect, device number 52 [ 883.560357][T10778] aquacomputer_d5next 0003:0C70:F00B.001D: hidraw0: USB HID v1.01 Device [HID 0c70:f00b] on usb-dummy_hcd.1-1/input0 [ 883.622491][T10766] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 883.651840][T10766] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 883.697407][T10766] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 883.733384][T10766] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.753638][T17104] usb 2-1: USB disconnect, device number 38 [ 883.761883][T10767] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 883.786551][T10766] usb 5-1: config 0 descriptor?? [ 883.801579][T17634] fido_id[17634]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 883.943950][T10767] usb 4-1: Using ep0 maxpacket: 8 [ 883.968174][T10767] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 883.971874][T17638] netdevsim netdevsim2 netdevsim0: Device is already in use. [ 883.996788][T10767] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 884.039166][T17626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.052526][T17626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.081064][T10767] usb 4-1: config 6 has no interface number 0 [ 884.089215][T10767] usb 4-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 884.110284][T10766] Bluetooth: Can't get state to change to load ram patch err [ 884.142313][T10767] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 884.152322][T10766] Bluetooth: Loading patch file failed [ 884.157821][T10766] ath3k 5-1:0.0: probe with driver ath3k failed with error -32 [ 884.191916][T10767] usb 4-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 884.220486][T10766] usb 5-1: USB disconnect, device number 44 [ 884.246686][T10767] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 884.256279][T10767] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.266035][T10767] usb 4-1: Product: syz [ 884.270441][T10767] usb 4-1: Manufacturer: syz [ 884.277887][T10767] usb 4-1: SerialNumber: syz [ 884.304697][T10767] hso 4-1:6.2: Failed to find INT IN ep [ 884.731868][T10767] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 884.905412][T10767] usb 1-1: config 160 has an invalid interface number: 200 but max is 0 [ 884.916201][T10767] usb 1-1: config 160 has no interface number 0 [ 884.925036][T10767] usb 1-1: config 160 interface 200 has no altsetting 0 [ 884.963269][T10767] usb 1-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 884.973309][T10767] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.981547][T10767] usb 1-1: Product: syz [ 884.987122][T10767] usb 1-1: Manufacturer: syz [ 884.997468][T10767] usb 1-1: SerialNumber: syz [ 885.436303][T17656] netlink: 'syz.4.3385': attribute type 4 has an invalid length. [ 885.445872][T17656] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3385'. [ 885.473178][T17656] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 886.366595][ T5894] usb 4-1: USB disconnect, device number 42 [ 887.181983][T10780] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 887.230057][ T5894] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 887.449565][T10780] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 887.472437][T10780] usb 3-1: can't read configurations, error -61 [ 887.596431][ T5894] usb 4-1: config 0 has no interfaces? [ 887.673253][ T5894] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 887.775594][T10780] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 887.801942][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.810054][ T5894] usb 4-1: Product: syz [ 887.888504][ T5894] usb 4-1: Manufacturer: syz [ 887.902120][T17666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3388'. [ 887.924079][ T5894] usb 4-1: SerialNumber: syz [ 887.947106][ T5894] usb 4-1: config 0 descriptor?? [ 888.055736][T10780] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 888.063686][T10780] usb 3-1: can't read configurations, error -61 [ 888.094097][T10780] usb usb3-port1: attempt power cycle [ 888.219427][T10767] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 888.254011][T10767] usb 1-1: MIDIStreaming interface descriptor not found [ 888.410523][T10767] usb 1-1: USB disconnect, device number 53 [ 888.521949][T10780] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 888.675686][T10780] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 888.736940][T10780] usb 3-1: can't read configurations, error -61 [ 888.993798][T10780] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 889.060343][T10780] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 889.069856][T10780] usb 3-1: can't read configurations, error -61 [ 889.077174][T10780] usb usb3-port1: unable to enumerate USB device [ 889.225578][T16025] Bluetooth: hci5: unexpected event 0x20 length: 19 > 7 [ 889.228680][T17679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3392'. [ 889.295877][T17679] netlink: 'syz.4.3392': attribute type 2 has an invalid length. [ 889.337442][T17679] netlink: 'syz.4.3392': attribute type 1 has an invalid length. [ 889.476086][T17679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3392'. [ 890.555922][ T5894] usb 4-1: USB disconnect, device number 43 [ 890.880963][T17713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3396'. [ 891.051849][T10766] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 891.234469][T10766] usb 3-1: Using ep0 maxpacket: 16 [ 891.243603][T10766] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 891.254716][T10766] usb 3-1: config 0 interface 0 has no altsetting 0 [ 891.270239][T10766] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 891.281854][T10766] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.293429][T10766] usb 3-1: Product: syz [ 891.308150][T10766] usb 3-1: Manufacturer: syz [ 891.330398][T10766] usb 3-1: SerialNumber: syz [ 891.371527][T10766] usb 3-1: config 0 descriptor?? [ 891.371981][T10780] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 891.416590][T10766] hub 3-1:0.0: bad descriptor, ignoring hub [ 891.425641][T10766] hub 3-1:0.0: probe with driver hub failed with error -5 [ 891.462475][T10766] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 891.591952][T17104] usb 2-1: new low-speed USB device number 39 using dummy_hcd [ 891.604951][T10780] usb 1-1: Using ep0 maxpacket: 8 [ 891.629085][T14641] usb 3-1: Failed to submit usb control message: -71 [ 891.657766][T10780] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 891.666933][T14641] usb 3-1: unable to send the bmi data to the device: -71 [ 891.680524][T10780] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 891.693498][T17729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3400'. [ 891.702049][T14641] usb 3-1: unable to get target info from device [ 891.711746][T10780] usb 1-1: config 6 has no interface number 0 [ 891.722004][T14641] usb 3-1: could not get target info (-71) [ 891.735512][T10780] usb 1-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 891.795542][T14641] usb 3-1: could not probe fw (-71) [ 891.804980][T17104] usb 2-1: config 65 has an invalid interface number: 95 but max is 0 [ 891.814358][T17104] usb 2-1: config 65 has no interface number 0 [ 891.838348][T17104] usb 2-1: language id specifier not provided by device, defaulting to English [ 891.849989][T10780] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 891.917864][T10780] usb 1-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 891.960473][T10780] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 892.035460][T10780] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.231088][T10780] usb 1-1: Product: syz [ 892.286450][T10780] usb 1-1: Manufacturer: syz [ 892.309056][T10780] usb 1-1: SerialNumber: syz [ 892.356128][T10780] hso 1-1:6.2: Failed to find INT IN ep [ 892.504224][T17739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.544243][T17739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.741986][T10766] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 892.894621][T10766] usb 5-1: Using ep0 maxpacket: 32 [ 892.910250][T10766] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 892.961913][T10766] usb 5-1: config 0 has no interface number 0 [ 893.013878][T10766] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 893.071172][T17744] BUG: Bad page state in process syz.3.3403 pfn:88e01 [ 893.093044][T17744] page does not match folio [ 893.103411][T17744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x88e01 [ 893.145460][T17744] ksm flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 893.189964][T17744] raw: 00fff00000000000 ffffea0002238000 00000000ffffffff ffffffffffffffff [ 893.224516][T10766] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.246948][T10766] usb 5-1: Product: syz [ 893.257020][T10766] usb 5-1: Manufacturer: syz [ 893.271461][T10766] usb 5-1: SerialNumber: syz [ 893.297198][T10766] usb 5-1: config 0 descriptor?? [ 893.320277][T17744] raw: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 893.338565][T10766] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 893.356936][T17744] page dumped because: nonzero pincount [ 893.363957][T17744] page_owner tracks the page as allocated [ 893.372413][T10767] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 893.420036][T17744] page last allocated via order 9, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 17742, tgid 17742 (syz.3.3403), ts 892587841454, free_ts 875336146142 [ 893.564754][T10766] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 893.604716][T17744] post_alloc_hook+0x240/0x2a0 [ 893.617554][T10766] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 893.632630][T17744] get_page_from_freelist+0x21e4/0x22c0 [ 893.650405][T17744] __alloc_frozen_pages_noprof+0x181/0x370 [ 893.662477][T10780] usb 3-1: USB disconnect, device number 59 [ 893.716990][T17744] alloc_pages_mpol+0x232/0x4a0 [ 893.748291][T17113] usb 1-1: USB disconnect, device number 54 [ 893.756602][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 40 [ 893.762470][T17744] alloc_pages_noprof+0xa9/0x190 [ 893.827250][T17744] folio_alloc_noprof+0x1e/0x30 [ 893.895790][T17744] filemap_alloc_folio_noprof+0xdf/0x470 [ 893.919177][T10767] usb 4-1: config 0 has no interfaces? [ 893.928344][T17744] page_cache_ra_order+0x5e5/0xc70 [ 893.939748][T10767] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 893.950791][T17744] do_sync_mmap_readahead+0x31a/0x5f0 [ 893.954384][T10767] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.976936][T10767] usb 4-1: Product: syz [ 893.981213][T10767] usb 4-1: Manufacturer: syz [ 893.990993][T10767] usb 4-1: SerialNumber: syz [ 894.000520][T10767] usb 4-1: config 0 descriptor?? [ 894.007485][T17744] filemap_fault+0x62a/0x1200 [ 894.024704][T17744] __do_fault+0x135/0x390 [ 894.069706][T17744] __handle_mm_fault+0x198b/0x5620 [ 894.100888][T17744] handle_mm_fault+0x40a/0x8e0 [ 894.156952][T17744] do_user_addr_fault+0xa81/0x1390 [ 894.196216][T17744] exc_page_fault+0x76/0xf0 [ 894.219632][T17744] asm_exc_page_fault+0x26/0x30 [ 894.240950][T17744] page last free pid 17519 tgid 17510 stack trace: [ 894.270770][T17744] free_unref_folios+0xc66/0x14d0 [ 894.310665][T17744] folios_put_refs+0x559/0x640 [ 894.349815][T17104] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6f.b6 [ 894.375736][T17104] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.397040][T17744] truncate_inode_pages_range+0x346/0xda0 [ 894.409007][T17104] usb 2-1: can't set config #65, error -71 [ 894.431331][T17104] usb 2-1: USB disconnect, device number 39 [ 894.439730][T17744] blkdev_flush_mapping+0x108/0x270 [ 894.451943][T17744] bdev_release+0x417/0x650 [ 894.457042][T17744] blkdev_release+0x15/0x20 [ 894.461894][T17744] __fput+0x44c/0xa70 [ 894.466240][T17744] task_work_run+0x1d1/0x260 [ 894.471002][T17744] do_exit+0x6b5/0x22e0 [ 894.475858][T17744] do_group_exit+0x21c/0x2d0 [ 894.480785][T17744] get_signal+0x1286/0x1340 [ 894.485778][T17744] arch_do_signal_or_restart+0x9a/0x750 [ 894.491679][T17744] exit_to_user_mode_loop+0x75/0x110 [ 894.497606][T17744] do_syscall_64+0x2bd/0x3b0 [ 894.502386][T17744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.508537][T17744] Modules linked in: [ 894.512873][T17744] CPU: 1 UID: 0 PID: 17744 Comm: syz.3.3403 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 894.512897][T17744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 894.512908][T17744] Call Trace: [ 894.512916][T17744] [ 894.512924][T17744] dump_stack_lvl+0x189/0x250 [ 894.512958][T17744] ? __pfx_dump_stack_lvl+0x10/0x10 [ 894.512985][T17744] ? __pfx_print_modules+0x10/0x10 [ 894.513009][T17744] ? percpu_ref_put+0x19/0x180 [ 894.513030][T17744] ? percpu_ref_put+0xf9/0x180 [ 894.513054][T17744] bad_page+0x180/0x1c0 [ 894.513079][T17744] free_tail_page_prepare+0x2c3/0x4f0 [ 894.513109][T17744] __free_frozen_pages+0x8aa/0xe70 [ 894.513138][T17744] __folio_put+0x21b/0x2c0 [ 894.513161][T17744] ? __pfx___folio_put+0x10/0x10 [ 894.513192][T17744] delete_from_page_cache_batch+0x84c/0x9b0 [ 894.513210][T17744] ? shmem_mapping+0xd/0x50 [ 894.513253][T17744] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 894.513278][T17744] ? __filemap_fdatawait_range+0x1d2/0x230 [ 894.513305][T17744] ? __pfx_workingset_update_node+0x10/0x10 [ 894.513327][T17744] ? folio_mapping+0x16f/0x240 [ 894.513353][T17744] ? truncate_cleanup_folio+0x34a/0x430 [ 894.513382][T17744] truncate_inode_pages_range+0x28a/0xda0 [ 894.513419][T17744] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 894.513467][T17744] ? smp_call_function_many_cond+0xbc5/0x12d0 [ 894.513494][T17744] ? lockdep_hardirqs_on+0x9c/0x150 [ 894.513558][T17744] ? __pfx_has_bh_in_lru+0x10/0x10 [ 894.513590][T17744] blkdev_flush_mapping+0x108/0x270 [ 894.513616][T17744] ? bdev_release+0x40f/0x650 [ 894.513639][T17744] bdev_release+0x417/0x650 [ 894.513665][T17744] ? __pfx_blkdev_release+0x10/0x10 [ 894.513679][T17744] blkdev_release+0x15/0x20 [ 894.513692][T17744] __fput+0x44c/0xa70 [ 894.513722][T17744] task_work_run+0x1d1/0x260 [ 894.513744][T17744] ? __pfx_task_work_run+0x10/0x10 [ 894.513766][T17744] ? kmem_cache_free+0x18f/0x400 [ 894.513786][T17744] do_exit+0x6b5/0x22e0 [ 894.513804][T17744] ? __pfx_get_timespec64+0x10/0x10 [ 894.513833][T17744] ? __pfx_do_exit+0x10/0x10 [ 894.513913][T17744] ? rcu_is_watching+0x15/0xb0 [ 894.513946][T17744] __x64_sys_exit+0x40/0x40 [ 894.513965][T17744] x64_sys_call+0x21a3/0x21c0 [ 894.513981][T17744] do_syscall_64+0xfa/0x3b0 [ 894.514003][T17744] ? lockdep_hardirqs_on+0x9c/0x150 [ 894.514024][T17744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.514040][T17744] ? clear_bhb_loop+0x60/0xb0 [ 894.514058][T17744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.514075][T17744] RIP: 0033:0x7f153c18e929 [ 894.514091][T17744] Code: Unable to access opcode bytes at 0x7f153c18e8ff. [ 894.514113][T17744] RSP: 002b:00007f153cfd2fe8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 894.514133][T17744] RAX: ffffffffffffffda RBX: 00007f153c3b5fa0 RCX: 00007f153c18e929 [ 894.514147][T17744] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 894.514158][T17744] RBP: 00007f153c210b39 R08: 0000000000000000 R09: 0000000000000000 [ 894.514170][T17744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 894.514181][T17744] R13: 0000000000000000 R14: 00007f153c3b5fa0 R15: 00007f153c4dfa28 [ 894.514209][T17744] [ 894.514357][T17744] Disabling lock debugging due to kernel taint [ 894.902638][T17744] BUG: Bad page state in process syz.3.3403 pfn:88e00 [ 894.911211][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 894.913038][T10780] usb 5-1: USB disconnect, device number 45 [ 894.992676][T10780] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 895.009454][T17744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x88e00 [ 895.026214][T10780] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 895.043137][T17744] head: order:0 mapcount:0 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 895.054442][T17744] flags: 0xfff1000000004d(locked|referenced|uptodate|head|node=0|zone=1|lastcpupid=0x7ff) [ 895.059578][T10780] quatech2 5-1:0.51: device disconnected [ 895.081042][T17744] raw: 00fff1000000004d dead000000000100 dead000000000122 0000000000000000 [ 895.097529][T17744] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 895.108304][T17744] head: 00fff1000000004d dead000000000100 dead000000000122 0000000000000000 [ 895.121590][T17744] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 895.159085][T17744] head: 00fff00000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 895.172015][T17744] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 895.184718][T17744] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 895.211441][T17744] page_owner tracks the page as allocated [ 895.226712][T17744] page last allocated via order 9, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 17742, tgid 17742 (syz.3.3403), ts 892587841454, free_ts 875336146142 [ 895.292045][T17744] post_alloc_hook+0x240/0x2a0 [ 895.297290][T17744] get_page_from_freelist+0x21e4/0x22c0 [ 895.323399][T17744] __alloc_frozen_pages_noprof+0x181/0x370 [ 895.334005][T17744] alloc_pages_mpol+0x232/0x4a0 [ 895.339287][T17744] alloc_pages_noprof+0xa9/0x190 [ 895.347358][T17744] folio_alloc_noprof+0x1e/0x30 [ 895.367733][T17744] filemap_alloc_folio_noprof+0xdf/0x470 [ 895.382579][T17744] page_cache_ra_order+0x5e5/0xc70 [ 895.388117][T17744] do_sync_mmap_readahead+0x31a/0x5f0 [ 895.398521][T17744] filemap_fault+0x62a/0x1200 [ 895.414004][T17744] __do_fault+0x135/0x390 [ 895.418855][T17744] __handle_mm_fault+0x198b/0x5620 [ 895.425205][T17744] handle_mm_fault+0x40a/0x8e0 [ 895.431241][T17744] do_user_addr_fault+0xa81/0x1390 [ 895.459165][T17744] exc_page_fault+0x76/0xf0 [ 895.466531][T17744] asm_exc_page_fault+0x26/0x30 [ 895.472192][T17744] page last free pid 17519 tgid 17510 stack trace: [ 895.480758][T17744] free_unref_folios+0xc66/0x14d0 [ 895.490638][T17744] folios_put_refs+0x559/0x640 [ 895.497319][T17744] truncate_inode_pages_range+0x346/0xda0 [ 895.506345][T17744] blkdev_flush_mapping+0x108/0x270 [ 895.512867][T17744] bdev_release+0x417/0x650 [ 895.521868][T17744] blkdev_release+0x15/0x20 [ 895.541868][T17744] __fput+0x44c/0xa70 [ 895.552784][T17744] task_work_run+0x1d1/0x260 [ 895.559826][T17744] do_exit+0x6b5/0x22e0 [ 895.564107][T17744] do_group_exit+0x21c/0x2d0 [ 895.568751][T17744] get_signal+0x1286/0x1340 [ 895.574139][T17744] arch_do_signal_or_restart+0x9a/0x750 [ 895.585660][T17744] exit_to_user_mode_loop+0x75/0x110 [ 895.592546][T17744] do_syscall_64+0x2bd/0x3b0 [ 895.598284][T17744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.606130][T17744] Modules linked in: [ 895.610071][T17744] CPU: 0 UID: 0 PID: 17744 Comm: syz.3.3403 Tainted: G B 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 895.610099][T17744] Tainted: [B]=BAD_PAGE [ 895.610106][T17744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 895.610117][T17744] Call Trace: [ 895.610125][T17744] [ 895.610132][T17744] dump_stack_lvl+0x189/0x250 [ 895.610163][T17744] ? __pfx_dump_stack_lvl+0x10/0x10 [ 895.610187][T17744] ? __pfx_print_modules+0x10/0x10 [ 895.610209][T17744] ? free_page_is_bad+0x7d/0x180 [ 895.610229][T17744] bad_page+0x180/0x1c0 [ 895.610251][T17744] __free_frozen_pages+0xe17/0xe70 [ 895.610272][T17744] __folio_put+0x21b/0x2c0 [ 895.610292][T17744] ? __pfx___folio_put+0x10/0x10 [ 895.610313][T17744] delete_from_page_cache_batch+0x84c/0x9b0 [ 895.610330][T17744] ? shmem_mapping+0xd/0x50 [ 895.610351][T17744] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 895.610376][T17744] ? __filemap_fdatawait_range+0x1d2/0x230 [ 895.610394][T17744] ? __pfx_workingset_update_node+0x10/0x10 [ 895.610414][T17744] ? folio_mapping+0x16f/0x240 [ 895.610437][T17744] ? truncate_cleanup_folio+0x34a/0x430 [ 895.610461][T17744] truncate_inode_pages_range+0x28a/0xda0 [ 895.610490][T17744] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 895.610523][T17744] ? smp_call_function_many_cond+0xbc5/0x12d0 [ 895.610548][T17744] ? lockdep_hardirqs_on+0x9c/0x150 [ 895.610583][T17744] ? __pfx_has_bh_in_lru+0x10/0x10 [ 895.610605][T17744] blkdev_flush_mapping+0x108/0x270 [ 895.610630][T17744] ? bdev_release+0x40f/0x650 [ 895.610653][T17744] bdev_release+0x417/0x650 [ 895.610678][T17744] ? __pfx_blkdev_release+0x10/0x10 [ 895.610693][T17744] blkdev_release+0x15/0x20 [ 895.610709][T17744] __fput+0x44c/0xa70 [ 895.610734][T17744] task_work_run+0x1d1/0x260 [ 895.610764][T17744] ? __pfx_task_work_run+0x10/0x10 [ 895.610785][T17744] ? kmem_cache_free+0x18f/0x400 [ 895.610804][T17744] do_exit+0x6b5/0x22e0 [ 895.610823][T17744] ? __pfx_get_timespec64+0x10/0x10 [ 895.610848][T17744] ? __pfx_do_exit+0x10/0x10 [ 895.610868][T17744] ? rcu_is_watching+0x15/0xb0 [ 895.610895][T17744] __x64_sys_exit+0x40/0x40 [ 895.610914][T17744] x64_sys_call+0x21a3/0x21c0 [ 895.610933][T17744] do_syscall_64+0xfa/0x3b0 [ 895.610955][T17744] ? lockdep_hardirqs_on+0x9c/0x150 [ 895.610976][T17744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.610993][T17744] ? clear_bhb_loop+0x60/0xb0 [ 895.611012][T17744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.611029][T17744] RIP: 0033:0x7f153c18e929 [ 895.611044][T17744] Code: Unable to access opcode bytes at 0x7f153c18e8ff. [ 895.611053][T17744] RSP: 002b:00007f153cfd2fe8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 895.611072][T17744] RAX: ffffffffffffffda RBX: 00007f153c3b5fa0 RCX: 00007f153c18e929 [ 895.611086][T17744] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 895.611098][T17744] RBP: 00007f153c210b39 R08: 0000000000000000 R09: 0000000000000000 [ 895.611109][T17744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 895.611120][T17744] R13: 0000000000000000 R14: 00007f153c3b5fa0 R15: 00007f153c4dfa28 [ 895.611155][T17744] [ 896.564417][T10767] usb 4-1: USB disconnect, device number 44 [ 900.981972][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!