last executing test programs: 24m25.117557493s ago: executing program 0 (id=872): r0 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x20000, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x406, r1) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a00000a51f09f85", @ANYRES32, @ANYBLOB='\x00'/16, @ANYRES32=0x0, @ANYRES32], 0x48) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r4, 0x5441, 0xf248) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_devices(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="1e03f2003c5ca601288763"], 0xffdd) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, &(0x7f0000000040), 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f0000000000e01020000000000000000070000020c0019800800010080000000c900198008000100010400000800020004000000080002000c0000000800020049080000080001007009000084000d8008000100640101012c000380060002004e240000060001004e240000060001004e240000060001004e220000060002004e230000080002007f00000108000100e000000114000380060002004e230000060001004e22000014000500fc02000000000000000000000000000014000380060002004e240000060002004e2300002000068014000400ff0200000000000000000000000000010800010000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x24040190}, 0x804) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0xfff8, 0x0, 0x0, 0xfffff010}, {0x20, 0x20, 0x2, 0xffffefff}, {0x6, 0x0, 0x80}]}, 0x8) sendmmsg(r1, &(0x7f0000000ac0), 0x2, 0x44040050) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0xfdfdffff) 24m22.291554025s ago: executing program 0 (id=878): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x20, &(0x7f0000000640)={&(0x7f0000000440)={0x64, r1, 0x1, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x48, 0x33, @action={{}, @sp_mp_confirm={0xf, 0x2, {0x8801, @random=0xf03d, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a, {0x1000, 0x2, 0x5, 0x0, {0x29fc, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1}, 0x300, 0x8000, 0x1}}}}}}]}, 0x64}}, 0x0) 24m22.272360217s ago: executing program 0 (id=880): r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x2004, @local, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x11000002) 24m22.18962533s ago: executing program 0 (id=881): mkdir(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x80101) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_deladdrlabel={0x7c, 0x49, 0x1, 0x70bd26, 0x25dfdbff, {0xa, 0x0, 0x20, 0x0, 0x0, 0x88}, [@IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0xfffffff9, {0x2a00, 0x80010000, 0x0, 0x2, 0x4, 0x0, 0x0, 0xa, 0xeab23d38f0f942ba, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96ef00000000000100000000000000170000a2c100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) chroot(&(0x7f0000000780)='./file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x2, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}}, 0x80) 24m22.107890254s ago: executing program 0 (id=882): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x1c3902, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) fcntl$getownex(r1, 0x10, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x44) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_open_dev$dri(0x0, 0x1, 0x0) sendfile(r0, r0, 0x0, 0x2000fb) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb00000001"], 0x0) 24m21.59938469s ago: executing program 0 (id=887): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x2000004, 0x4, 0x3, 0x3, 0xc, 0x6, 0x7}, 0x1c) recvfrom(r3, &(0x7f0000000180)=""/18, 0x12, 0x6667b9fa4a5fc82, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x101) close_range(r1, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564dff, 0x0, 0x8}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) quotactl_fd$Q_GETFMT(r5, 0xffffffff80000401, 0x0, &(0x7f0000000100)) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) write$UHID_INPUT(r10, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x1006) setsockopt$XDP_TX_RING(r8, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0684113, &(0x7f0000000180)={0x1, 0x5, 0xc7, 0x6, 0xbb65, 0x31f, 0x80000001, 0x5, 0x9, 0x276, 0x9, 0x3}) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="a95c55bcc7cb4a93", 0x8) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800250007000200060019000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 24m20.355228676s ago: executing program 32 (id=887): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x2000004, 0x4, 0x3, 0x3, 0xc, 0x6, 0x7}, 0x1c) recvfrom(r3, &(0x7f0000000180)=""/18, 0x12, 0x6667b9fa4a5fc82, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x101) close_range(r1, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564dff, 0x0, 0x8}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) quotactl_fd$Q_GETFMT(r5, 0xffffffff80000401, 0x0, &(0x7f0000000100)) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) write$UHID_INPUT(r10, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x1006) setsockopt$XDP_TX_RING(r8, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0684113, &(0x7f0000000180)={0x1, 0x5, 0xc7, 0x6, 0xbb65, 0x31f, 0x80000001, 0x5, 0x9, 0x276, 0x9, 0x3}) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="a95c55bcc7cb4a93", 0x8) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800250007000200060019000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 23m53.455858255s ago: executing program 4 (id=975): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) ioctl$TUNSETDEBUG(r3, 0x400454c9, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x85, &(0x7f00000006c0)={0x0, 0xb, 0x0, 0x3, 0x40}, 0xfcf0, 0x0, 0x8b0, 0x48000000, 0x0, 0x0, 0x0}) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[]) ioctl$TUNSETLINK(r3, 0x400454cd, 0x300) prctl$PR_GET_NAME(0x10, &(0x7f0000000040)=""/20) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0x4, 0x3, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0xf5}, {0xe9, 0x1, 0x9, '\x00', 0x11}, {0x7, 0x9, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xaa}, {0x6, 0x8, 0x6, '\x00', 0x8}, {0x1, 0x3, 0x2, '\x00', 0x67}, {0x2, 0x7, 0xa, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x5, 0x0, 0xf, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0x7, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xc0}}, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x24, 0x2, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_FILTER={0x4}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_TUPLE_ORIG={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x50) mq_open(&(0x7f0000000000)='@\\{$,,]\x00', 0x80, 0x20, &(0x7f0000000040)={0x7b72d54c, 0x1, 0x7, 0x9}) 23m52.324964364s ago: executing program 4 (id=979): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x2, 0xb, 0x10, 0xc708, 0x9}}) connect$unix(r1, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f00000000c0)={'vlan0\x00', 0xffff}) r3 = openat$uinput(0xffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$UI_SET_PHYS(r3, 0x4004556c, &(0x7f0000000440)='syz1\x00') sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x504}}, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0xd}, {0x3, [{0xc9, 0xd16}, {0xc8, 0x8001}, {0xc8, 0x5e0e}]}}}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x8}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x48}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000051}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@getqdisc={0x44, 0x26, 0x4, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x10, 0x6}, {0x3, 0xc}, {0x1, 0xa}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x44}, {0x4}, {0x4}]}, 0x44}}, 0x20000000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r6, 0x400, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)=0x0) write$cgroup_pid(r6, &(0x7f0000000380)=r7, 0x12) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@RTM_GETMDB={0x18, 0x56, 0x400, 0x70bd29, 0x25dfdbfb, {0x7, r5}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000080)={0x9, 0x0, 0x2}, &(0x7f0000000140)=[{}, {}]) 23m52.091707932s ago: executing program 4 (id=980): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x0, @scatter={0x18, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/204, 0xcc}, {0x0}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_buf(r1, 0x1, 0x2c, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001800010029bd7000fedbdf251d01050008000e00", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00', @ANYRES32=0x0, @ANYBLOB], 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000000)={0x0, 0x0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9ea4318123341cf9d90a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a22a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a19eed87b277be335c75e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436e101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521bc9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d2502000000d9051f22614d1f62734d678039a97d2b74f9e8e97f4e8e7025123e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f23128d743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069f6f24e1e1bc976d965ddabb01085f16bff63a06578d6d184f5de7bfb6aaa75f16996d8d60bd0111a8a237a1536256c02284cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798bbe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e2005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9cde5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde330289d6348d183ed9d3dae3cccf109f7c78e8479a345e805e47dfa82cafc6b64b1f4659834aecbeded44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1b7d5f80c580dc31b0963ff953ce09148e8dfea9d03a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e96c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20c290a1f6c09272dbc3b2c0ab2b5baa1b07b16e81f278e54a479f1a06bc06e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4d57b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce788c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f709294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b132876159972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0598700130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80014ff11d9dbceba41d8dfce410333a054e82b1d050331ce0aeacb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6bb956fac1ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a8263e9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dd18f6148354df7e60a489dc543ccdee1fff9d8f8d78844de27a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d64100cc000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2ceae70922989f66827fe9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168e32d7bd6800000000a21008b8d26dabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2935d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95badaf8ed85cd5b03a7352a0fb83398566d1bc133582ce2d9f601cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353c959fd965702f1cd5bcb3c16d4b8bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef07b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c3355fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538b011cb3928b430630b8ccc800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b314bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c921b090000000000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da22ee9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45b4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d5027e81ceec1a6d7441d0b538d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656d9a28f81f6a9465aec94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be184d4ebb942f99581a6fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bbb4ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855cb18b23517ca935a0fa1b630d70c4ca9acbaf0f08910f327fba506d834029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17ecd996d7dea947ee8ce55fa2dea5a000000000000000000000000006f0143d8d4038ef9f57d9e9336f3559558710d1febe7394cf8b02f59dab24d07db3d3c1ebff58f973ba3fc0c3e2fb2c2a674a188614520ecb1d22b49e3550263bf9d669fba198b65ee3512db0e710d2070b5847face7ada12c83f0aea3a8c9e84e6c7406732c952c5695d43bca33d481ef9d442697875e114f4c759af306b3fc8224fdec89bf199234bff488b81438cbe89e4cabdc007139352b5cb69d7987cdf37ab549b7639eeadafd5315d9c9f0e8c9223102e6deaca4ae9cb943a3ad188bcad95e8f97d7fee7c47ea50d222fe67085b4fb3fecfb67dec23b6ab5ee19a5ca5367bff058149acf90a6c4014dea2b763389f77301ea8574d112625300906f480c36f41f82f84991800c37863de349"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r4, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0x8f, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc"}, 0x4c) rt_sigaction(0x7, &(0x7f00000000c0)={0x0, 0x80000003, 0x0, {[0x7, 0xbf1]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000001180)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xfffffffffffff920}}, {@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x7}}, {@default_permissions}, {@default_permissions}]}}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000002380)) preadv(0xffffffffffffffff, &(0x7f0000001e80)=[{&(0x7f0000000080)=""/4094, 0xffe}, {0x0}], 0x2, 0x33, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000200)={{0x3, @name="678e24935d70f0d0b9719a84c589c03af0175e6635a91fc8a062c0955c161a5e"}, 0x8, 0xfc06, 0x8}) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000140)={0x2a, 0x4, 0x0, {0x1, 0xffffffff, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x11) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r6, 0x2285, 0x0) 23m51.072456782s ago: executing program 4 (id=984): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0xc0702, 0x0) (rerun: 64) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/68, 0x44}], 0x1) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) (async, rerun: 64) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000", @ANYRES32=r2, @ANYBLOB="0400"/20, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0500000002000000030000000000000000000000ffff000000000000"], 0x50) (async, rerun: 32) connect$unix(r0, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 32) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) (async) close(0x3) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) (async, rerun: 64) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64) openat$adsp1(0xffffff9c, &(0x7f0000000180), 0x900, 0x0) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xf}, {0x0, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x7, 0xb2}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7fff}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x20000000, 0xea, 0x100004}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000280)=&(0x7f0000000200)) (async) r9 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) (async) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) (async) syz_usb_disconnect(r9) 23m50.713642965s ago: executing program 4 (id=988): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000080}, 0x8094) (async) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000140)=0x1) r2 = openat$fuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$PTP_EXTTS_REQUEST(r1, 0x40103d02, &(0x7f00000001c0)={0x4, 0xa}) (async, rerun: 32) openat$sw_sync(0xffffff9c, &(0x7f0000000200), 0x24080, 0x0) (rerun: 32) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000240)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_BUFS(r3, 0xc0186416, &(0x7f0000000280)={0x0, 0x0, 0x8, 0x7, 0x8}) (async) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f00000002c0)={0x1, 0xb}) (async) close(r3) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r1, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000580)={'gretap0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x1, 0x8, 0x5, 0x9e, {{0x36, 0x4, 0x0, 0x5, 0xd8, 0x66, 0x0, 0xf, 0x2f, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010101, {[@lsrr={0x83, 0xf, 0x84, [@multicast1, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x2c, 0x8b, 0x3, 0x2, [{@remote, 0x7}, {@multicast2, 0xfffffff0}, {@loopback, 0xa3}, {@multicast1, 0x9}, {@empty, 0x3}]}, @timestamp_addr={0x44, 0x14, 0xd6, 0x1, 0x1, [{@local, 0xaeae}, {@rand_addr=0x64010100, 0xfffffff2}]}, @lsrr={0x83, 0x13, 0xb6, [@private=0xa010100, @empty, @dev={0xac, 0x14, 0x14, 0x14}, @dev={0xac, 0x14, 0x14, 0x1e}]}, @lsrr={0x83, 0x1f, 0x84, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @multicast1, @remote, @private=0xa010101, @empty, @loopback]}, @timestamp={0x44, 0x10, 0xb8, 0x0, 0xd, [0x80, 0x1, 0x2]}, @end, @timestamp_prespec={0x44, 0x2c, 0xc6, 0x3, 0xe, [{@empty, 0x38f}, {@rand_addr=0x64010101, 0x4}, {@rand_addr=0x64010101, 0xc}, {@multicast2, 0x8001}, {@rand_addr=0x64010101, 0xb18}]}, @ra={0x94, 0x4}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000680)={&(0x7f0000000300), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x70, r4, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000006c0)=0x3, 0x4) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(r8, &(0x7f0000000c00)=[{&(0x7f0000000700)="f02cfe21f22f2aa44c28d0c0836be326d4990a678e718e63ab0dfbf8e08702b7e0703524727a5c4ce3ddf195887ac5dee701f999dcf54a9d2d03ff3ae3ea00b30ae6b206bb1b1f654efb23945d58098296ad215ea44030d7577aee1f4a58f77d7120c0076f0c68708a47a83c635f2fb92a108b7823b47c912aac2461c024d7c347a7abdbcae1beaaf4967807dff262665b14d884b9b7183e0823d312fd465770619484135ea03d64fbab214e58442ddf62d5dce04cc68838fb52498d07551ef4e1", 0xc1}, {&(0x7f0000000800)="600a9154477bf7c3923e6fa731801418cda1e4ec618c87ebae230a50aaa64ad269c035f30586e1f6c5a2753179598c7f523eb3c8d2db376ef4fa7eaacab1e50fc9e7ee737246fb319eb5b1dfd319879fc7560d367c8e704885c2400b06fbf3be44c539dafe6b066285dbc5f40b3843413e303ae5baa5a770ed37fac542492967af2326ffaf9e226b6a", 0x89}, {&(0x7f00000008c0)="f5004c7e3a1899216a1acbbccbf5a0e32e7a6435558397315d539f1145a2dd56e71490a481ed5a633289d709ac56b4aa303bbf999bc754148c09ac4eaf3e5a5b712a9f24c29bc5f28d0738c926965b59749813be15b3a8bd1d05cec0e734d771f17a297110a1ce30a380fb5f8bbb", 0x6e}, {&(0x7f0000000940)="e1013ad53819bc487472d6e60e3f55a42e456103b712a9834e208a9da0853b00687895e43ded55dd86e47f263047b1ce42734e22935daf7cb68cd8c698b60fc050b219c112302c21e7eac45f77e6eeddf4c88887d114fb333ca16a0bfb73da6dadcd770bd0d3fd5d565914cf952c6e576581935a96f4a08ba003629bc61ee6c6f240ed7e2c87ddc475eb1849a489b4f6031c5fa42c00b330e631c16342579a9af3213eae65bce5493ada4f27ae", 0xad}, {&(0x7f0000000a00)="38e1f3a6e4e6423f594b8098475abdc61c39031ede3a3e41231e5f8472359cac29d49c8fe66482188c448f39aff2654224305a3fe10114edb09b95212f19f20695f6b7ff468aff380b241819deb24892b181997e781258784cbc5fbfbb7417eb395a25ef52c944686dd633fbbed287fc50090f42c261063ffc55ff7c", 0x7c}, {&(0x7f0000000a80)="50d8ec314dfc7cf578b098e1c57ea1a8455255d2ee5ff7595b9e04e51df47819e59d30ffdf4a4b2b7f6b75f2197d6cc71fe97e289319265b762bff33a87aa2a45b82c59a19efbd358ae5410738dae6d714a138ea548f89fa266c97c90410f897405371932c31f459b8fce4df12c74e5466db13e647939f73f92c18cf7714222ab42293e994bc9b3874ba83601168ba227070f625b8dfbfe4ae46bcd15c5e3b65f6095d783359c3f4e3e8940b977e3878e6d69083c0b6e513203af7af25e31de8658ea36b72d8026b2eb96d668bc113476c6bcb4c3a9677e853d81d6abaf63499", 0xe0}, {&(0x7f0000000b80)="0387d8dc45e24f5569b57465a552abd2f6ec4366564e14bc8571551944b19b74cbaa08b4ef0d78c57c96d7597c79639702e5f5ba99fb477180169cf092226fc46573bc8f9bd957fd90a009cf25fae7d80637f90694", 0x55}], 0x7) (async) ioctl$sock_SIOCBRADDBR(r8, 0x89a0, &(0x7f0000000c40)='team_slave_1\x00') ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000d80)={0x1, @win={{0x8, 0x2, 0x6, 0xc34}, 0x2, 0x8, &(0x7f0000000d00)={{0x8, 0x84b, 0xffffffff, 0x6}, &(0x7f0000000cc0)={{0x4455, 0x2, 0x5}, &(0x7f0000000c80)={{0x5, 0x7ff, 0x3ff, 0x6}}}}, 0x5, &(0x7f0000000d40)="fa51fc5bf17d7db8db87cd51d02ebe4ca609089415a7", 0x1}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000f00)={'syztnl2\x00', &(0x7f0000000ec0)={'ip_vti0\x00', r7, 0x70bd37d15fe7eb62, 0x20, 0x1, 0x1, {{0x8, 0x4, 0x3, 0x9, 0x20, 0x68, 0x0, 0xa, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @multicast2, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0x9d, [@private=0xa010102]}, @noop]}}}}}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001200)={0xffffffffffffffff, 0xe0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbd, &(0x7f0000001000)=[{}], 0x8, 0x10, &(0x7f0000001040), &(0x7f0000001080), 0x8, 0xb2, 0x8, 0x8, &(0x7f00000010c0)}}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000001340)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001300)={&(0x7f0000001240)={0xbc, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_LINKMODES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x10}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xc}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xcd}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x4}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000040}, 0x4008080) (async) pidfd_getfd(r1, r2, 0x0) (async) sendmmsg$inet6(r1, &(0x7f00000059c0)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001380)="59b242390f86ba912e74a21c590a1f4d585afc", 0x13}, {&(0x7f00000013c0)}, {&(0x7f0000001400)="78c1fc6f806cb057924492040c5a2abec76d29a1d95722e5feda35ec5f5fa380b3750e2bcbc865f602d57e5f57d4e0529604c730c4d23b8b39a655083058efd2e0fcefb216042d21c806dabd678b42dffa1e955aca81d95f37b5363447560b27a8b75e1e984afcbe5563a12540dd4e77842950ed77067799e725783c2f348f18d8cb0e895132d734f90717dc5743c2899bae93274ad03d3a2027b332fa4d8e8173628978cab39bd063875227ded3556af886a9445a4f5593176447332eab59b0ef480fb355b052f87ba760904e8ddb5d25faf6772b83f2879ff4012c6b146435b5acee8f7748772e6132e5e97e7b5c8b97238fef49b7905ead02", 0xfa}], 0x3, &(0x7f0000001540)=[@dstopts={{0x2c, 0x29, 0x37, {0x3b, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @ra={0x5, 0x2, 0x7}, @enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @flowinfo={{0x10, 0x29, 0xb, 0x6}}, @dstopts={{0x13c, 0x29, 0x37, {0x87, 0x24, '\x00', [@generic={0xfb, 0xd4, "59f0a9b61dd0299ca3690c43c7d8dbac3b6cc09314725ca7776c79f2a8b454be9943de449baa20fd4c2cf3b170751a7fbbdc244c6de49b5fa9ffe51c71582aa648f088e797191a6c8aff7e02e9be7c9ef50b824feef940a2de7e8d749857db8c29a9de932ce626dc2e082cdd31064e6ff1bb3baae946b7abeaafb6f61563f18b85466e798dc1cb1528e2fef6dd7321f9e6d6092048b5ddd604b2982156a17ec8c790edfe4b96d82b6d20a8aa367c1492410801428f70f30135821075459b8b945f84a6d00a80cb8488a802f199dd60eeded704c7"}, @hao={0xc9, 0x10, @empty}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x4, 0x32, "f854f9cc65729e1b20e0fbab94522ccaedb60e7dce329553fee6311bf61fbf53e99c8367a0d054ff5208f4f8d4e27086296a"}]}}}, @flowinfo={{0x10, 0x29, 0xb, 0x9e}}], 0x188}}, {{&(0x7f0000001700)={0xa, 0x4e22, 0x4680, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80}, 0x1c, &(0x7f0000001a80)=[{&(0x7f0000001740)="037a26d9e69aebb9968675b6cbe4e4f6a7448a05ec703b5ca545e535f0f580d7671ed473d65d1953b52905741909c71aee600ce5187bbf8f1c983ce15c29f4e40cc3b5fb349a36c97fa0812dc30eedac4b9839e1916e1630ebdf636024a0545a7e9962d6354d8e4998a255dd7b4c7f46cfdeaefc57a9c5ca591f2a5d4554a2b14d586cd604929df122983ed272bc319df8cd85e2ee05193294f8953723786679eb053ec23341fc4d47d7683aa6cbc6f862b696de5105e8157526f4cc73d97653f4e37a57c9143377c5a9c0d7f16ed10ff84c2b684dd139148f5fcc48c937562bb9ccef0286f625ea6f550f9bff1570c2f222d00ff266", 0xf6}, {&(0x7f0000001840)="069b7d80b5d1c74dee48fcd68351c213117baab42e90ae165742f30826200a1d73060713ec79b10f7b9d7aaea38e0c8542e94e4133bd58b3145a40336a728bb05da071ee0cb17b6eacfa4fc35d1769b019e568d50d9969fe8b7f911f80071b64de4a8013df7f45d6f1e129697805304b586a62de278913d71d8f6d59843c87893b81d36befe4d6225b0758dbead5acf0364e32892286a8ffbd492711af7ce3a9ce82ed8869d2948e8453cc506893dbfda92177361a55d9", 0xb7}, {&(0x7f0000001900)="14cc548ab22b1edb1ad2c72268772a7e26cb50507eeda19414751d0ff267872583590ba3a46bc6df43e867b36d9b8cacaf0e1ddcbadf14e7744abad1338ca8aac6064d94b8f859a647499331f22a241b2509bfcbaba3d3277b782b4a24f317dcff0b53528458671062dccf25b06d6a40de7770c6f05e1dc50ffb0cc05c2295a508087683f4d169b1a01001babe40157b27db68a0a25717236536c2fbd40c2cf3dd8d1a63af845182e2eb5b039ce42565652c0b3a9ea1da951665f7d6278960f7cd9aa5d4ab75308d5a585efff032ab9165cb73d8f2b18eaf9adc320ad2372e4120d49b7af2452d18aa5b7e", 0xeb}, {&(0x7f0000001a00)="b5b87dc14878fb842afc45fc76151d2cc865e43b66997fba610a45188b75d473fcbc20625b9d225580fb5766510ef1462527d5d0911aaa9e17ffd96917cf5d4bd35d2a15f6fdc63ca99952ff1904ac3b216e9bb5285070b2754c0becb033bd39ca6ade08039bdc9060934d13", 0x6c}], 0x4, &(0x7f0000001ac0)=[@dontfrag={{0x10, 0x29, 0x3e, 0x9}}, @rthdrdstopts={{0x84, 0x29, 0x37, {0x2e, 0xd, '\x00', [@calipso={0x7, 0x28, {0x3, 0x8, 0x7, 0x7, [0x7, 0x3, 0xb, 0x5]}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @calipso={0x7, 0x18, {0x3, 0x4, 0x0, 0x9, [0x0, 0x3]}}, @ra={0x5, 0x2, 0x6f8}, @pad1, @enc_lim={0x4, 0x1, 0x98}]}}}], 0x94}}, {{&(0x7f0000001b80)={0xa, 0x4e22, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}, 0x1c, &(0x7f0000002e40)=[{&(0x7f0000001bc0)="52009da68ead797e317e047deb042a0b2a96eeb7f5e7051eeb47d8fec963dddaceab0f257cbceb0f0df2cf5d4097e4d825c4e86ca29e4cf2026916a59ee3275dd65367474b28314d4e7d03c0a63d0b", 0x4f}, {&(0x7f0000001c40)="89fcf0c0cf1a95fa6fd991d9a694bf9721bbd1ad93308eedbe0349034e1ad4ed8326428acea224df373292b5c7fa6c7a6514357703be28e7cebd7c6fc2e365ac15b764e2e6c52cf0c8b2", 0x4a}, {&(0x7f0000001cc0)}, {&(0x7f0000001d00)="2768831a7aa9a948e1ab8c6a646a379eaf4a1785c422d3d79e7a93e5594cf0284e44e773edd1fc372e2d59bf102ad06f0dcf642c7d5f9f54341eb36334ded161d706362c7784340490dd523d7474d7b7ddb5c23bcb7b4830e21cf41d", 0x5c}, {&(0x7f0000001d80)="ff8fd148d4f8c880b4c82d70df569f73b73660a263baa6720e0b1ee09a887c8e0c814abb92cb2a835173e3386805b76fe41106fca3454b07db8c7532ec0c14657f1c466c93d0f8836834897d9094b60d713099511e5f5f8e6e529e3b988338f996a60703832d84d313bcb7528d5dd191059398d0efda5b967328259cc8beaf2419050e9b17feca5f454292d0b50a47f6c3e1b72327be29e5fdb760d8260d", 0x9e}, {&(0x7f0000001e40)="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", 0x1000}], 0x6}}, {{&(0x7f0000002e80)={0xa, 0x4e22, 0x0, @remote, 0x7a8}, 0x1c, &(0x7f0000002fc0)=[{&(0x7f0000002ec0)="5331e611cba6af65ffad6bda0bf611598674fbe330eb75dea0aa865ccbb0a4b06890c8380c60a06bcf2e290a642a08f45e6ffced69888809bcc8bcba862e0ecd265eb24b71255d2402a4b4cf2b794c0e80c48ad0fd083a97d765b9c052d4ab3a72b2a19b10cea1ee30b95ffe5d68f8925e1232f887d0ec19a935e3aeebbb3cd9ad06b5d35a205c43c31fb46028263313fde0eb399c46fa96d315e02d029e2b6a3ea8bd60840033eb35c2becdc2516670995db3439574399d37bffed225f2ccd62b927f650a80226342436365345304a62f21a84d9a7225a40d555ac7235918566b608be427b181ba065d6fb44303a3255d51a7c6d85d142fa19941", 0xfb}], 0x1, &(0x7f0000003000)=[@tclass={{0x10, 0x29, 0x43, 0x9}}, @hoplimit_2292={{0x10, 0x29, 0x8, 0x2}}], 0x20}}, {{&(0x7f0000003040)={0xa, 0x4e20, 0x1, @private2, 0x9}, 0x1c, &(0x7f00000046c0)=[{&(0x7f0000003080)="c79db05dc9bb228941005a10f6b010a53ffb878c0afb70677afb2fca43321ce6a4d3c2e7577be0c569e744104c08c9482dd976c38746f85e9f985bf1661f2e0e0cdbd7d72a42e45d90fa60bb7dcf9f9932262f93b234fb609a077d204278aac62b9ff11035f8b658af829fbafe6e26d62e13417565d080f19cbba77469ad3ae576", 0x81}, {&(0x7f0000003140)="59d6e25f6554e71be818286852ced7a19c589fc0f78c0ee854fc594dd5d526e162682e8bd96e318abdaffe21a2cd8b6bb2844ae7ec437746bbca9a385be6c1483499cb43ad2dc3b4c221d6ec739aff34223ebd35a4db769d141adacb40334594f7ee4484bad9902ea1aa3f09a924c9cf86e020d4167de19428cf37d6f6ed2e11e466a2954a21f738d2df017eb7cc32e4afcdf3e3b89a041fbb6f05ed90c6b32c5cb1571e8ca4073a276205dc445df8bd3a8862f2910f97aa0ffa74a35423ead049fc42db8f8b0d3a9210a58adabc80883fbb0b1d69f19acc8babf9a9fd5d2e24f22131e8", 0xe4}, {&(0x7f0000003240)="87dd0b34654c59adbe3693aa01c9d4dfc4bda322f502a76050f52a5b51eea5f53f4bcf67fa374b3a5f570b777e6f33f5d54ba17727c5bbc66900ae8a9748c77828918adf08389112ff8e691e01e6facb744edc635f4ac9019e68936f8384323e0d19d0aac83af9112b87dd572cc8ae61afe984dfa4aec50070cd80f200ca191514d5d319adf032ff1cbf896ea98f3bfb", 0x90}, {&(0x7f0000003300)="0da43efd2870fea8896d6e88a386a27e2afff95005857c44f287bdfca3b13e304eb5c1ba6f58420074b9bc16af34c155b10483958a8ff4fd62868f1d8174ac896bf8cbeb01cf56bf73e0151134ba1d3528170d4bacacd95605a72e01d310679c926d288a1a4a4361444c1ec401917c9c5138a585ea391f6389abe4f9edd4b9f9f2d8380e41053a175913e90ee52ccc86eb4fcf796be796ee89fae949965c5e7add74d60f2265a23b680878d0ef72a5eb3aaa4df54f789dfb0f249fc5e8baa03c500ba82aa247f845c2cd8485b5c9e274b291738b3f676fe9840b3f2ca6a7bb54b621565f", 0xe4}, {&(0x7f0000003400)='i<', 0x2}, {&(0x7f0000003440)="c949c712ec327285679cc96d41ea8dd90169102e21ef8217146285ed154818c0c5b9a26f05b072c968dbf4499075b1e5cf5f503db685e5bb98391f48889fb481b065d3151cc14fc0ef9296ff36199533b3c34f9b21f138c929817e38821c5f1f4c231eec93151c95bb88b076948a5df7a65c8a550b1f043c5c90127cec4fc9253aa5ef681a49395b6fc9173645fde722e3bd008289e1ff58b246eb7781154fec341437bed5363631cc7b8e9d09ea22", 0xaf}, {&(0x7f0000003500)="2741294073ba49b4e3d8ca1985f684296d0405b73057976221ad59d2f9129c7b1e9f9538077c19419acee4da472f4cc5c5d5a29d6556e9d8dba2468ba2644a726d056ab439d3db3591ca3a73b0356bf277234eee6c91bf357679e7acf1768515ea3f39b2ed38ef674b530589b1060193f3f03759819517a3cca4effb42e435149506cf50797468d06f64cc14a7eff3e830fa05f07ff7e620167675504e15309aeab2b9cb875031bd1289000133aa4788976849122438e6e90bece211575b12bc072c90d1124505b93039e40313007d48dab455056f0ac1d9d50403a94b6cd779d53e1ddb04a9b3b1ca8cf002139657a512b2860c76", 0xf5}, {&(0x7f0000003600)="434dfe1033d160e19da2b7a1213700233a017d1efb563ad62a4f59378c2066230be980f91a5807ebc5ff712d424ba1dbc365fa7796fba318176fd73abdf1b539a42379c9d3350406bfb7aedaaca65b24f034b62f9a879117f95955392da4bb72231bc523bd4791ca6c549725fd8ff76271df825f7ce1e92b0125e986a83cb18c635a78a54f9ac0a2d044fcdf8323dc0fe88e727381f7ae1888489842dbb9dbd8b9f36f0b404d", 0xa6}, {&(0x7f00000036c0)="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", 0x1000}], 0x9, &(0x7f0000004740)=[@dstopts_2292={{0x101c, 0x29, 0x4, {0x2e, 0x200, '\x00', [@generic={0x5, 0x1000, "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"}]}}}, @hoplimit_2292={{0x10, 0x29, 0x8, 0xa39}}, @rthdr={{0x34, 0x29, 0x39, {0x87, 0x4, 0x1, 0x1, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, @empty]}}}], 0x1060}}, {{&(0x7f00000057c0)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7}, 0x1c, &(0x7f0000005980)=[{&(0x7f0000005800)="9d90c6a6fecd9514d1c7a0cf14c80d3d83013b70a92f8131afd9cb", 0x1b}, {&(0x7f0000005840)="9f65b1c1cf811a3c7b066ec7e2c95890400d3f5c1843acc06beb8667956bea5aba7439c261547b26ded2e764a25fb9befee89e72c2d29c98c9c5340ea05060efa3d051994b220bda1112e958f5f301ca35b0e1c24bd80ac8e0fb050f54e68ad0c49a3882b99a5c8c963d664e11b325885ecb48e8faaec3283be4a9ea48aff4f9634b5a358a101f697beba4bff7b8703fd06c4962bca065c59b449a99f3b36381194a1d93d48780be218c8a6614b68db65778b00ad73522be1d59d1c93ef3c25162c10f7c26c4a0812a8c504ceef7949e0bfd8bfc9e98e2aee060291b6631a30f214f3f7928", 0xe5}, {&(0x7f0000005940)="dd19e169e85ac3968b95cb181872be2eec7a30dc2f6d6d5e82015dde", 0x1c}], 0x3}}], 0x6, 0x8005) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) (async, rerun: 32) r11 = openat$cgroup_type(r1, &(0x7f0000005a80), 0x2, 0x0) (rerun: 32) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000005ac0)={0x8, r11, 0xf5819d2ac7103ae6}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r12, 0x8982, &(0x7f0000005b00)={0x2, 'team0\x00', {0x7}, 0x400}) 23m50.440691236s ago: executing program 4 (id=991): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000f, 0x11011, r0, 0xffffc000) mprotect(&(0x7f00001a7000/0x1000)=nil, 0x1000, 0x6) 23m34.754596718s ago: executing program 33 (id=991): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000f, 0x11011, r0, 0xffffc000) mprotect(&(0x7f00001a7000/0x1000)=nil, 0x1000, 0x6) 11.635707542s ago: executing program 2 (id=5788): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='veno', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000200)="0899a138b89b9868c2fe068413561794ad4ec81c3f45edf8067e663a6ba99655f2e38404f8ef08018115b51c9360586f99244b98e6957416033f2e497365950dfe2f05a57c7e696af42905306ccbaa442f8d8e088fdeef72e507d6329dc60932cd412a98a921e5459c7065501fe7f65e4ef7149378c0109acbcffe24c85a86bd0cc7e86b6c7b8ee5966d", 0x8a, 0xb, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r1, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000140)='-\t:\xfd\xff\xff\xff\xff\xff\a\x00\x00\x00SP\xb3\xc9\x9c\x9d\xd2\x1f,\xc6\xea/\x9d\x0f0KR\xc8\xe3,<$P\x91\x1fj_\xa35\x86\xe5\xechCGz\'\xa9\xb3\x86\r&\"\xff\xc8\x13\xc3e\xdf\x1bh\x031\xda\x1bNG\xac\xf3O\x02\x83\x96\x00\xfc\x00\x00\x00\x00\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r3}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000100), &(0x7f0000000100)=[r4], &(0x7f0000000200)=[0xb]}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f0000000380)={&(0x7f0000000340)=[0x0], 0x1}) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r8, r7], 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000440)={&(0x7f00000003c0)=[r4, r5, r8], 0x3, 0x800}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r1}, 0x68) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x3f, &(0x7f0000000180)=0xd, 0x4) sendmmsg$inet6(r9, &(0x7f00000002c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c, 0x0}}], 0x1, 0x40000) recvmmsg(r9, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0x5}], 0x1, 0x40002042, 0x0) socket$xdp(0x2c, 0x3, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 10.244623355s ago: executing program 2 (id=5791): sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x11000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000096cd500fb01001201ebff00"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) timer_create(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$dsp1(0xffffff9c, &(0x7f0000000080), 0x2280, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) removexattr(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x80086601, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000140), 0x80) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000480)="54ace263e40c9ebf9eb74ca218d61afe29a92b3c3e3d211e6196586d5f3922e85eef823242c679351753cfe83fd35b1519806e5853abb2f456175d62cac5a0433d144458bc91a5b4e7c2081c861eca6572e2923b2d63d2d2504a1954d2e2ed7061abed37ba78c58792d34d5d7494d1f0393e2848774fb015511f261e2a0017affe54da7ea719d3c1f8930b51d9ec8a6fb36032d6002c7c7cf5014b26423ee495f3dd99f9580246db76bfde0000000000000000000000000000000000000000000787bf19b3fc15ac1ea4efa732cf44aabf314b4d45f59b80cbc413b1f094534dcdc7b5b9e7af7de8207e006f5dd75d518a7b3ae490c4c46a15e9d5d7543f6d86a5736b287e628bfe194b0796614054fcf27c035dcd2d79470e8e323e43c01456b6d04ad10b00f1ed06c97616f6a4b82add653792a47abb814a40fa248fa0451efdf31b5cb29c1093813483d74bbb9c2c5c9dd70131362011a478c9653f00"/361, 0x169}], 0x0) fsopen(&(0x7f0000000000)='ufs\x00', 0x1) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/uevent_helper', 0x359e82, 0x21) 8.082268973s ago: executing program 3 (id=5798): socket(0x1e, 0x4, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002d00)=[{{&(0x7f0000001080)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1}}], 0x1, 0x8041) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0xa}, &(0x7f0000001240)=0x8) ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) fsopen(&(0x7f00000000c0)='bpf\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000003500)=[{{&(0x7f0000000140)={0xa, 0x0, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000240)="81", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c, &(0x7f0000000780)}}], 0x2, 0x4004851) setsockopt(r4, 0x84, 0x14, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000380)=0x1, 0x4) 7.848260012s ago: executing program 2 (id=5800): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001900)={{0x14, 0x10, 0x1, 0x0, 0x2400}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'K'}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 7.680555421s ago: executing program 2 (id=5801): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000005c0)=0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x7, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000580)='netfs_sreq_ref\x00', r4, 0x0, 0x200000}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYRESHEX=r5, @ANYRES16=r8, @ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x40844}, 0x80c1) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(r7) socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'rose0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xb}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_RATE={0x6, 0x5, {0x7}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x2}, &(0x7f00000004c0)="0807029b852f8f", 0x7, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="6761d333278ebaa8b543d7dd1f27ced5be2b4f7381d3e020eb649ed4e9a6d8fbdf9d263d24e725d6b15f4804c0fdb40f04f89c0f73c82bb405fa09c3ddc784eea1b304f2aef8b122e6c847e75c3870aa33a637cba7a3e026974b66005b19303aa5ab36dbbab423eac220d79d1eb7a1f0c9b2ff4e1ad91055151db2cfe17f3396ff03764fffba20f8d9c7aadf32443bb2ca1c0044db73ee53be0be16804500343e4e93599fca96402dc95f3241dd16c9b647087ca5489adbc48497dbdfacdee13ca", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fddbdf250800000008003c000500000005002f000000000008002b002d02000005002a000000000008003a00050000000500290000000000"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) clock_gettime(0x1, &(0x7f0000000000)) 6.252102408s ago: executing program 2 (id=5806): bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0", 0x6) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) connect(r1, &(0x7f0000000140)=@in6={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x3}, 0x80) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x40c}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408048000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000400)=r3, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4cc, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x404, 0x3d8, 0x3d8, 0x404, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2d4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x3f, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x528) sendmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="d80000001a0081044e81f782db4cb904021d0800fe0055a1150015000200142603600e12080005007a010401a8001600200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457fffffffffffff0001bace8017cbec4c2ee5a7cef4090000001fb79164d322fe7c9f8775d3f2d5d0683f5aeb4edbb57a5025ccca9e00360db785262f3d40fad95667e006dcdf61951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100000000000000000000000000d4da15", 0xd8}], 0x1}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 5.882147037s ago: executing program 6 (id=5808): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f00000022c0)=ANY=[@ANYBLOB="30000000020301080001000000000000010000020900020000000001020000000800010001000026080003400000000f"], 0x30}, 0x1, 0x0, 0x0, 0x2000081}, 0x40000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f0000000000)=@fragment={0x3b, 0x0, 0x1, 0x0, 0x0, 0x6, 0x68}, 0x8) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0xfffffeff, @empty, 0x4000000}, 0x1c) connect$inet6(r5, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private2, 0x4}, 0x1c) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x80009, @remote, 0x7}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7102d000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r11 = socket(0x1000000000000010, 0x80802, 0x0) write(r11, &(0x7f0000000040)="240000004e0001210000f4f90023040800fd000000000000020100000800028001000000", 0x24) sendmsg$NL80211_CMD_SET_CQM(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r9, @ANYBLOB="87dba684ed350ae31b389f1154e77bf38cf48aeae1c4a41025f4809a02ba525821a17c382fe44c6118f7e2265c7cd0899d486b2dad6b6544dbfbeb6d7c"], 0x2c}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 5.809238525s ago: executing program 3 (id=5809): r0 = syz_open_dev$video(&(0x7f0000000040), 0x4, 0x0) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000000)={0x3, "93d7460c9a55b4b12e2a0b881de0922d87e7d5142c9189a410a823a27fe97750", 0x1}) socket$inet6(0xa, 0x800, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000ffff29bd3000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000201100ecf0001c0012800b0001006970766c616e00000c000280060002000300"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000200)={0x4002, 0x32315241, 0x500, 0x2d0, 0x3, @stepwise={{0x5, 0x5}, {0x3, 0x8}, {0x2, 0x2}}}) 5.195619109s ago: executing program 3 (id=5810): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020b11837000000000000010902240001000000000904004a0103000200092100000d0122030009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="003905"], 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}}, 0x24}}, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, 0x0, 0x0, 0x0, 0xd5e855c9ff29405c}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001800)) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000000c0)) 4.691910353s ago: executing program 6 (id=5812): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000905000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x44800}, 0x0) (fail_nth: 15) 4.056224607s ago: executing program 1 (id=5813): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='trylom\x00\x00\x00\x00\x00\x00'], 0x8) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0xba3, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000005b5df7cc000185060800000100000000000000"]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffc, 0x0, 0x5, 0xe, 0x1, 0x0, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000000)) read$dsp(r7, &(0x7f0000000300)=""/79, 0x4f) r8 = socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r8) pselect6(0x40, &(0x7f00000000c0)={0x6, 0xfffffffffffffffd, 0x9, 0x40, 0x2, 0xd}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0x8}, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r9) 4.045348929s ago: executing program 6 (id=5814): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0xfffffffffffffcfc) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0)={0xe8d, 0x208, 0x6, 0x9, r4}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r4, 0x4}, &(0x7f00000001c0)=0x8) write$binfmt_script(r1, &(0x7f00000330c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) ioctl$KVM_SET_NESTED_STATE(r10, 0x4080aebf, &(0x7f0000000340)={{0x0, 0x0, 0xfffffffffffffe6d, {0xdddd0000, 0x100000}}, "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", "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"}) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) socket$nl_generic(0x10, 0x3, 0x10) 3.811984433s ago: executing program 5 (id=5815): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000055322cc45fd90412c98a376400000000000000a22af445340000003784dd54a47700ffff"], &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {}, 0x7}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x2c2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0, 0x400) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000000c0)=""/5, 0x5}], 0x4, 0x0, 0x0, 0x2102}, 0x1c, 0x12040) r4 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[], 0x24, 0x5) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 2.958822973s ago: executing program 5 (id=5816): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x58, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10}]}]}], {0x14, 0x10}}, 0xf8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028008000140000000020800ef3f0000000905000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x44800}, 0x0) 2.806814597s ago: executing program 5 (id=5817): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x5, 0xdddd0000, 0x1000, &(0x7f000000f000/0x1000)=nil}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xe3c}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x4, 0x3, 0x100000, 0x2000, &(0x7f000000f000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x0, 0xeeef6000, 0x1000, &(0x7f0000fd3000/0x1000)=nil}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000100)={{}, {0xf}, 0xbf00, 0xbf}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, r5, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x200048d0) r6 = syz_open_dev$sg(&(0x7f0000000280), 0x7, 0x101000) ioctl$SG_GET_SCSI_ID(r6, 0x2276, &(0x7f00000002c0)) 2.72189009s ago: executing program 6 (id=5818): dup(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r4, 0x16, &(0x7f0000001640)=[&(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x1, 0x4, r2, &(0x7f0000000280)='a', 0x1, 0x5}]) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000080)={0xf0f03c, 0x2}) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) close(r7) r8 = getpid() process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 2.695120793s ago: executing program 1 (id=5819): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000200000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000905000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x44800}, 0x0) 2.430770035s ago: executing program 5 (id=5820): socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000100)='udf\x00', 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000000000900000030000380140002007369743000000000000000000000000006"], 0x44}}, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xa201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="016f000d"], 0x24) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000600)=""/117, 0x75}], 0x1, 0x9, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$sndctrl(&(0x7f0000000380), 0xc, 0xc2580) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r4, 0xc008551b, &(0x7f0000000040)={0x8}) r5 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0xcae8, 0x303400) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000440)=0x7f) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x2, @rand_addr=' \x01\x00', 0xa, 0x3}, 0x20) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0x7, {0x0, r8, 0x1}}, 0x18) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000002000010000000000000400000200000000000000000000000c00144000000000000000000500130001000000"], 0x30}, 0x1, 0x0, 0x0, 0x4044040}, 0x0) r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffe) ioctl$KVM_RUN(r11, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, &(0x7f0000000500)="66b80500000066b9001800000f01c10f01c266b8a0ef00000f23c80f21f866350000f0000f23f866b9800000c00f326635010000000f300f2256f0830bba0f786d0e0f01c96766c7442400030000006766c7442402000000006766c744240600000000670f01142466b9800000c00f326635002000000f30", 0x78}], 0x1, 0x0, 0x0, 0x0) 2.398845917s ago: executing program 1 (id=5821): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'veth1_to_hsr\x00', 0x0}) r2 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x20, 0x40, 0x1001000, 0x6, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x67, 0x0, 0xf9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x854) 2.263310749s ago: executing program 3 (id=5822): socket$nl_generic(0x10, 0x3, 0x10) mremap(&(0x7f0000371000/0x3000)=nil, 0x3000, 0x400000, 0x0, &(0x7f000082a000/0x400000)=nil) r0 = openat$btrfs_control(0xffffff9c, &(0x7f0000000280), 0x444880, 0x0) openat$cgroup_ro(r0, &(0x7f0000000300)='blkio.bfq.time\x00', 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, ']'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x20004049}, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) bind$can_raw(r1, &(0x7f0000000000), 0x10) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2.020115467s ago: executing program 2 (id=5823): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x5, 0x0, 0x0, 0x7fff0000}]}) r0 = getpid() getpgid(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="054c453ed5427c068fd63fd1ea68dc87e24b611c8a09a71783e3a2ffd028911b7055a11f62198f2ebfcf01b0b1620e6fb598d64451744e24efdababd8675d5529c1c820c2800d802c9d864a39d876c5c5f10f59c465e8165a7c5dfed95c869279562a8c1ec885b7a3b9682e45447e7b2d56d8e0f91e685f095a545dc"], 0x0) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x3) syz_usb_control_io(r1, 0x0, 0x0) 1.997661541s ago: executing program 1 (id=5824): socket(0x1e, 0x4, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x60, 0x2, 0x6, 0x201, 0x0, 0x20, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) 1.504542076s ago: executing program 1 (id=5825): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f00000000c0)=""/28, 0x1c) getdents64(r0, &(0x7f0000001f80)=""/4104, 0x1008) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x8b, 0xf5, 0x4d, 0x10, 0x458, 0x7005, 0x22a7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x3f, 0x0, 0x0, 0xe8, 0xcb, 0xbb, 0x1}}]}}]}}, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x40) 1.087880721s ago: executing program 6 (id=5826): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) shutdown(r1, 0x0) 999.544986ms ago: executing program 6 (id=5827): r0 = semget$private(0x0, 0x6, 0x3b1) semctl$IPC_INFO(r0, 0x1, 0x3, &(0x7f0000000140)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x4, 0x4, 0x7, 0xdedb, 0xa, "fd1500fdffffffff"}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) semctl$GETVAL(r0, 0x4, 0xc, &(0x7f0000000480)=""/12) semctl$SEM_STAT(r0, 0x4, 0x12, &(0x7f0000000000)=""/129) syz_usb_connect(0x0, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="12014000f273a440cd061501c3d90102030109021b0001000000000904000c019d0178000905", @ANYBLOB="85e3"], 0x0) 799.718781ms ago: executing program 5 (id=5828): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) mkdir(&(0x7f0000000180)='./file0\x00', 0x163) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0xffffc000, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x20000080) r5 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000ec0)=@mangle={'mangle\x00', 0xac, 0x6, 0x6a8, 0xe8, 0x470, 0x470, 0x1c8, 0x1c8, 0x5e0, 0x5e0, 0x5e0, 0x5e0, 0x5e0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xe8}, @DNPT={0x44, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv6=@remote, 0xd, 0x30, 0x200}}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @local, [0x0, 0x0, 0xff], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x110, 0x134, 0x0, {}, [@common=@hbh={{0x48}, {0x472e8fa1, 0x1, 0x0, [0x3, 0x0, 0x6, 0x5, 0x4, 0x8000, 0x5, 0x2, 0x7fff, 0x1, 0xfff, 0x2, 0x5, 0x7, 0xa, 0x4], 0x5}}, @inet=@rpfilter={{0x24}, {0x1}}]}, @HL={0x24, 'HL\x00', 0x0, {0x2, 0x8}}}, {{@uncond, 0x0, 0x150, 0x174, 0x0, {}, [@common=@inet=@iprange={{0x64}, {@ipv4=@multicast1, @ipv6=@mcast2, @ipv4=@multicast1, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff7]}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xff}}}, {{@uncond, 0x0, 0x134, 0x170, 0x0, {}, [@common=@hbh={{0x48}, {0x8, 0x2, 0x0, [0x905, 0xfffe, 0x4, 0x4, 0x68e, 0xffff, 0x6, 0x7, 0x6, 0x7, 0xfff7, 0x9, 0xffff, 0x8, 0x2, 0x9], 0xa}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaf6]}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x704) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000001600)={0x0, 0x1000, "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"}, &(0x7f0000000040)=0x1008) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x2, 0x4, 0x7dd, r6}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x1, 0x0, {0x0, 0x0, 0x0, r2, {0x8, 0xd}, {}, {0x8, 0xffe0}}}, 0x24}}, 0x408c4) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r3) 693.473393ms ago: executing program 5 (id=5829): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, '#\r'}, @local=@item_4={0x3, 0x2, 0x10, "76f61b67"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x3, "b069742b"}, @global=@item_4={0x3, 0x1, 0x8, "0600"}, @global=@item_4={0x3, 0x1, 0x2, "e51b97f5"}, @main=@item_4={0x3, 0x0, 0x9, "0b77eae3"}, @global=@item_4={0x3, 0x1, 0x6, "a04e98de"}]}}, 0x0}, 0x0) (async, rerun: 32) r1 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x2d) 163.819924ms ago: executing program 1 (id=5830): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e22, 0xffffffff, @remote, 0xff}], 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0x4}, {0xa, 0xfff2}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4080) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000200)={@dev={0xac, 0x14, 0x14, 0x2e}, @loopback, 0x1, 0x4, [@broadcast, @private=0xa010100, @multicast2, @remote]}, 0x20) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0xd], [0x0, 0x59b]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) openat$vimc1(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r9}) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100010000001300000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000000000d0001007564703a73"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 66.752184ms ago: executing program 3 (id=5831): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r1 = openat$sndseq(0xffffff9c, &(0x7f0000000180), 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) dup(r2) semctl$SETVAL(0x0, 0x3, 0x10, &(0x7f0000000100)=0x2d1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x3c8, 0xffffffff, 0x700, 0xec, 0x238, 0xfeffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xc8, 0xec, 0x0, {}, [@common=@eui64={{0x24}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x3}}}, {{@ipv6={@rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x39}, [0xffffff00, 0xffffffff], [0xffffffff, 0xff000000, 0xffffff00, 0xff], 'veth1_to_team\x00', 'team0\x00', {}, {}, 0x32, 0x3, 0x1, 0x14}, 0x0, 0x124, 0x14c, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x5}, {0x9b}], 0x1, 0x1}}, @common=@hbh={{0x48}, {0x7, 0x0, 0x0, [0x2d9, 0x7f, 0x6, 0xfffe, 0x6, 0x4, 0x2, 0xf980, 0x9, 0x800, 0x0, 0x9, 0x2, 0x7, 0x10, 0x4d4]}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x0, 0x5}, {0xffffffffffffffff, 0x3, 0x1}}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x424) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)="82ab", 0x2}], 0x1}}], 0x1, 0x4404c880) sendto$inet6(r4, &(0x7f0000000000)="61321894146a875c29150e30", 0xc, 0x3b00, 0x0, 0x0) 0s ago: executing program 3 (id=5832): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000d40)=[{{&(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000600)=""/196, 0xc4}}, {{&(0x7f0000000700)=@qipcrtr, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000780)=""/107, 0x6b}, {&(0x7f0000000800)=""/56, 0x38}, {&(0x7f0000000840)=""/109, 0x6d}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f00000008c0)=""/42, 0x2a}, {&(0x7f0000000900)=""/146, 0x92}, {&(0x7f0000000a40)=""/229, 0xe5}, {&(0x7f0000000b40)=""/99, 0x63}, {&(0x7f00000009c0)=""/36, 0x24}], 0x9, &(0x7f0000000d80)=""/221, 0xdd}, 0x80000000}], 0x2, 0x40010121, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800, 0x0, 0x3}, 0x20) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x4000000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={0x0, 0x2}, &(0x7f0000000480)=0x8) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0xf) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000300)=0x800, 0x4) r7 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000a00)={'veth1_to_team\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x2, r8, 0x1a}, 0x10) syz_open_dev$vbi(&(0x7f0000000200), 0x1, 0x2) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@getqdisc={0x30, 0x26, 0x100, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffff}, {0x0, 0xffff}, {0x8}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x10000081}, 0x50801) socket$kcm(0x21, 0x2, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) kernel console output (not intermixed with test programs): New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1704.727309][T11042] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1704.862138][T11042] usb 7-1: config 0 descriptor?? [ 1704.884494][ T984] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1705.100649][ T984] usb 4-1: device descriptor read/64, error -71 [ 1705.460261][T11042] lenovo 0003:17EF:6047.002B: item fetching failed at offset 2/5 [ 1705.474512][ T984] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1705.503276][T11042] lenovo 0003:17EF:6047.002B: hid_parse failed [ 1705.512667][T11042] lenovo 0003:17EF:6047.002B: probe with driver lenovo failed with error -22 [ 1705.677235][ T984] usb 4-1: device descriptor read/64, error -71 [ 1705.698737][T11042] usb 7-1: USB disconnect, device number 33 [ 1705.835799][ T984] usb usb4-port1: attempt power cycle [ 1706.124489][ T43] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1706.195645][ T984] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1706.225096][ T984] usb 4-1: device descriptor read/8, error -71 [ 1706.349319][ T43] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1706.364448][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.405242][ T43] usb 6-1: config 0 descriptor?? [ 1706.417013][ T43] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1706.484583][ T984] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1706.505527][ T984] usb 4-1: device descriptor read/8, error -71 [ 1706.624968][ T984] usb usb4-port1: unable to enumerate USB device [ 1706.688715][T27250] Cannot find add_set index 4 as target [ 1707.246830][T27242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1707.260444][T27242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1707.681605][ T43] gspca_stv06xx: I2C: Read error writing address: -71 [ 1707.701010][ T43] usb 6-1: USB disconnect, device number 62 [ 1707.948079][T27263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5479'. [ 1707.980288][T27263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5479'. [ 1708.008938][T27263] netlink: 34 bytes leftover after parsing attributes in process `syz.3.5479'. [ 1709.535851][T27291] Cannot find add_set index 4 as target [ 1709.585061][T27293] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5489'. [ 1709.831627][T27307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5491'. [ 1709.884463][T11042] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1710.044550][T11042] usb 7-1: Using ep0 maxpacket: 32 [ 1710.052904][T11042] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1710.064733][T11042] usb 7-1: config 0 has no interfaces? [ 1710.073057][T11042] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1710.083080][T11042] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1710.092955][T11042] usb 7-1: Product: syz [ 1710.094437][ T43] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1710.097705][T11042] usb 7-1: Manufacturer: syz [ 1710.109689][T11042] usb 7-1: SerialNumber: syz [ 1710.123244][T11042] usb 7-1: config 0 descriptor?? [ 1710.274436][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 1710.289278][ T43] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 1710.370178][T27293] syzkaller0: entered promiscuous mode [ 1710.377167][T27293] syzkaller0: entered allmulticast mode [ 1710.404706][ T43] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1710.413907][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1710.422520][ T43] usb 4-1: Product: syz [ 1710.427042][ T43] usb 4-1: Manufacturer: syz [ 1710.435407][ T984] usb 7-1: USB disconnect, device number 34 [ 1710.454232][ T43] usb 4-1: SerialNumber: syz [ 1710.473899][ T43] usb 4-1: config 0 descriptor?? [ 1710.493129][ T43] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1710.559455][T27313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5494'. [ 1710.598147][ T43] usb 4-1: setting power ON [ 1710.606540][ T43] dvb-usb: bulk message failed: -22 (2/0) [ 1710.738929][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1710.806913][ T43] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1710.815745][ T43] usb 4-1: media controller created [ 1710.849894][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1710.899933][ T43] usb 4-1: selecting invalid altsetting 6 [ 1711.165042][ T43] usb 4-1: digital interface selection failed (-22) [ 1711.175943][ T43] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1711.188017][ T43] usb 4-1: setting power OFF [ 1711.193118][ T43] dvb-usb: bulk message failed: -22 (2/0) [ 1711.200391][ T43] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1711.216625][ T43] (NULL device *): no alternate interface [ 1711.227629][T27320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1711.255056][ T43] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1711.734778][T14404] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 1711.834655][ T43] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1711.874486][T14404] usb 3-1: device descriptor read/64, error -71 [ 1712.004403][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 1712.012084][ T43] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1712.024670][ T43] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1712.034061][ T43] usb 6-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 1712.046814][ T43] usb 6-1: Product: syz [ 1712.053918][ T43] usb 6-1: Manufacturer: syz [ 1712.066877][ T43] usb 6-1: SerialNumber: syz [ 1712.093327][ T43] usb 6-1: config 0 descriptor?? [ 1712.112449][ T43] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1712.114510][T14404] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 1712.254586][T14404] usb 3-1: device descriptor read/64, error -71 [ 1712.364749][T14404] usb usb3-port1: attempt power cycle [ 1712.650964][T11042] usb 4-1: USB disconnect, device number 123 [ 1712.715810][T14404] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 1712.745131][T14404] usb 3-1: device descriptor read/8, error -71 [ 1712.927747][ T43] gspca_zc3xx: reg_w_i err -71 [ 1713.014445][T14404] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 1713.022977][T27347] futex_wake_op: syz.1.5504 tries to shift op by 144; fix this program [ 1713.057363][T27344] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 1713.081563][T14404] usb 3-1: device descriptor read/8, error -71 [ 1713.204768][T14404] usb usb3-port1: unable to enumerate USB device [ 1713.524457][ T43] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1713.531741][ T43] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1713.653238][ T43] usb 6-1: USB disconnect, device number 63 [ 1715.805784][T27389] input: syz1 as /devices/virtual/input/input287 [ 1716.000539][T27391] fuse: Bad value for 'fd' [ 1716.054705][ T43] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1716.215914][ T43] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1716.238198][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1716.262210][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1716.282279][ T43] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1716.302769][ T43] usb 7-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1716.313803][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1716.333291][ T43] usb 7-1: config 0 descriptor?? [ 1716.412920][T27403] loop5: detected capacity change from 0 to 16384 [ 1716.643702][ T43] usb 7-1: USB disconnect, device number 35 [ 1716.772144][T27412] tipc: Enabled bearer , priority 0 [ 1716.801729][T27412] syzkaller0: entered promiscuous mode [ 1716.819924][T27412] syzkaller0: entered allmulticast mode [ 1716.868690][T27405] tipc: Resetting bearer [ 1716.889462][T27404] tipc: Resetting bearer [ 1716.914869][T27404] tipc: Disabling bearer [ 1716.915032][T27414] netlink: 8148 bytes leftover after parsing attributes in process `syz.1.5524'. [ 1717.304430][ T5896] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1717.484498][T11042] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1717.492234][ T5896] usb 3-1: Using ep0 maxpacket: 32 [ 1717.503345][ T5896] usb 3-1: config 0 has an invalid interface number: 83 but max is 0 [ 1717.540809][ T5896] usb 3-1: config 0 has no interface number 0 [ 1717.573498][ T5896] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 1717.589380][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1717.598820][ T5896] usb 3-1: Product: syz [ 1717.603044][ T5896] usb 3-1: Manufacturer: syz [ 1717.615698][T27434] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5529'. [ 1717.656376][ T5896] usb 3-1: SerialNumber: syz [ 1717.669032][ T5896] usb 3-1: config 0 descriptor?? [ 1717.679605][ T5896] redrat3 3-1:0.83: Couldn't find all endpoints [ 1717.690535][T11042] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1717.705539][T11042] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1717.731983][T11042] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1717.768621][T11042] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1717.783678][T11042] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1717.792561][T11042] usb 7-1: Product: syz [ 1717.797982][T11042] usb 7-1: Manufacturer: syz [ 1717.802663][T11042] usb 7-1: SerialNumber: syz [ 1717.816226][T11042] usb 7-1: config 0 descriptor?? [ 1717.831577][T27420] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1717.842612][T27420] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1717.860163][T11042] usb 7-1: ucan: probing device on interface #0 [ 1717.884639][ T43] usb 3-1: USB disconnect, device number 83 [ 1718.044476][ T984] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1718.064265][T11042] usb 7-1: ucan: could not read protocol version, ret=-71 [ 1718.077498][T11042] usb 7-1: ucan: probe failed; try to update the device firmware [ 1718.102810][T11042] usb 7-1: USB disconnect, device number 36 [ 1718.206030][ T984] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1718.222638][ T984] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1718.241041][ T984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1718.304892][ T984] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1718.486957][T27443] loop7: detected capacity change from 0 to 7 [ 1718.823186][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1718.823204][ T30] audit: type=1326 audit(1760316512.337:9873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27446 comm="syz.2.5535" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1718.887659][T27452] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5532'. [ 1718.984416][T11042] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1718.984575][ T30] audit: type=1326 audit(1760316512.337:9874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27446 comm="syz.2.5535" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1719.055811][ T30] audit: type=1326 audit(1760316512.337:9875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27446 comm="syz.2.5535" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1719.078151][ T30] audit: type=1326 audit(1760316512.337:9876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27446 comm="syz.2.5535" exe="/root/syz-executor" sig=0 arch=40000003 syscall=235 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1719.126804][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 1719.136586][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 1719.146760][T27450] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5535'. [ 1719.158168][ T30] audit: type=1326 audit(1760316512.337:9877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27446 comm="syz.2.5535" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1719.189033][ T30] audit: type=1326 audit(1760316512.337:9878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27446 comm="syz.2.5535" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1719.211921][ T30] audit: type=1326 audit(1760316512.337:9879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27446 comm="syz.2.5535" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1719.245791][ T30] audit: type=1326 audit(1760316512.337:9880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27446 comm="syz.2.5535" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1719.269253][T27443] Dev loop7: unable to read RDB block 7 [ 1719.304501][T11042] usb 2-1: Using ep0 maxpacket: 16 [ 1719.323998][T11042] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 1719.334791][T27443] loop7: unable to read partition table [ 1719.353154][T27443] loop7: partition table beyond EOD, truncated [ 1719.393775][ T984] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 1719.484507][T27443] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1719.507060][T27463] random: crng reseeded on system resumption [ 1719.618439][T11042] usb 2-1: config 0 has no interface number 0 [ 1719.627286][ T30] audit: type=1326 audit(1760316512.337:9881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27446 comm="syz.2.5535" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1719.694727][T11042] usb 2-1: config 0 interface 255 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1719.728873][T11042] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid maxpacket 4672, setting to 1024 [ 1719.740210][T11042] usb 2-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1719.740367][ T30] audit: type=1326 audit(1760316512.347:9882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27446 comm="syz.2.5535" exe="/root/syz-executor" sig=0 arch=40000003 syscall=163 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 1719.831348][T11042] usb 2-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=bb.ee [ 1719.843338][T11042] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1719.857142][T11042] usb 2-1: Product: syz [ 1719.857160][ T984] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 1719.861309][T11042] usb 2-1: Manufacturer: syz [ 1719.882052][T11042] usb 2-1: SerialNumber: syz [ 1719.882582][ T984] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1719.894996][ T984] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 1719.903626][ T984] usb 4-1: USB disconnect, device number 125 [ 1719.977342][T11042] usb 2-1: config 0 descriptor?? [ 1719.983231][T27448] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1719.997161][T27448] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1720.024925][T14404] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1720.044516][ T5896] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1720.201440][T14404] usb 6-1: Using ep0 maxpacket: 8 [ 1720.209386][T14404] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1720.224444][ T5896] usb 7-1: Using ep0 maxpacket: 32 [ 1720.241289][ T5896] usb 7-1: config 0 has an invalid interface number: 146 but max is 0 [ 1720.243585][T27469] netlink: 8148 bytes leftover after parsing attributes in process `syz.3.5540'. [ 1720.284036][T14404] usb 6-1: config 0 has no interface number 0 [ 1720.302631][ T5896] usb 7-1: config 0 has no interface number 0 [ 1720.312803][T14404] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1720.328121][ T5896] usb 7-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1720.339943][T14404] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1720.349136][ T5896] usb 7-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1720.361264][T14404] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1720.369631][ T5896] usb 7-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1720.386905][T14404] usb 6-1: config 0 descriptor?? [ 1720.402361][ T5896] usb 7-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1720.412949][ T5896] usb 7-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1720.439482][T14404] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1720.450987][ T5896] usb 7-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1720.473112][ T5896] usb 7-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1720.486953][ T5896] usb 7-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 1720.498865][ T5896] usb 7-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1720.509984][ T5896] usb 7-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1720.526066][ T5896] usb 7-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1720.535242][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1720.543276][ T5896] usb 7-1: Product: syz [ 1720.547571][ T5896] usb 7-1: Manufacturer: syz [ 1720.552212][ T5896] usb 7-1: SerialNumber: syz [ 1720.563741][ T5896] usb 7-1: config 0 descriptor?? [ 1720.570687][T27465] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1720.578114][T27465] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1720.586780][ T5896] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 1720.595989][ T5896] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 1720.611288][ T5896] scsi host1: microtekX6 [ 1720.634744][T27462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1720.648907][T27462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1720.678904][T27462] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5537'. [ 1720.692893][ T5896] usb 6-1: USB disconnect, device number 64 [ 1720.698991][ C0] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1721.592336][T27489] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5543'. [ 1722.750246][T11042] asix 2-1:0.255 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1722.760703][T11042] asix 2-1:0.255: probe with driver asix failed with error -71 [ 1722.914651][T11042] usb 2-1: USB disconnect, device number 108 [ 1722.986956][ T984] usb 7-1: USB disconnect, device number 37 [ 1723.751824][T27513] input: syz1 as /devices/virtual/input/input288 [ 1723.954441][ T856] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1724.213135][T27517] syz_tun: entered allmulticast mode [ 1724.591759][ T856] usb 2-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 1724.606997][ T856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1724.621173][ T856] usb 2-1: Product: syz [ 1724.628970][ T856] usb 2-1: Manufacturer: syz [ 1724.638378][ T856] usb 2-1: SerialNumber: syz [ 1724.652177][ T856] usb 2-1: config 0 descriptor?? [ 1725.138310][ T856] usb 2-1: interface 1 not found [ 1725.665165][ T5896] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1725.736769][T27531] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5553'. [ 1726.204960][ T5896] usb 4-1: Using ep0 maxpacket: 32 [ 1726.277366][ T5896] usb 4-1: config 13 has an invalid interface number: 151 but max is 0 [ 1726.311281][ T5896] usb 4-1: config 13 has no interface number 0 [ 1726.317574][ T5896] usb 4-1: config 13 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1726.328850][ T5896] usb 4-1: config 13 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1726.347618][ T856] usb 2-1: USB disconnect, device number 109 [ 1726.360663][ T5896] usb 4-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1726.375912][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1726.466883][ T5896] usb 4-1: Product: syz [ 1726.471070][ T5896] usb 4-1: Manufacturer: syz [ 1726.488026][ T5896] usb 4-1: SerialNumber: syz [ 1726.738166][T27540] loop7: detected capacity change from 0 to 7 [ 1726.774559][ T856] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1726.774695][ T5896] usb 4-1: USB disconnect, device number 126 [ 1726.815604][T15471] udevd[15471]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:13.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1727.056158][ T856] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 1727.100958][ T856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1727.142786][ T856] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1727.152853][ T856] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1727.162198][ T856] usb 2-1: Manufacturer: syz [ 1727.239256][ T856] usb 2-1: config 0 descriptor?? [ 1727.273881][T27540] Dev loop7: unable to read RDB block 7 [ 1727.279576][ T985] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1727.319123][T27540] loop7: unable to read partition table [ 1727.325594][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 1727.330017][T27540] loop7: partition table beyond EOD, [ 1727.335409][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 1727.349549][T27540] truncated [ 1727.355480][ T856] rc_core: IR keymap rc-hauppauge not found [ 1727.394845][T27540] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1727.432821][ T856] Registered IR keymap rc-empty [ 1727.452769][ T856] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1727.456817][T27546] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1727.494497][ T985] usb 7-1: Using ep0 maxpacket: 16 [ 1727.507534][T27546] bond0 (unregistering): Released all slaves [ 1727.509926][ T856] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input289 [ 1727.547056][ T985] usb 7-1: config 0 has an invalid interface number: 255 but max is 0 [ 1727.558607][ T985] usb 7-1: config 0 has no interface number 0 [ 1727.565484][ T985] usb 7-1: config 0 interface 255 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1727.580519][ C1] igorplugusb 2-1:0.0: Error: urb status = -32 [ 1727.599957][ T985] usb 7-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid maxpacket 4672, setting to 1024 [ 1727.622166][ T985] usb 7-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1727.686450][T27551] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5554'. [ 1727.715681][ T985] usb 7-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=bb.ee [ 1727.730294][ T985] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1727.748405][ T985] usb 7-1: Product: syz [ 1727.759788][ T985] usb 7-1: Manufacturer: syz [ 1727.771303][ T985] usb 7-1: SerialNumber: syz [ 1727.860801][ T984] usb 2-1: USB disconnect, device number 110 [ 1727.897267][ T985] usb 7-1: config 0 descriptor?? [ 1727.903407][T27543] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1727.911209][T27543] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1728.063747][T27562] fuse: Unknown parameter '0x000000000000000a' [ 1728.073479][T27562] fuse: Unknown parameter '0x0000000000000009 g%wA˘v' [ 1728.377216][ T856] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1728.531494][T27571] fuse: Unknown parameter 'obj_user' [ 1728.546068][ T856] usb 6-1: device descriptor read/64, error -71 [ 1728.563416][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 1728.573188][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 1728.607810][T14404] hid_parser_main: 61 callbacks suppressed [ 1728.607825][T14404] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 1728.667696][T14404] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1729.031754][ T856] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1729.121187][T27574] fido_id[27574]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1729.174510][ T856] usb 6-1: device descriptor read/64, error -71 [ 1729.286486][ T856] usb usb6-port1: attempt power cycle [ 1729.407712][T27581] Cannot find add_set index 4 as target [ 1729.581773][ T5203] Dev loop7: unable to read RDB block 7 [ 1729.616118][ T5203] loop7: unable to read partition table [ 1729.624680][ T5203] loop7: partition table beyond EOD, truncated [ 1729.664583][ T856] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1729.725144][ T856] usb 6-1: device descriptor read/8, error -71 [ 1729.994505][ T856] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1730.017151][T27585] netlink: 'syz.3.5568': attribute type 10 has an invalid length. [ 1730.035183][ T856] usb 6-1: device descriptor read/8, error -71 [ 1730.052004][T27585] netlink: 'syz.3.5568': attribute type 10 has an invalid length. [ 1730.072726][T27585] team0: Port device dummy0 removed [ 1730.146868][ T856] usb usb6-port1: unable to enumerate USB device [ 1730.188349][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.195721][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.210655][ T985] asix 7-1:0.255 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1730.255031][T14404] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1730.291806][ T985] asix 7-1:0.255: probe with driver asix failed with error -71 [ 1730.361226][ T985] usb 7-1: USB disconnect, device number 38 [ 1730.406269][T27590] Cannot find add_set index 4 as target [ 1730.425364][T14404] usb 2-1: Using ep0 maxpacket: 8 [ 1730.431843][T14404] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1730.466094][T14404] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1730.508594][T14404] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1730.548054][T14404] usb 2-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1730.624790][T14404] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1730.741488][T14404] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1730.813469][T14404] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1731.127731][T14404] usbtmc 2-1:16.0: bulk endpoints not found [ 1731.778102][T27615] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5576'. [ 1732.268853][T27623] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5579'. [ 1732.298264][T27620] FAULT_INJECTION: forcing a failure. [ 1732.298264][T27620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1732.394453][T27620] CPU: 0 UID: 0 PID: 27620 Comm: syz.2.5577 Not tainted syzkaller #0 PREEMPT(full) [ 1732.394478][T27620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1732.394490][T27620] Call Trace: [ 1732.394498][T27620] [ 1732.394507][T27620] dump_stack_lvl+0x189/0x250 [ 1732.394540][T27620] ? __pfx____ratelimit+0x10/0x10 [ 1732.394567][T27620] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1732.394586][T27620] ? __pfx__printk+0x10/0x10 [ 1732.394617][T27620] should_fail_ex+0x414/0x560 [ 1732.394650][T27620] _copy_to_user+0x31/0xb0 [ 1732.394676][T27620] simple_read_from_buffer+0xe1/0x170 [ 1732.394701][T27620] proc_fail_nth_read+0x1b3/0x220 [ 1732.394729][T27620] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1732.394758][T27620] ? rw_verify_area+0x2a6/0x4d0 [ 1732.394776][T27620] ? __lock_acquire+0xab9/0xd20 [ 1732.394796][T27620] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1732.394823][T27620] vfs_read+0x200/0xa30 [ 1732.394841][T27620] ? fdget_pos+0x247/0x320 [ 1732.394870][T27620] ? __pfx___mutex_lock+0x10/0x10 [ 1732.394889][T27620] ? __pfx_vfs_read+0x10/0x10 [ 1732.394910][T27620] ? __fget_files+0x2a/0x420 [ 1732.394936][T27620] ? __fget_files+0x3a0/0x420 [ 1732.394955][T27620] ? __fget_files+0x2a/0x420 [ 1732.394991][T27620] ksys_read+0x145/0x250 [ 1732.395013][T27620] ? __pfx_ksys_read+0x10/0x10 [ 1732.395035][T27620] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1732.395057][T27620] ? lockdep_hardirqs_on+0x9c/0x150 [ 1732.395078][T27620] __do_fast_syscall_32+0xb6/0x2b0 [ 1732.395098][T27620] ? lockdep_hardirqs_on+0x9c/0x150 [ 1732.395120][T27620] do_fast_syscall_32+0x34/0x80 [ 1732.395139][T27620] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1732.395160][T27620] RIP: 0023:0xf7f32539 [ 1732.395177][T27620] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1732.395192][T27620] RSP: 002b:00000000f5426590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1732.395213][T27620] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5426620 [ 1732.395226][T27620] RDX: 000000000000000f RSI: 00000000f73c5ff4 RDI: 0000000000000000 [ 1732.395238][T27620] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1732.395249][T27620] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1732.395260][T27620] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1732.395289][T27620] [ 1732.916262][T27630] loop7: detected capacity change from 0 to 7 [ 1733.138450][ T856] usb 2-1: USB disconnect, device number 111 [ 1733.383849][T15471] Dev loop7: unable to read RDB block 7 [ 1733.419274][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 1733.429101][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 1733.484490][T15471] loop7: unable to read partition table [ 1733.496553][T15471] loop7: partition table beyond EOD, truncated [ 1733.573773][T27640] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5582'. [ 1733.624554][ T985] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1733.724451][ T856] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 1733.776946][T27643] Cannot find add_set index 4 as target [ 1733.824502][ T985] usb 3-1: Using ep0 maxpacket: 16 [ 1733.871332][ T985] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 1733.894365][ T985] usb 3-1: config 0 has no interface number 0 [ 1733.900485][ T985] usb 3-1: config 0 interface 255 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1733.994881][ T856] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1734.003952][ T856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1734.013702][ T985] usb 3-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid maxpacket 4672, setting to 1024 [ 1734.035560][ T856] usb 2-1: Product: syz [ 1734.039741][ T856] usb 2-1: Manufacturer: syz [ 1734.045143][ T985] usb 3-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1734.077698][ T856] usb 2-1: SerialNumber: syz [ 1734.117677][ T856] usb 2-1: config 0 descriptor?? [ 1734.129107][T27645] kvm: requested 18438 ns i8254 timer period limited to 200000 ns [ 1734.150749][T27645] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 1734.194492][ T985] usb 3-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=bb.ee [ 1734.220553][T27645] kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 1734.233324][T27645] kvm: requested 149181 ns i8254 timer period limited to 200000 ns [ 1734.246899][ T985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1734.271254][T27645] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 1734.287051][ T985] usb 3-1: Product: syz [ 1734.304109][ T985] usb 3-1: Manufacturer: syz [ 1734.323424][ T985] usb 3-1: SerialNumber: syz [ 1734.327909][T27645] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 1734.336972][ T856] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1734.356955][T27645] kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 1734.357165][ T985] usb 3-1: config 0 descriptor?? [ 1734.417373][T27639] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1734.428453][T27639] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1734.479819][T27630] Dev loop7: unable to read RDB block 7 [ 1734.496000][T27645] kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 1734.512586][T27630] loop7: unable to read partition table [ 1734.527766][T27630] loop7: partition table beyond EOD, truncated [ 1734.560558][T27630] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1734.774476][ T984] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1734.944991][ T984] usb 7-1: Using ep0 maxpacket: 32 [ 1734.954819][ T984] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1734.967252][ T984] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1734.980146][ T984] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1735.024369][ T984] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1735.043381][ T984] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1735.053210][ T984] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.064380][ T984] usb 7-1: Product: 箖ਏ篅Ⰿ圠䇗䤘ᮜ㹮㹬⿽呋멣䛓镀뮎䮺媟铨츮攋囨乭홍姆̓嗿䁀ᔔ숖綤ب഍泐㸧蒭듘貭к㥇柜▲杢閝頤Å甧೹蝝剽잺ᬧꭗ纾ᬏ⥞嬨㾧典⺣秧欯틪턩쎓顋⊴쭀椟뱄ꯇ눎펶⁎ [ 1735.092559][ T984] usb 7-1: Manufacturer: Э [ 1735.100574][ T984] usb 7-1: SerialNumber: ᭨⋵靀Შ⋞봴챿䙹˜॔碃噊著素ᱱ⢵赜ꤗꡱ并澔屵웼↉鿶ᤐ䶩譮륇⬮颰㢁빷參⹚졌槢圕昜됀ꤡ䋠筣嫯좂﬇잂뉏렋삎탭꧂悒죖谇枪彩 [ 1735.357764][ T984] usb 7-1: 0:2 : does not exist [ 1735.384589][T21775] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1735.396210][ T984] usb 7-1: USB disconnect, device number 39 [ 1735.479760][T12625] udevd[12625]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1735.537778][ T856] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1735.561872][ T856] usb 2-1: USB disconnect, device number 112 [ 1735.606665][T21775] usb 6-1: config 0 has no interfaces? [ 1735.616711][T21775] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1735.636690][T21775] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1735.661835][T21775] usb 6-1: config 0 descriptor?? [ 1735.984477][ T856] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1736.138549][ T985] asix 3-1:0.255 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1736.166544][ T985] asix 3-1:0.255: probe with driver asix failed with error -71 [ 1736.218044][ T985] usb 3-1: USB disconnect, device number 84 [ 1736.261537][ T856] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1736.282720][ T856] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1736.338274][ T856] usb 2-1: can't read configurations, error -71 [ 1736.645458][ T985] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1736.785449][T21775] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1736.804458][ T985] usb 3-1: Using ep0 maxpacket: 8 [ 1736.823143][ T985] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1736.845220][ T985] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1736.865522][ T985] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1736.876560][ T985] usb 3-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1736.887695][ T985] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1736.908501][ T985] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1736.917704][ T985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1736.936029][ T985] usbtmc 3-1:16.0: bulk endpoints not found [ 1736.954673][T21775] usb 4-1: Using ep0 maxpacket: 8 [ 1736.962321][T21775] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 1736.971153][T21775] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 1736.980953][T21775] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1736.991479][T21775] usb 4-1: config 250 has no interface number 0 [ 1736.998884][T21775] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1737.010658][T21775] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1737.021508][T21775] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1737.031948][T21775] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1737.042608][T21775] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1737.058306][T21775] usb 4-1: config 250 interface 228 has no altsetting 0 [ 1737.068189][T21775] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1737.077470][T21775] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1737.086017][T21775] usb 4-1: Product: syz [ 1737.090277][T21775] usb 4-1: SerialNumber: syz [ 1737.101417][T21775] hub 4-1:250.228: bad descriptor, ignoring hub [ 1737.108388][T21775] hub 4-1:250.228: probe with driver hub failed with error -5 [ 1737.305202][T21775] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 127 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1737.520506][T21775] usb 4-1: reset high-speed USB device number 127 using dummy_hcd [ 1737.837395][ T856] usb 6-1: USB disconnect, device number 69 [ 1738.324708][T21775] usb 4-1: USB disconnect, device number 127 [ 1738.337416][T21775] usblp0: removed [ 1739.300674][T27713] loop7: detected capacity change from 0 to 7 [ 1739.396046][T21775] usb 3-1: USB disconnect, device number 85 [ 1739.694669][T14404] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1739.902117][T27713] Dev loop7: unable to read RDB block 7 [ 1739.902310][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 1739.907823][T27713] loop7: unable to read partition table [ 1739.917513][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 1739.932458][T27713] loop7: partition table beyond EOD, truncated [ 1739.938786][T27713] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1739.957893][T14404] usb 4-1: Using ep0 maxpacket: 32 [ 1740.000160][T14404] usb 4-1: config 242 has too many interfaces: 116, using maximum allowed: 32 [ 1740.013567][T14404] usb 4-1: config 242 has an invalid interface number: 184 but max is 115 [ 1740.014677][ T985] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1740.214734][T14404] usb 4-1: config 242 has 1 interface, different from the descriptor's value: 116 [ 1740.232346][T14404] usb 4-1: config 242 has no interface number 0 [ 1740.273256][T14404] usb 4-1: config 242 interface 184 has no altsetting 0 [ 1740.694790][ T985] usb 2-1: Using ep0 maxpacket: 16 [ 1740.747256][ T985] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 1740.775794][ T985] usb 2-1: config 0 has no interface number 0 [ 1740.804464][T14404] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1740.818208][ T985] usb 2-1: config 0 interface 255 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1740.828229][T14404] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1740.840786][T14404] usb 4-1: Product: syz [ 1740.848687][ T985] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid maxpacket 4672, setting to 1024 [ 1740.850715][T14404] usb 4-1: Manufacturer: syz [ 1740.886883][T14404] usb 4-1: SerialNumber: syz [ 1741.027853][ T985] usb 2-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1741.066334][T27727] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5608'. [ 1741.201724][ T985] usb 2-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=bb.ee [ 1741.285197][T27717] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1741.291144][T27717] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1741.302178][T27717] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1741.308292][T27717] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1741.317418][T27717] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1741.323413][T27717] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1741.331768][T27717] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1741.338266][T27717] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1741.445093][ T985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1741.465425][ T985] usb 2-1: Product: syz [ 1741.492593][ T985] usb 2-1: Manufacturer: syz [ 1741.501089][ T985] usb 2-1: SerialNumber: syz [ 1741.709464][ T985] usb 2-1: config 0 descriptor?? [ 1741.716181][T27722] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1741.764798][T27722] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1742.386289][T14404] smsc75xx v1.0.0 [ 1742.389966][T14404] smsc75xx 4-1:242.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1742.467342][T27746] netlink: 'syz.2.5611': attribute type 4 has an invalid length. [ 1742.477647][T14404] smsc75xx 4-1:242.184: probe with driver smsc75xx failed with error -22 [ 1742.542087][T14404] usb 4-1: USB disconnect, device number 2 [ 1742.874701][T14404] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1742.928040][T27756] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1742.948822][T27756] netlink: 188 bytes leftover after parsing attributes in process `syz.6.5614'. [ 1743.024422][T14404] usb 4-1: Using ep0 maxpacket: 32 [ 1743.032057][T14404] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1743.312214][T14404] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1743.339274][T14404] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1743.426555][ T985] asix 2-1:0.255 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1743.469385][ T985] asix 2-1:0.255: probe with driver asix failed with error -71 [ 1743.491885][T14404] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1743.531226][ T985] usb 2-1: USB disconnect, device number 115 [ 1743.540752][T14404] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1743.576876][T14404] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1743.611782][T14404] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1743.633192][T14404] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1743.656659][T14404] usb 4-1: config 0 descriptor?? [ 1743.750433][T27768] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5617'. [ 1743.885170][T14404] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1743.901941][T14404] usb 4-1: USB disconnect, device number 3 [ 1743.911269][T14404] usblp0: removed [ 1744.436403][T14404] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1744.542868][T27776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5620'. [ 1744.645601][T14404] usb 4-1: Using ep0 maxpacket: 32 [ 1744.660389][T14404] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1744.672667][T14404] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1744.694234][T14404] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1744.696901][T27778] FAULT_INJECTION: forcing a failure. [ 1744.696901][T27778] name failslab, interval 1, probability 0, space 0, times 0 [ 1744.718492][T14404] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1744.751094][T14404] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1744.801577][T27778] CPU: 1 UID: 0 PID: 27778 Comm: syz.1.5622 Not tainted syzkaller #0 PREEMPT(full) [ 1744.801601][T27778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1744.801608][T27778] Call Trace: [ 1744.801613][T27778] [ 1744.801619][T27778] dump_stack_lvl+0x189/0x250 [ 1744.801636][T27778] ? __pfx____ratelimit+0x10/0x10 [ 1744.801651][T27778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1744.801661][T27778] ? __pfx__printk+0x10/0x10 [ 1744.801670][T27778] ? netlink_sendmsg+0x805/0xb30 [ 1744.801685][T27778] ? __sys_sendmsg+0x164/0x220 [ 1744.801698][T27778] ? do_fast_syscall_32+0x34/0x80 [ 1744.801714][T27778] should_fail_ex+0x414/0x560 [ 1744.801732][T27778] should_failslab+0xa8/0x100 [ 1744.801746][T27778] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1744.801757][T27778] ? skb_clone+0x212/0x3a0 [ 1744.801770][T27778] skb_clone+0x212/0x3a0 [ 1744.801781][T27778] __netlink_deliver_tap+0x404/0x850 [ 1744.801804][T27778] ? netlink_deliver_tap+0x2e/0x1b0 [ 1744.801819][T27778] netlink_deliver_tap+0x19c/0x1b0 [ 1744.801833][T27778] netlink_sendskb+0x68/0x140 [ 1744.801846][T27778] netlink_unicast+0x397/0x9e0 [ 1744.801857][T27778] ? __asan_memcpy+0x40/0x70 [ 1744.801871][T27778] ? __pfx_netlink_unicast+0x10/0x10 [ 1744.801888][T27778] netlink_rcv_skb+0x28c/0x470 [ 1744.801900][T27778] ? __lock_acquire+0xab9/0xd20 [ 1744.801913][T27778] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1744.801925][T27778] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1744.801948][T27778] ? down_read+0x1ad/0x2e0 [ 1744.801961][T27778] genl_rcv+0x28/0x40 [ 1744.801970][T27778] netlink_unicast+0x82f/0x9e0 [ 1744.801987][T27778] ? __pfx_netlink_unicast+0x10/0x10 [ 1744.802000][T27778] ? netlink_sendmsg+0x642/0xb30 [ 1744.802012][T27778] ? skb_put+0x11b/0x210 [ 1744.802027][T27778] netlink_sendmsg+0x805/0xb30 [ 1744.802052][T27778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1744.802066][T27778] ? __import_iovec+0x5d4/0x7f0 [ 1744.802078][T27778] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1744.802090][T27778] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1744.802103][T27778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1744.802117][T27778] __sock_sendmsg+0x21c/0x270 [ 1744.802130][T27778] ____sys_sendmsg+0x505/0x830 [ 1744.802148][T27778] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1744.802171][T27778] ___sys_sendmsg+0x21f/0x2a0 [ 1744.802187][T27778] ? __pfx____sys_sendmsg+0x10/0x10 [ 1744.802220][T27778] ? __fget_files+0x2a/0x420 [ 1744.802232][T27778] ? __fget_files+0x3a0/0x420 [ 1744.802249][T27778] __sys_sendmsg+0x164/0x220 [ 1744.802267][T27778] ? __pfx___sys_sendmsg+0x10/0x10 [ 1744.802286][T27778] ? __pfx_ksys_write+0x10/0x10 [ 1744.802299][T27778] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1744.802311][T27778] ? lockdep_hardirqs_on+0x9c/0x150 [ 1744.802323][T27778] __do_fast_syscall_32+0xb6/0x2b0 [ 1744.802333][T27778] ? lockdep_hardirqs_on+0x9c/0x150 [ 1744.802345][T27778] do_fast_syscall_32+0x34/0x80 [ 1744.802355][T27778] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1744.802368][T27778] RIP: 0023:0xf7f37539 [ 1744.802377][T27778] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1744.802386][T27778] RSP: 002b:00000000f542655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1744.802398][T27778] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 1744.802405][T27778] RDX: 00000000200048d0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1744.802411][T27778] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1744.802417][T27778] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1744.802423][T27778] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1744.802439][T27778] [ 1745.156563][T14404] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1745.169618][T14404] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1745.178705][T14404] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1745.208474][T14404] usb 4-1: config 0 descriptor?? [ 1745.419556][T27748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1745.445220][T27748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1745.474909][T27785] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5623'. [ 1745.544147][T14404] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1746.028858][T27797] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5627'. [ 1746.194486][T14404] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1746.276202][T27800] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5628'. [ 1746.367316][T14404] usb 7-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1746.376481][T14404] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1746.430344][T14404] usb 7-1: config 0 descriptor?? [ 1746.439420][T14404] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1746.531619][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 1746.531636][ T30] audit: type=1326 audit(1760316540.057:9914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27801 comm="syz.5.5630" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1746.610091][ T30] audit: type=1326 audit(1760316540.057:9915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27801 comm="syz.5.5630" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1746.653126][T14404] gspca_spca508: reg_read err -32 [ 1746.659842][T14404] gspca_spca508: reg_read err -32 [ 1746.717347][ T30] audit: type=1326 audit(1760316540.057:9916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27801 comm="syz.5.5630" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1746.752197][ T30] audit: type=1326 audit(1760316540.057:9917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27801 comm="syz.5.5630" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1746.777903][ T30] audit: type=1326 audit(1760316540.057:9918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27801 comm="syz.5.5630" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1746.800007][ C0] vkms_vblank_simulate: vblank timer overrun [ 1746.810623][ T30] audit: type=1326 audit(1760316540.057:9919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27801 comm="syz.5.5630" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1746.832740][ C0] vkms_vblank_simulate: vblank timer overrun [ 1746.848533][ T30] audit: type=1326 audit(1760316540.057:9920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27801 comm="syz.5.5630" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1746.870627][ C0] vkms_vblank_simulate: vblank timer overrun [ 1747.142408][ T30] audit: type=1326 audit(1760316540.667:9921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27801 comm="syz.5.5630" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1747.180475][T14404] gspca_spca508: reg_read err -71 [ 1747.186041][T14404] gspca_spca508: reg write: error -71 [ 1747.260857][T11042] usb 4-1: USB disconnect, device number 4 [ 1747.321322][ T30] audit: type=1326 audit(1760316540.667:9922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27801 comm="syz.5.5630" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1747.323598][T14404] spca508 7-1:0.0: probe with driver spca508 failed with error -71 [ 1747.365372][T11042] usblp0: removed [ 1747.381240][T14404] usb 7-1: USB disconnect, device number 40 [ 1747.610304][T27821] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5633'. [ 1747.712273][T27818] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1747.713831][T27818] netlink: 188 bytes leftover after parsing attributes in process `syz.5.5632'. [ 1748.934217][ T30] audit: type=1804 audit(1760316542.457:9923): pid=27839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.5640" name="/newroot/553/file1" dev="fuse" ino=1 res=1 errno=0 [ 1750.404608][T14404] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1750.787915][T14404] usb 3-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 1750.797745][T14404] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1750.882029][T14404] usb 3-1: Product: syz [ 1750.891553][T14404] usb 3-1: Manufacturer: syz [ 1750.906158][T14404] usb 3-1: SerialNumber: syz [ 1750.979654][T14404] usb 3-1: config 0 descriptor?? [ 1751.019831][T14404] usb 3-1: interface 1 not found [ 1751.601955][T27879] fuse: Bad value for 'fd' [ 1752.084715][ T5896] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1752.427490][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1752.439598][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1752.451644][ T5896] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1752.500030][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1752.545023][ T5896] usb 4-1: config 0 descriptor?? [ 1752.881988][ T856] usb 3-1: USB disconnect, device number 86 [ 1753.030955][T27889] sctp: [Deprecated]: syz.1.5651 (pid 27889) Use of int in max_burst socket option. [ 1753.030955][T27889] Use struct sctp_assoc_value instead [ 1753.228155][ T5896] cp2112 0003:10C4:EA90.002D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 1753.318572][ T5896] cp2112 0003:10C4:EA90.002D: Part Number: 0x00 Device Version: 0x00 [ 1753.722703][T27898] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5653'. [ 1754.182478][T27901] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5650'. [ 1754.354910][ T30] audit: type=1326 audit(1760316547.877:9924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27902 comm="syz.1.5654" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f37539 code=0x0 [ 1754.480134][ T5896] cp2112 0003:10C4:EA90.002D: error setting SMBus config [ 1754.496203][ T5896] cp2112 0003:10C4:EA90.002D: probe with driver cp2112 failed with error -71 [ 1754.558449][ T5896] usb 4-1: USB disconnect, device number 5 [ 1754.579915][T27905] netlink: 'syz.6.5655': attribute type 10 has an invalid length. [ 1755.194463][T27920] can: request_module (can-proto-4) failed. [ 1755.410374][T27931] netlink: 'syz.3.5661': attribute type 1 has an invalid length. [ 1755.599415][T27931] netlink: 'syz.3.5661': attribute type 2 has an invalid length. [ 1755.704928][ T856] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1755.726671][T27931] GUP no longer grows the stack in syz.3.5661 (27931): 80005000-80008000 (80004000) [ 1755.739327][T27931] CPU: 1 UID: 0 PID: 27931 Comm: syz.3.5661 Not tainted syzkaller #0 PREEMPT(full) [ 1755.739355][T27931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1755.739368][T27931] Call Trace: [ 1755.739377][T27931] [ 1755.739386][T27931] dump_stack_lvl+0x189/0x250 [ 1755.739417][T27931] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1755.739438][T27931] ? __pfx__printk+0x10/0x10 [ 1755.739456][T27931] ? find_vma+0xe7/0x160 [ 1755.739490][T27931] fixup_user_fault+0x661/0x720 [ 1755.739526][T27931] fault_in_user_writeable+0x72/0xe0 [ 1755.739547][T27931] futex_lock_pi+0x773/0xa90 [ 1755.739580][T27931] ? __pfx_futex_lock_pi+0x10/0x10 [ 1755.739635][T27931] ? __pfx_futex_wake_mark+0x10/0x10 [ 1755.739675][T27931] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 1755.739729][T27931] do_futex+0x292/0x420 [ 1755.739760][T27931] ? __pfx_do_futex+0x10/0x10 [ 1755.739781][T27931] ? __vm_munmap+0x2c1/0x380 [ 1755.739814][T27931] __se_sys_futex_time32+0x360/0x3e0 [ 1755.739840][T27931] ? __pfx___se_sys_futex_time32+0x10/0x10 [ 1755.739859][T27931] ? rcu_is_watching+0x15/0xb0 [ 1755.739883][T27931] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1755.739900][T27931] ? __ia32_sys_futex_time32+0x21/0xf0 [ 1755.739921][T27931] __do_fast_syscall_32+0xb6/0x2b0 [ 1755.739949][T27931] do_fast_syscall_32+0x34/0x80 [ 1755.739965][T27931] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1755.739986][T27931] RIP: 0023:0xf7ff2539 [ 1755.740004][T27931] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1755.740018][T27931] RSP: 002b:00000000f54a455c EFLAGS: 00000206 ORIG_RAX: 00000000000000f0 [ 1755.740047][T27931] RAX: ffffffffffffffda RBX: 0000000080004000 RCX: 000000000000008d [ 1755.740059][T27931] RDX: 00000000fffffffd RSI: 0000000000000000 RDI: 0000000000000000 [ 1755.740070][T27931] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1755.740079][T27931] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1755.740088][T27931] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1755.740111][T27931] [ 1756.385543][ T856] usb 2-1: Using ep0 maxpacket: 32 [ 1756.394136][ T856] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1756.407895][ T856] usb 2-1: config 0 has no interface number 0 [ 1756.546685][ T856] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1756.574873][ T856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1756.606962][ T856] usb 2-1: Product: syz [ 1756.624424][ T856] usb 2-1: Manufacturer: syz [ 1756.637306][ T856] usb 2-1: SerialNumber: syz [ 1756.655336][ T856] usb 2-1: config 0 descriptor?? [ 1756.677951][ T856] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1756.891185][ T856] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1756.920645][ T856] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1756.938182][T27946] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1757.018510][ T985] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 1757.176132][ T985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1757.187289][ T985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 1757.198512][ T985] usb 3-1: New USB device found, idVendor=04f3, idProduct=0001, bcdDevice= 0.00 [ 1757.207626][ T985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1757.218189][ T985] usb 3-1: config 0 descriptor?? [ 1757.224192][T27942] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1757.328967][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1757.329470][T11042] usb 2-1: USB disconnect, device number 116 [ 1757.351546][T11042] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1757.403416][T11042] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1757.443498][T11042] quatech2 2-1:0.51: device disconnected [ 1757.597754][ T30] audit: type=1326 audit(1760316551.127:9925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27948 comm="syz.3.5666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2539 code=0x7ffc0000 [ 1757.627641][ T30] audit: type=1326 audit(1760316551.127:9926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27948 comm="syz.3.5666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2539 code=0x7ffc0000 [ 1757.661422][ T30] audit: type=1326 audit(1760316551.147:9927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27948 comm="syz.3.5666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7ff2539 code=0x7ffc0000 [ 1757.665348][ T985] hid (null): unknown global tag 0xe [ 1757.699659][ T30] audit: type=1326 audit(1760316551.147:9928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27948 comm="syz.3.5666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2539 code=0x7ffc0000 [ 1757.728223][ T985] hid-generic 0003:04F3:0001.002E: unknown main item tag 0x0 [ 1757.735833][ T30] audit: type=1326 audit(1760316551.147:9929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27948 comm="syz.3.5666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7ff2539 code=0x7ffc0000 [ 1757.757732][ C0] vkms_vblank_simulate: vblank timer overrun [ 1757.767100][ T30] audit: type=1326 audit(1760316551.147:9930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27948 comm="syz.3.5666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2539 code=0x7ffc0000 [ 1757.791346][ C0] vkms_vblank_simulate: vblank timer overrun [ 1757.800361][ T30] audit: type=1326 audit(1760316551.147:9931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27948 comm="syz.3.5666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff2539 code=0x7ffc0000 [ 1757.836414][ T30] audit: type=1326 audit(1760316551.147:9932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27948 comm="syz.3.5666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2539 code=0x7ffc0000 [ 1757.858466][ C0] vkms_vblank_simulate: vblank timer overrun [ 1757.879570][ T985] hid-generic 0003:04F3:0001.002E: unknown global tag 0xe [ 1757.908501][T27942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1757.916951][ T30] audit: type=1326 audit(1760316551.157:9933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27948 comm="syz.3.5666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=363 compat=1 ip=0xf7ff2539 code=0x7ffc0000 [ 1757.944698][ T985] hid-generic 0003:04F3:0001.002E: item 0 0 1 14 parsing failed [ 1757.952839][ T985] hid-generic 0003:04F3:0001.002E: probe with driver hid-generic failed with error -22 [ 1757.972894][T27942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1758.245587][T27961] loop7: detected capacity change from 0 to 7 [ 1758.315515][ T985] usb 3-1: USB disconnect, device number 87 [ 1758.343865][T27964] FAULT_INJECTION: forcing a failure. [ 1758.343865][T27964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1758.388448][T27964] CPU: 1 UID: 0 PID: 27964 Comm: syz.5.5670 Not tainted syzkaller #0 PREEMPT(full) [ 1758.388473][T27964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1758.388484][T27964] Call Trace: [ 1758.388492][T27964] [ 1758.388500][T27964] dump_stack_lvl+0x189/0x250 [ 1758.388524][T27964] ? __pfx____ratelimit+0x10/0x10 [ 1758.388550][T27964] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1758.388570][T27964] ? __pfx__printk+0x10/0x10 [ 1758.388588][T27964] ? __might_fault+0xb0/0x130 [ 1758.388617][T27964] should_fail_ex+0x414/0x560 [ 1758.388649][T27964] _copy_from_iter+0x1de/0x1790 [ 1758.388676][T27964] ? rcu_is_watching+0x15/0xb0 [ 1758.388704][T27964] ? kmalloc_reserve+0xbd/0x290 [ 1758.388729][T27964] ? __pfx__copy_from_iter+0x10/0x10 [ 1758.388751][T27964] ? __build_skb_around+0x262/0x3f0 [ 1758.388820][T27964] ? netlink_sendmsg+0x642/0xb30 [ 1758.388842][T27964] ? skb_put+0x11b/0x210 [ 1758.388869][T27964] netlink_sendmsg+0x6b2/0xb30 [ 1758.388902][T27964] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1758.388928][T27964] ? __import_iovec+0x5d4/0x7f0 [ 1758.388949][T27964] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1758.388970][T27964] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1758.388998][T27964] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1758.389023][T27964] __sock_sendmsg+0x21c/0x270 [ 1758.389047][T27964] ____sys_sendmsg+0x505/0x830 [ 1758.389078][T27964] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1758.389120][T27964] ___sys_sendmsg+0x21f/0x2a0 [ 1758.389149][T27964] ? __pfx____sys_sendmsg+0x10/0x10 [ 1758.389208][T27964] ? __fget_files+0x2a/0x420 [ 1758.389230][T27964] ? __fget_files+0x3a0/0x420 [ 1758.389261][T27964] __sys_sendmsg+0x164/0x220 [ 1758.389290][T27964] ? __pfx___sys_sendmsg+0x10/0x10 [ 1758.389324][T27964] ? __pfx_ksys_write+0x10/0x10 [ 1758.389357][T27964] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1758.389379][T27964] ? lockdep_hardirqs_on+0x9c/0x150 [ 1758.389399][T27964] __do_fast_syscall_32+0xb6/0x2b0 [ 1758.389420][T27964] ? lockdep_hardirqs_on+0x9c/0x150 [ 1758.389441][T27964] do_fast_syscall_32+0x34/0x80 [ 1758.389461][T27964] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1758.389482][T27964] RIP: 0023:0xf707d539 [ 1758.389498][T27964] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1758.389513][T27964] RSP: 002b:00000000f546d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1758.389533][T27964] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 1758.389546][T27964] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1758.389557][T27964] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1758.389568][T27964] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1758.389579][T27964] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1758.389606][T27964] [ 1759.350247][T27961] Dev loop7: unable to read RDB block 7 [ 1759.356458][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 1759.366265][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 1759.394720][T27961] loop7: unable to read partition table [ 1759.400611][T27961] loop7: partition table beyond EOD, truncated [ 1759.439257][T27961] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1760.064607][ T985] usb 3-1: new low-speed USB device number 88 using dummy_hcd [ 1760.248775][ T985] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 1760.278549][ T985] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 1760.303398][ T985] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1760.340502][ T985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1760.375613][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1760.375623][ T30] audit: type=1326 audit(1760316553.907:9940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27988 comm="syz.1.5679" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f37539 code=0x0 [ 1760.394349][ T985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1760.510615][ T985] usb 3-1: language id specifier not provided by device, defaulting to English [ 1760.528270][ T985] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 1760.537670][ T985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1760.545957][ T985] usb 3-1: Manufacturer: 牢 [ 1760.561526][ T985] usb 3-1: config 0 descriptor?? [ 1760.576489][ T985] hub 3-1:0.0: bad descriptor, ignoring hub [ 1760.584402][ T985] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1760.602595][ T985] input: 牢 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input291 [ 1760.895049][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1761.324755][ T5896] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1761.439815][ T985] usb 3-1: USB disconnect, device number 88 [ 1761.476378][ T5896] usb 6-1: config 0 has an invalid descriptor of length 240, skipping remainder of the config [ 1761.488633][ T5896] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1761.586545][ T5896] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1761.612049][ T5896] usb 6-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 1761.621654][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1761.629794][ T5896] usb 6-1: Product: syz [ 1761.634113][ T5896] usb 6-1: Manufacturer: syz [ 1761.641948][ T5896] usb 6-1: SerialNumber: syz [ 1761.674552][ T5896] usb 6-1: config 0 descriptor?? [ 1761.844066][T28009] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5685'. [ 1761.893182][ T5896] uvcvideo 6-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 1761.990355][ T5896] uvcvideo 6-1:0.0: No valid video chain found. [ 1762.013638][ T5896] usb 6-1: USB disconnect, device number 70 [ 1762.557309][T28027] FAULT_INJECTION: forcing a failure. [ 1762.557309][T28027] name failslab, interval 1, probability 0, space 0, times 0 [ 1762.804572][T28027] CPU: 1 UID: 0 PID: 28027 Comm: syz.1.5690 Not tainted syzkaller #0 PREEMPT(full) [ 1762.804594][T28027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1762.804603][T28027] Call Trace: [ 1762.804609][T28027] [ 1762.804617][T28027] dump_stack_lvl+0x189/0x250 [ 1762.804639][T28027] ? __pfx____ratelimit+0x10/0x10 [ 1762.804659][T28027] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1762.804674][T28027] ? __pfx__printk+0x10/0x10 [ 1762.804693][T28027] ? __pfx___might_resched+0x10/0x10 [ 1762.804715][T28027] should_fail_ex+0x414/0x560 [ 1762.804740][T28027] should_failslab+0xa8/0x100 [ 1762.804760][T28027] __kmalloc_noprof+0xcb/0x7f0 [ 1762.804774][T28027] ? kfree+0x4d/0x6d0 [ 1762.804785][T28027] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1762.804807][T28027] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1762.804826][T28027] ? tomoyo_domain+0xd9/0x130 [ 1762.804856][T28027] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1762.804879][T28027] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1762.804901][T28027] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1762.804935][T28027] ? __lock_acquire+0xab9/0xd20 [ 1762.804967][T28027] ? __fget_files+0x2a/0x420 [ 1762.804988][T28027] ? __fget_files+0x3a0/0x420 [ 1762.805003][T28027] ? __fget_files+0x2a/0x420 [ 1762.805022][T28027] security_file_ioctl_compat+0xcb/0x2d0 [ 1762.805045][T28027] __ia32_compat_sys_ioctl+0x128/0x840 [ 1762.805062][T28027] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1762.805077][T28027] ? __fget_files+0x3a0/0x420 [ 1762.805101][T28027] ? fput+0xa0/0xd0 [ 1762.805121][T28027] ? ksys_write+0x22a/0x250 [ 1762.805137][T28027] ? __pfx_ksys_write+0x10/0x10 [ 1762.805154][T28027] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1762.805170][T28027] ? lockdep_hardirqs_on+0x9c/0x150 [ 1762.805187][T28027] __do_fast_syscall_32+0xb6/0x2b0 [ 1762.805203][T28027] ? lockdep_hardirqs_on+0x9c/0x150 [ 1762.805221][T28027] do_fast_syscall_32+0x34/0x80 [ 1762.805236][T28027] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1762.805253][T28027] RIP: 0023:0xf7f37539 [ 1762.805276][T28027] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1762.805289][T28027] RSP: 002b:00000000f542655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1762.805306][T28027] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0606610 [ 1762.805316][T28027] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1762.805327][T28027] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1762.805335][T28027] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1762.805344][T28027] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1762.805369][T28027] [ 1762.805376][T28027] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1763.394408][ T985] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1763.679296][T28038] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5694'. [ 1763.711292][ T985] usb 3-1: Using ep0 maxpacket: 32 [ 1763.721149][ T985] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1763.729505][ T985] usb 3-1: config 0 has no interface number 0 [ 1763.839265][ T985] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1763.849282][ T985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1763.888288][ T985] usb 3-1: Product: syz [ 1763.896717][ T985] usb 3-1: Manufacturer: syz [ 1763.907989][ T985] usb 3-1: SerialNumber: syz [ 1763.967962][ T985] usb 3-1: config 0 descriptor?? [ 1763.985196][ T985] smsc95xx v2.0.0 [ 1764.577770][ T985] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1764.593845][ T985] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1764.957192][ T30] audit: type=1326 audit(1760316558.477:9941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28053 comm="syz.5.5700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1765.071224][ T30] audit: type=1326 audit(1760316558.487:9942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28053 comm="syz.5.5700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=443 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1765.145048][ T30] audit: type=1326 audit(1760316558.487:9943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28053 comm="syz.5.5700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1765.179373][ T30] audit: type=1326 audit(1760316558.487:9944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28053 comm="syz.5.5700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1765.252297][ T30] audit: type=1326 audit(1760316558.487:9945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28053 comm="syz.5.5700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1765.374470][ T30] audit: type=1326 audit(1760316558.487:9946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28053 comm="syz.5.5700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1765.408736][ T30] audit: type=1326 audit(1760316558.487:9947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28053 comm="syz.5.5700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1765.534742][ T30] audit: type=1326 audit(1760316558.487:9948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28053 comm="syz.5.5700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1765.567630][T11042] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1765.582777][ T30] audit: type=1326 audit(1760316558.487:9949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28053 comm="syz.5.5700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1765.660961][ T30] audit: type=1326 audit(1760316558.487:9950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28053 comm="syz.5.5700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1765.702958][ T30] audit: type=1326 audit(1760316558.487:9951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28053 comm="syz.5.5700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1765.730174][ T30] audit: type=1326 audit(1760316558.487:9952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28053 comm="syz.5.5700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1765.761873][ T30] audit: type=1326 audit(1760316558.487:9953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28053 comm="syz.5.5700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1765.803560][ T30] audit: type=1326 audit(1760316558.507:9954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28053 comm="syz.5.5700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1765.828972][ T30] audit: type=1326 audit(1760316558.507:9955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28053 comm="syz.5.5700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1765.857703][T11042] usb 6-1: config 0 has too many interfaces: 33, using maximum allowed: 32 [ 1765.869483][T11042] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 33 [ 1765.931070][T11042] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1765.965518][T11042] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1766.027091][T11042] usb 6-1: config 0 descriptor?? [ 1766.052223][T11042] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1766.798008][T11042] gspca_spca508: reg_read err -110 [ 1766.805837][T28082] loop7: detected capacity change from 0 to 7 [ 1766.854699][T11042] gspca_spca508: reg_read err -32 [ 1766.873476][T11042] gspca_spca508: reg_read err -32 [ 1766.900852][T11042] gspca_spca508: reg_read err -32 [ 1766.905186][ T985] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 1766.907793][T11042] gspca_spca508: reg write: error -32 [ 1766.923889][T11042] spca508 6-1:0.0: probe with driver spca508 failed with error -32 [ 1766.928466][ T984] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1766.964601][ T985] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 1767.003115][ T985] usb 3-1: USB disconnect, device number 89 [ 1767.099858][ T984] usb 2-1: config 0 has no interfaces? [ 1767.108403][ T984] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1767.136063][ T984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1767.144198][ T984] usb 2-1: Product: syz [ 1767.148572][ T984] usb 2-1: Manufacturer: syz [ 1767.174899][ T984] usb 2-1: SerialNumber: syz [ 1767.180994][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 1767.190773][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 1767.233599][T28082] Dev loop7: unable to read RDB block 7 [ 1767.260067][T28082] loop7: unable to read partition table [ 1767.274605][T28082] loop7: partition table beyond EOD, truncated [ 1767.281129][T28082] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1767.310586][ T984] usb 2-1: config 0 descriptor?? [ 1767.648308][T28093] netlink: 'syz.2.5710': attribute type 13 has an invalid length. [ 1767.708366][T28077] kvm: kvm [28075]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x40000076) [ 1767.718050][T28093] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1768.854123][ T985] usb 6-1: USB disconnect, device number 71 [ 1769.248646][ T985] usb 2-1: USB disconnect, device number 117 [ 1769.494421][ T5896] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 1769.562663][ T984] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1769.566002][T28118] loop7: detected capacity change from 0 to 7 [ 1769.670710][ T5896] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1769.681482][ T5896] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1769.702153][ T5896] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1769.856779][ T984] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1769.868793][ T984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1769.882651][ T984] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1769.929591][ T984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1769.940618][ T984] usb 4-1: config 0 descriptor?? [ 1769.974539][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1770.210457][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 1770.220283][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 1770.224227][ T5896] usb 6-1: usb_control_msg returned -32 [ 1770.235263][T28118] Dev loop7: unable to read RDB block 7 [ 1770.240869][T28118] loop7: unable to read partition table [ 1770.288455][ T984] ath6kl: Failed to submit usb control message: -71 [ 1770.296032][T28118] loop7: partition table beyond EOD, truncated [ 1770.302445][ T984] ath6kl: unable to send the bmi data to the device: -71 [ 1770.310176][T28118] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1770.328749][ T984] ath6kl: Unable to send get target info: -71 [ 1770.328788][ T5896] usbtmc 6-1:16.0: can't read capabilities [ 1770.347575][ T984] ath6kl: Failed to init ath6kl core: -71 [ 1770.374893][ T985] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1770.388846][ T984] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1770.443236][ T984] usb 4-1: USB disconnect, device number 6 [ 1770.574564][ T985] usb 2-1: Using ep0 maxpacket: 16 [ 1770.587513][ T985] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 1770.596708][ T985] usb 2-1: config 0 has no interface number 0 [ 1770.656960][ T985] usb 2-1: config 0 interface 255 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1770.673754][ T985] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid maxpacket 4672, setting to 1024 [ 1770.694504][ T985] usb 2-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1770.756106][T28129] netlink: 'syz.2.5720': attribute type 11 has an invalid length. [ 1770.786776][ T985] usb 2-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=bb.ee [ 1770.795960][ T985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1770.967667][ T985] usb 2-1: Product: syz [ 1770.971912][ T985] usb 2-1: Manufacturer: syz [ 1770.976885][ T985] usb 2-1: SerialNumber: syz [ 1770.984728][ T985] usb 2-1: config 0 descriptor?? [ 1770.992957][T28122] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1771.000986][T28122] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1771.044444][T14404] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 1771.184614][T14404] usb 3-1: device descriptor read/64, error -71 [ 1771.364026][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 1771.373808][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 1771.473485][T14404] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 1771.874658][T14404] usb 3-1: device descriptor read/64, error -71 [ 1771.979701][T23915] usb 6-1: USB disconnect, device number 72 [ 1771.984986][T14404] usb usb3-port1: attempt power cycle [ 1772.396687][ T5203] Dev loop7: unable to read RDB block 7 [ 1772.426229][ T5203] loop7: unable to read partition table [ 1772.432910][ T5203] loop7: partition table beyond EOD, truncated [ 1772.455626][T14404] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 1772.498900][T14404] usb 3-1: device descriptor read/8, error -71 [ 1772.585282][T28147] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5726'. [ 1772.674456][T23915] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1772.765324][T14404] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 1772.795286][T14404] usb 3-1: device descriptor read/8, error -71 [ 1772.829779][T23915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1772.852701][T23915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1772.879072][T23915] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1772.889074][T23915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1772.905078][T14404] usb usb3-port1: unable to enumerate USB device [ 1772.905398][T23915] usb 6-1: config 0 descriptor?? [ 1773.273452][ T985] asix 2-1:0.255 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1773.385833][T28164] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5731'. [ 1773.436102][T23915] pyra 0003:1E7D:2CF6.002F: unknown main item tag 0x0 [ 1773.442923][T23915] pyra 0003:1E7D:2CF6.002F: unknown main item tag 0x0 [ 1773.450730][ T985] asix 2-1:0.255: probe with driver asix failed with error -71 [ 1773.461028][T23915] pyra 0003:1E7D:2CF6.002F: unknown main item tag 0x0 [ 1773.476052][T28162] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1773.483909][T23915] pyra 0003:1E7D:2CF6.002F: unknown main item tag 0x0 [ 1773.491874][T23915] pyra 0003:1E7D:2CF6.002F: unknown main item tag 0x0 [ 1773.502774][ T985] usb 2-1: USB disconnect, device number 118 [ 1773.514796][T23915] pyra 0003:1E7D:2CF6.002F: unknown main item tag 0x0 [ 1773.522040][T23915] pyra 0003:1E7D:2CF6.002F: unknown main item tag 0x0 [ 1773.550104][T23915] pyra 0003:1E7D:2CF6.002F: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 1773.653407][T28143] netlink: 312 bytes leftover after parsing attributes in process `syz.5.5724'. [ 1773.670625][T28143] netlink: 312 bytes leftover after parsing attributes in process `syz.5.5724'. [ 1773.816481][T23915] pyra 0003:1E7D:2CF6.002F: couldn't init struct pyra_device [ 1773.846343][T28169] pim6reg: entered allmulticast mode [ 1773.854030][T23915] pyra 0003:1E7D:2CF6.002F: couldn't install mouse [ 1773.947773][T23915] pyra 0003:1E7D:2CF6.002F: probe with driver pyra failed with error -5 [ 1774.019103][T28172] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5732'. [ 1774.463653][T28177] FAULT_INJECTION: forcing a failure. [ 1774.463653][T28177] name failslab, interval 1, probability 0, space 0, times 0 [ 1774.498985][T28177] CPU: 1 UID: 0 PID: 28177 Comm: syz.2.5734 Not tainted syzkaller #0 PREEMPT(full) [ 1774.499012][T28177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1774.499023][T28177] Call Trace: [ 1774.499036][T28177] [ 1774.499046][T28177] dump_stack_lvl+0x189/0x250 [ 1774.499070][T28177] ? __pfx____ratelimit+0x10/0x10 [ 1774.499097][T28177] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1774.499115][T28177] ? __pfx__printk+0x10/0x10 [ 1774.499141][T28177] ? __pfx___might_resched+0x10/0x10 [ 1774.499169][T28177] should_fail_ex+0x414/0x560 [ 1774.499201][T28177] should_failslab+0xa8/0x100 [ 1774.499226][T28177] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1774.499246][T28177] ? __asan_memset+0x22/0x50 [ 1774.499261][T28177] ? alloc_netdev_mqs+0xb97/0x11b0 [ 1774.499281][T28177] ? __xdp_rxq_info_reg+0x189/0x2a0 [ 1774.499310][T28177] alloc_netdev_mqs+0xb97/0x11b0 [ 1774.499337][T28177] rtnl_create_link+0x31f/0xd10 [ 1774.499370][T28177] rtnl_newlink_create+0x25c/0xb00 [ 1774.499402][T28177] ? __lock_acquire+0xab9/0xd20 [ 1774.499430][T28177] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1774.499458][T28177] ? __pfx___mutex_lock+0x10/0x10 [ 1774.499484][T28177] ? full_name_hash+0x89/0xe0 [ 1774.499505][T28177] ? netdev_name_node_lookup+0x32/0x120 [ 1774.499543][T28177] rtnl_newlink+0x16e4/0x1c80 [ 1774.499568][T28177] ? netlink_deliver_tap+0x19c/0x1b0 [ 1774.499604][T28177] ? __pfx_rtnl_newlink+0x10/0x10 [ 1774.499652][T28177] ? kasan_quarantine_put+0xdd/0x220 [ 1774.499672][T28177] ? lockdep_hardirqs_on+0x9c/0x150 [ 1774.499697][T28177] ? nlmon_xmit+0xb0/0x100 [ 1774.499716][T28177] ? kmem_cache_free+0x19b/0x690 [ 1774.499743][T28177] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1774.499769][T28177] ? lockdep_hardirqs_on+0x9c/0x150 [ 1774.499788][T28177] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1774.499810][T28177] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1774.499837][T28177] ? __dev_queue_xmit+0x27b/0x3b50 [ 1774.499860][T28177] ? __dev_queue_xmit+0x27b/0x3b50 [ 1774.499876][T28177] ? __dev_queue_xmit+0x27b/0x3b50 [ 1774.499896][T28177] ? __dev_queue_xmit+0x1d79/0x3b50 [ 1774.499913][T28177] ? kasan_save_track+0x3e/0x80 [ 1774.499930][T28177] ? __kasan_slab_alloc+0x6c/0x80 [ 1774.499954][T28177] ? __lock_acquire+0xab9/0xd20 [ 1774.500003][T28177] ? __pfx_rtnl_newlink+0x10/0x10 [ 1774.500025][T28177] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1774.500053][T28177] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1774.500076][T28177] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1774.500097][T28177] ? ref_tracker_free+0x63a/0x7d0 [ 1774.500116][T28177] ? __asan_memcpy+0x40/0x70 [ 1774.500133][T28177] ? __pfx_ref_tracker_free+0x10/0x10 [ 1774.500163][T28177] netlink_rcv_skb+0x208/0x470 [ 1774.500188][T28177] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1774.500213][T28177] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1774.500249][T28177] ? netlink_deliver_tap+0x2e/0x1b0 [ 1774.500282][T28177] netlink_unicast+0x82f/0x9e0 [ 1774.500317][T28177] ? __pfx_netlink_unicast+0x10/0x10 [ 1774.500341][T28177] ? netlink_sendmsg+0x642/0xb30 [ 1774.500369][T28177] ? skb_put+0x11b/0x210 [ 1774.500396][T28177] netlink_sendmsg+0x805/0xb30 [ 1774.500430][T28177] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1774.500457][T28177] ? __import_iovec+0x5d4/0x7f0 [ 1774.500477][T28177] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1774.500500][T28177] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1774.500522][T28177] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1774.500548][T28177] __sock_sendmsg+0x21c/0x270 [ 1774.500573][T28177] ____sys_sendmsg+0x505/0x830 [ 1774.500605][T28177] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1774.500648][T28177] ___sys_sendmsg+0x21f/0x2a0 [ 1774.500678][T28177] ? __pfx____sys_sendmsg+0x10/0x10 [ 1774.500742][T28177] ? __fget_files+0x2a/0x420 [ 1774.500763][T28177] ? __fget_files+0x3a0/0x420 [ 1774.500795][T28177] __sys_sendmsg+0x164/0x220 [ 1774.500823][T28177] ? __pfx___sys_sendmsg+0x10/0x10 [ 1774.500858][T28177] ? __pfx_ksys_write+0x10/0x10 [ 1774.500882][T28177] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1774.500902][T28177] ? lockdep_hardirqs_on+0x9c/0x150 [ 1774.500923][T28177] __do_fast_syscall_32+0xb6/0x2b0 [ 1774.500944][T28177] ? lockdep_hardirqs_on+0x9c/0x150 [ 1774.500966][T28177] do_fast_syscall_32+0x34/0x80 [ 1774.500986][T28177] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1774.501006][T28177] RIP: 0023:0xf7f32539 [ 1774.501022][T28177] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1774.501037][T28177] RSP: 002b:00000000f542655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1774.501056][T28177] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 1774.501069][T28177] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1774.501080][T28177] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1774.501091][T28177] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1774.501102][T28177] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1774.501133][T28177] [ 1775.424739][T14404] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1775.466565][T11042] usb 6-1: USB disconnect, device number 73 [ 1775.604698][T14404] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1775.608819][T28193] fuse: Unknown parameter 'roo' [ 1775.613965][T14404] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1775.635700][T14404] usb 7-1: Product: syz [ 1775.640338][T14404] usb 7-1: Manufacturer: syz [ 1775.645557][T14404] usb 7-1: SerialNumber: syz [ 1775.703298][T28199] loop7: detected capacity change from 0 to 7 [ 1775.960964][T28210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1776.014827][T28210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1776.029526][T28210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1776.234836][T28210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1776.284442][T11042] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1776.307988][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 1776.317756][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 1776.329168][T28199] Dev loop7: unable to read RDB block 7 [ 1776.338054][T28199] loop7: unable to read partition table [ 1776.386340][T28199] loop7: partition table beyond EOD, truncated [ 1776.410271][T28199] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1776.447766][T11042] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1776.462709][T11042] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1776.554520][T11042] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1776.590812][T11042] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1776.600537][T11042] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1776.609134][T11042] usb 2-1: Product: syz [ 1776.613568][T11042] usb 2-1: Manufacturer: syz [ 1776.800875][T11042] usb 2-1: SerialNumber: syz [ 1776.829715][T11042] usb 2-1: config 0 descriptor?? [ 1776.915425][T28207] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1776.922959][T28207] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1776.946686][T11042] usb 2-1: ucan: probing device on interface #0 [ 1777.171047][T11042] usb 2-1: ucan: could not read protocol version, ret=-71 [ 1777.184600][T11042] usb 2-1: ucan: probe failed; try to update the device firmware [ 1777.193208][T14404] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1777.563122][T14404] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1777.631115][T11042] usb 2-1: USB disconnect, device number 119 [ 1778.309291][T28234] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1778.310923][T28234] netlink: 188 bytes leftover after parsing attributes in process `syz.5.5746'. [ 1778.554452][T21775] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 1778.987437][T21775] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1779.044378][T21775] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1779.066589][T28245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5750'. [ 1779.157010][T21775] usb 3-1: New USB device found, idVendor=1d76, idProduct=0101, bcdDevice= 0.00 [ 1779.191875][T21775] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1779.262275][T21775] usb 3-1: SerialNumber: syz [ 1779.329292][T21775] usb 3-1: invalid UAC_HEADER (v1) [ 1779.482955][T21775] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1779.516355][T12648] udevd[12648]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1780.359383][T14404] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 1780.411279][T14404] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1780.428736][T14404] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1780.472495][T14404] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 1780.487370][T14404] usb 7-1: USB disconnect, device number 41 [ 1781.156374][T23915] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1781.187776][T11042] usb 3-1: USB disconnect, device number 94 [ 1781.304434][T14404] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1781.316035][T28271] loop7: detected capacity change from 0 to 7 [ 1781.384449][T23915] usb 2-1: Using ep0 maxpacket: 32 [ 1781.391179][T23915] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1781.454936][T14404] usb 4-1: Using ep0 maxpacket: 8 [ 1781.462696][T14404] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1781.478731][T23915] usb 2-1: config 0 has no interface number 0 [ 1781.509100][T23915] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1781.544747][T14404] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 1781.553797][T14404] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1781.556531][T23915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1781.598782][T23915] usb 2-1: Product: syz [ 1781.603064][T23915] usb 2-1: Manufacturer: syz [ 1781.607765][T23915] usb 2-1: SerialNumber: syz [ 1781.614682][T23915] usb 2-1: config 0 descriptor?? [ 1781.626736][T23915] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1781.635304][T11042] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1782.014388][T11042] usb 3-1: Using ep0 maxpacket: 16 [ 1782.028454][T11042] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1782.037474][T11042] usb 3-1: config 0 has no interface number 0 [ 1782.040551][T23915] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1782.045143][T14404] usb 4-1: config 0 descriptor?? [ 1782.063118][T11042] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1782.077352][T23915] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1782.146090][T11042] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1782.185506][T11042] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1782.193746][T11042] usb 3-1: Product: syz [ 1782.198019][T11042] usb 3-1: SerialNumber: syz [ 1782.227540][T11042] usb 3-1: config 0 descriptor?? [ 1782.230002][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1782.240613][T23915] usb 2-1: USB disconnect, device number 120 [ 1782.257348][T23915] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1782.286565][T11042] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 1782.294171][T28271] Dev loop7: unable to read RDB block 7 [ 1782.300697][T23915] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1782.301488][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 1782.321534][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 1782.338230][T28271] loop7: unable to read partition table [ 1782.349285][T23915] quatech2 2-1:0.51: device disconnected [ 1782.358251][T28271] loop7: partition table beyond EOD, truncated [ 1782.368775][T28279] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1782.369836][T28279] netlink: 188 bytes leftover after parsing attributes in process `syz.5.5760'. [ 1782.399227][T28271] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1782.550725][T28282] futex_wake_op: syz.2.5759 tries to shift op by 32; fix this program [ 1782.772708][T14404] usbhid 4-1:0.0: can't add hid device: -71 [ 1782.778858][T14404] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1782.793537][T14404] usb 4-1: USB disconnect, device number 7 [ 1782.845784][T28286] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1782.867700][T28286] netlink: 188 bytes leftover after parsing attributes in process `syz.6.5761'. [ 1784.337108][ T985] usb 3-1: USB disconnect, device number 95 [ 1784.866993][T28307] netlink: 292 bytes leftover after parsing attributes in process `syz.2.5767'. [ 1785.305118][T28317] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5770'. [ 1785.305150][T28318] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5770'. [ 1785.745362][ T5896] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1786.014757][ T5896] usb 3-1: Using ep0 maxpacket: 32 [ 1786.028778][ T5896] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1786.048488][ T5896] usb 3-1: config 0 has no interface number 0 [ 1786.078828][ T5896] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1786.108105][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1786.133634][ T5896] usb 3-1: Product: syz [ 1786.143739][ T5896] usb 3-1: Manufacturer: syz [ 1786.151948][ T5896] usb 3-1: SerialNumber: syz [ 1786.170296][ T5896] usb 3-1: config 0 descriptor?? [ 1786.330019][ T30] audit: type=1326 audit(1760316579.827:9956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28329 comm="syz.6.5776" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1786.369660][ T30] audit: type=1326 audit(1760316579.827:9957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28329 comm="syz.6.5776" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1786.387173][ T5896] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1786.405553][T28320] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5771'. [ 1786.414616][T28320] netlink: 'syz.1.5771': attribute type 7 has an invalid length. [ 1786.422344][T28320] netlink: 'syz.1.5771': attribute type 8 has an invalid length. [ 1786.440810][T28320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5771'. [ 1786.514876][T11042] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1786.524396][ T30] audit: type=1326 audit(1760316579.827:9958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28329 comm="syz.6.5776" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1786.594384][ T30] audit: type=1326 audit(1760316579.827:9959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28329 comm="syz.6.5776" exe="/root/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1786.627779][ T5896] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1786.665416][T11042] usb 6-1: Using ep0 maxpacket: 8 [ 1786.669505][ T30] audit: type=1326 audit(1760316579.827:9960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28329 comm="syz.6.5776" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1786.707528][T11042] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 1786.717228][T11042] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1786.722546][ T30] audit: type=1326 audit(1760316579.827:9961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28329 comm="syz.6.5776" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1786.739303][T11042] usb 6-1: Product: syz [ 1786.754876][ T5896] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1786.805095][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1787.086887][T11042] usb 6-1: Manufacturer: syz [ 1787.091520][T11042] usb 6-1: SerialNumber: syz [ 1787.116278][ T5896] usb 3-1: USB disconnect, device number 96 [ 1787.127621][ T30] audit: type=1326 audit(1760316579.827:9962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28329 comm="syz.6.5776" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1787.194849][ T30] audit: type=1326 audit(1760316579.827:9963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28329 comm="syz.6.5776" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1787.228289][T11042] usb 6-1: config 0 descriptor?? [ 1787.294273][ T5896] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1787.317303][T11042] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 1787.342011][T11042] dvb-usb: bulk message failed: -22 (2/0) [ 1787.354445][ T984] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1787.379156][ T5896] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1787.391133][T11042] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1787.608892][ T984] usb 4-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 1787.609392][T11042] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 1787.634477][ T5896] quatech2 3-1:0.51: device disconnected [ 1787.635238][ T984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1787.645311][T11042] usb 6-1: media controller created [ 1787.715003][ T984] usb 4-1: Product: syz [ 1787.724693][ T984] usb 4-1: Manufacturer: syz [ 1787.729307][ T984] usb 4-1: SerialNumber: syz [ 1787.742483][T28348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1787.747295][T11042] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1787.761815][T28348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1787.800425][ T984] usb 4-1: config 0 descriptor?? [ 1787.822568][ T984] usb 4-1: interface 1 not found [ 1789.173511][T11042] cxusb: set interface failed [ 1789.179292][T11042] dvb-usb: bulk message failed: -22 (1/0) [ 1789.741022][T11042] DVB: Unable to find symbol mt352_attach() [ 1789.747101][T11042] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 1789.875566][ T984] usb 4-1: USB disconnect, device number 8 [ 1789.926820][T11042] rc_core: IR keymap rc-dvico-portable not found [ 1789.970850][T11042] Registered IR keymap rc-empty [ 1789.977774][T11042] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 1790.022223][T11042] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input293 [ 1790.065319][T11042] dvb-usb: schedule remote query interval to 100 msecs. [ 1790.080747][T28381] netlink: 'syz.1.5785': attribute type 1 has an invalid length. [ 1790.113526][T11042] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 1790.179433][T28385] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1790.182322][T28385] netlink: 188 bytes leftover after parsing attributes in process `syz.6.5786'. [ 1790.205883][T11042] usb 6-1: USB disconnect, device number 74 [ 1790.318105][T28391] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1790.320421][T28391] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5789'. [ 1790.486151][T11042] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 1790.904674][T11042] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1791.065795][T11042] usb 6-1: Using ep0 maxpacket: 32 [ 1791.073121][T11042] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1791.081662][T11042] usb 6-1: config 0 has no interface number 0 [ 1791.091014][T11042] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1791.100535][T11042] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1791.109280][T11042] usb 6-1: Product: syz [ 1791.113628][T11042] usb 6-1: Manufacturer: syz [ 1791.119666][T11042] usb 6-1: SerialNumber: syz [ 1791.136310][T11042] usb 6-1: config 0 descriptor?? [ 1791.160161][T11042] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1791.356549][T11042] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1791.448278][T11042] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1791.601665][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1791.610314][T11042] usb 6-1: USB disconnect, device number 75 [ 1791.619521][T11042] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1791.631867][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.638364][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.661693][T11042] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1791.686726][T11042] quatech2 6-1:0.51: device disconnected [ 1792.386410][T28405] binder: 28402:28405 ioctl 4018620d 0 returned -22 [ 1792.394144][T28405] binder: 28402:28405 ioctl c0306201 80000540 returned -22 [ 1793.310585][T28413] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1794.979959][T28440] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5802'. [ 1795.305150][ T5896] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1795.466418][ T5896] usb 6-1: Using ep0 maxpacket: 32 [ 1795.484129][ T5896] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1795.494483][ T5896] usb 6-1: config 0 has no interface number 0 [ 1795.524753][ T5896] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1795.533881][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1795.607167][T28460] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1795.611860][T28460] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5806'. [ 1795.634427][ T5896] usb 6-1: Product: syz [ 1795.658021][ T5896] usb 6-1: Manufacturer: syz [ 1795.662724][ T5896] usb 6-1: SerialNumber: syz [ 1795.686968][ T5896] usb 6-1: config 0 descriptor?? [ 1795.699378][ T5896] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1795.794464][ T985] usb 2-1: new full-speed USB device number 121 using dummy_hcd [ 1795.908569][ T5896] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1795.961968][ T5896] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1795.978069][T28468] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5809'. [ 1796.014947][ T985] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1796.142058][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1796.190768][ T985] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1796.199941][ T984] usb 6-1: USB disconnect, device number 76 [ 1796.224018][T28467] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5808'. [ 1796.293983][ T984] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1796.328321][ T985] usb 2-1: config 0 descriptor?? [ 1796.348027][ T985] ums-realtek 2-1:0.0: USB Mass Storage device detected [ 1796.375405][ T984] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1796.387607][ T984] quatech2 6-1:0.51: device disconnected [ 1796.592058][ T5896] usb 2-1: USB disconnect, device number 121 [ 1796.867135][T14404] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1797.001903][T28482] FAULT_INJECTION: forcing a failure. [ 1797.001903][T28482] name failslab, interval 1, probability 0, space 0, times 0 [ 1797.016240][T28482] CPU: 0 UID: 0 PID: 28482 Comm: syz.6.5812 Not tainted syzkaller #0 PREEMPT(full) [ 1797.016265][T28482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1797.016276][T28482] Call Trace: [ 1797.016284][T28482] [ 1797.016293][T28482] dump_stack_lvl+0x189/0x250 [ 1797.016318][T28482] ? __pfx____ratelimit+0x10/0x10 [ 1797.016346][T28482] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1797.016365][T28482] ? __pfx__printk+0x10/0x10 [ 1797.016391][T28482] ? __pfx___might_resched+0x10/0x10 [ 1797.016414][T28482] ? fs_reclaim_acquire+0x7d/0x100 [ 1797.016440][T28482] should_fail_ex+0x414/0x560 [ 1797.016472][T28482] should_failslab+0xa8/0x100 [ 1797.016497][T28482] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1797.016517][T28482] ? nft_trans_rule_add+0x59/0x440 [ 1797.016539][T28482] ? nft_parse_register_store+0x239/0x2c0 [ 1797.016579][T28482] nft_trans_rule_add+0x59/0x440 [ 1797.016605][T28482] nf_tables_newrule+0x1b63/0x28a0 [ 1797.016640][T28482] ? __pfx_nf_tables_newrule+0x10/0x10 [ 1797.016661][T28482] ? nfnl_pernet+0x23/0x240 [ 1797.016692][T28482] ? __nla_parse+0x40/0x60 [ 1797.016717][T28482] nfnetlink_rcv+0x11d9/0x2590 [ 1797.016775][T28482] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1797.016814][T28482] ? ref_tracker_free+0x63a/0x7d0 [ 1797.016862][T28482] ? __netlink_deliver_tap+0x807/0x850 [ 1797.016892][T28482] ? netlink_deliver_tap+0x2e/0x1b0 [ 1797.016934][T28482] netlink_unicast+0x82f/0x9e0 [ 1797.016973][T28482] ? __pfx_netlink_unicast+0x10/0x10 [ 1797.016996][T28482] ? netlink_sendmsg+0x642/0xb30 [ 1797.017018][T28482] ? skb_put+0x11b/0x210 [ 1797.017047][T28482] netlink_sendmsg+0x805/0xb30 [ 1797.017081][T28482] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1797.017108][T28482] ? __import_iovec+0x5d4/0x7f0 [ 1797.017129][T28482] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1797.017151][T28482] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1797.017174][T28482] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1797.017200][T28482] __sock_sendmsg+0x21c/0x270 [ 1797.017226][T28482] ____sys_sendmsg+0x505/0x830 [ 1797.017258][T28482] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1797.017305][T28482] ___sys_sendmsg+0x21f/0x2a0 [ 1797.017334][T28482] ? __pfx____sys_sendmsg+0x10/0x10 [ 1797.017397][T28482] ? __fget_files+0x2a/0x420 [ 1797.017418][T28482] ? __fget_files+0x3a0/0x420 [ 1797.017450][T28482] __sys_sendmsg+0x164/0x220 [ 1797.017479][T28482] ? __pfx___sys_sendmsg+0x10/0x10 [ 1797.017515][T28482] ? __pfx_ksys_write+0x10/0x10 [ 1797.017538][T28482] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1797.017559][T28482] ? lockdep_hardirqs_on+0x9c/0x150 [ 1797.017580][T28482] __do_fast_syscall_32+0xb6/0x2b0 [ 1797.017601][T28482] ? lockdep_hardirqs_on+0x9c/0x150 [ 1797.017624][T28482] do_fast_syscall_32+0x34/0x80 [ 1797.017643][T28482] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1797.017665][T28482] RIP: 0023:0xf701d539 [ 1797.017683][T28482] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1797.017699][T28482] RSP: 002b:00000000f540d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1797.017719][T28482] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 1797.017733][T28482] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1797.017744][T28482] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1797.017756][T28482] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1797.017767][T28482] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1797.017797][T28482] [ 1797.388968][T14404] usb 4-1: Using ep0 maxpacket: 32 [ 1797.522987][T14404] usb 4-1: config 0 interface 0 altsetting 74 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1797.534488][T14404] usb 4-1: config 0 interface 0 altsetting 74 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1797.544782][T14404] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1797.551521][T14404] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 1797.560562][T14404] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1797.575552][T14404] usb 4-1: config 0 descriptor?? [ 1798.008986][T14404] petalynx 0003:18B1:0037.0030: unknown main item tag 0x0 [ 1798.036492][T14404] petalynx 0003:18B1:0037.0030: unknown main item tag 0x0 [ 1798.053566][T14404] petalynx 0003:18B1:0037.0030: unknown main item tag 0x0 [ 1798.078380][T14404] petalynx 0003:18B1:0037.0030: hidraw0: USB HID v0.00 Device [HID 18b1:0037] on usb-dummy_hcd.3-1/input0 [ 1798.374281][T14404] usb 4-1: USB disconnect, device number 9 [ 1799.026696][T28509] loop7: detected capacity change from 0 to 7 [ 1800.026164][T28509] Dev loop7: unable to read RDB block 7 [ 1800.034038][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 1800.043854][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 1800.052608][T28509] loop7: unable to read partition table [ 1800.064830][T28509] loop7: partition table beyond EOD, truncated [ 1800.098386][T28509] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1800.245075][T14404] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1800.254614][T23915] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1800.306806][ T5203] Dev loop7: unable to read RDB block 7 [ 1800.312394][ T5203] loop7: unable to read partition table [ 1800.318671][ T5203] loop7: partition table beyond EOD, truncated [ 1800.394447][T14404] usb 3-1: device descriptor read/64, error -71 [ 1800.411580][T23915] usb 4-1: Using ep0 maxpacket: 32 [ 1800.414695][T21775] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1800.426186][T23915] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1800.455394][T23915] usb 4-1: config 0 has no interface number 0 [ 1800.466690][T23915] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1800.477208][T23915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1800.485484][T23915] usb 4-1: Product: syz [ 1800.491616][T23915] usb 4-1: Manufacturer: syz [ 1800.508629][T23915] usb 4-1: SerialNumber: syz [ 1800.536191][T23915] usb 4-1: config 0 descriptor?? [ 1800.546410][T23915] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1800.585111][T21775] usb 2-1: Using ep0 maxpacket: 16 [ 1800.596912][T21775] usb 2-1: config 0 has an invalid interface number: 63 but max is 0 [ 1800.614545][T21775] usb 2-1: config 0 has no interface number 0 [ 1800.622893][T21775] usb 2-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=22.a7 [ 1800.633588][T21775] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1800.641990][T21775] usb 2-1: Product: syz [ 1800.646461][T14404] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1800.654185][T21775] usb 2-1: Manufacturer: syz [ 1800.659346][T21775] usb 2-1: SerialNumber: syz [ 1800.667032][T21775] usb 2-1: config 0 descriptor?? [ 1800.748681][T23915] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1800.767089][T23915] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1800.794834][T14404] usb 3-1: device descriptor read/64, error -71 [ 1800.887788][T21775] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 1800.906819][T14404] usb usb3-port1: attempt power cycle [ 1800.914211][T21775] gspca_sn9c2028: read1 error -71 [ 1800.924466][T21775] gspca_sn9c2028: read1 error -71 [ 1800.929866][T21775] gspca_sn9c2028: read1 error -71 [ 1800.936196][T21775] sn9c2028 2-1:0.63: probe with driver sn9c2028 failed with error -71 [ 1800.945007][ T5896] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1800.961416][T21775] usb 2-1: USB disconnect, device number 122 [ 1800.973633][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1800.987495][ T985] usb 4-1: USB disconnect, device number 10 [ 1801.002875][ T985] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1801.020355][ T985] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1801.033119][ T985] quatech2 4-1:0.51: device disconnected [ 1801.137126][ T5896] usb 7-1: config 0 interface 0 altsetting 12 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1801.148302][ T5896] usb 7-1: config 0 interface 0 altsetting 12 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1801.158180][ T5896] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1801.167549][ T5896] usb 7-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 1801.176895][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1801.185002][ T5896] usb 7-1: Product: syz [ 1801.189184][ T5896] usb 7-1: Manufacturer: syz [ 1801.193771][ T5896] usb 7-1: SerialNumber: syz [ 1801.201162][ T5896] usb 7-1: config 0 descriptor?? [ 1801.204500][T23915] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1801.215648][ T5896] keyspan 7-1:0.0: Keyspan 2 port adapter converter detected [ 1801.223280][ T5896] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 87 [ 1801.231018][ T5896] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 7 [ 1801.240198][ T5896] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 81 [ 1801.249041][ T5896] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 1 [ 1801.256721][T14404] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1801.264410][ T5896] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 2 [ 1801.272131][ T5896] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 5 [ 1801.281221][ T5896] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1801.289871][T14404] usb 3-1: device descriptor read/8, error -71 [ 1801.297194][ T5896] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 83 [ 1801.305070][ T5896] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 3 [ 1801.312645][ T5896] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 4 [ 1801.320338][ T5896] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 86 [ 1801.328039][ T5896] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 6 [ 1801.337206][ T5896] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1801.375559][T23915] usb 6-1: Using ep0 maxpacket: 16 [ 1801.383882][T23915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1801.396072][T23915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1801.406833][T23915] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1801.444465][T23915] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1801.463823][T23915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1801.480785][T23915] usb 6-1: config 0 descriptor?? [ 1801.560483][T28540] Cannot find add_set index 4 as target [ 1801.566536][T14404] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1801.595632][T14404] usb 3-1: device descriptor read/8, error -71 [ 1801.699380][T23915] microsoft 0003:045E:07DA.0031: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1801.711846][T23915] microsoft 0003:045E:07DA.0031: no inputs found [ 1801.714591][ T5896] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1801.718613][T23915] microsoft 0003:045E:07DA.0031: could not initialize ff, continuing anyway [ 1801.726589][T14404] usb usb3-port1: unable to enumerate USB device [ 1801.927034][ T5896] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1801.935908][ T5896] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1801.944841][ T5896] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1801.955272][ T5896] usb 2-1: config 220 has no interface number 2 [ 1801.961554][ T5896] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1801.975481][ T5896] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1801.982276][ T5896] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1801.989285][ T5896] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1801.998305][ T5896] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1802.007833][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1802.015953][ T5896] usb 2-1: Product: syz [ 1802.020207][ T5896] usb 2-1: Manufacturer: syz [ 1802.024860][ T5896] usb 2-1: SerialNumber: syz [ 1802.262307][T28538] ================================================================== [ 1802.270404][T28538] BUG: KASAN: slab-out-of-bounds in change_page_attr_set_clr+0x625/0xfc0 [ 1802.278809][T28538] Read of size 8 at addr ffff888029b04ae0 by task syz.1.5830/28538 [ 1802.286678][T28538] [ 1802.288995][T28538] CPU: 0 UID: 0 PID: 28538 Comm: syz.1.5830 Not tainted syzkaller #0 PREEMPT(full) [ 1802.289017][T28538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1802.289029][T28538] Call Trace: [ 1802.289037][T28538] [ 1802.289044][T28538] dump_stack_lvl+0x189/0x250 [ 1802.289075][T28538] ? __kasan_check_byte+0x12/0x40 [ 1802.289096][T28538] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1802.289112][T28538] ? lock_release+0x4b/0x3e0 [ 1802.289134][T28538] ? __virt_addr_valid+0x4a5/0x5c0 [ 1802.289156][T28538] print_report+0xca/0x240 [ 1802.289176][T28538] ? change_page_attr_set_clr+0x625/0xfc0 [ 1802.289198][T28538] kasan_report+0x118/0x150 [ 1802.289219][T28538] ? change_page_attr_set_clr+0x625/0xfc0 [ 1802.289243][T28538] change_page_attr_set_clr+0x625/0xfc0 [ 1802.289268][T28538] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 1802.289290][T28538] ? __pfx_pagerange_is_ram_callback+0x10/0x10 [ 1802.289309][T28538] ? memtype_reserve+0x874/0xb30 [ 1802.289334][T28538] _set_pages_array+0x145/0x270 [ 1802.289361][T28538] drm_gem_shmem_get_pages_locked+0x2d0/0x440 [ 1802.289391][T28538] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 1802.289421][T28538] drm_gem_shmem_pin_locked+0x22c/0x460 [ 1802.289446][T28538] ? __pfx_drm_gem_shmem_pin_locked+0x10/0x10 [ 1802.289470][T28538] ? ww_mutex_lock+0x3f/0x1c0 [ 1802.289487][T28538] drm_gem_map_attach+0x19c/0x1f0 [ 1802.289505][T28538] dma_buf_dynamic_attach+0x1ea/0x3d0 [ 1802.289526][T28538] ? __fget_files+0x3a0/0x420 [ 1802.289546][T28538] ? __pfx_drm_gem_shmem_prime_import_no_map+0x10/0x10 [ 1802.289565][T28538] drm_gem_shmem_prime_import_no_map+0xc1/0x2f0 [ 1802.289583][T28538] ? drm_gem_prime_fd_to_handle+0x185/0x4d0 [ 1802.289611][T28538] ? __pfx_drm_gem_shmem_prime_import_no_map+0x10/0x10 [ 1802.289631][T28538] drm_gem_prime_fd_to_handle+0x196/0x4d0 [ 1802.289658][T28538] drm_ioctl_kernel+0x2cf/0x390 [ 1802.289680][T28538] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 1802.289707][T28538] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 1802.289733][T28538] drm_ioctl+0x67f/0xb10 [ 1802.289752][T28538] ? __lock_acquire+0xab9/0xd20 [ 1802.289775][T28538] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 1802.289803][T28538] ? __pfx_drm_ioctl+0x10/0x10 [ 1802.289830][T28538] ? __fget_files+0x3a0/0x420 [ 1802.289850][T28538] ? __fget_files+0x2a/0x420 [ 1802.289870][T28538] ? drm_compat_ioctl+0x112/0x330 [ 1802.289899][T28538] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1802.289924][T28538] __ia32_compat_sys_ioctl+0x543/0x840 [ 1802.289943][T28538] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1802.289963][T28538] ? __se_sys_futex_time32+0x360/0x3e0 [ 1802.289987][T28538] ? rcu_is_watching+0x15/0xb0 [ 1802.290011][T28538] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1802.290031][T28538] ? lockdep_hardirqs_on+0x9c/0x150 [ 1802.290050][T28538] __do_fast_syscall_32+0xb6/0x2b0 [ 1802.290080][T28538] ? lockdep_hardirqs_on+0x9c/0x150 [ 1802.290098][T28538] do_fast_syscall_32+0x34/0x80 [ 1802.290116][T28538] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1802.290139][T28538] RIP: 0023:0xf7f37539 [ 1802.290154][T28538] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1802.290170][T28538] RSP: 002b:00000000f542655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1802.290190][T28538] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000c00c642e [ 1802.290205][T28538] RDX: 0000000080000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 1802.290216][T28538] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1802.290228][T28538] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1802.290239][T28538] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1802.290258][T28538] [ 1802.290266][T28538] [ 1802.290607][T28548] tipc: Enabled bearer , priority 10 [ 1802.299621][T28538] Allocated by task 28538: [ 1802.299636][T28538] kasan_save_track+0x3e/0x80 [ 1802.299658][T28538] __kasan_kmalloc+0x93/0xb0 [ 1802.299677][T28538] __kvmalloc_node_noprof+0x5cd/0x910 [ 1802.299698][T28538] drm_gem_get_pages+0x166/0xa20 [ 1802.299716][T28538] drm_gem_shmem_get_pages_locked+0x201/0x440 [ 1802.299740][T28538] drm_gem_shmem_pin_locked+0x22c/0x460 [ 1802.299763][T28538] drm_gem_map_attach+0x19c/0x1f0 [ 1802.697657][T28538] dma_buf_dynamic_attach+0x1ea/0x3d0 [ 1802.703077][T28538] drm_gem_shmem_prime_import_no_map+0xc1/0x2f0 [ 1802.709300][T28538] drm_gem_prime_fd_to_handle+0x196/0x4d0 [ 1802.715012][T28538] drm_ioctl_kernel+0x2cf/0x390 [ 1802.719852][T28538] drm_ioctl+0x67f/0xb10 [ 1802.724080][T28538] __ia32_compat_sys_ioctl+0x543/0x840 [ 1802.729527][T28538] __do_fast_syscall_32+0xb6/0x2b0 [ 1802.734620][T28538] do_fast_syscall_32+0x34/0x80 [ 1802.739450][T28538] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1802.745761][T28538] [ 1802.748065][T28538] The buggy address belongs to the object at ffff888029b04a80 [ 1802.748065][T28538] which belongs to the cache kmalloc-96 of size 96 [ 1802.761924][T28538] The buggy address is located 0 bytes to the right of [ 1802.761924][T28538] allocated 96-byte region [ffff888029b04a80, ffff888029b04ae0) [ 1802.776310][T28538] [ 1802.778619][T28538] The buggy address belongs to the physical page: [ 1802.785007][T28538] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29b04 [ 1802.793757][T28538] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1802.801290][T28538] page_type: f5(slab) [ 1802.805270][T28538] raw: 00fff00000000000 ffff88813ffa6280 ffffea000172f2c0 dead000000000005 [ 1802.813841][T28538] raw: 0000000000000000 0000000080200020 00000000f5000000 0000000000000000 [ 1802.822396][T28538] page dumped because: kasan: bad access detected [ 1802.828797][T28538] page_owner tracks the page as allocated [ 1802.834493][T28538] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6251, tgid 6245 (syz.3.69), ts 111518985298, free_ts 111490285051 [ 1802.853570][T28538] post_alloc_hook+0x240/0x2a0 [ 1802.858323][T28538] get_page_from_freelist+0x2365/0x2440 [ 1802.863862][T28538] __alloc_frozen_pages_noprof+0x181/0x370 [ 1802.869655][T28538] alloc_pages_mpol+0x232/0x4a0 [ 1802.874494][T28538] allocate_slab+0x96/0x3a0 [ 1802.878995][T28538] ___slab_alloc+0xe94/0x18a0 [ 1802.883682][T28538] __slab_alloc+0x65/0x100 [ 1802.888094][T28538] __kmalloc_noprof+0x471/0x7f0 [ 1802.892938][T28538] hash_netport4_add+0x1d37/0x2720 [ 1802.898036][T28538] hash_netport4_uadt+0xba9/0xf30 [ 1802.903051][T28538] call_ad+0x383/0xb00 [ 1802.907108][T28538] ip_set_ad+0x791/0x930 [ 1802.911335][T28538] nfnetlink_rcv_msg+0xb4d/0x1130 [ 1802.916346][T28538] netlink_rcv_skb+0x208/0x470 [ 1802.921093][T28538] nfnetlink_rcv+0x282/0x2590 [ 1802.925752][T28538] netlink_unicast+0x82f/0x9e0 [ 1802.930504][T28538] page last free pid 5888 tgid 5888 stack trace: [ 1802.936806][T28538] __free_frozen_pages+0xbc4/0xd30 [ 1802.941905][T28538] vfree+0x25a/0x400 [ 1802.945783][T28538] delayed_vfree_work+0x55/0x80 [ 1802.950615][T28538] process_scheduled_works+0xae1/0x17b0 [ 1802.956144][T28538] worker_thread+0x8a0/0xda0 [ 1802.960722][T28538] kthread+0x711/0x8a0 [ 1802.964772][T28538] ret_from_fork+0x4bc/0x870 [ 1802.969347][T28538] ret_from_fork_asm+0x1a/0x30 [ 1802.974094][T28538] [ 1802.976399][T28538] Memory state around the buggy address: [ 1802.982029][T28538] ffff888029b04980: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 1802.990071][T28538] ffff888029b04a00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 1802.998111][T28538] >ffff888029b04a80: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 1803.006153][T28538] ^ [ 1803.013326][T28538] ffff888029b04b00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 1803.021365][T28538] ffff888029b04b80: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 1803.029404][T28538] ================================================================== [ 1803.037529][ C0] vkms_vblank_simulate: vblank timer overrun [ 1803.084605][T28538] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1803.091837][T28538] CPU: 1 UID: 0 PID: 28538 Comm: syz.1.5830 Not tainted syzkaller #0 PREEMPT(full) [ 1803.101197][T28538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1803.111232][T28538] Call Trace: [ 1803.114497][T28538] [ 1803.117418][T28538] dump_stack_lvl+0x99/0x250 [ 1803.121996][T28538] ? __asan_memcpy+0x40/0x70 [ 1803.126581][T28538] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1803.131782][T28538] ? __pfx__printk+0x10/0x10 [ 1803.136374][T28538] vpanic+0x237/0x6d0 [ 1803.140446][T28538] ? __pfx_vpanic+0x10/0x10 [ 1803.144949][T28538] ? preempt_schedule+0xae/0xc0 [ 1803.149793][T28538] ? __pfx_preempt_schedule+0x10/0x10 [ 1803.155173][T28538] panic+0xb9/0xc0 [ 1803.158909][T28538] ? __pfx_panic+0x10/0x10 [ 1803.163335][T28538] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1803.169213][T28538] ? change_page_attr_set_clr+0x625/0xfc0 [ 1803.174915][T28538] check_panic_on_warn+0x89/0xb0 [ 1803.179856][T28538] ? change_page_attr_set_clr+0x625/0xfc0 [ 1803.185557][T28538] end_report+0x78/0x160 [ 1803.189786][T28538] kasan_report+0x129/0x150 [ 1803.194275][T28538] ? change_page_attr_set_clr+0x625/0xfc0 [ 1803.199999][T28538] change_page_attr_set_clr+0x625/0xfc0 [ 1803.205532][T28538] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 1803.211593][T28538] ? __pfx_pagerange_is_ram_callback+0x10/0x10 [ 1803.217735][T28538] ? memtype_reserve+0x874/0xb30 [ 1803.222692][T28538] _set_pages_array+0x145/0x270 [ 1803.227535][T28538] drm_gem_shmem_get_pages_locked+0x2d0/0x440 [ 1803.233607][T28538] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 1803.240208][T28538] drm_gem_shmem_pin_locked+0x22c/0x460 [ 1803.245749][T28538] ? __pfx_drm_gem_shmem_pin_locked+0x10/0x10 [ 1803.251813][T28538] ? ww_mutex_lock+0x3f/0x1c0 [ 1803.256493][T28538] drm_gem_map_attach+0x19c/0x1f0 [ 1803.261520][T28538] dma_buf_dynamic_attach+0x1ea/0x3d0 [ 1803.266902][T28538] ? __fget_files+0x3a0/0x420 [ 1803.271578][T28538] ? __pfx_drm_gem_shmem_prime_import_no_map+0x10/0x10 [ 1803.278424][T28538] drm_gem_shmem_prime_import_no_map+0xc1/0x2f0 [ 1803.284659][T28538] ? drm_gem_prime_fd_to_handle+0x185/0x4d0 [ 1803.290557][T28538] ? __pfx_drm_gem_shmem_prime_import_no_map+0x10/0x10 [ 1803.297433][T28538] drm_gem_prime_fd_to_handle+0x196/0x4d0 [ 1803.303159][T28538] drm_ioctl_kernel+0x2cf/0x390 [ 1803.308013][T28538] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 1803.314421][T28538] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 1803.319800][T28538] drm_ioctl+0x67f/0xb10 [ 1803.324120][T28538] ? __lock_acquire+0xab9/0xd20 [ 1803.328967][T28538] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 1803.335372][T28538] ? __pfx_drm_ioctl+0x10/0x10 [ 1803.340138][T28538] ? __fget_files+0x3a0/0x420 [ 1803.344815][T28538] ? __fget_files+0x2a/0x420 [ 1803.349392][T28538] ? drm_compat_ioctl+0x112/0x330 [ 1803.354414][T28538] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1803.359959][T28538] __ia32_compat_sys_ioctl+0x543/0x840 [ 1803.365413][T28538] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1803.371394][T28538] ? __se_sys_futex_time32+0x360/0x3e0 [ 1803.376851][T28538] ? rcu_is_watching+0x15/0xb0 [ 1803.381621][T28538] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1803.388282][T28538] ? lockdep_hardirqs_on+0x9c/0x150 [ 1803.393466][T28538] __do_fast_syscall_32+0xb6/0x2b0 [ 1803.398576][T28538] ? lockdep_hardirqs_on+0x9c/0x150 [ 1803.403755][T28538] do_fast_syscall_32+0x34/0x80 [ 1803.408608][T28538] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1803.414958][T28538] RIP: 0023:0xf7f37539 [ 1803.419022][T28538] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1803.438629][T28538] RSP: 002b:00000000f542655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1803.447042][T28538] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000c00c642e [ 1803.455013][T28538] RDX: 0000000080000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 1803.462964][T28538] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1803.470913][T28538] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1803.478871][T28538] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1803.486836][T28538] [ 1803.490118][T28538] Kernel Offset: disabled [ 1803.494426][T28538] Rebooting in 86400 seconds..