last executing test programs: 1m12.176060792s ago: executing program 3 (id=279): syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x1b3, 0x2) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000340)=0x5) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x63, @loopback, 0x7}, 0x1c) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x4) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000240)=0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x8, 0x20000800}, 0x10) modify_ldt$read(0x0, &(0x7f0000001100)=""/4130, 0x1022) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r6, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @multicast1}}, 0xa, 0x0, 0xdd5, 0x7ff, 0x38fa8b00d923ddd5}, 0x9c) r7 = socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f700004e2000e2ffca1b1f0000000004c00e72f740805ed08a56231dbf9ed7815e3802000000033a0093b837dc6cc01e32efaec8c7a6ec08200800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 1m8.076288099s ago: executing program 3 (id=283): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) mount$fuse(0x0, 0x0, 0x0, 0xa02002, &(0x7f00000004c0)=ANY=[@ANYBLOB="66643dc6953bd340e3272b71d8f75d2e259bf1b1641dbb07e599bb12e499abcbe83cb20c3beb0dfa38c10e940b6828039ec26a486cc445322e0a22037201a9aafdefaad479199cd361137641824dfeb422ab103c6a236f4c9ae516aaf718425b7cbf0a21a98a672989ebb66211460e26e8d8f0a8338d62ea54b8dbc1492deefab8989d8802bb1b8c5d61349a79922cad342e87ed63595e043a81fa36feb0f49bca508854", @ANYRESDEC, @ANYBLOB="40ef35a971d35097635122028eb919802534a9e95b3ca94bf84415370e72798ba993e10be6a82eee4caa011b2c213a3a032f32435692c0ba1dc1f06b1de6bc83e6d684a1f35cf6", @ANYRESOCT]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 1m7.581379312s ago: executing program 3 (id=285): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x1b}, 0x4e23, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x84, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x3c}, {0x0, 0x2000, 0x8, 0x9, 0x6, 0x0, 0x20002}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0xa, 0x4, 0x0, 0x2}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}]}, 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x200480d0) 1m6.991018924s ago: executing program 3 (id=288): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) move_mount(r1, 0x0, r0, 0x0, 0x46) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='personality\x00') readv(r3, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x5}, {0x0, 0x2}], 0x2) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042dbd7000ffdbdf250700000008000500020000f91400040076657468315f6d6163767461700000030400cc0008000500080000000000040070696d72656700"/74], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) recvmsg$kcm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/45, 0x2d}, {&(0x7f0000000600)=""/181, 0xb5}], 0x2}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x1b}, 0x4e23, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x84, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x3c}, {0x0, 0x0, 0x8, 0x9, 0x6, 0x0, 0x20002}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0xa, 0x4, 0x0, 0x2}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}]}, 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) r7 = getpgrp(0x0) memfd_create(&(0x7f0000000280)='\x00', 0x7) fcntl$lock(r6, 0x6, &(0x7f0000000200)={0x1, 0x2, 0x1, 0x63, r7}) 1m6.816428572s ago: executing program 3 (id=290): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000004040)={0x0, @in6={{0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00', 0x7}}}, &(0x7f0000004100)=0x84) r2 = dup(r0) write$UHID_INPUT(r2, &(0x7f0000001300)={0xc, {"a2e3ad214fc752f9502547f70e06d038e7ff7fc6e5539b3471078b089b3b083848090890e0878f0e1ac6e7049b3372959b669a240d5b67f3988f7e0319520100ffe8d178708c523c921b1b5b31360d095d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8a92fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d606495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07840900000000000000f5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18834dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b8dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c000003716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00fd104d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff752613d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443eab40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f22b625d64931cd4ffe6738dd7b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a23dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c848a605fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333aed0418c0b44412d041259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b611fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b45030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf475af3d3060eac38dcaea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47afed367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc9, &(0x7f0000000000)=0xb, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="24020000", @ANYRES16=r5, @ANYBLOB="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"], 0x224}, 0x1, 0x0, 0x0, 0x24044801}, 0x81) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000004040)={0x0, @in6={{0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00', 0x7}}}, &(0x7f0000004100)=0x84) (async) dup(r0) (async) write$UHID_INPUT(r2, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x1006) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc9, &(0x7f0000000000)=0xb, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="24020000", @ANYRES16=r5, @ANYBLOB="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"], 0x224}, 0x1, 0x0, 0x0, 0x24044801}, 0x81) (async) 1m6.434995026s ago: executing program 3 (id=291): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0xfffe, r0, 0x0}]) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x60281, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(0xffffffffffffffff, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) 1m5.466077814s ago: executing program 32 (id=291): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0xfffe, r0, 0x0}]) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x60281, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(0xffffffffffffffff, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) 10.505548709s ago: executing program 1 (id=428): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 10.283022289s ago: executing program 0 (id=429): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x82841, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x8c36, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000040)={&(0x7f0000000bc0)={{@my=0x0}, {@my=0x0, 0x4000}, 0x400, "884fbe2726aa0a32f3e65f909acda971a093228292456e0332e6c11577b514f0bb8db731789d860e9589c4cbdd60b7a851a8a3c55ada2f90c51a69bf4a5c3e32296535dc838ef00dc18a32a79118dc858628f741f107552021e5a81d38e4374a8a717a7ca9015083cfff5d16156ef9cabf4f60c0da46870a10bf520cc5abcf9e3a437761ea75776763139fadd55c46daf5338870951822f6a803ccfbab9c3f507672d7c39ea9ccf81d9bc2b4649e7b44ed9fd7cb9bd389240cd41c415113d1caac4536f05c07e596d6addad2a4d27ba21a3b655753c508caedcc812ca235a7cd1686426b208bdecf8a4265ba8f6824aa60306e2d623481eed301b6dc21041fa8b6592be00bb74de1989a45a5aa32c189e9f5a5bb878281d0129afcfb8410cd1fa5acd080993d2d084213130a9b8d517d13251e6605a03d9b8faf507e820205a1f471af7b261419e79e09c547f7c10fd3f1ad876f59fdcc5e07d0ff4dee6ea2e3856616a352d648b9b5261b6263020fc3ae8eb404bc25703b3d3b8317ad07ff22907d6631d226c8247c92c1826ff814590dfe8c7fc54dfb265e906f756846546316b20e0105e2a5355a210b2b7f5db61d8f90bb783b41ce368233bd08044e9283531fffe49e3d305ecfb16075a047557f57bb7baf8babfc02975ad0d60ed8de9cb8adc9f667bc6826cbea8e260e4bff28a5ec19d38d1fc019db3cfaf310e764d78619cb27fb17af05a0e8ae831ce8413721e71138e62cc4ad8e7974d1506b4fb581c549a3dd7b7ef44ac37201aa3bce6f37f648d781bcb4f329fd45ffa640f1b04efb38a36e0ed0e2abcb07e4ad88ae3edfb6d840d75340204243d0e1c1c3139823b0d5ad196430bf4566619a1a97df4376a7e9a9e9c1d97b9f773c921778f2cb5165c02da1423305c502076177e4af50cb3343c10b01b78e3fe5520bdfae2b3dbe42db0f0eb55bbcb19038018d45ccdb8b0df400085a02c61b033f430fb6a7408e090c65798bc49d35e049d276fd1952d2b3dfd92a2548411e21be26216fe68fc3cf1c6625031260153708a53255b3d3d0411d5f0e8ab2102a97e539c34e9c769a7d9ef05e928c2c52775de467fa843cbcdabc290097eeb2ee7c58d86e3fccc39a5b694c18a4cc0d6af1e61d9c69e6466bc0cbef15365109e4f67a6268625f8c3f358fb7d567cbea52e1bc289bd8effda4e362a729e8cd3064970b97e3f72535d9ba88e97a14834cfd8dc86b5d2f9b35425a4162f3abe8b785ef462883e716c91b8eb281d81f68f606f16fcbc5cddfdec3b515818a647d86a4c17bae6ad525e95598052c49cdee821ceb45b2350dda13628db0dd266f30285241a2b147d65113b8ed3665a3451f7a56cf430ec98aeac702d9b9f776d97520a9d039e5b2fff34ac4d4e0a32e1f35c8f38e4f4fe1b3212a70f185ad71ec86b8c900"}, 0x418}) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x280, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000040)={0x2, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) unshare(0x2040400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000, 0x0, 0x800003, 0xffffffffffffffff, 0x2000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xfffffffffffffffe, 0x4, 0x400000000, 0xb, 0x7fffffff, 0x4}, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x2, 0x8000000000000000, 0x8000f, 0xffffffffffffffff, 0x0, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffffffffffffffd, 0x8, 0x0, 0x0, 0x2, 0x5}, 0x0, 0x0) 10.009272045s ago: executing program 1 (id=430): socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x3c3881, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$packet(0x11, 0x3, 0x300) dup(r0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r3}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000000a000000b19c61ab78fd0125c303b54a029f96a2f679683d76a00233cfb239455253d1aca939a72ba22f34c5ccfd4d6dbf", @ANYRES32=0x0, @ANYBLOB="0400000414000300070000000000000000000000000000001400010020010000000000000000000000000001"], 0x44}}, 0x0) 9.875616681s ago: executing program 2 (id=431): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x1b}, 0x4e23, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x84, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x3c}, {0x0, 0x0, 0x8, 0x9, 0x6, 0x1c, 0x20002}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0xa, 0x4, 0x0, 0x2}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}]}, 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x200480d0) 9.705760499s ago: executing program 2 (id=432): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_io_uring_complete(0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x400) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x2000800) setsockopt$inet_int(r4, 0x0, 0xf, 0x0, 0x0) 9.70505996s ago: executing program 1 (id=433): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200"/39], 0xb8}}, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x1000000000000000}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 9.258031927s ago: executing program 1 (id=436): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0xffffffff, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000550901000000000095000000ff900000b7020000000000007b9af8ff0000000026090200760000007b9af0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb50200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000014000000760000f0bf910000000000001f080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 9.059139979s ago: executing program 5 (id=437): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) listen(r0, 0x0) shutdown(r0, 0x0) accept(r0, 0x0, 0x0) (fail_nth: 1) 8.987877029s ago: executing program 2 (id=438): unshare(0x400) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880), 0x0, 0x1) setxattr$incfs_metadata(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x10}}], 0x10, 0x4004c}}], 0x1, 0x4) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) pwritev(r0, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x10000000000002e3, 0x0, 0xff) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fsetxattr$security_capability(r1, &(0x7f0000000000), &(0x7f0000000040)=@v1={0x1000000, [{0x4, 0x7}]}, 0xc, 0x2) setsockopt$inet_int(r1, 0x0, 0xf, 0x0, 0x0) 8.951774806s ago: executing program 1 (id=439): syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x1b3, 0x2) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000340)=0x5) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x63, @loopback, 0x7}, 0x1c) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x4) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000240)=0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x8, 0x20000800}, 0x10) modify_ldt$read(0x0, &(0x7f0000001100)=""/4130, 0x1022) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x3000d041) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f700004e2000e2ffca1b1f0000000004c00e72f740805ed08a56231dbf9ed7815e3802000000033a0093b837dc6cc01e32efaec8c7a6ec08200800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 8.491215447s ago: executing program 5 (id=440): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r2, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4090000}}) dup2(r1, r2) io_uring_enter(r3, 0x3516, 0x0, 0x1000000000000, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 8.410138427s ago: executing program 2 (id=441): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="060100009e173610ef171e7206de01020301090212000100000000090400000002060000"], 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0/file0\x00', 0x0) read$FUSE(r1, &(0x7f0000004940)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002200)={0x50, 0x0, r3, {0x7, 0x8, 0x2000800, 0x238d117e660c6b5b, 0x401, 0x6, 0x5, 0x2bf, 0x0, 0x0, 0x1, 0x27}}, 0x50) r4 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r2, 0xc4c03d09, &(0x7f0000000680)={0x11}) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105f1412020000000000010902240001000000020100000000000000760921050000fa220500090581030002000007"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x3, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f0000000400)={0x0, {{0xa, 0x4e24, 0x2, @mcast1={0xff, 0x7}, 0x3ff}}, {{0xa, 0x4e23, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xeb2}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2c, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) connect$qrtr(r6, &(0x7f0000000040), 0xc) bind$qrtr(r6, &(0x7f0000000000)={0x2a, 0x1, 0x4000}, 0xc) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000080)) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="000a04000000d5620963"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.275089436s ago: executing program 5 (id=443): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x1b}, 0x4e23, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x84, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x3c}, {0x0, 0x0, 0x8, 0x9, 0x6, 0x20, 0x20002}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0xa, 0x4, 0x0, 0x2}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}]}, 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x200480d0) 7.034831851s ago: executing program 0 (id=444): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x22846428e762fa4c}, 0x2c77edc509ee27a8) 7.034152891s ago: executing program 5 (id=445): syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x1b3, 0x2) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000340)=0x5) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x63, @loopback, 0x7}, 0x1c) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x4) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000240)=0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x8, 0x20000800}, 0x10) modify_ldt$read(0x0, &(0x7f0000001100)=""/4130, 0x1022) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @multicast1}}, 0xa, 0x0, 0xdd5, 0x7ff, 0x38fa8b00d923ddd5}, 0x9c) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x3000d041) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f700004e2000e2ffca1b1f0000000004c00e72f740805ed08a56231dbf9ed7815e3802000000033a0093b837dc6cc01e32efaec8c7a6ec08200800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 6.124986558s ago: executing program 0 (id=447): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x44014}, 0x400c1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000150001"], 0xb8}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000080)='memory.pressure\x00', 0x2, 0x0) syz_io_uring_setup(0x4177, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x4, 0xffffffff, 0x0, r0}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}) io_uring_enter(r0, 0x564, 0xffffffff, 0x0, 0x0, 0x0) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r9, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r10, @ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x200000c8}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) syz_io_uring_setup(0x88f, 0x0, 0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xc12, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x4) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r11) ptrace(0x10, r11) 4.74404921s ago: executing program 4 (id=450): unshare(0x400) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f00000a9000/0x4000)=nil, 0x4000, 0x180001e, 0x13, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, 0x0}], 0x1, 0x30, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0xf, 0x0, 0x0) 4.325072105s ago: executing program 0 (id=451): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r1, &(0x7f0000000940)=ANY=[], 0xff2e) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x1) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x2ffff, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x404c404, &(0x7f000005ffe4)={0xa, 0x4e23, 0x3, @loopback, 0x6}, 0x1c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x83, &(0x7f00000000c0), 0x8) 4.074869521s ago: executing program 2 (id=452): r0 = io_uring_setup(0x7884, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0xbc}}, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB], 0x10b8}, 0x8000) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/98, 0x62}, {&(0x7f0000000040)=""/21, 0x15}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f0000000440)=""/13, 0xd}, {&(0x7f0000000540)=""/107, 0x6b}], 0x6, &(0x7f0000000640)=""/124, 0x7c}, 0x2}, {{&(0x7f00000006c0)=@hci, 0x80, 0x0}, 0x3}, {{&(0x7f0000000840)=@hci, 0x80, &(0x7f0000000a00)=[{&(0x7f00000008c0)=""/190, 0xbe}, {&(0x7f0000000b00)=""/218, 0xda}, {&(0x7f0000000980)=""/97, 0x61}, {&(0x7f0000002a00)=""/4096, 0x1000}], 0x4, &(0x7f0000003a00)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000000c00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000c80)=""/239, 0xef}, {&(0x7f0000000d80)=""/74, 0x4a}, {&(0x7f0000004a00)=""/4096, 0x1000}], 0x3}, 0x8}, {{&(0x7f0000000f00)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000f80)=""/216, 0xd8}, {&(0x7f0000001080)=""/183, 0xb7}, {&(0x7f0000001140)=""/253, 0xfd}, {&(0x7f0000001240)=""/97, 0x61}, {0x0}, {&(0x7f00000013c0)=""/12, 0xc}, {&(0x7f0000005a00)=""/4096, 0x1000}, {&(0x7f0000001400)=""/105, 0x69}], 0x8}, 0x2}, {{&(0x7f0000001540)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000001980)=""/105, 0x69}, 0x1}], 0x6, 0x1, &(0x7f0000001c40)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00'}) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c80)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001400000008000a00", @ANYRES32=r3, @ANYBLOB="c736be837ef4627a19c0bf974b9bf56a5b3ab8d4f5bad71de07db8de15a561f2dac32e7c367979ac54e34b84abd53af797842b913dfd60158e17808ba5e7d1686d113f4e9b1486812097c555b0722273359230099e1eddcba558623c2d2007d21befa9ab71f43df7ae51af58b41f0e7117c28f795c35c8c6254d031cdc5046bd13645bfc0c9991295d45fe4791"], 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.970661678s ago: executing program 4 (id=453): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r2, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4090000}}) dup2(r1, r2) io_uring_enter(r3, 0x3516, 0x0, 0xfeffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 3.608823682s ago: executing program 2 (id=454): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x82841, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0}) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x8c36, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000040)={&(0x7f0000000bc0)={{@my=0x0}, {@my=0x0, 0x4000}, 0x400, "884fbe2726aa0a32f3e65f909acda971a093228292456e0332e6c11577b514f0bb8db731789d860e9589c4cbdd60b7a851a8a3c55ada2f90c51a69bf4a5c3e32296535dc838ef00dc18a32a79118dc858628f741f107552021e5a81d38e4374a8a717a7ca9015083cfff5d16156ef9cabf4f60c0da46870a10bf520cc5abcf9e3a437761ea75776763139fadd55c46daf5338870951822f6a803ccfbab9c3f507672d7c39ea9ccf81d9bc2b4649e7b44ed9fd7cb9bd389240cd41c415113d1caac4536f05c07e596d6addad2a4d27ba21a3b655753c508caedcc812ca235a7cd1686426b208bdecf8a4265ba8f6824aa60306e2d623481eed301b6dc21041fa8b6592be00bb74de1989a45a5aa32c189e9f5a5bb878281d0129afcfb8410cd1fa5acd080993d2d084213130a9b8d517d13251e6605a03d9b8faf507e820205a1f471af7b261419e79e09c547f7c10fd3f1ad876f59fdcc5e07d0ff4dee6ea2e3856616a352d648b9b5261b6263020fc3ae8eb404bc25703b3d3b8317ad07ff22907d6631d226c8247c92c1826ff814590dfe8c7fc54dfb265e906f756846546316b20e0105e2a5355a210b2b7f5db61d8f90bb783b41ce368233bd08044e9283531fffe49e3d305ecfb16075a047557f57bb7baf8babfc02975ad0d60ed8de9cb8adc9f667bc6826cbea8e260e4bff28a5ec19d38d1fc019db3cfaf310e764d78619cb27fb17af05a0e8ae831ce8413721e71138e62cc4ad8e7974d1506b4fb581c549a3dd7b7ef44ac37201aa3bce6f37f648d781bcb4f329fd45ffa640f1b04efb38a36e0ed0e2abcb07e4ad88ae3edfb6d840d75340204243d0e1c1c3139823b0d5ad196430bf4566619a1a97df4376a7e9a9e9c1d97b9f773c921778f2cb5165c02da1423305c502076177e4af50cb3343c10b01b78e3fe5520bdfae2b3dbe42db0f0eb55bbcb19038018d45ccdb8b0df400085a02c61b033f430fb6a7408e090c65798bc49d35e049d276fd1952d2b3dfd92a2548411e21be26216fe68fc3cf1c6625031260153708a53255b3d3d0411d5f0e8ab2102a97e539c34e9c769a7d9ef05e928c2c52775de467fa843cbcdabc290097eeb2ee7c58d86e3fccc39a5b694c18a4cc0d6af1e61d9c69e6466bc0cbef15365109e4f67a6268625f8c3f358fb7d567cbea52e1bc289bd8effda4e362a729e8cd3064970b97e3f72535d9ba88e97a14834cfd8dc86b5d2f9b35425a4162f3abe8b785ef462883e716c91b8eb281d81f68f606f16fcbc5cddfdec3b515818a647d86a4c17bae6ad525e95598052c49cdee821ceb45b2350dda13628db0dd266f30285241a2b147d65113b8ed3665a3451f7a56cf430ec98aeac702d9b9f776d97520a9d039e5b2fff34ac4d4e0a32e1f35c8f38e4f4fe1b3212a70f185ad71ec86b8c900"}, 0x418}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x280, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000040)={0x2, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) unshare(0x2040400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000, 0x0, 0x800003, 0xffffffffffffffff, 0x2000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xfffffffffffffffe, 0x4, 0x400000000, 0xb, 0x7fffffff, 0x4}, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x2, 0x8000000000000000, 0x8000f, 0xffffffffffffffff, 0x0, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffffffffffffffd, 0x8, 0x0, 0x0, 0x2, 0x5}, 0x0, 0x0) 2.910540614s ago: executing program 1 (id=455): socket$inet_udp(0x2, 0x2, 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x14b042, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0xbf00, 0xbf}) msgsnd(0x0, 0x0, 0x8, 0x800) poll(0x0, 0x0, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="b3efef08000000000000000000", @ANYBLOB="77edea470c", @ANYRES8, @ANYRES64=0x0], 0x48) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0x0, 0x0, 0x0}}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r3}, 0x2c) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f0000000a40)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000ac0)=""/206, 0x8c}], 0x1}, 0x623bceb6}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x4040880) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000140), 0x8) sendto$inet6(r4, &(0x7f0000847fff), 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYRES16=r5], 0x14}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000014}) socket$packet(0x11, 0x3, 0x300) mq_open(&(0x7f0000000580)='exthdr\x00', 0x2, 0x189, &(0x7f00000005c0)={0x49335f85, 0x7, 0x8, 0x46}) sendmmsg$inet6(r4, &(0x7f00000008c0)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0xa, @loopback}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000280)="d36a91688667a564f929d9c52ed79468e2bec4610c2fe679d63eccb406f5a2a9b4f9f92d3878c144fcb009141f5c2a26ea24753b34eb2bfa8a906f0f6aec520fa07515797e3c21e10ea46d8dd48f", 0x4e}, {&(0x7f00000003c0)="2becd425394e13340cafd1eb6db03bf2da3a29bed59719f9ef48e9a338c45a8a914783fa22a6311181157f0524bc94341cf12bd903d9b30ec82a36538407873b9b20210fdc1937cfbcd1527ea4926a2f4cc91f288f0772477043ff16e0484071dd9accb31c861414658533af218dc779f3d42e5b595330b5239b14034a54c07c2557ba85a55e0ed97a3600c935b61b403bf5295ebffc83109ab1e8319ee773652584223a053982f6c7385c658d6b6c46f544219a061098a1a2fdfcf4051b2594e46995441bb903e9eb58ffab51af8aff74903275b4f919c6deb40bf2929730498b3575cc7674f023008c5c6486", 0xed}], 0x2}}, {{&(0x7f0000000500)={0xa, 0x4e24, 0x0, @loopback, 0x1}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000600)="63b2119a6f8107fe1d6eedc5144355fafef5ed9ac23540dbfae820de2d3fcff21ee15a18336658822d7be6d33a45fb24e62350600ca5bab7396fd3d144b6835e99921ed43a312d483b941238361311084b3826f493f16b4712b068eadd17b7d2c6265017b7aeac550d4860d42e03053a464c874594d5829e118bf53f552d40becbb1da1380d52412f867c4d844a641c28e5d9e523e4251cf1ff1440159b808d15b4f1ba5859b89da17", 0xa9}, {&(0x7f00000006c0)="e83fb48e10dcbcff36c6ad68ca69220d0ea624c77c892b6f8e955778db31916ae920e6da2e5434fbdf0cd1606e370bae8feffafad9c1d08faafdb2b2d778d8febacb040331f72024a3b23feda228031c51800946d8bfb9595c2d2f63c5c37e7b1cab3d6ce93ad52820989f723c80fb3200b6435a517df869b0d1fe34cf8b947dc77584f58d3cb31c452fcdb2ee0ff325c428cb2767add8781e583510ba4c874a00"/175, 0xaf}], 0x2, &(0x7f00000007c0)=ANY=[@ANYBLOB="b00000deffffff0029000000040000003a12000000000000010800000000000000000101000f827a6014864fc552ab01280a9e903c64f819083c08e801055e1a0811c0331976a1f27c76fe93e0dc42e5a8729d983e1ad408cb0078145b66fbedc60d6774e4a04839fc541913448cde8dfd40a03cf9c47c613f5b4763918c76c34f127cd095b737c8f7f961112f1d6ab1fa4c0c559795cbaa12ff94acc1f26f761d63d837f9b2de383c000000000000001400000000000000290000004300"/200], 0xc8}}], 0x2, 0x20040800) socket$nl_netfilter(0x10, 0x3, 0xc) 2.758882068s ago: executing program 0 (id=456): socket$kcm(0x11, 0x3, 0x0) r0 = gettid() sched_getattr(r0, &(0x7f0000000840)={0x38}, 0x38, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020}, 0x2020) sched_setattr(r0, &(0x7f0000000000)={0x38, 0x5, 0x0, 0x1ff, 0x63d2, 0xb49, 0xb, 0x1008, 0x0, 0x7}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004040)=ANY=[@ANYBLOB="682400003e000701feffffff00000000017c000008004280040008000c00018006000600800a0000402402"], 0x2468}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x30141}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0xba01}, 0x810) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x1fe0000}) fallocate(r6, 0x3, 0x100000000, 0x80000000) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r10 = dup(r9) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0x8000000}, 0x1c) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r10, 0xc0c89425, &(0x7f00000002c0)={"e11e4ee4bbedcc818c63548380933aca", 0x0, 0x0, {0x7, 0x5}, {0x8, 0x200}, 0xd, [0x6, 0x6, 0x7, 0x6ec4, 0xffffffffffffffff, 0xe5a, 0x1, 0x1, 0xd, 0xd2b, 0x0, 0x0, 0x8, 0xa3, 0x7, 0xfffffffffffffff8]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f00000005c0)={{r7}, r11, 0x4, @unused=[0x1, 0x7, 0x3, 0x7ff], @name="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"}) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) 2.716685701s ago: executing program 4 (id=457): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x22846428e762fa4c}, 0x2c77edc509ee27a8) 1.905282732s ago: executing program 4 (id=458): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) listen(r0, 0x0) shutdown(r0, 0x0) accept(r0, 0x0, 0x0) (fail_nth: 3) 1.681082983s ago: executing program 5 (id=459): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) listen(r0, 0x0) shutdown(r0, 0x0) accept(r0, 0x0, 0x0) 497.269184ms ago: executing program 5 (id=460): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000"]) r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1061, 0x80, 0x4, 0x1ab}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000000)="0eee3dadc2b5bb3ab89230eb28d8", 0xe}, {&(0x7f0000001500)="0b34a6760a11b145ad98f34695257d651517048db0e1cf984855f2e4ed39626657e4151ff02ed84719db293d33fccf426e4ee15576", 0x35}], 0x3, 0x8, 0x1, {0x2}}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 323.254429ms ago: executing program 4 (id=461): unshare(0x400) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x2900, 0xf, 0x0, 0x0) 164.756873ms ago: executing program 0 (id=462): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x1ff, 0xfff8, 0xc, 0x10d3d4b6, 0x5, 0x7f, 0xff, 0x6, r1}, &(0x7f0000000140)=0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000cc0), 0x0, 0xc0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r4, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r5 = syz_open_pts(0xffffffffffffffff, 0x48000) r6 = syz_usb_connect$cdc_ecm(0x3, 0x84, &(0x7f0000000640)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x1, 0x1, 0x8, 0x20, 0xc, [{{0x9, 0x4, 0x0, 0x41, 0x2, 0x2, 0x6, 0x0, 0x19, {{0x9, 0x24, 0x6, 0x0, 0x0, "59458f9e"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xda66ef5b, 0x81, 0x9, 0x4}, [@mdlm={0x15}, @mdlm={0x15, 0x24, 0x12, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x4, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x1, 0x4, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x3, 0x7f, 0x5}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x300, 0x2, 0x53, 0x74, 0x8, 0xfa}, 0xc, &(0x7f0000000500)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0xa, 0x1, 0x5}]}, 0x2, [{0x3b, &(0x7f0000000540)=@string={0x3b, 0x3, "1fc07d256b3f3c13c21195316d575ee4e97560d309f434d7c940c5d7fef67306306ab0ae8f66c124cb93fff415ed4a5d943bdc3f5f4515e39b"}}, {0x50, &(0x7f0000000700)=@string={0x50, 0x3, "5e318fcad441d5a3910eb83040d233b4522068d3ddcc9d2206f5b37842bc6874e37fcec827979fa3fe1b48b8a39cfd2c0c210bbe3f7e2570d71258bc31900766b8020f8e2bc56e58393459a2c267"}}]}) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000900)={0x14, &(0x7f0000000780)={0x40, 0x8, 0xff, {0xff, 0x11, "c4529e8cc315af375f16077a087a4aec9b38e65e8ace048121f6633f5c0d10e7d6573be5b24b7abcc626aeb4fc9bc7b4e9ea67f553ec048af09a68d2eaac74958f9ebb15e9ca93659b85885619f4df3d0e4dff2782eeaa6fa8e0a28f66192918ca2a34c1b5d89eb517740652a9b20758954621e6431f81d599067f2f0db65d43edfdebfeaebf505d250daef572251b09ffc28a7334eb317559b459a3099f968a725cd101325ebe82a298911bdc7669ce3ca43823c7b3df343d986dad2de48c8df2ee7beb66cd0f6e7ea38d96bbfb337a329708986ccb6ac3508ee9cadb87ac59f7c26593e65a55ed455d6ad233c043a36eb3446ff58f73a66b20fcd4a9"}}, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a40)={0x1c, &(0x7f0000000940)={0x40, 0x18, 0x60, "20db24d56b17365c1c792ec9566f04b64ed44d09e816b56ef148d985b155f065614db2f1400dd13da89afc32b64ec00d529d6935aa6eab33cc80b8fefada912fe59272367c355463fb674db5470a288c1c36ceca82c3cc53ed2511002cf5bc91"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0xd7}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x7f}}) writev(r5, &(0x7f0000000040)=[{&(0x7f00000000c0)="1ecb8ffb4aa51a85a02665a18df126ddb5088775782d1149026716a27d3c729eba4db42388a09abbdebbfb07024518c42a929812bf2b8d2bfde42f292bf33e44c599720c2c4bbdef5922874eb32a632c4836d4a4804b6c277e6d9288bf77d9019ff9f3894e86b872744459710fdfbbb7e438c0a78210638cb365f2f489cc1fa1f8256e76d31e54", 0x87}, {&(0x7f0000000180)="cfb35ee229e8a60757255cfdabe2e96aa56c741cf9278e38be7f256dde4964303de56b43a933f3539fa948cad6a5e1befa20e1aa76a78673804ce902e65c6eabdda8172eac7be5d33251fccecca89e91a78e6c268923b9bca8bbbdbd4a806530a9e488549329f4e950c68ab67bb3d8fc00e4a6def3dcb93c894f1a10ecc3612349d3c53e92300450007562b483a7ca51c06875", 0x93}, {&(0x7f00000002c0)="24009e9d4561f5394de49f3949035642a6b4dd4270bc0fae20e4ad259578e0b2a2e3bec6a1c6351fe975b3cc2cc7f6f1a158d9b9e9298da0dd7abcb2a034c99d05a54c1bde4019b1637a2ca8e394457f61487ce0e60aeb939d773bc67dd132dcee92def75417456e4d0e1595580974ab9587d093e16e40e3d6a64978572cf66586de12a4d6a9de2f065983429d101eba953f551d1ab1384a7410130354a4e67d83e0a50a733b211f6585eec293fa0fd5d2e9934559b90e53f8", 0xb9}, {&(0x7f0000000380)="c3b1e4b9e0d097462b0c70895ab2e3392fc200394bfec7fdd55dd3746262ed01e56a37c69661a084e107f20f74dd2bab6c889f876520cb4700de244e09fbd13fed67d4ed16138e95454db10eeeee536101e4e6081d8594a5a0333e5c5cb05660417890d4b52672d896ceae17b0bce06a5b1461dde1fb80878b5952bf74d99aa269a34f15bd3154245e04af2dc7431b4aa4c7127fa58c1ac549ef891b19791da9e4553200cc166c048181c6ca4e987f3e0b96955d6f86a49d23e14342527c384089974d39450794fcde9e5e99065ef5fca3ba593e9c5a8293f042d1", 0xdb}], 0x4) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="05000000880400"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00E'], 0x48}}, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000080)) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002680)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8010}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x4800) 0s ago: executing program 4 (id=463): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex_waitv(&(0x7f0000001b00)=[{0xffb, &(0x7f0000000240)=0x200000006, 0x6}], 0x1, 0x0, 0x0, 0x1) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1358, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000ff010000000000000000000061"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, &(0x7f00000001c0)="1be106e42d1ccc4ced4f539b587bd01ecc4f7ac252e29c42104b6c235b0c6dce83bf9f9522ba4f0d6c91c02be753a48e6e8441edb005f1e3f0af2efab10beff1c1caec41e634dd6150879485a74b98d0c06f9146753912d6e71cb66746512ef60a5e0377c6a0a1d8edb61028acc5943964cf8c514fb20a6da717b8e20d7be48a3d95727295f0689740b64f027e52870bf82b27d019a7a0255fb916754e8357b488a9f02e153ff51749d399e2a956a0f42c314f5512444831cf3e4f03aadaa6f77986a421ab8ceae7f36cb255f692cec2d639de9bda9558d6b7bbd011576e6fd434eaeb21d2166c37b93524834dc3f4662c09a9a9439a193f", 0xf8, 0x80, &(0x7f0000000000)={0xa, 0x4e22, 0x39a, @loopback, 0x9d8}, 0x1c) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) kernel console output (not intermixed with test programs): tdevsim3 netdevsim2: renamed from eth2 [ 106.308073][ T5841] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.431422][ T5844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.445669][ T5844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.460795][ T5844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.472307][ T5844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.493099][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.509423][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.573167][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.610223][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.644667][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.652134][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.688633][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.698231][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.711500][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.719008][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.757671][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.765825][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.931546][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.946179][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.997304][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.056500][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.064151][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.089751][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.096970][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.122241][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.160382][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.199974][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.228381][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.236860][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.277027][ T2132] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.284315][ T2132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.294173][ T2132] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.302058][ T2132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.323834][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.339502][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.362594][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.369964][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.451361][ T5151] Bluetooth: hci0: command tx timeout [ 107.600499][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.616107][ T5151] Bluetooth: hci1: command tx timeout [ 107.632014][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.650165][ T5842] veth0_vlan: entered promiscuous mode [ 107.691829][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.718862][ T5833] veth0_vlan: entered promiscuous mode [ 107.738050][ T5842] veth1_vlan: entered promiscuous mode [ 107.756898][ T5833] veth1_vlan: entered promiscuous mode [ 107.768841][ T5151] Bluetooth: hci2: command tx timeout [ 107.845138][ T5151] Bluetooth: hci3: command tx timeout [ 107.883183][ T5840] veth0_vlan: entered promiscuous mode [ 107.904398][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.926213][ T5151] Bluetooth: hci4: command tx timeout [ 107.931471][ T5840] veth1_vlan: entered promiscuous mode [ 107.958870][ T5833] veth0_macvtap: entered promiscuous mode [ 107.991999][ T5833] veth1_macvtap: entered promiscuous mode [ 108.067491][ T5841] veth0_vlan: entered promiscuous mode [ 108.098513][ T5842] veth0_macvtap: entered promiscuous mode [ 108.114501][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.129645][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.152583][ T5840] veth0_macvtap: entered promiscuous mode [ 108.163966][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.177982][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.187086][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.196423][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.211548][ T5842] veth1_macvtap: entered promiscuous mode [ 108.228780][ T5841] veth1_vlan: entered promiscuous mode [ 108.266654][ T5840] veth1_macvtap: entered promiscuous mode [ 108.319504][ T5844] veth0_vlan: entered promiscuous mode [ 108.376146][ T5841] veth0_macvtap: entered promiscuous mode [ 108.400183][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.433775][ T5841] veth1_macvtap: entered promiscuous mode [ 108.482022][ T5844] veth1_vlan: entered promiscuous mode [ 108.493995][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.504357][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.538982][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.547223][ T5842] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.558337][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.561571][ T5842] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.582451][ T5842] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.592143][ T5842] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.613671][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.667833][ T5840] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.678412][ T5840] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.688523][ T5840] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.698843][ T5840] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.722138][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.736290][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.749232][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.782364][ T5844] veth0_macvtap: entered promiscuous mode [ 108.792200][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.812697][ T5844] veth1_macvtap: entered promiscuous mode [ 108.852153][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 108.877917][ T5841] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.893724][ T5841] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.903769][ T5841] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.913840][ T5841] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.961867][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.980783][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.081560][ T5844] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.089896][ T5888] libceph: resolve '. [ 109.089896][ T5888] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 109.089896][ T5888] ' (ret=-3): failed [ 109.096611][ T5844] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.121745][ T5844] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.131679][ T5844] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.295509][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.305451][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.336006][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.344004][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.440820][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.466962][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.526253][ T5151] Bluetooth: hci0: command tx timeout [ 109.542140][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.567571][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.696100][ T5151] Bluetooth: hci1: command tx timeout [ 109.707982][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.736642][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.755966][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.786883][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.851920][ T5151] Bluetooth: hci2: command tx timeout [ 109.935166][ T5151] Bluetooth: hci3: command tx timeout [ 110.005012][ T5151] Bluetooth: hci4: command tx timeout [ 110.126988][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.192300][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.315440][ T5882] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 110.356021][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.392571][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.456195][ T5884] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 110.566880][ T5882] usb 2-1: Using ep0 maxpacket: 16 [ 110.612848][ T5882] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 110.635972][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 110.667434][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 110.691028][ T5882] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 110.693562][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.730617][ T5884] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.751887][ T5884] usb 3-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 110.753858][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.773499][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.841271][ T5884] usb 3-1: config 0 descriptor?? [ 110.896192][ T5882] usb 2-1: Product: syz [ 110.900714][ T5882] usb 2-1: Manufacturer: syz [ 110.929107][ T5882] usb 2-1: SerialNumber: syz [ 110.987396][ T5882] usb 2-1: config 0 descriptor?? [ 111.042756][ T5882] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 111.136648][ T5882] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 111.424473][ T5910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8'. [ 111.628638][ T5882] em28xx 2-1:0.0: chip ID is em28174 [ 111.787743][ T5884] ntrig 0003:1B96:0009.0001: hidraw0: USB HID v0.00 Device [HID 1b96:0009] on usb-dummy_hcd.2-1/input0 [ 111.985693][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 111.995967][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 112.234717][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 112.253748][ T5907] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 112.336096][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 112.354402][ T5918] kAFS: unable to lookup cell '/S²jË¡8' [ 112.423727][ T5914] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'. [ 113.039061][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 113.050682][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 113.060445][ T5884] usb 3-1: USB disconnect, device number 2 [ 113.511056][ T5885] usb 2-1: USB disconnect, device number 2 [ 113.541314][ T5885] em28xx 2-1:0.0: Disconnecting em28xx [ 113.568754][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.579299][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.589673][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.595093][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 113.599538][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.693235][ T5885] em28xx 2-1:0.0: Freeing device [ 113.806639][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 113.881038][ T9] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 113.938318][ T9] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 114.040224][ T9] usb 5-1: string descriptor 0 read error: -22 [ 114.081429][ T9] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 114.131266][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.504719][ T977] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 114.684720][ T5885] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 114.737103][ T977] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 114.797809][ T977] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 114.905440][ T977] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.959295][ T977] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 115.020565][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.155902][ T977] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 115.163227][ T5885] usb 1-1: config 0 has no interfaces? [ 115.194800][ T5926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9'. [ 115.204490][ T977] usb 4-1: invalid MIDI out EP 0 [ 115.240545][ T5926] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9'. [ 115.499983][ T5885] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 115.605623][ T5883] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 115.627807][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.654924][ T5885] usb 1-1: Product: syz [ 115.661841][ T5885] usb 1-1: Manufacturer: syz [ 115.680125][ T5885] usb 1-1: SerialNumber: syz [ 115.709306][ T977] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 115.742464][ T5885] usb 1-1: config 0 descriptor?? [ 115.998705][ T5883] usb 2-1: Using ep0 maxpacket: 16 [ 116.062601][ T5883] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 116.108026][ T5883] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 116.117309][ T5946] netlink: 'syz.0.13': attribute type 3 has an invalid length. [ 116.179528][ T5883] usb 2-1: string descriptor 0 read error: -22 [ 116.216948][ T5883] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 116.254250][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.769523][ T5954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14'. [ 116.804142][ T5954] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14'. [ 117.071313][ T43] usb 4-1: USB disconnect, device number 2 [ 117.161712][ T5885] usb 5-1: USB disconnect, device number 2 [ 117.437059][ T5965] netlink: 778 bytes leftover after parsing attributes in process `syz.3.18'. [ 117.675297][ T5968] fuse: Bad value for 'fd' [ 118.829650][ T43] usb 1-1: USB disconnect, device number 2 [ 120.057214][ T5883] usb 2-1: USB disconnect, device number 3 [ 120.895404][ T43] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 121.031958][ T6007] xt_CT: You must specify a L4 protocol and not use inversions on it [ 121.258069][ T43] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 121.310348][ T43] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 121.365310][ T43] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 121.429153][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.885762][ T6013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.942572][ T6013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.127584][ T6022] netlink: 44 bytes leftover after parsing attributes in process `syz.1.30'. [ 124.284712][ T43] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 124.471400][ T43] usb 2-1: config 0 has no interfaces? [ 124.489556][ T6035] program syz.0.34 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.714849][ T43] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 124.757739][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.808817][ T43] usb 2-1: Product: syz [ 124.826230][ T43] usb 2-1: Manufacturer: syz [ 124.880355][ T43] usb 2-1: SerialNumber: syz [ 124.925396][ T43] usb 2-1: config 0 descriptor?? [ 124.988708][ T977] usb 5-1: USB disconnect, device number 3 [ 125.281255][ T6046] trusted_key: encrypted_key: insufficient parameters specified [ 125.286636][ T6032] netlink: 'syz.1.33': attribute type 3 has an invalid length. [ 125.630312][ T6054] fuse: Bad value for 'fd' [ 125.965191][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 126.188074][ T10] usb 1-1: config 0 has no interfaces? [ 126.388760][ T10] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 126.420024][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.462479][ T10] usb 1-1: Product: syz [ 126.477291][ T10] usb 1-1: Manufacturer: syz [ 126.497604][ T10] usb 1-1: SerialNumber: syz [ 126.551276][ T10] usb 1-1: config 0 descriptor?? [ 127.180132][ T10] usb 1-1: USB disconnect, device number 3 [ 127.685756][ T43] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 127.830290][ T977] usb 2-1: USB disconnect, device number 4 [ 127.904869][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 127.931433][ T43] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 127.961421][ T43] usb 5-1: config 0 has no interface number 0 [ 127.994090][ T43] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 128.079837][ T43] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 128.108859][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.118059][ T43] usb 5-1: Product: syz [ 128.124723][ T43] usb 5-1: Manufacturer: syz [ 128.130055][ T43] usb 5-1: SerialNumber: syz [ 128.151449][ T43] usb 5-1: config 0 descriptor?? [ 128.162913][ T6080] syz.1.43 uses obsolete (PF_INET,SOCK_PACKET) [ 128.179898][ T43] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 128.190700][ T43] em28xx 5-1:0.132: Video interface 132 found: isoc [ 128.950128][ T43] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 129.040539][ T43] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 129.060093][ T43] em28xx 5-1:0.132: board has no eeprom [ 129.155137][ T43] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 129.178960][ T43] em28xx 5-1:0.132: analog set to isoc mode. [ 129.196593][ T5885] em28xx 5-1:0.132: Registering V4L2 extension [ 129.239343][ T43] usb 5-1: USB disconnect, device number 4 [ 129.307511][ T43] em28xx 5-1:0.132: Disconnecting em28xx [ 129.767445][ T5885] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 129.798018][ T5885] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 129.838337][ T5885] em28xx 5-1:0.132: No AC97 audio processor [ 129.878839][ T5885] usb 5-1: Decoder not found [ 129.889562][ T5885] em28xx 5-1:0.132: failed to create media graph [ 129.928278][ T5885] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 129.999533][ T5885] em28xx 5-1:0.132: Remote control support is not available for this card. [ 130.035124][ T6114] fuse: Bad value for 'fd' [ 130.082740][ T43] em28xx 5-1:0.132: Closing input extension [ 130.133148][ T43] em28xx 5-1:0.132: Freeing device [ 130.795503][ T6130] fuse: Bad value for 'fd' [ 131.074694][ T5885] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 131.353067][ T5885] usb 1-1: config 0 has no interfaces? [ 131.490889][ T5885] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 131.604028][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.712554][ T5885] usb 1-1: Product: syz [ 131.861914][ T5885] usb 1-1: Manufacturer: syz [ 131.921076][ T5885] usb 1-1: SerialNumber: syz [ 132.071143][ T5885] usb 1-1: config 0 descriptor?? [ 132.225530][ T43] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 132.355040][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 132.404511][ T6132] netlink: 'syz.0.53': attribute type 3 has an invalid length. [ 132.430171][ T43] usb 4-1: config 0 has an invalid descriptor of length 101, skipping remainder of the config [ 132.451207][ T43] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 132.500286][ T43] usb 4-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 132.510122][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.518828][ T43] usb 4-1: Product: syz [ 132.523300][ T43] usb 4-1: Manufacturer: syz [ 132.524781][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 132.528102][ T43] usb 4-1: SerialNumber: syz [ 132.542599][ T43] usb 4-1: config 0 descriptor?? [ 132.558660][ T10] usb 2-1: config 5 has an invalid interface number: 220 but max is 3 [ 132.613737][ T10] usb 2-1: config 5 has an invalid interface number: 189 but max is 3 [ 132.625799][ T10] usb 2-1: config 5 has an invalid interface number: 179 but max is 3 [ 132.634468][ T10] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 132.646568][ T10] usb 2-1: config 5 has 3 interfaces, different from the descriptor's value: 4 [ 132.656515][ T10] usb 2-1: config 5 has no interface number 0 [ 132.663201][ T10] usb 2-1: config 5 has no interface number 1 [ 132.671428][ T10] usb 2-1: config 5 has no interface number 2 [ 132.678405][ T10] usb 2-1: config 5 interface 189 altsetting 5 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 132.690593][ T10] usb 2-1: config 5 interface 189 altsetting 5 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 132.712409][ T10] usb 2-1: config 5 interface 179 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 132.770273][ T10] usb 2-1: config 5 interface 220 has no altsetting 0 [ 132.786469][ T10] usb 2-1: config 5 interface 189 has no altsetting 0 [ 132.796263][ T10] usb 2-1: config 5 interface 179 has no altsetting 0 [ 132.807431][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=9909, bcdDevice=72.c9 [ 132.832361][ T43] usb 4-1: USB disconnect, device number 3 [ 132.842543][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.886017][ T10] usb 2-1: Product: syz [ 132.905669][ T10] usb 2-1: Manufacturer: syz [ 132.927112][ T10] usb 2-1: SerialNumber: syz [ 133.197033][ T10] smsc95xx v2.0.0 [ 133.217930][ T10] smsc95xx 2-1:5.220 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 133.251100][ T10] smsc95xx 2-1:5.220: probe with driver smsc95xx failed with error -22 [ 133.523786][ T10] smsc95xx v2.0.0 [ 133.603231][ T10] smsc95xx 2-1:5.189 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 133.819029][ T10] smsc95xx 2-1:5.189: probe with driver smsc95xx failed with error -22 [ 133.836387][ T6164] trusted_key: encrypted_key: insufficient parameters specified [ 133.927710][ T10] smsc95xx v2.0.0 [ 133.931890][ T10] smsc95xx 2-1:5.179 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 134.005003][ T10] smsc95xx 2-1:5.179: probe with driver smsc95xx failed with error -22 [ 134.094745][ T10] usb 2-1: USB disconnect, device number 5 [ 134.554738][ T5885] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 134.654942][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 134.763712][ T24] usb 1-1: USB disconnect, device number 4 [ 134.788252][ T5885] usb 4-1: config 5 has an invalid interface number: 123 but max is 0 [ 134.825592][ T5885] usb 4-1: config 5 has no interface number 0 [ 134.840801][ T10] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 134.843445][ T5885] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 134.923431][ T10] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 134.925813][ T5885] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 134.967250][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 134.983143][ T5885] usb 4-1: config 5 interface 123 has no altsetting 0 [ 135.009846][ T5885] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 135.018708][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 135.050051][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.069729][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 135.077520][ T5885] usb 4-1: Product: syz [ 135.103689][ T5885] usb 4-1: Manufacturer: syz [ 135.118113][ T5885] usb 4-1: SerialNumber: syz [ 135.132754][ T10] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 135.154665][ T10] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 135.186670][ T10] usb 2-1: Product: syz [ 135.191873][ T10] usb 2-1: Manufacturer: syz [ 135.225521][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 135.247995][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 135.295368][ T10] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 135.302014][ T10] cdc_wdm 2-1:1.0: Unknown control protocol [ 135.482969][ T5885] ni6501 4-1:5.123: driver 'ni6501' failed to auto-configure device. [ 135.612631][ T5885] usb 4-1: USB disconnect, device number 4 [ 135.811030][ T6175] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 136.124696][ T10] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 136.260230][ T6196] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 136.314115][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 136.365622][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 136.378503][ T10] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 136.390329][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.465468][ T10] usb 5-1: config 0 descriptor?? [ 136.472469][ T6191] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 137.157562][ T10] creative-sb0540 0003:041E:3100.0002: item fetching failed at offset 1/5 [ 137.188720][ T10] creative-sb0540 0003:041E:3100.0002: parse failed [ 137.205974][ T10] creative-sb0540 0003:041E:3100.0002: probe with driver creative-sb0540 failed with error -22 [ 137.254931][ T10] usb 5-1: USB disconnect, device number 5 [ 137.924969][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 137.973574][ T6220] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 138.124009][ T6218] sctp: failed to load transform for md5: -2 [ 138.131106][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 138.171263][ T10] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 138.221460][ T10] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 138.318892][ T10] usb 4-1: string descriptor 0 read error: -22 [ 138.374456][ T10] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 138.375350][ T6219] netlink: 12 bytes leftover after parsing attributes in process `syz.4.74'. [ 138.411622][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.693245][ T5885] usb 2-1: USB disconnect, device number 6 [ 139.046063][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 139.164659][ T6214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.73'. [ 139.175021][ T6214] netlink: 24 bytes leftover after parsing attributes in process `syz.3.73'. [ 140.062531][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.074320][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.116316][ T10] usb 3-1: config 0 has no interfaces? [ 140.191459][ T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 140.243769][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.299312][ T10] usb 3-1: Product: syz [ 140.318927][ T10] usb 3-1: Manufacturer: syz [ 140.361267][ T10] usb 3-1: SerialNumber: syz [ 140.407262][ T10] usb 3-1: config 0 descriptor?? [ 140.705799][ T6234] netlink: 'syz.2.76': attribute type 3 has an invalid length. [ 141.372421][ T6252] fuse: Bad value for 'rootmode' [ 141.503926][ T6262] netlink: 52 bytes leftover after parsing attributes in process `syz.0.84'. [ 141.520919][ T6262] netlink: 52 bytes leftover after parsing attributes in process `syz.0.84'. [ 141.545090][ T977] usb 4-1: USB disconnect, device number 5 [ 141.584026][ T6258] : entered promiscuous mode [ 141.664689][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 141.830560][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 141.898532][ T10] usb 5-1: too many configurations: 112, using maximum allowed: 8 [ 141.947426][ T6271] loop6: detected capacity change from 0 to 7 [ 141.963025][ T5922] Dev loop6: unable to read RDB block 7 [ 141.993452][ T5922] loop6: AHDI p1 p2 p3 [ 142.014015][ T5922] loop6: partition table partially beyond EOD, truncated [ 142.032606][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 142.043957][ T5922] loop6: p1 start 926365495 is beyond EOD, truncated [ 142.066849][ T5922] loop6: p2 size 116 extends beyond EOD, truncated [ 142.074091][ T10] usb 5-1: can't read configurations, error -61 [ 142.163717][ T6271] Dev loop6: unable to read RDB block 7 [ 142.174423][ T6271] loop6: AHDI p1 p2 p3 [ 142.187927][ T6271] loop6: partition table partially beyond EOD, truncated [ 142.235049][ T6271] loop6: p1 start 926365495 is beyond EOD, truncated [ 142.255350][ T6271] loop6: p2 size 116 extends beyond EOD, truncated [ 142.265307][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 142.464835][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 142.492516][ T10] usb 5-1: too many configurations: 112, using maximum allowed: 8 [ 142.537247][ T5922] udevd[5922]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 142.593597][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 142.614654][ T6278] netlink: 24 bytes leftover after parsing attributes in process `syz.1.88'. [ 142.626790][ T10] usb 5-1: can't read configurations, error -61 [ 142.660728][ T5922] udevd[5922]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 142.672419][ T10] usb usb5-port1: attempt power cycle [ 143.031919][ T977] usb 3-1: USB disconnect, device number 3 [ 143.055430][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 143.168204][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 143.195623][ T10] usb 5-1: too many configurations: 112, using maximum allowed: 8 [ 143.219458][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 143.248384][ T10] usb 5-1: can't read configurations, error -61 [ 143.404731][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 143.446271][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 143.452499][ T10] usb 5-1: too many configurations: 112, using maximum allowed: 8 [ 143.476660][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 143.514750][ T10] usb 5-1: can't read configurations, error -61 [ 143.522810][ T10] usb usb5-port1: unable to enumerate USB device [ 143.604801][ T977] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 143.796266][ T977] usb 2-1: Using ep0 maxpacket: 32 [ 143.921537][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.051583][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.071421][ T6298] netlink: 'syz.4.96': attribute type 11 has an invalid length. [ 144.177295][ T977] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 144.220886][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.307517][ T977] usb 2-1: config 0 descriptor?? [ 144.349385][ T5885] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 144.397993][ T43] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 144.587664][ T5885] usb 4-1: Using ep0 maxpacket: 16 [ 144.604827][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 144.633222][ T5885] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 144.658438][ T43] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 144.683370][ T43] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 144.695567][ T5885] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 144.731447][ T43] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 144.760565][ T5885] usb 4-1: string descriptor 0 read error: -22 [ 144.768698][ T5885] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 144.782616][ T43] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 144.803173][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.813428][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 144.836245][ T43] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 144.861516][ T43] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 144.876810][ T43] usb 5-1: Product: syz [ 144.888320][ T43] usb 5-1: Manufacturer: syz [ 144.904316][ T43] usb 5-1: SerialNumber: syz [ 144.928251][ T43] usb 5-1: config 0 descriptor?? [ 144.955831][ T43] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 144.988342][ T43] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 145.112553][ T977] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0 [ 145.149299][ T977] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0 [ 145.175350][ T6300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.95'. [ 145.214791][ T6300] netlink: 24 bytes leftover after parsing attributes in process `syz.3.95'. [ 145.281252][ T977] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0 [ 145.289953][ T977] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0 [ 145.312964][ T977] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0 [ 145.323455][ T10] usb 5-1: USB disconnect, device number 10 [ 145.323452][ C1] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 145.476211][ T10] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 145.752444][ T977] savu 0003:1E7D:2D5A.0003: unbalanced collection at end of report description [ 145.753071][ T977] savu 0003:1E7D:2D5A.0003: parse failed [ 145.753125][ T977] savu 0003:1E7D:2D5A.0003: probe with driver savu failed with error -22 [ 146.423798][ T43] usb 2-1: USB disconnect, device number 7 [ 146.675648][ T6317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.100'. [ 146.746232][ T6317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.853178][ T6320] loop6: detected capacity change from 0 to 7 [ 146.879787][ T6320] Dev loop6: unable to read RDB block 7 [ 146.907516][ T6320] loop6: AHDI p1 p2 p3 [ 146.935903][ T6320] loop6: partition table partially beyond EOD, truncated [ 146.965408][ T6320] loop6: p1 start 926365495 is beyond EOD, truncated [ 147.020588][ T6320] loop6: p2 size 116 extends beyond EOD, truncated [ 147.309207][ T5922] udevd[5922]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 148.963192][ T43] usb 4-1: USB disconnect, device number 6 [ 149.405016][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 149.744700][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 149.776283][ T6355] loop2: detected capacity change from 0 to 7 [ 149.830014][ T6355] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 149.874502][ T6355] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 149.892571][ T6355] Dev loop2: unable to read RDB block 7 [ 149.901897][ T6355] loop2: AHDI p1 p2 p3 [ 149.907700][ T6355] loop2: partition table partially beyond EOD, truncated [ 149.935718][ T6355] loop2: p1 start 167772418 is beyond EOD, truncated [ 149.955111][ T6355] loop2: p2 start 1702059890 is beyond EOD, truncated [ 150.394375][ T6363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.113'. [ 150.394716][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 150.453887][ T24] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 150.466904][ T24] usb 3-1: can't read configurations, error -71 [ 150.772473][ T6371] loop8: detected capacity change from 0 to 8 [ 150.792864][ T6371] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 150.815937][ T6371] loop8: p1 start 669833711 is beyond EOD, truncated [ 150.825876][ T6373] netlink: 132 bytes leftover after parsing attributes in process `syz.1.117'. [ 150.836699][ T6371] loop8: p2 start 422213120 is beyond EOD, truncated [ 150.844356][ T6371] loop8: p3 start 3833721018 is beyond EOD, truncated [ 150.853989][ T6374] fuse: Bad value for 'group_id' [ 150.854007][ T6371] loop8: p4 start 1945720663 is beyond EOD, truncated [ 150.870138][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 150.884436][ T6371] loop8: p5 start 3662658880 is beyond EOD, truncated [ 150.884886][ T6374] fuse: Bad value for 'group_id' [ 150.893657][ T6371] loop8: p6 start 514366226 is beyond EOD, truncated [ 150.912078][ T6371] loop8: p7 start 4087642507 is beyond EOD, truncated [ 150.923752][ T6371] loop8: p8 start 963101659 is beyond EOD, truncated [ 150.954189][ T6371] loop8: p9 start 3468131593 is beyond EOD, truncated [ 150.996389][ T6371] loop8: p10 start 2597257774 is beyond EOD, truncated [ 151.022249][ T6371] loop8: p11 start 3140533928 is beyond EOD, truncated [ 151.030924][ T6371] loop8: p12 start 3028492062 is beyond EOD, truncated [ 151.035165][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.096318][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 151.165181][ T10] usb 5-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 151.204977][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.282163][ T10] usb 5-1: config 0 descriptor?? [ 151.737606][ T10] megaworld 0003:07B5:0312.0004: unknown main item tag 0x3 [ 151.796653][ T10] megaworld 0003:07B5:0312.0004: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.4-1/input0 [ 151.922892][ T10] megaworld 0003:07B5:0312.0004: no inputs found [ 151.958999][ T10] usb 5-1: USB disconnect, device number 11 [ 152.172969][ T6404] fido_id[6404]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 152.349458][ T6401] netlink: 28 bytes leftover after parsing attributes in process `syz.1.125'. [ 153.425109][ T6425] fuse: Bad value for 'fd' [ 153.672594][ T30] audit: type=1326 audit(1748727004.464:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.3.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04778e969 code=0x7ffc0000 [ 153.774798][ T30] audit: type=1326 audit(1748727004.494:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.3.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fa04778e969 code=0x7ffc0000 [ 153.852221][ T30] audit: type=1326 audit(1748727004.494:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.3.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04778e969 code=0x7ffc0000 [ 153.937509][ T30] audit: type=1326 audit(1748727004.494:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.3.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04778e969 code=0x7ffc0000 [ 154.005705][ T30] audit: type=1326 audit(1748727004.504:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.3.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa04778e969 code=0x7ffc0000 [ 154.032781][ T30] audit: type=1326 audit(1748727004.504:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.3.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04778e969 code=0x7ffc0000 [ 154.059235][ T30] audit: type=1326 audit(1748727004.504:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.3.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04778e969 code=0x7ffc0000 [ 154.600503][ T6449] fuse: Bad value for 'user_id' [ 154.634807][ T6449] fuse: Bad value for 'user_id' [ 154.634944][ T5883] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 154.847513][ T5883] usb 3-1: config 0 has no interfaces? [ 154.868175][ T5883] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 154.920207][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.934139][ T5883] usb 3-1: Product: syz [ 154.939372][ T5883] usb 3-1: Manufacturer: syz [ 154.950348][ T5883] usb 3-1: SerialNumber: syz [ 154.994010][ T5883] usb 3-1: config 0 descriptor?? [ 155.044928][ T977] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 155.224791][ T977] usb 5-1: Using ep0 maxpacket: 16 [ 155.247274][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.281733][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.317812][ T977] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 155.410145][ T977] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 155.522798][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.651305][ T977] usb 5-1: config 0 descriptor?? [ 155.898462][ T6455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.932224][ T6455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.955201][ T6455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.970679][ T6455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.996859][ T6455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.012202][ T6455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.041524][ T6455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.069525][ T6455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.089678][ T6455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.102249][ T6455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.384283][ T977] HID 045e:07da: Invalid code 65791 type 1 [ 156.417386][ T977] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0005/input/input7 [ 156.520009][ T977] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 157.422104][ T5885] usb 3-1: USB disconnect, device number 6 [ 157.736423][ T24] usb 5-1: reset high-speed USB device number 12 using dummy_hcd [ 158.044865][ T2153] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 158.218428][ T2153] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.247209][ T2153] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 158.273396][ T2153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.287781][ T2153] usb 4-1: config 0 descriptor?? [ 158.299932][ T2153] pwc: Askey VC010 type 2 USB webcam detected. [ 158.659432][ T5885] usb 5-1: USB disconnect, device number 12 [ 158.726044][ T2153] pwc: recv_control_msg error -32 req 02 val 2b00 [ 158.768905][ T2153] pwc: recv_control_msg error -32 req 02 val 2700 [ 158.795657][ T2153] pwc: recv_control_msg error -32 req 02 val 2c00 [ 158.822242][ T2153] pwc: recv_control_msg error -32 req 04 val 1000 [ 158.854843][ T2153] pwc: recv_control_msg error -32 req 04 val 1300 [ 158.890353][ T2153] pwc: recv_control_msg error -32 req 04 val 1400 [ 158.926444][ T2153] pwc: recv_control_msg error -32 req 02 val 2000 [ 158.956181][ T2153] pwc: recv_control_msg error -32 req 02 val 2100 [ 159.026118][ T2153] pwc: recv_control_msg error -32 req 04 val 1500 [ 159.053158][ T6500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.158'. [ 159.066824][ T2153] pwc: recv_control_msg error -71 req 02 val 2500 [ 159.102770][ T2153] pwc: recv_control_msg error -71 req 02 val 2400 [ 159.141662][ T2153] pwc: recv_control_msg error -71 req 02 val 2600 [ 159.162673][ T2153] pwc: recv_control_msg error -71 req 02 val 2900 [ 159.184775][ T2153] pwc: recv_control_msg error -71 req 02 val 2800 [ 159.226358][ T2153] pwc: recv_control_msg error -71 req 04 val 1100 [ 159.239993][ T2153] pwc: recv_control_msg error -71 req 04 val 1200 [ 159.272810][ T2153] pwc: Registered as video103. [ 159.320957][ T2153] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 159.418257][ T2153] usb 4-1: USB disconnect, device number 7 [ 160.107700][ T6507] netlink: 'syz.2.159': attribute type 13 has an invalid length. [ 160.694095][ T6532] FAULT_INJECTION: forcing a failure. [ 160.694095][ T6532] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 160.712303][ T6507] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.737802][ T6532] CPU: 0 UID: 0 PID: 6532 Comm: syz.0.167 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 160.737838][ T6532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 160.737858][ T6532] Call Trace: [ 160.737877][ T6532] [ 160.737904][ T6532] dump_stack_lvl+0x189/0x250 [ 160.737962][ T6532] ? __pfx____ratelimit+0x10/0x10 [ 160.737996][ T6532] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.738029][ T6532] ? __pfx__printk+0x10/0x10 [ 160.738065][ T6532] should_fail_ex+0x414/0x560 [ 160.738097][ T6532] _copy_to_user+0x31/0xb0 [ 160.738132][ T6532] simple_read_from_buffer+0xe1/0x170 [ 160.738167][ T6532] proc_fail_nth_read+0x1df/0x250 [ 160.738203][ T6532] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 160.738238][ T6532] ? rw_verify_area+0x258/0x650 [ 160.738261][ T6532] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 160.738294][ T6532] vfs_read+0x1fd/0x980 [ 160.738324][ T6532] ? __pfx___mutex_lock+0x10/0x10 [ 160.738350][ T6532] ? __pfx_vfs_read+0x10/0x10 [ 160.738375][ T6532] ? __fget_files+0x2a/0x420 [ 160.738409][ T6532] ? __fget_files+0x3a0/0x420 [ 160.738435][ T6532] ? __fget_files+0x2a/0x420 [ 160.738473][ T6532] ksys_read+0x145/0x250 [ 160.738500][ T6532] ? __pfx_ksys_read+0x10/0x10 [ 160.738558][ T6532] ? do_syscall_64+0xbe/0x3b0 [ 160.738585][ T6532] do_syscall_64+0xfa/0x3b0 [ 160.738605][ T6532] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.738625][ T6532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.738648][ T6532] ? clear_bhb_loop+0x60/0xb0 [ 160.738673][ T6532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.738693][ T6532] RIP: 0033:0x7f90efb8d37c [ 160.738722][ T6532] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 160.738745][ T6532] RSP: 002b:00007f90f0a51030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 160.738771][ T6532] RAX: ffffffffffffffda RBX: 00007f90efdb6080 RCX: 00007f90efb8d37c [ 160.738786][ T6532] RDX: 000000000000000f RSI: 00007f90f0a510a0 RDI: 0000000000000004 [ 160.738798][ T6532] RBP: 00007f90f0a51090 R08: 0000000000000000 R09: 0000000000000000 [ 160.738815][ T6532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.738827][ T6532] R13: 0000000000000001 R14: 00007f90efdb6080 R15: 00007f90efedfa28 [ 160.738860][ T6532] [ 161.996170][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.169'. [ 162.273104][ T6551] netlink: 10 bytes leftover after parsing attributes in process `syz.4.174'. [ 162.564777][ T5883] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 162.765171][ T5883] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.800167][ T5883] usb 5-1: config 0 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 162.833006][ T5883] usb 5-1: config 0 interface 0 has no altsetting 0 [ 162.845387][ T5883] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 162.863614][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.886285][ T5883] usb 5-1: config 0 descriptor?? [ 162.900441][ T5883] pwc: Askey VC010 type 2 USB webcam detected. [ 163.316608][ T5883] pwc: recv_control_msg error -32 req 02 val 2b00 [ 163.344324][ T5883] pwc: recv_control_msg error -32 req 02 val 2700 [ 163.374829][ T5883] pwc: recv_control_msg error -32 req 02 val 2c00 [ 163.416899][ T5883] pwc: recv_control_msg error -32 req 04 val 1000 [ 163.475402][ T5883] pwc: recv_control_msg error -32 req 04 val 1300 [ 163.539657][ T5883] pwc: recv_control_msg error -32 req 04 val 1400 [ 163.569384][ T5883] pwc: recv_control_msg error -32 req 02 val 2000 [ 163.607769][ T5883] pwc: recv_control_msg error -32 req 02 val 2100 [ 163.903802][ T6552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.920513][ T6552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.207648][ T6574] FAULT_INJECTION: forcing a failure. [ 164.207648][ T6574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.258544][ T6574] CPU: 0 UID: 0 PID: 6574 Comm: syz.1.180 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 164.258576][ T6574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 164.258589][ T6574] Call Trace: [ 164.258598][ T6574] [ 164.258607][ T6574] dump_stack_lvl+0x189/0x250 [ 164.258649][ T6574] ? __pfx____ratelimit+0x10/0x10 [ 164.258671][ T6574] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.258712][ T6574] ? __pfx__printk+0x10/0x10 [ 164.258734][ T6574] ? __might_fault+0xb0/0x130 [ 164.258774][ T6574] should_fail_ex+0x414/0x560 [ 164.258803][ T6574] _copy_from_user+0x2d/0xb0 [ 164.258834][ T6574] do_ipv6_setsockopt+0x32d/0x2fb0 [ 164.258873][ T6574] ? aa_label_sk_perm+0x413/0x560 [ 164.258897][ T6574] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 164.258929][ T6574] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 164.258968][ T6574] ? __pfx___might_resched+0x10/0x10 [ 164.258998][ T6574] ? rcu_read_lock_any_held+0xb3/0x120 [ 164.259073][ T6574] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 164.259103][ T6574] ? vfs_write+0x8d8/0xa90 [ 164.259131][ T6574] ? aa_sk_perm+0x81e/0x950 [ 164.259157][ T6574] ? __pfx_aa_sk_perm+0x10/0x10 [ 164.259174][ T6574] ? __lock_acquire+0xab9/0xd20 [ 164.259207][ T6574] ipv6_setsockopt+0x59/0x170 [ 164.259233][ T6574] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 164.259263][ T6574] do_sock_setsockopt+0x257/0x3e0 [ 164.259296][ T6574] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 164.259328][ T6574] ? __fget_files+0x2a/0x420 [ 164.259366][ T6574] __x64_sys_setsockopt+0x18b/0x220 [ 164.259400][ T6574] do_syscall_64+0xfa/0x3b0 [ 164.259423][ T6574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.259443][ T6574] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 164.259464][ T6574] ? clear_bhb_loop+0x60/0xb0 [ 164.259489][ T6574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.259509][ T6574] RIP: 0033:0x7f763a38e969 [ 164.259528][ T6574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.259544][ T6574] RSP: 002b:00007f763b110038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 164.259566][ T6574] RAX: ffffffffffffffda RBX: 00007f763a5b5fa0 RCX: 00007f763a38e969 [ 164.259581][ T6574] RDX: 0000000000000048 RSI: 0000000000000029 RDI: 0000000000000003 [ 164.259593][ T6574] RBP: 00007f763b110090 R08: 0000000000000028 R09: 0000000000000000 [ 164.259606][ T6574] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 164.259618][ T6574] R13: 0000000000000000 R14: 00007f763a5b5fa0 R15: 00007f763a6dfa28 [ 164.259649][ T6574] [ 164.669286][ T5883] pwc: recv_control_msg error -71 req 02 val 2500 [ 164.704202][ T5883] pwc: recv_control_msg error -71 req 02 val 2400 [ 164.714140][ T5883] pwc: recv_control_msg error -71 req 02 val 2600 [ 164.756901][ T5883] pwc: recv_control_msg error -71 req 02 val 2900 [ 164.808323][ T5883] pwc: recv_control_msg error -71 req 02 val 2800 [ 164.865415][ T5883] pwc: recv_control_msg error -71 req 04 val 1100 [ 164.882768][ T5883] pwc: recv_control_msg error -71 req 04 val 1200 [ 164.909963][ T6577] tipc: Started in network mode [ 164.917801][ T5883] pwc: Registered as video103. [ 164.930807][ T6577] tipc: Node identity ac14140f, cluster identity 4711 [ 164.946420][ T5883] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 164.963381][ T6577] tipc: New replicast peer: 255.255.255.255 [ 164.984170][ T6577] tipc: Enabled bearer , priority 10 [ 165.045144][ T5883] usb 5-1: USB disconnect, device number 13 [ 165.296584][ T6587] fuse: Unknown parameter 'óE\È×b÷idÜÞ~Œüõ&eG ¿ÐŒ‘W£*ë{6í–Œ0Èš(-¡dÖ+­ýËE­*8Sm§W êâMS¿ÌÁ"˜ÜÑäMv(' [ 165.347863][ T6589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.185'. [ 166.096119][ T10] tipc: Node number set to 2886997007 [ 166.925603][ T6612] netlink: 'syz.1.189': attribute type 13 has an invalid length. [ 167.472232][ T6618] FAULT_INJECTION: forcing a failure. [ 167.472232][ T6618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.501594][ T6618] CPU: 0 UID: 0 PID: 6618 Comm: syz.0.191 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 167.501618][ T6618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 167.501628][ T6618] Call Trace: [ 167.501636][ T6618] [ 167.501713][ T6618] dump_stack_lvl+0x189/0x250 [ 167.501745][ T6618] ? __pfx____ratelimit+0x10/0x10 [ 167.501761][ T6618] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.501786][ T6618] ? __pfx__printk+0x10/0x10 [ 167.501821][ T6618] should_fail_ex+0x414/0x560 [ 167.501842][ T6618] _copy_to_user+0x31/0xb0 [ 167.501866][ T6618] simple_read_from_buffer+0xe1/0x170 [ 167.501888][ T6618] proc_fail_nth_read+0x1df/0x250 [ 167.501913][ T6618] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 167.501943][ T6618] ? rw_verify_area+0x258/0x650 [ 167.501961][ T6618] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 167.501983][ T6618] vfs_read+0x1fd/0x980 [ 167.502008][ T6618] ? __pfx___mutex_lock+0x10/0x10 [ 167.502029][ T6618] ? __pfx_vfs_read+0x10/0x10 [ 167.502047][ T6618] ? __fget_files+0x2a/0x420 [ 167.502070][ T6618] ? __fget_files+0x3a0/0x420 [ 167.502088][ T6618] ? __fget_files+0x2a/0x420 [ 167.502114][ T6618] ksys_read+0x145/0x250 [ 167.502128][ T6618] ? __fget_files+0x2a/0x420 [ 167.502149][ T6618] ? __pfx_ksys_read+0x10/0x10 [ 167.502169][ T6618] ? do_syscall_64+0xbe/0x3b0 [ 167.502188][ T6618] do_syscall_64+0xfa/0x3b0 [ 167.502202][ T6618] ? lockdep_hardirqs_on+0x9c/0x150 [ 167.502216][ T6618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.502234][ T6618] ? clear_bhb_loop+0x60/0xb0 [ 167.502325][ T6618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.502342][ T6618] RIP: 0033:0x7f90efb8d37c [ 167.502356][ T6618] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 167.502367][ T6618] RSP: 002b:00007f90f0a72030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 167.502383][ T6618] RAX: ffffffffffffffda RBX: 00007f90efdb5fa0 RCX: 00007f90efb8d37c [ 167.502394][ T6618] RDX: 000000000000000f RSI: 00007f90f0a720a0 RDI: 0000000000000004 [ 167.502403][ T6618] RBP: 00007f90f0a72090 R08: 0000000000000000 R09: 0000000000000000 [ 167.502412][ T6618] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 167.502423][ T6618] R13: 0000000000000000 R14: 00007f90efdb5fa0 R15: 00007f90efedfa28 [ 167.502445][ T6618] [ 168.398499][ T6612] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 168.637710][ T6635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.196'. [ 169.090730][ T30] audit: type=1400 audit(1748727019.864:9): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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netlink: 'syz.0.202': attribute type 7 has an invalid length. [ 171.150133][ T6675] loop6: detected capacity change from 0 to 7 [ 171.192429][ T6675] Dev loop6: unable to read RDB block 7 [ 171.212259][ T6675] loop6: AHDI p1 p2 p3 [ 171.228667][ T6675] loop6: partition table partially beyond EOD, truncated [ 171.269660][ T6675] loop6: p1 start 926365495 is beyond EOD, truncated [ 171.307044][ T6675] loop6: p2 size 116 extends beyond EOD, truncated [ 171.661904][ T5922] udevd[5922]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 171.686720][ T6679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.208'. [ 172.018877][ T30] audit: type=1326 audit(1748727022.814:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763a38e969 code=0x7ffc0000 [ 172.129786][ T30] audit: type=1326 audit(1748727022.814:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763a38e969 code=0x7ffc0000 [ 172.206873][ T30] audit: type=1326 audit(1748727022.814:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f763a38e969 code=0x7ffc0000 [ 172.266506][ T30] audit: type=1326 audit(1748727022.814:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763a38e969 code=0x7ffc0000 [ 172.314869][ T30] audit: type=1326 audit(1748727022.814:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763a38e969 code=0x7ffc0000 [ 172.349662][ T6698] dlm: non-version read from control device 36 [ 172.361782][ T6698] usb usb8: usbfs: process 6698 (syz.4.213) did not claim interface 0 before use [ 172.534278][ T30] audit: type=1326 audit(1748727022.814:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f763a38e969 code=0x7ffc0000 [ 172.562520][ T30] audit: type=1326 audit(1748727022.824:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763a38e969 code=0x7ffc0000 [ 172.596047][ T30] audit: type=1326 audit(1748727022.824:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763a38e969 code=0x7ffc0000 [ 172.689862][ T30] audit: type=1326 audit(1748727022.824:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763a38e969 code=0x7ffc0000 [ 172.772731][ T6694] ipvlan2: entered promiscuous mode [ 173.072083][ T6705] netlink: 'syz.2.215': attribute type 13 has an invalid length. [ 173.271497][ T6705] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 174.378925][ T6725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.220'. [ 175.522199][ T6739] warning: `syz.3.223' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 175.693072][ T6739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.223'. [ 175.702926][ T6739] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 175.710934][ T6739] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.925017][ T977] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 177.151020][ T977] usb 2-1: Using ep0 maxpacket: 16 [ 177.193793][ T977] usb 2-1: config 3 has an invalid interface number: 156 but max is 0 [ 177.250671][ T977] usb 2-1: config 3 has no interface number 0 [ 177.294753][ T977] usb 2-1: config 3 interface 156 has no altsetting 0 [ 177.362681][ T977] usb 2-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=f1.d8 [ 177.417825][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.496190][ T977] usb 2-1: Product: syz [ 177.506541][ T6745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.225'. [ 177.526410][ T977] usb 2-1: Manufacturer: syz [ 177.560721][ T977] usb 2-1: SerialNumber: syz [ 177.818790][ T977] gl620a 2-1:3.156: probe with driver gl620a failed with error -22 [ 177.886038][ T977] usb 2-1: USB disconnect, device number 8 [ 178.081412][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 178.081444][ T30] audit: type=1800 audit(1748727028.874:26): pid=6756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.227" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 178.712466][ T6763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.232'. [ 178.976297][ T6764] tipc: Started in network mode [ 179.015385][ T6764] tipc: Node identity 2, cluster identity 6 [ 179.060168][ T6764] tipc: Node number set to 2 [ 179.864695][ T43] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 180.067763][ T43] usb 3-1: config 0 has no interfaces? [ 180.102932][ T43] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 180.167494][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.198465][ T43] usb 3-1: Product: syz [ 180.202738][ T43] usb 3-1: Manufacturer: syz [ 180.300257][ T43] usb 3-1: SerialNumber: syz [ 180.330545][ T43] usb 3-1: config 0 descriptor?? [ 180.592266][ T6782] netlink: 'syz.2.235': attribute type 3 has an invalid length. [ 180.644427][ T6788] netlink: 'syz.1.236': attribute type 13 has an invalid length. [ 180.868008][ T6788] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 183.993607][ T43] usb 3-1: USB disconnect, device number 7 [ 184.084090][ T6815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.243'. [ 184.464996][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 184.660142][ T6829] fuse: Bad value for 'fd' [ 184.667541][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 184.668722][ T6826] ======================================================= [ 184.668722][ T6826] WARNING: The mand mount option has been deprecated and [ 184.668722][ T6826] and is ignored by this kernel. Remove the mand [ 184.668722][ T6826] option from the mount to silence this warning. [ 184.668722][ T6826] ======================================================= [ 184.679446][ T10] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 184.730601][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 184.760311][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 184.780487][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 184.840671][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 184.851741][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 184.878736][ T10] usb 5-1: Product: syz [ 184.906383][ T10] usb 5-1: Manufacturer: syz [ 184.979629][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 185.015093][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 185.035623][ T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 185.051429][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 185.255147][ T6826] fuse: Unknown parameter 'group_ie' [ 185.715075][ T6842] fuse: Bad value for 'fd' [ 186.835001][ T5885] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 187.059334][ T5885] usb 4-1: config 0 has no interfaces? [ 187.132112][ T5885] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 187.251796][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.347508][ T5885] usb 4-1: Product: syz [ 187.380371][ T5885] usb 4-1: Manufacturer: syz [ 187.394109][ T5885] usb 4-1: SerialNumber: syz [ 187.543248][ T5885] usb 4-1: config 0 descriptor?? [ 187.904877][ T5885] usb 5-1: USB disconnect, device number 14 [ 188.119413][ T6856] netlink: 'syz.3.251': attribute type 3 has an invalid length. [ 189.204804][ T5883] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 189.752383][ T6889] fuse: Bad value for 'fd' [ 189.775390][ T6889] fuse: Bad value for 'fd' [ 189.788892][ T6889] fuse: Bad value for 'fd' [ 189.815017][ T6889] fuse: Bad value for 'fd' [ 190.231888][ T6888] netlink: 'syz.2.257': attribute type 13 has an invalid length. [ 190.274842][ T5883] usb 5-1: config 0 has no interfaces? [ 190.395881][ T5883] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 190.420672][ T6888] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 190.444862][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.458749][ T5883] usb 5-1: Product: syz [ 190.463861][ T5883] usb 5-1: Manufacturer: syz [ 190.478491][ T5883] usb 5-1: SerialNumber: syz [ 190.497681][ T5883] usb 5-1: config 0 descriptor?? [ 190.657467][ T5885] usb 4-1: USB disconnect, device number 8 [ 190.848227][ T6874] netlink: 'syz.4.255': attribute type 3 has an invalid length. [ 191.234802][ T5885] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 191.396283][ T5885] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 191.428931][ T5885] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 191.536850][ T5885] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 191.641875][ T5885] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 191.795967][ T5885] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 191.876436][ T5885] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 192.007248][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 192.082488][ T5885] usb 2-1: Product: syz [ 192.122372][ T5885] usb 2-1: Manufacturer: syz [ 192.256669][ T5885] cdc_wdm 2-1:1.0: skipping garbage [ 192.282322][ T5885] cdc_wdm 2-1:1.0: skipping garbage [ 192.339340][ T5885] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 192.384792][ T5885] cdc_wdm 2-1:1.0: Unknown control protocol [ 193.989929][ T5883] usb 5-1: USB disconnect, device number 15 [ 194.486628][ T43] usb 2-1: USB disconnect, device number 9 [ 194.554658][ T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 194.726461][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 194.752992][ T24] usb 5-1: config 0 has an invalid descriptor of length 28, skipping remainder of the config [ 194.794145][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x33, changing to 0x3 [ 194.838250][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 194.878996][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 51807, setting to 1024 [ 194.911148][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 194.925898][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 194.965988][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 194.984430][ T24] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 195.038678][ T24] usb 5-1: Manufacturer: syz [ 195.062685][ T24] usb 5-1: config 0 descriptor?? [ 195.296338][ T6925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.349918][ T6925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.474699][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 195.570386][ T2153] usb 5-1: USB disconnect, device number 16 [ 195.644833][ T5883] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 195.670802][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c087, bcdDevice= 0.00 [ 195.770705][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.815899][ T6964] netlink: 'syz.3.279': attribute type 13 has an invalid length. [ 195.889082][ T24] usb 3-1: config 0 descriptor?? [ 196.194350][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 196.220071][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 196.280480][ T5883] usb 2-1: config 0 has no interfaces? [ 196.317862][ T24] usb 3-1: USB disconnect, device number 8 [ 196.406534][ T5883] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 196.450630][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.516625][ T5883] usb 2-1: Product: syz [ 196.579309][ T5883] usb 2-1: Manufacturer: syz [ 196.599215][ T5883] usb 2-1: SerialNumber: syz [ 196.678482][ T5883] usb 2-1: config 0 descriptor?? [ 196.708732][ T6964] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 197.604935][ T2153] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 197.789971][ T2153] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 197.832622][ T2153] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 197.881061][ T2153] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 197.954500][ T2153] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 197.989281][ T2153] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 198.048206][ T2153] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 198.121652][ T2153] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 198.178470][ T2153] usb 5-1: Product: syz [ 198.221946][ T2153] usb 5-1: Manufacturer: syz [ 198.335553][ T2153] cdc_wdm 5-1:1.0: skipping garbage [ 198.424608][ T2153] cdc_wdm 5-1:1.0: skipping garbage [ 198.486704][ T2153] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 198.579303][ T2153] cdc_wdm 5-1:1.0: Unknown control protocol [ 199.602575][ T6980] loop6: detected capacity change from 0 to 7 [ 199.621419][ T6980] Dev loop6: unable to read RDB block 7 [ 199.659570][ T6980] loop6: AHDI p1 p2 p3 [ 199.679572][ T6980] loop6: partition table partially beyond EOD, truncated [ 199.737221][ T6980] loop6: p1 start 926365495 is beyond EOD, truncated [ 199.748123][ T6980] loop6: p2 size 116 extends beyond EOD, truncated [ 200.201059][ T5922] udevd[5922]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 200.359565][ T43] usb 2-1: USB disconnect, device number 10 [ 201.212930][ T3523] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.338760][ T43] usb 5-1: USB disconnect, device number 17 [ 201.451731][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.459281][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.461878][ T3523] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.699350][ T3523] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.870575][ T3523] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.273041][ T7011] Zero length message leads to an empty skb [ 202.364058][ T3523] bridge_slave_1: left allmulticast mode [ 202.394170][ T3523] bridge_slave_1: left promiscuous mode [ 202.427654][ T3523] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.535648][ T3523] bridge_slave_0: left allmulticast mode [ 202.542256][ T3523] bridge_slave_0: left promiscuous mode [ 202.571390][ T3523] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.336611][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 203.355389][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 203.367079][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 203.377326][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 203.385737][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 203.488853][ T2153] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 203.914664][ T43] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 203.961658][ T2153] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 204.009117][ T2153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.046226][ T2153] usb 3-1: config 0 descriptor?? [ 204.118892][ T2153] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 204.270505][ T7025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.303751][ T7025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.351317][ T7025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.377769][ T7025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.499605][ T43] usb 5-1: config 0 has no interfaces? [ 204.570443][ T43] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 204.603375][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.687709][ T7025] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 204.702070][ T43] usb 5-1: Product: syz [ 204.727199][ T43] usb 5-1: Manufacturer: syz [ 204.771425][ T43] usb 5-1: SerialNumber: syz [ 204.815922][ T43] usb 5-1: config 0 descriptor?? [ 205.006696][ T2153] gspca_sunplus: reg_w_riv err -71 [ 205.044928][ T2153] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 205.083610][ T2153] usb 3-1: USB disconnect, device number 9 [ 205.249008][ T3523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.270715][ T3523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.302876][ T3523] bond0 (unregistering): Released all slaves [ 205.446111][ T7041] netlink: 36 bytes leftover after parsing attributes in process `syz.0.300'. [ 205.604960][ T5151] Bluetooth: hci3: command tx timeout [ 206.055502][ T43] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 206.269355][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 206.326795][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.401099][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.483745][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 206.594244][ T43] usb 3-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 206.661336][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.727929][ T43] usb 3-1: config 0 descriptor?? [ 206.909118][ T3523] hsr_slave_0: left promiscuous mode [ 206.944829][ T3523] hsr_slave_1: left promiscuous mode [ 206.985366][ T3523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.002005][ T3523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.064819][ T3523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.074077][ T3523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.128943][ T2153] usb 5-1: USB disconnect, device number 18 [ 207.256309][ T43] apple 0003:05AC:027A.0006: hidraw0: USB HID v0.07 Device [HID 05ac:027a] on usb-dummy_hcd.2-1/input0 [ 207.265936][ T3523] veth1_macvtap: left promiscuous mode [ 207.341343][ T3523] veth0_macvtap: left promiscuous mode [ 207.384021][ T3523] veth1_vlan: left promiscuous mode [ 207.416796][ T3523] veth0_vlan: left promiscuous mode [ 207.679938][ T7043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.695163][ T5151] Bluetooth: hci3: command tx timeout [ 207.763616][ T7043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.822809][ T2153] usb 3-1: USB disconnect, device number 10 [ 208.109018][ T7079] loop6: detected capacity change from 0 to 7 [ 208.119896][ T7079] Dev loop6: unable to read RDB block 7 [ 208.132476][ T7079] loop6: AHDI p1 p2 p3 [ 208.152529][ T7079] loop6: partition table partially beyond EOD, truncated [ 208.164033][ T7079] loop6: p1 start 926365495 is beyond EOD, truncated [ 208.174005][ T7079] loop6: p2 size 116 extends beyond EOD, truncated [ 208.493937][ T5922] udevd[5922]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 208.860394][ T7092] netlink: 20 bytes leftover after parsing attributes in process `syz.4.310'. [ 209.764913][ T5151] Bluetooth: hci3: command tx timeout [ 210.149623][ T3523] team0 (unregistering): Port device team_slave_1 removed [ 210.551595][ T3523] team0 (unregistering): Port device team_slave_0 removed [ 210.624638][ T43] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 210.908798][ T43] usb 2-1: config 0 has no interfaces? [ 211.086233][ T43] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 211.142686][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.258264][ T43] usb 2-1: Product: syz [ 211.262812][ T43] usb 2-1: Manufacturer: syz [ 211.365530][ T43] usb 2-1: SerialNumber: syz [ 211.513437][ T43] usb 2-1: config 0 descriptor?? [ 211.844921][ T5151] Bluetooth: hci3: command tx timeout [ 213.214244][ T7033] chnl_net:caif_netlink_parms(): no params data found [ 214.204718][ T7033] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.213737][ T7033] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.332941][ T7033] bridge_slave_0: entered allmulticast mode [ 214.365174][ T7033] bridge_slave_0: entered promiscuous mode [ 214.426228][ T7033] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.434127][ T7033] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.443520][ T7147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.489769][ T7147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.534844][ T7033] bridge_slave_1: entered allmulticast mode [ 214.588964][ T7033] bridge_slave_1: entered promiscuous mode [ 214.664832][ T2153] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 214.904749][ T2153] usb 5-1: Using ep0 maxpacket: 8 [ 214.944259][ T5882] usb 2-1: USB disconnect, device number 11 [ 214.952618][ T2153] usb 5-1: config 0 has no interfaces? [ 214.965044][ T5883] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 215.008059][ T2153] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 215.034624][ T2153] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.043575][ T2153] usb 5-1: Product: syz [ 215.054288][ T7033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.104846][ T2153] usb 5-1: Manufacturer: syz [ 215.110088][ T2153] usb 5-1: SerialNumber: syz [ 215.142298][ T7033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.185616][ T2153] usb 5-1: config 0 descriptor?? [ 215.198058][ T5883] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 215.272592][ T5883] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 215.327781][ T5883] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 215.384006][ T5883] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 215.419063][ T9] usb 5-1: USB disconnect, device number 19 [ 215.477384][ T5883] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 215.522969][ T7033] team0: Port device team_slave_0 added [ 215.534211][ T5883] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 215.548746][ T7033] team0: Port device team_slave_1 added [ 215.555970][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 215.597439][ T5883] usb 3-1: Product: syz [ 215.602174][ T5883] usb 3-1: Manufacturer: syz [ 215.677864][ T5883] cdc_wdm 3-1:1.0: skipping garbage [ 215.701491][ T5883] cdc_wdm 3-1:1.0: skipping garbage [ 215.725017][ T5883] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 215.774813][ T5883] cdc_wdm 3-1:1.0: Unknown control protocol [ 215.893016][ T7033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.906001][ T7033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.952970][ T7033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.003889][ T7033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.029087][ T7033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.202975][ T7033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.711214][ T7033] hsr_slave_0: entered promiscuous mode [ 216.717915][ T5882] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 216.775047][ T7033] hsr_slave_1: entered promiscuous mode [ 216.803218][ T7033] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.827420][ T7033] Cannot create hsr debugfs directory [ 216.914664][ T5882] usb 5-1: Using ep0 maxpacket: 16 [ 216.928676][ T5882] usb 5-1: config 7 has an invalid interface number: 154 but max is 0 [ 216.944593][ T5882] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 216.966873][ T5882] usb 5-1: config 7 has no interface number 0 [ 216.995275][ T5882] usb 5-1: config 7 interface 154 altsetting 9 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 217.065266][ T5882] usb 5-1: config 7 interface 154 altsetting 9 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 217.124033][ T5882] usb 5-1: config 7 interface 154 altsetting 9 endpoint 0x83 has invalid wMaxPacketSize 0 [ 217.182765][ T5882] usb 5-1: config 7 interface 154 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 217.209197][ T5882] usb 5-1: config 7 interface 154 has no altsetting 0 [ 217.228718][ T5882] usb 5-1: New USB device found, idVendor=0438, idProduct=b002, bcdDevice=4d.27 [ 217.254695][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.263325][ T5882] usb 5-1: Product: syz [ 217.283073][ T5882] usb 5-1: Manufacturer: syz [ 217.305517][ T5882] usb 5-1: SerialNumber: syz [ 217.875236][ T7172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.926988][ T7172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.965329][ T2153] usb 3-1: USB disconnect, device number 11 [ 218.508658][ T5882] em28xx 5-1:7.154: New device syz syz @ 480 Mbps (0438:b002, interface 154, class 154) [ 218.547165][ T5882] em28xx 5-1:7.154: Audio interface 154 found (Vendor Class) [ 218.619934][ T5882] em28xx 5-1:7.154: unknown em28xx chip ID (0) [ 218.667641][ T5882] em28xx 5-1:7.154: Config register raw data: 0xfffffffb [ 218.678366][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 218.727079][ T5882] em28xx 5-1:7.154: AC97 chip type couldn't be determined [ 218.754781][ T5882] em28xx 5-1:7.154: No AC97 audio processor [ 218.795668][ T5882] usb 5-1: USB disconnect, device number 20 [ 218.835515][ T7033] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 218.876051][ T24] usb 3-1: device descriptor read/64, error -71 [ 218.930003][ T7033] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 219.026374][ T7033] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 219.113282][ T7033] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 219.174990][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 219.355252][ T24] usb 3-1: device descriptor read/64, error -71 [ 219.486057][ T24] usb usb3-port1: attempt power cycle [ 219.624447][ T7033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.780090][ T7033] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.847116][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.854873][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 219.855687][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.902191][ T3523] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.911520][ T3523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.937956][ T24] usb 3-1: device descriptor read/8, error -71 [ 220.185703][ T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 220.305522][ T24] usb 3-1: device descriptor read/8, error -71 [ 220.429113][ T24] usb usb3-port1: unable to enumerate USB device [ 220.655353][ T7033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.745057][ T43] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 221.046966][ T43] usb 2-1: config 0 has no interfaces? [ 221.083711][ T7226] fuse: Unknown parameter '1U€¹j•ñ¢˜' [ 221.159382][ T43] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 221.213206][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.278029][ T43] usb 2-1: Product: syz [ 221.283720][ T43] usb 2-1: Manufacturer: syz [ 221.291913][ T7033] veth0_vlan: entered promiscuous mode [ 221.308303][ T43] usb 2-1: SerialNumber: syz [ 221.334947][ T43] usb 2-1: config 0 descriptor?? [ 221.453455][ T7033] veth1_vlan: entered promiscuous mode [ 221.669950][ T7033] veth0_macvtap: entered promiscuous mode [ 221.717986][ T7033] veth1_macvtap: entered promiscuous mode [ 221.864959][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 221.920815][ T7033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.024997][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 222.039900][ T9] usb 5-1: config 77 has too many interfaces: 168, using maximum allowed: 32 [ 222.066861][ T9] usb 5-1: config 77 has an invalid descriptor of length 15, skipping remainder of the config [ 222.118429][ T9] usb 5-1: config 77 has 0 interfaces, different from the descriptor's value: 168 [ 222.145382][ T7033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.156918][ T9] usb 5-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=7e.68 [ 222.191483][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.233292][ T9] usb 5-1: Product: syz [ 222.237366][ T7033] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.268852][ T9] usb 5-1: Manufacturer: syz [ 222.295515][ T9] usb 5-1: SerialNumber: syz [ 222.361187][ T7033] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.411842][ T7033] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.449826][ T7033] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.567332][ T9] usb 5-1: USB disconnect, device number 21 [ 222.798223][ T7252] netlink: 192 bytes leftover after parsing attributes in process `syz.2.340'. [ 222.928590][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.003532][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.300814][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.345816][ T7259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.357742][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.620595][ T7266] loop6: detected capacity change from 0 to 7 [ 223.664121][ T5922] Dev loop6: unable to read RDB block 7 [ 223.727139][ T5922] loop6: AHDI p1 p2 p3 [ 223.732131][ T5922] loop6: partition table partially beyond EOD, truncated [ 223.823119][ T5922] loop6: p1 start 926365495 is beyond EOD, truncated [ 223.907627][ T5922] loop6: p2 size 116 extends beyond EOD, truncated [ 223.991913][ T7266] Dev loop6: unable to read RDB block 7 [ 224.014271][ T5835] Bluetooth: hci0: command 0x0406 tx timeout [ 224.019751][ T7247] Bluetooth: hci4: command 0x0406 tx timeout [ 224.022069][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 224.028462][ T7247] Bluetooth: hci2: command 0x0406 tx timeout [ 224.043588][ T7266] loop6: AHDI p1 p2 p3 [ 224.135446][ T7266] loop6: partition table partially beyond EOD, truncated [ 224.143133][ T7266] loop6: p1 start 926365495 is beyond EOD, truncated [ 224.158260][ T7266] loop6: p2 size 116 extends beyond EOD, truncated [ 224.374794][ T43] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 224.467520][ T5922] udevd[5922]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 224.536864][ T7280] bond_slave_0: entered promiscuous mode [ 224.543798][ T7280] bond_slave_1: entered promiscuous mode [ 224.598821][ T43] usb 5-1: config 0 has an invalid interface number: 130 but max is 0 [ 224.627790][ T43] usb 5-1: config 0 has no interface number 0 [ 224.636259][ T5922] udevd[5922]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 224.636854][ T24] usb 2-1: USB disconnect, device number 12 [ 224.666372][ T7279] bond_slave_0: left promiscuous mode [ 224.672564][ T7279] bond_slave_1: left promiscuous mode [ 224.709886][ T43] usb 5-1: New USB device found, idVendor=145f, idProduct=013a, bcdDevice= 5.86 [ 224.746279][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.841364][ T43] usb 5-1: Product: syz [ 224.871862][ T43] usb 5-1: Manufacturer: syz [ 224.900663][ T43] usb 5-1: SerialNumber: syz [ 224.927094][ T7292] netlink: 192 bytes leftover after parsing attributes in process `syz.1.350'. [ 224.943966][ T43] usb 5-1: config 0 descriptor?? [ 224.963293][ T43] gspca_main: pac207-2.14.0 probing 145f:013a [ 225.101562][ T43] gspca_pac207: Failed to read a register (index 0x0000, error -110) [ 225.203731][ T7277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.217835][ T7277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.349372][ T7300] netlink: 20 bytes leftover after parsing attributes in process `syz.2.351'. [ 225.397870][ T10] usb 5-1: USB disconnect, device number 22 [ 225.960960][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 226.011935][ T7309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.351'. [ 226.404484][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 226.630603][ T10] usb 2-1: can't read configurations, error -61 [ 227.064960][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 227.849866][ T7332] netlink: 20 bytes leftover after parsing attributes in process `syz.5.357'. [ 229.084760][ T24] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 229.389614][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.495070][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.820866][ T24] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 229.887541][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.002929][ T24] usb 5-1: config 0 descriptor?? [ 230.238199][ T7352] loop6: detected capacity change from 0 to 7 [ 230.267494][ T5922] Dev loop6: unable to read RDB block 7 [ 230.282615][ T5922] loop6: AHDI p1 p2 p3 [ 230.289776][ T5922] loop6: partition table partially beyond EOD, truncated [ 230.315554][ T5922] loop6: p1 start 926365495 is beyond EOD, truncated [ 230.339633][ T5922] loop6: p2 size 116 extends beyond EOD, truncated [ 230.668097][ T7341] process 'syz.4.358' launched './file0' with NULL argv: empty string added [ 230.690732][ T7352] Dev loop6: unable to read RDB block 7 [ 230.724716][ T7352] loop6: AHDI p1 p2 p3 [ 230.797739][ T7352] loop6: partition table partially beyond EOD, truncated [ 230.813616][ T7352] loop6: p1 start 926365495 is beyond EOD, truncated [ 230.823673][ T7352] loop6: p2 size 116 extends beyond EOD, truncated [ 231.234262][ T5922] udevd[5922]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 231.416513][ T5922] udevd[5922]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 231.598107][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 231.606275][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 231.692229][ T24] usb 5-1: USB disconnect, device number 23 [ 231.814096][ T10] usb 2-1: device descriptor read/all, error -71 [ 231.882253][ T10] usb usb2-port1: attempt power cycle [ 232.034689][ T7369] netlink: 92 bytes leftover after parsing attributes in process `syz.1.362'. [ 232.340403][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 232.381912][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 232.514948][ T24] usb 6-1: device descriptor read/64, error -32 [ 232.754772][ T5885] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 232.774645][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 232.969016][ T5885] usb 3-1: config 0 has an invalid interface number: 130 but max is 0 [ 233.099305][ T5885] usb 3-1: config 0 has no interface number 0 [ 233.147331][ T24] usb 6-1: config 0 has no interfaces? [ 233.161663][ T5885] usb 3-1: New USB device found, idVendor=145f, idProduct=013a, bcdDevice= 5.86 [ 233.215560][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.225156][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 233.247512][ T5885] usb 3-1: Product: syz [ 233.252300][ T5885] usb 3-1: Manufacturer: syz [ 233.257960][ T5885] usb 3-1: SerialNumber: syz [ 233.270724][ T5885] usb 3-1: config 0 descriptor?? [ 233.290948][ T5885] gspca_main: pac207-2.14.0 probing 145f:013a [ 233.317223][ T24] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 233.336262][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.353833][ T24] usb 6-1: Product: syz [ 233.359231][ T24] usb 6-1: Manufacturer: syz [ 233.366080][ T24] usb 6-1: SerialNumber: syz [ 233.379356][ T24] usb 6-1: config 0 descriptor?? [ 233.405182][ T5885] gspca_pac207: Failed to read a register (index 0x0000, error -110) [ 233.466688][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.495682][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.539299][ T7381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.552189][ T10] usb 5-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 233.584075][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.602227][ T10] usb 5-1: config 0 descriptor?? [ 233.612193][ T7381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.934779][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 233.954814][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 233.988495][ T10] usb 5-1: USB disconnect, device number 24 [ 234.176131][ T9] usb 3-1: USB disconnect, device number 16 [ 234.674949][ T5885] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 235.128322][ T5885] usb 2-1: config 0 has no interfaces? [ 235.315658][ T5885] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 235.349779][ T7419] netlink: 92 bytes leftover after parsing attributes in process `syz.4.374'. [ 235.370495][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.426713][ T5885] usb 2-1: Product: syz [ 235.515574][ T5885] usb 2-1: Manufacturer: syz [ 235.536380][ T5885] usb 2-1: SerialNumber: syz [ 235.592204][ T5885] usb 2-1: config 0 descriptor?? [ 236.147611][ T5885] usb 6-1: USB disconnect, device number 3 [ 236.632581][ T7441] loop6: detected capacity change from 0 to 524287999 [ 236.924849][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 237.075056][ T24] usb 6-1: device descriptor read/64, error -71 [ 237.188899][ T7402] netlink: 'syz.1.370': attribute type 3 has an invalid length. [ 237.321694][ T7460] veth1_macvtap: left promiscuous mode [ 237.352298][ T7460] macsec0: entered promiscuous mode [ 237.416733][ T7461] veth1_macvtap: entered promiscuous mode [ 237.439489][ T7461] macsec0: left promiscuous mode [ 237.462762][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 237.654960][ T24] usb 6-1: device descriptor read/64, error -71 [ 237.799645][ T24] usb usb6-port1: attempt power cycle [ 238.178313][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 238.205080][ T5885] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 238.266254][ T24] usb 6-1: device descriptor read/8, error -71 [ 238.417255][ T5885] usb 3-1: Using ep0 maxpacket: 16 [ 238.462828][ T5885] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.490833][ T5885] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 238.521896][ T5885] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 238.594737][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.614700][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 238.663810][ T24] usb 6-1: device descriptor read/8, error -71 [ 238.676353][ T5885] usb 3-1: config 0 descriptor?? [ 238.810157][ T24] usb usb6-port1: unable to enumerate USB device [ 238.937473][ T7466] netlink: 'syz.2.383': attribute type 21 has an invalid length. [ 238.996370][ T7466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.037709][ T7466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.073413][ T7466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.117851][ T7466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.173725][ T7478] netlink: 92 bytes leftover after parsing attributes in process `syz.4.385'. [ 239.209688][ T5885] usb 3-1: string descriptor 0 read error: -71 [ 239.257164][ T5885] usb 3-1: USB disconnect, device number 17 [ 239.379831][ T2153] usb 2-1: USB disconnect, device number 16 [ 239.734060][ T30] audit: type=1326 audit(1748727090.524:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.1.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763a38e969 code=0x7ffc0000 [ 239.884661][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 239.942955][ T30] audit: type=1326 audit(1748727090.554:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.1.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763a38e969 code=0x7ffc0000 [ 240.067010][ T30] audit: type=1326 audit(1748727090.554:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.1.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f763a38e969 code=0x7ffc0000 [ 240.137247][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 240.180338][ T10] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 240.185821][ T30] audit: type=1326 audit(1748727090.554:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.1.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763a38e969 code=0x7ffc0000 [ 240.294873][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 240.334323][ T30] audit: type=1326 audit(1748727090.554:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.1.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763a38e969 code=0x7ffc0000 [ 240.375691][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 240.457723][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 240.490327][ T30] audit: type=1326 audit(1748727090.624:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.1.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f763a38e969 code=0x7ffc0000 [ 240.506889][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 240.544707][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 240.584237][ T10] usb 3-1: Product: syz [ 240.589545][ T977] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 240.636789][ T10] usb 3-1: Manufacturer: syz [ 240.674613][ T30] audit: type=1326 audit(1748727090.624:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.1.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763a38e969 code=0x7ffc0000 [ 240.685715][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 240.760060][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 240.787331][ T977] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 240.805827][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 240.832962][ T977] usb 5-1: config 0 has no interface number 0 [ 240.845449][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 240.855530][ T977] usb 5-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=56.19 [ 240.904763][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.944902][ T977] usb 5-1: Product: syz [ 240.949172][ T977] usb 5-1: Manufacturer: syz [ 240.965606][ T977] usb 5-1: SerialNumber: syz [ 240.994467][ T977] usb 5-1: config 0 descriptor?? [ 241.042698][ T977] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 241.075053][ T977] dvb-usb: bulk message failed: -22 (2/0) [ 241.101049][ T977] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 241.174775][ T977] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 241.241664][ T977] usb 5-1: media controller created [ 241.251418][ T977] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 241.306063][ T977] usb 5-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 241.399666][ T977] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 241.954629][ T977] rc_core: IR keymap rc-dtt200u not found [ 241.970318][ T977] Registered IR keymap rc-empty [ 242.001613][ T977] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 242.018823][ T977] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input10 [ 242.037898][ T977] dvb-usb: schedule remote query interval to 300 msecs. [ 242.046532][ T977] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 242.074220][ T977] usb 5-1: USB disconnect, device number 25 [ 242.613547][ T7537] capability: warning: `syz.4.396' uses deprecated v2 capabilities in a way that may be insecure [ 242.779182][ T7540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.398'. [ 242.819293][ T977] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 243.144210][ T7546] netlink: 84 bytes leftover after parsing attributes in process `syz.1.399'. [ 243.420044][ T7555] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 243.426925][ T7555] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 243.454828][ T7555] vhci_hcd vhci_hcd.0: Device attached [ 243.475523][ T7558] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(12) [ 243.482659][ T7558] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 243.502195][ T7558] vhci_hcd vhci_hcd.0: Device attached [ 243.524316][ T7555] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 243.545912][ T7555] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(14) [ 243.553254][ T7555] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 243.568400][ T7555] vhci_hcd vhci_hcd.0: Device attached [ 243.592551][ T7555] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(17) [ 243.599971][ T7555] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 243.632880][ T7555] vhci_hcd vhci_hcd.0: Device attached [ 243.639488][ T2153] vhci_hcd: vhci_device speed not set [ 243.646245][ T7558] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 243.677758][ T7555] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 243.705727][ T7555] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 243.724738][ T2153] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 243.813078][ T7558] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(25) [ 243.820237][ T7558] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 243.869703][ T7558] vhci_hcd vhci_hcd.0: Device attached [ 243.898019][ T7556] vhci_hcd: connection reset by peer [ 243.905781][ T7559] vhci_hcd: connection closed [ 243.906744][ T7563] vhci_hcd: connection closed [ 243.913229][ T7565] vhci_hcd: connection closed [ 243.931487][ T59] vhci_hcd: stop threads [ 244.043054][ T977] usb 3-1: USB disconnect, device number 18 [ 244.070548][ T59] vhci_hcd: release socket [ 244.076703][ T7568] vhci_hcd: connection closed [ 244.149515][ T59] vhci_hcd: disconnect device [ 244.205686][ T59] vhci_hcd: stop threads [ 244.215654][ T59] vhci_hcd: release socket [ 244.225410][ T59] vhci_hcd: disconnect device [ 244.282282][ T59] vhci_hcd: stop threads [ 244.298553][ T59] vhci_hcd: release socket [ 244.315132][ T59] vhci_hcd: disconnect device [ 244.323832][ T59] vhci_hcd: stop threads [ 244.342157][ T59] vhci_hcd: release socket [ 244.355431][ T59] vhci_hcd: disconnect device [ 244.371851][ T59] vhci_hcd: stop threads [ 244.382966][ T59] vhci_hcd: release socket [ 244.414818][ T59] vhci_hcd: disconnect device [ 246.414976][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 246.549809][ T7615] netlink: 84 bytes leftover after parsing attributes in process `syz.1.411'. [ 246.633188][ T9] usb 3-1: config 0 has an invalid interface number: 81 but max is 2 [ 246.662081][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.724319][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 246.776299][ T9] usb 3-1: config 0 has no interface number 0 [ 246.803060][ T9] usb 3-1: config 0 interface 81 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 246.816927][ T9] usb 3-1: config 0 interface 81 has no altsetting 0 [ 246.834164][ T9] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=21.7a [ 246.844751][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.945342][ T9] usb 3-1: config 0 descriptor?? [ 247.054792][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 247.203632][ T9] usb 3-1: string descriptor 0 read error: -71 [ 247.222074][ T10] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 247.235809][ T9] cdc_ether 3-1:0.81: skipping garbage [ 247.241539][ T9] cdc_ether 3-1:0.81: skipping garbage [ 247.257317][ T10] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 247.287337][ T9] usb 3-1: bad CDC descriptors [ 247.296955][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 247.311835][ T9] usb 3-1: unsupported MDLM descriptors [ 247.400289][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 247.413160][ T9] usb 3-1: USB disconnect, device number 19 [ 247.425231][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 247.442229][ T10] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 247.461963][ T10] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 247.478595][ T10] usb 2-1: Product: syz [ 247.483611][ T10] usb 2-1: Manufacturer: syz [ 247.506242][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 247.514687][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 247.523188][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 247.554132][ T10] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 247.567837][ T10] cdc_wdm 2-1:1.0: Unknown control protocol [ 247.670399][ T7624] netlink: 28 bytes leftover after parsing attributes in process `syz.4.414'. [ 247.834868][ T24] usb 6-1: config 0 has no interfaces? [ 247.859036][ T24] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 247.935573][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.962273][ T24] usb 6-1: Product: syz [ 247.974571][ T24] usb 6-1: Manufacturer: syz [ 247.979380][ T24] usb 6-1: SerialNumber: syz [ 248.039476][ T24] usb 6-1: config 0 descriptor?? [ 248.534958][ T7632] fuse: Unknown parameter '0x0000000000000005' [ 248.824127][ T7625] netlink: 'syz.5.413': attribute type 3 has an invalid length. [ 248.884229][ T2153] vhci_hcd: vhci_device speed not set [ 249.139921][ T24] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 250.060448][ T9] usb 2-1: USB disconnect, device number 17 [ 250.196325][ T43] usb usb36-port1: attempt power cycle [ 250.239517][ T24] usb 5-1: config 0 has no interfaces? [ 250.299335][ T24] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 250.321488][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.514765][ T24] usb 5-1: Product: syz [ 250.547681][ T24] usb 5-1: Manufacturer: syz [ 250.596471][ T24] usb 5-1: SerialNumber: syz [ 250.647231][ T24] usb 5-1: config 0 descriptor?? [ 250.823564][ T7650] netlink: 'syz.2.417': attribute type 13 has an invalid length. [ 250.892133][ T43] usb usb36-port1: unable to enumerate USB device [ 251.087044][ T7650] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 251.514054][ T7669] netlink: 84 bytes leftover after parsing attributes in process `syz.0.422'. [ 251.878906][ T5819] usb 6-1: USB disconnect, device number 8 [ 252.385446][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 252.664614][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 253.167280][ T10] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 253.231318][ T10] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 253.303031][ T10] usb 2-1: string descriptor 0 read error: -22 [ 253.380534][ T10] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 253.414627][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.119648][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.421'. [ 254.137999][ T7667] netlink: 24 bytes leftover after parsing attributes in process `syz.1.421'. [ 254.908344][ T7698] netlink: 'syz.2.425': attribute type 4 has an invalid length. [ 255.122278][ T24] usb 5-1: can't set config #0, error -71 [ 255.185963][ T24] usb 5-1: USB disconnect, device number 26 [ 256.915421][ T24] usb 2-1: USB disconnect, device number 18 [ 258.407235][ T7748] FAULT_INJECTION: forcing a failure. [ 258.407235][ T7748] name failslab, interval 1, probability 0, space 0, times 0 [ 258.517131][ T7748] CPU: 1 UID: 0 PID: 7748 Comm: syz.5.437 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 258.517165][ T7748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 258.517179][ T7748] Call Trace: [ 258.517189][ T7748] [ 258.517201][ T7748] dump_stack_lvl+0x189/0x250 [ 258.517248][ T7748] ? __pfx____ratelimit+0x10/0x10 [ 258.517273][ T7748] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.517305][ T7748] ? __pfx__printk+0x10/0x10 [ 258.517333][ T7748] ? __pfx___might_resched+0x10/0x10 [ 258.517361][ T7748] ? fs_reclaim_acquire+0x7d/0x100 [ 258.517400][ T7748] should_fail_ex+0x414/0x560 [ 258.517429][ T7748] ? __pfx_sock_alloc_inode+0x10/0x10 [ 258.517454][ T7748] should_failslab+0xa8/0x100 [ 258.517484][ T7748] ? __pfx_sock_alloc_inode+0x10/0x10 [ 258.517524][ T7748] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 258.517552][ T7748] ? sock_alloc_inode+0x28/0xc0 [ 258.517575][ T7748] ? __pfx_sock_alloc_inode+0x10/0x10 [ 258.517594][ T7748] sock_alloc_inode+0x28/0xc0 [ 258.517623][ T7748] alloc_inode+0x67/0x1b0 [ 258.517654][ T7748] do_accept+0x111/0x680 [ 258.517684][ T7748] ? __pfx_do_accept+0x10/0x10 [ 258.517732][ T7748] __sys_accept4+0x11c/0x1c0 [ 258.517759][ T7748] ? __pfx___sys_accept4+0x10/0x10 [ 258.517784][ T7748] ? __pfx_ksys_write+0x10/0x10 [ 258.517806][ T7748] ? rcu_is_watching+0x15/0xb0 [ 258.517842][ T7748] __x64_sys_accept+0x7d/0x90 [ 258.517885][ T7748] do_syscall_64+0xfa/0x3b0 [ 258.517905][ T7748] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.517924][ T7748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.517945][ T7748] ? clear_bhb_loop+0x60/0xb0 [ 258.517969][ T7748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.517988][ T7748] RIP: 0033:0x7f9e0e58e969 [ 258.518006][ T7748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.518024][ T7748] RSP: 002b:00007f9e0f44e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 258.518053][ T7748] RAX: ffffffffffffffda RBX: 00007f9e0e7b5fa0 RCX: 00007f9e0e58e969 [ 258.518067][ T7748] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 258.518078][ T7748] RBP: 00007f9e0f44e090 R08: 0000000000000000 R09: 0000000000000000 [ 258.518090][ T7748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.518102][ T7748] R13: 0000000000000000 R14: 00007f9e0e7b5fa0 R15: 00007f9e0e8dfa28 [ 258.518133][ T7748] [ 259.424704][ T5819] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 259.744771][ T5819] usb 3-1: Using ep0 maxpacket: 16 [ 259.794445][ T7765] netlink: 'syz.1.439': attribute type 13 has an invalid length. [ 259.898997][ T7765] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 259.961885][ T5819] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 259.971752][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.000190][ T5819] usb 3-1: Product: syz [ 260.048820][ T5819] usb 3-1: Manufacturer: syz [ 260.086420][ T5819] usb 3-1: SerialNumber: syz [ 260.236680][ T5819] r8152-cfgselector 3-1: Unknown version 0x0000 [ 260.313328][ T5819] r8152-cfgselector 3-1: config 0 descriptor?? [ 260.856704][ T7783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.982843][ T7786] netlink: 72 bytes leftover after parsing attributes in process `syz.0.444'. [ 261.001029][ T7783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.465938][ T7791] netlink: 'syz.5.445': attribute type 13 has an invalid length. [ 261.634172][ T7797] netlink: 104 bytes leftover after parsing attributes in process `syz.0.447'. [ 261.870695][ T7800] netlink: 40 bytes leftover after parsing attributes in process `syz.0.447'. [ 262.136067][ T7791] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 262.316107][ T10] r8152-cfgselector 3-1: USB disconnect, device number 20 [ 262.892617][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.900217][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.050960][ T30] audit: type=1800 audit(1748727113.844:34): pid=7812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.450" name="dmabuf" dev="dmabuf" ino=1 res=0 errno=0 [ 263.073195][ C1] vkms_vblank_simulate: vblank timer overrun [ 264.434836][ T24] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 264.657297][ T24] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 264.744619][ T24] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 264.834740][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 264.863877][ T30] audit: type=1326 audit(1748727115.654:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7834 comm="syz.0.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90efb8e969 code=0x7ffc0000 [ 264.896082][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 264.943000][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 265.084061][ T30] audit: type=1326 audit(1748727115.654:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7834 comm="syz.0.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90efb8e969 code=0x7ffc0000 [ 265.111598][ C1] vkms_vblank_simulate: vblank timer overrun [ 265.118663][ T7839] netlink: 64 bytes leftover after parsing attributes in process `syz.4.457'. [ 265.415126][ T24] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 265.474898][ T24] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 265.554001][ T24] usb 3-1: Product: syz [ 265.575044][ T30] audit: type=1326 audit(1748727115.704:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7834 comm="syz.0.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f90efb8e969 code=0x7ffc0000 [ 265.602317][ T30] audit: type=1326 audit(1748727115.704:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7834 comm="syz.0.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90efb8e969 code=0x7ffc0000 [ 265.617171][ T24] usb 3-1: Manufacturer: syz [ 265.629188][ T30] audit: type=1326 audit(1748727115.704:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7834 comm="syz.0.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90efb8e969 code=0x7ffc0000 [ 265.718329][ T30] audit: type=1326 audit(1748727115.724:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7834 comm="syz.0.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f90efb8e969 code=0x7ffc0000 [ 265.774764][ T30] audit: type=1326 audit(1748727115.734:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7834 comm="syz.0.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90efb8e969 code=0x7ffc0000 [ 265.787049][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 265.844658][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 265.855208][ T30] audit: type=1326 audit(1748727115.754:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7834 comm="syz.0.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f90efb8e969 code=0x7ffc0000 [ 265.880165][ T30] audit: type=1326 audit(1748727115.754:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7834 comm="syz.0.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90efb8e969 code=0x7ffc0000 [ 265.954427][ T24] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 265.964132][ T24] cdc_wdm 3-1:1.0: Unknown control protocol [ 265.999002][ T7850] FAULT_INJECTION: forcing a failure. [ 265.999002][ T7850] name failslab, interval 1, probability 0, space 0, times 0 [ 266.523335][ T7850] CPU: 0 UID: 0 PID: 7850 Comm: syz.4.458 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 266.523369][ T7850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 266.523383][ T7850] Call Trace: [ 266.523394][ T7850] [ 266.523403][ T7850] dump_stack_lvl+0x189/0x250 [ 266.523445][ T7850] ? __pfx____ratelimit+0x10/0x10 [ 266.523469][ T7850] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.523503][ T7850] ? __pfx__printk+0x10/0x10 [ 266.523532][ T7850] ? __pfx___might_resched+0x10/0x10 [ 266.523560][ T7850] ? fs_reclaim_acquire+0x7d/0x100 [ 266.523598][ T7850] should_fail_ex+0x414/0x560 [ 266.523629][ T7850] should_failslab+0xa8/0x100 [ 266.523660][ T7850] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 266.523689][ T7850] ? __d_alloc+0x31/0x6f0 [ 266.523714][ T7850] __d_alloc+0x31/0x6f0 [ 266.523741][ T7850] d_alloc_pseudo+0x1f/0xb0 [ 266.523762][ T7850] alloc_file_pseudo+0xcc/0x210 [ 266.523798][ T7850] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 266.523828][ T7850] ? evm_inode_alloc_security+0x40/0xb0 [ 266.523858][ T7850] ? security_inode_alloc+0xd5/0x330 [ 266.523897][ T7850] sock_alloc_file+0xb8/0x2e0 [ 266.523925][ T7850] do_accept+0x34b/0x680 [ 266.523968][ T7850] ? __pfx_do_accept+0x10/0x10 [ 266.524018][ T7850] __sys_accept4+0x11c/0x1c0 [ 266.524048][ T7850] ? __pfx___sys_accept4+0x10/0x10 [ 266.524097][ T7850] ? __pfx_ksys_write+0x10/0x10 [ 266.524119][ T7850] ? rcu_is_watching+0x15/0xb0 [ 266.524154][ T7850] __x64_sys_accept+0x7d/0x90 [ 266.524181][ T7850] do_syscall_64+0xfa/0x3b0 [ 266.524203][ T7850] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.524224][ T7850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.524245][ T7850] ? clear_bhb_loop+0x60/0xb0 [ 266.524270][ T7850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.524290][ T7850] RIP: 0033:0x7f98e338e969 [ 266.524311][ T7850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.524330][ T7850] RSP: 002b:00007f98e421b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 266.524353][ T7850] RAX: ffffffffffffffda RBX: 00007f98e35b5fa0 RCX: 00007f98e338e969 [ 266.524369][ T7850] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 266.524381][ T7850] RBP: 00007f98e421b090 R08: 0000000000000000 R09: 0000000000000000 [ 266.524394][ T7850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.524407][ T7850] R13: 0000000000000000 R14: 00007f98e35b5fa0 R15: 00007f98e36dfa28 [ 266.524439][ T7850] [ 266.913038][ T7856] fuse: Bad value for 'fd' [ 268.095138][ T7871] ================================================================== [ 268.104223][ T7871] BUG: KASAN: wild-memory-access in get_futex_key+0x260/0x16c0 [ 268.113525][ T7871] Read of size 8 at addr 1fffffff828dcf50 by task syz.4.463/7871 [ 268.122617][ T7871] [ 268.125287][ T7871] CPU: 0 UID: 0 PID: 7871 Comm: syz.4.463 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 268.125315][ T7871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 268.125330][ T7871] Call Trace: [ 268.125339][ T7871] [ 268.125347][ T7871] dump_stack_lvl+0x189/0x250 [ 268.125386][ T7871] ? __pfx__printk+0x10/0x10 [ 268.125408][ T7871] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.125440][ T7871] ? __pfx__printk+0x10/0x10 [ 268.125460][ T7871] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 268.125499][ T7871] ? get_futex_key+0x260/0x16c0 [ 268.125539][ T7871] ? get_futex_key+0x260/0x16c0 [ 268.125570][ T7871] kasan_report+0x118/0x150 [ 268.125599][ T7871] ? get_futex_key+0x260/0x16c0 [ 268.125629][ T7871] kasan_check_range+0x2b0/0x2c0 [ 268.125652][ T7871] get_futex_key+0x260/0x16c0 [ 268.125680][ T7871] ? __pfx_get_futex_key+0x10/0x10 [ 268.125700][ T7871] ? futex_private_hash+0x9e/0x3d0 [ 268.125723][ T7871] ? futex_private_hash+0x3b3/0x3d0 [ 268.125748][ T7871] futex_wait_multiple_setup+0x103/0x6e0 [ 268.125768][ T7871] ? __asan_memcpy+0x40/0x70 [ 268.125787][ T7871] ? __pfx_futex_wake_mark+0x10/0x10 [ 268.125805][ T7871] futex_wait_multiple+0xaf/0x3b0 [ 268.125846][ T7871] __se_sys_futex_waitv+0x1e5/0x280 [ 268.125882][ T7871] ? __pfx___se_sys_futex_waitv+0x10/0x10 [ 268.125919][ T7871] ? do_user_addr_fault+0xc8a/0x1390 [ 268.125941][ T7871] ? do_syscall_64+0xbe/0x3b0 [ 268.125960][ T7871] ? __x64_sys_futex_waitv+0x20/0xc0 [ 268.125987][ T7871] do_syscall_64+0xfa/0x3b0 [ 268.126004][ T7871] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.126020][ T7871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.126038][ T7871] ? clear_bhb_loop+0x60/0xb0 [ 268.126057][ T7871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.126073][ T7871] RIP: 0033:0x7f98e338e969 [ 268.126089][ T7871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.126145][ T7871] RSP: 002b:00007f98e41d9038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 268.126164][ T7871] RAX: ffffffffffffffda RBX: 00007f98e35b6160 RCX: 00007f98e338e969 [ 268.126177][ T7871] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000001b00 [ 268.126188][ T7871] RBP: 00007f98e3410ab1 R08: 0000000000000001 R09: 0000000000000000 [ 268.126199][ T7871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.126210][ T7871] R13: 0000000000000001 R14: 00007f98e35b6160 R15: 00007f98e36dfa28 [ 268.126229][ T7871] [ 268.126236][ T7871] ================================================================== [ 268.550445][ T7871] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 268.558451][ T7871] CPU: 0 UID: 0 PID: 7871 Comm: syz.4.463 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 268.571237][ T7871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 268.581952][ T7871] Call Trace: [ 268.586316][ T7871] [ 268.590093][ T7871] dump_stack_lvl+0x99/0x250 [ 268.595595][ T7871] ? __asan_memcpy+0x40/0x70 [ 268.600367][ T7871] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.606234][ T7871] ? __pfx__printk+0x10/0x10 [ 268.611058][ T7871] panic+0x2db/0x790 [ 268.615355][ T7871] ? __pfx_panic+0x10/0x10 [ 268.620737][ T7871] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 268.626853][ T7871] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 268.633315][ T7871] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 268.638829][ T7871] ? get_futex_key+0x260/0x16c0 [ 268.644527][ T7871] check_panic_on_warn+0x89/0xb0 [ 268.649981][ T7871] ? get_futex_key+0x260/0x16c0 [ 268.654974][ T7871] end_report+0x78/0x160 [ 268.659284][ T7871] kasan_report+0x129/0x150 [ 268.664221][ T7871] ? get_futex_key+0x260/0x16c0 [ 268.671374][ T7871] kasan_check_range+0x2b0/0x2c0 [ 268.678073][ T7871] get_futex_key+0x260/0x16c0 [ 268.683241][ T7871] ? __pfx_get_futex_key+0x10/0x10 [ 268.688388][ T7871] ? futex_private_hash+0x9e/0x3d0 [ 268.694935][ T7871] ? futex_private_hash+0x3b3/0x3d0 [ 268.701165][ T7871] futex_wait_multiple_setup+0x103/0x6e0 [ 268.707073][ T7871] ? __asan_memcpy+0x40/0x70 [ 268.712052][ T7871] ? __pfx_futex_wake_mark+0x10/0x10 [ 268.717394][ T7871] futex_wait_multiple+0xaf/0x3b0 [ 268.722723][ T7871] __se_sys_futex_waitv+0x1e5/0x280 [ 268.728226][ T7871] ? __pfx___se_sys_futex_waitv+0x10/0x10 [ 268.734572][ T7871] ? do_user_addr_fault+0xc8a/0x1390 [ 268.740545][ T7871] ? do_syscall_64+0xbe/0x3b0 [ 268.745842][ T7871] ? __x64_sys_futex_waitv+0x20/0xc0 [ 268.752587][ T7871] do_syscall_64+0xfa/0x3b0 [ 268.757302][ T7871] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.764762][ T7871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.772010][ T7871] ? clear_bhb_loop+0x60/0xb0 [ 268.777315][ T7871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.783413][ T7871] RIP: 0033:0x7f98e338e969 [ 268.788273][ T7871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.810153][ T7871] RSP: 002b:00007f98e41d9038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 268.821211][ T7871] RAX: ffffffffffffffda RBX: 00007f98e35b6160 RCX: 00007f98e338e969 [ 268.831017][ T7871] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000001b00 [ 268.840219][ T7871] RBP: 00007f98e3410ab1 R08: 0000000000000001 R09: 0000000000000000 [ 268.848833][ T7871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.858096][ T7871] R13: 0000000000000001 R14: 00007f98e35b6160 R15: 00007f98e36dfa28 [ 268.867434][ T7871] [ 268.871133][ T7871] Kernel Offset: disabled [ 268.876215][ T7871] Rebooting in 86400 seconds..