last executing test programs:

12m51.848283303s ago: executing program 0 (id=1678):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r2, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0)
syz_usb_connect$midi(0x0, 0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000020fd07010040000102030109023c0001011810040904000002010300060d24010900070009058e0b00090fd7020c2501083b8cbb8907a6d53909058c0200026df70705250101"], 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
write$binfmt_format(r6, &(0x7f0000000180)='1\x00', 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000000)="67653e0f7856cef6fb0fc718672e0f1be53e640fc75c0cbaa10066b80000000066ef0f0765d02b2ef30fa7e80fc768e8", 0x30}], 0x1, 0x14, 0x0, 0x0)
r7 = socket(0xa, 0x2400000001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000034000)={0x3, {{0xa, 0x4e23, 0x3, @mcast2, 0x10000000}}}, 0x88)
setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000003c0)={0x3, {{0xa, 0x0, 0x1, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000180)={0x4, {{0xa, 0x4e24, 0x3, @mcast1, 0x5}}, {{0xa, 0x4e21, 0x8b5f, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe57}}}, 0x108)
getsockopt$inet6_buf(r7, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c01000019000100fcfffffffbdbdf25ac1e0101000000000000000000000000fc00000000000000000000000000000100000000ffff20000a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

12m48.659074476s ago: executing program 0 (id=1710):
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x5, 0x7}, @window={0x3, 0xa, 0x7}, @mss={0x2, 0x8007}, @window={0x3, 0x0, 0xb}, @mss={0x2, 0x2}, @timestamp, @window={0x3, 0xfffe, 0x4000}, @mss={0x2, 0xff}], 0x8)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd0369cec32bbe791bfc2c0fce202d51df0862c31baa7b80bab6d64c1d5826a7f4c1982e3693e7a0677f2ad388ce872b890394a3ecfd1cec45ba7966945271fc033565d4a9bb17a41aacf550c4510ba99a24b48eab32e5d7549de9bae7954e0f750b55f706de3d5001638a1260dd8d2a", 0xed}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x2, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)="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", 0xfc}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7fb8ac1e44c203140d6aab524f61cd8642ee0f380ebb21dc9267a8fbefa6eec89ff97e7800f44f89b17d43206217941c34", 0xc4}, {&(0x7f00000011c0)}], 0x6}}], 0x3, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002980)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000500)={0xa, 0x4e24, 0x314, @loopback, 0x6}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000000540)="5476797bd065708356c11c0268be277ca10fe092757185e2bf4a82126ccf35cf", 0x20}, {&(0x7f00000006c0)="c092ca", 0x3}, {0x0}, {&(0x7f0000000880)="84a22b2282c0945965fc0242df9e4d5fc5dd2f0a6006485554f3ab49b4f2c35c4a955337162da889e522c5d85dca34b3fb9ca7fdcdd88b98eca9f6f8e0060577f7f69bcc2ae2ebd140e7983263a98fa9b5ac7c570eef5b55b1687c39e3da93a0903401abee99a2384a772eec5697f800c0938768c719e3c4a1208ef34c19cb1d794e88545cdabcb4a3664ac70ccbf36e1664f7fe51b837faeccfa47de48a58c9c61812e43eb9eb95683a436667d40453b6582e8d7dad8ac20f39d4274b33f2c625e0bb6a315e5ba0ef68dbc411d52610e71a373769957d687a133e5b9540d84af473463a2a60f567eed25eeb9546104d14dd", 0xf2}, {&(0x7f0000000f00)="23f46e2ce31232ebc3f66618770da3f7c71ea1f9951d53bfb683", 0x1a}, {&(0x7f00000011c0)="3c08ea76fbff703ff348210f3ffa93cc3fb900b28055e00c93a7d25286780b18791432e084f642274efba607995df6bea565bb6304b6756c175998f77f9c9161f960c9820c9a17217320070725e9c69b77432c4fce51e93f46b3dafb5896c21f0d3fe7c6dd8d6e990e09570cd71854370c03382d89661b623c915c0a4147bf882f1bcace609e73ede85c33dc01c2a68568b8901bbc80ae26d1d6", 0x9a}, {&(0x7f0000001280)="fed21b2d2465d9e3db0917a022cdec70d05d694446cb7134f51d096de46f098b011ff6d4da5bd886927de013bd7e29f96cba94718aa97acfbdefa42e855c8e6e5e0142fddcc13c8ce6e084fd00f87232b2c2d30581e1f9350ca35329b4bd7e3d9f7952411701b50e21979a746fcca6cf370b533fa00b74c6dd975cc249a5077a787d6920b6ce7cf30b29a52e123826269b2f9f9424ec1203b50f7cba0617db4d48d83f6e66ad1e6aab935289642423ea033ebc83", 0xb4}, {&(0x7f0000001340)="dc7197196352be5467eac7f6a6d74975a422449489fba59e57a22b1656236c8f4fc3b034716cd48cbfd2b5fc35d9dbc4c57610115b1c976282393e5b5559feb59fa0860b1f4c06c386b66f22dc76a8ec716de92b5fb5b0ba504433d3c71b", 0x5e}], 0x8, &(0x7f00000015c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @hopopts_2292={{0x70, 0x29, 0x36, {0x11, 0xa, '\x00', [@ra={0x5, 0x2, 0x8}, @calipso={0x7, 0x20, {0x3, 0x6, 0x71, 0xfffa, [0x3a56, 0x1ff, 0x7]}}, @jumbo={0xc2, 0x4, 0x8001}, @pad1, @jumbo={0xc2, 0x4, 0x80000000}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x1e}}, @enc_lim={0x4, 0x1, 0x2}, @jumbo={0xc2, 0x4, 0x8}, @padn={0x1, 0x1, [0x0]}]}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x11, 0xc, 0x1, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @mcast1, @dev={0xfe, 0x80, '\x00', 0x33}, @private2={0xfc, 0x2, '\x00', 0x1}, @private2]}}}], 0x100}}, {{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f00000016c0)="a5ca0e4166bfe6e3662dcbc06341b0a6481aa73d749e7bc46ef21c5d4db08b628562fe4ffab606b0a689cacb842ed83c5c4d2c1663baa42a8904f18591eafe2f18736de9b5905a61f03de07a3ae2276bf41416ff139a38bb1edc0a50b6c1fa2c27542bac4c52e66509c5763d5aad30de39b0095012644013aee29c9680c761415b0490df406870e80a38e9145039523d5ac43f82e78c7ec4150014b60017e124dbfc8a343d95386a22defe6123e15f", 0xaf}, {&(0x7f0000001780)="c4b42a50a4388c157988db0cc145b85045cd24524f372cf46361d94eb45cea7d72b1645a540f184afcefd2de9d2fddaf3e5f714bc4cd34230546cce41f5b15e5f8dc52b1e9a06587a3a9c466da8889368cfc360d7dd5caa87ded2482c2d66d2408adbbb800fee41b3cec57feb52073efe9df48c7dd1bd0e2b8faf5a973d4078cdd77cc64d7bc7e227dd6f4295deb758373c846024ec9169b07a6950ea40547f4c1b5c2f5ffc10f0ea88b0d8d6b8b8f17fe1a3dd01db4dd7cb97be7d0254cea7bbb16", 0xc2}], 0x2}}], 0x3, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]})
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
openat$nvram(0xffffffffffffff9c, &(0x7f00000007c0), 0xc00, 0x0)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

12m48.294393651s ago: executing program 0 (id=1712):
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x10c4, 0x8acf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0xf0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x7, 0x0, {0x9, 0x21, 0x8, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xb, 0xfe}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0xff, 0x7f, 0x6}}]}}}]}}]}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}}}, 0x104)
getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000340)=""/225, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r2 = syz_open_dev$radio(&(0x7f0000000580), 0x2, 0x2)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000000700)={0xffffffff, "a055babd9b8c29abbdd772a44c5518bc1661222efc50f8f5555dcf4617da81d7", 0x1, 0x1182, 0x3, 0x6, 0x2, 0x4, 0x4, 0x4})
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008b86d3106d04b50801d7010203030902120001000000000904"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB=' \b)'], 0x0, 0x0, 0x0, 0x0}, 0x0)
listns(&(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0)

12m46.599944628s ago: executing program 0 (id=1723):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0)
unshare(0x8040480)
ioctl$int_in(r0, 0x5452, &(0x7f0000000340)=0x9)
pselect6(0x40, &(0x7f0000000040)={0x0, 0xfffffffffffffffc, 0x5, 0x0, 0xffffffc, 0x1, 0x0, 0xfffffffffffffffa}, &(0x7f0000000000)={0x18, 0x8, 0x1ff, 0x0, 0x7ff, 0x400000, 0x300000000000000, 0x92}, 0x0, 0x0, 0x0)

12m45.742769461s ago: executing program 0 (id=1729):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000200), 0x3, r1})
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
prlimit64(0x0, 0x7, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000004, 0x2010, 0xffffffffffffffff, 0xe9a9b000)
ioctl$TCSETS(0xffffffffffffffff, 0x545c, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0xc)
timer_create(0x0, 0x0, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x4008812, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
timer_create(0x4, 0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2)
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
fcntl$dupfd(r5, 0x406, r5)

12m45.541646738s ago: executing program 0 (id=1731):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000001, 0x4c831, 0xffffffffffffffff, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
syslog(0x3, 0x0, 0x0) (async, rerun: 64)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (rerun: 64)

12m30.462688304s ago: executing program 32 (id=1731):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000001, 0x4c831, 0xffffffffffffffff, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
syslog(0x3, 0x0, 0x0) (async, rerun: 64)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (rerun: 64)

6m34.914976544s ago: executing program 2 (id=3866):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007"], 0x2c}, 0x1, 0x0, 0x0, 0x21000000}, 0x20008000)

6m34.807750617s ago: executing program 2 (id=3869):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002140)=@newtfilter={0x8a8, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x87c, 0x2, [@TCA_U32_POLICE={0x854, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x4, 0xffe4, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x803, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x1, 0x10001, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x7fff, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x8, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x7, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0x4, 0x2, 0x6, 0x6, 0xaa, 0xffffffff, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x5, 0x4, 0x7, 0x4000000a, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0x6, 0xebb, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0x80e, 0x10001, 0x8, 0xa, 0x6, 0x0, 0xa1, 0x4, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x101, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x5027, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x401, 0x74db, 0x400000, 0x401, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb38, 0xb2, 0x4, 0x5, 0x1000, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x7f, 0x8, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x18, 0x7, 0x8000, 0x7e, 0x4, 0x5, 0x7, 0x4, 0x3, 0x400, 0xe, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x5, 0x53e5, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0xf6, 0x1ff, 0x3, 0x800001, 0xfffffffb, 0x8001, 0xff, 0x0, 0xfff, 0x82, 0x1, 0x5, 0xffff, 0x3, 0x1, 0x7, 0x9, 0x10000, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0xeb, 0xff, 0x6, 0x3c46a60b, 0xd, 0x4, 0x4003, 0x5, 0x4, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0x0, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x80, 0x7, 0x1000, 0xb11a, 0x800000, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x806, 0xc4, 0x9, 0x0, 0xee2, 0x2, 0x401, 0xfffffffa, 0x8000, 0x2, 0x0, 0x5, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x81, 0x9, 0x7, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0xb, 0x6, 0x100, 0x1, 0xb5a, 0xa, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x4, 0x9, 0x91e7, 0x6, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x6, 0xea, 0x3, 0x9, 0x200004, 0x3, 0x7, 0x0, 0x8, 0x1, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0x5, 0x2, 0x1, 0xf, 0x1ff, 0x400, 0x3, 0x3ff, 0xb, 0x39, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x4, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x2, 0x6, 0x9, 0x7, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x42b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8001, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x2, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffff}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x8a8}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084)

6m34.73117589s ago: executing program 2 (id=3872):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x10, 0x400000002, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
r1 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1db}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000300)=<r3=>0x0, &(0x7f00000004c0)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6})
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}}}, 0x0)
shutdown(r0, 0x1)

6m33.771279672s ago: executing program 2 (id=3876):
ptrace(0x10, 0x0)
ptrace$setregs(0xf, 0x0, 0x40, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
capset(&(0x7f0000000040)={0x20080522}, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00')

6m33.720348919s ago: executing program 2 (id=3877):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}, 0x1, 0x40000000}, 0x0)

6m33.424243539s ago: executing program 2 (id=3878):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40}}, 0x18}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000100039042abd70000000000000300000", @ANYRES32=0x0, @ANYBLOB="b96b00003537a940300012800b00010065727370616e000020000280040012000500160002000000060018"], 0x50}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020)

6m32.900246046s ago: executing program 33 (id=3878):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40}}, 0x18}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000100039042abd70000000000000300000", @ANYRES32=0x0, @ANYBLOB="b96b00003537a940300012800b00010065727370616e000020000280040012000500160002000000060018"], 0x50}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020)

4.411568683s ago: executing program 4 (id=6836):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = fanotify_init(0x200, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fanotify_mark(r1, 0x2, 0x88000039, 0xffffffffffffffff, &(0x7f0000000180)='./file1\x00')
socket$nl_route(0x10, 0x3, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
pipe2$watch_queue(0x0, 0x80)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000000140), 0x0, 0x2023, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x3, 0x37, 0x7df9d3a8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x14)
ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000040)=""/108)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000140)=0x5, 0x4)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1\x00'})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
fsopen(&(0x7f00000003c0)='gfs2meta\x00', 0x1)
r5 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2)
ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x0, 0x2})
ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000040)={0x7, @meta={0x4d435655, 0xad7cbe1, 0x4d8c, 0xec9e, 0x2d929200}})
syz_open_dev$video(&(0x7f0000000200), 0x5, 0x630582)
ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205647, &(0x7f00000001c0)={0x980000, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @string=0x0}})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffe, 0x280001, 0x8c80, 0x2, 0x3, 0x100000, 0x2, 0x3}})
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x40084503, &(0x7f0000ffcffc))

3.430695136s ago: executing program 4 (id=6839):
r0 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x5, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x2}}}}}]}}, 0x0)
syz_usb_control_io$sierra_net(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4001}}}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000600)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
execveat(0xffffffffffffffff, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000300)={[&(0x7f0000000240)='-\x00']}, &(0x7f00000005c0)={[&(0x7f0000000340)='$\x89@&-!.#\x00', &(0x7f00000003c0)='/dev/loop']}, 0x100)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1f, 0x6, 0x2, 0x9, 0x20, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50)
r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x7b}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)
preadv(r1, &(0x7f0000000540)=[{&(0x7f0000000140)=""/13, 0xd}], 0x1, 0x5, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
io_uring_enter(r2, 0x2219, 0x34d3, 0x16, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0xa)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

3.379325732s ago: executing program 1 (id=6840):
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x7, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fadbdf2500000000000000000000000000000001ac1414bb00000000000000000000000000000004000000000a006080"], 0xb8}, 0x1, 0x0, 0x0, 0xc0c0}, 0x50)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0x2}, {0x3000, 0x8}}}, 0xb8}}, 0x0)

3.21485911s ago: executing program 1 (id=6841):
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$KVM_SET_TSC_KHZ_vm(r0, 0xaea2, 0xfff)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/udp6\x00')
read$dsp(r2, &(0x7f00000002c0)=""/140, 0x8c)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="10"], 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x44040)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

3.1055399s ago: executing program 1 (id=6842):
socketpair(0x7, 0x5, 0x8001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4084)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000018c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x8d, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0x800, {0xf, 0x6, "010380", 0x3ff, 0x0, 0x1, @loopback, @loopback={0x1000000}, [@routing={0x2f, 0x8, 0x0, 0xa3, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @private2, @empty, @private1={0xfc, 0x1, '\x00', 0x1}]}, @hopopts={0x3a}], "ab0924172f"}}}}}}, 0xc3)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
pipe(&(0x7f0000000600)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, 0x0, 0x600)
socket$inet_udp(0x2, 0x2, 0x0)
socket(0x400000000010, 0x3, 0x0)
r5 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
clock_adjtime(0xf, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, 0x0)
io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r3, 0x1e, &(0x7f0000000140)={r2}, 0x1)
ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r5, 0x7b0, &(0x7f00000000c0)={@hyper, 0x1})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

2.831567834s ago: executing program 1 (id=6843):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000c, 0x4c831, 0xffffffffffffffff, 0x4c647000)
setreuid(0xee01, 0xee01)
fanotify_init(0x1200, 0x0)
r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100}, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x1, 0x66}, @sack_perm, @timestamp, @mss={0x2, 0x3ff}], 0x4)

2.828841912s ago: executing program 5 (id=6844):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20)
r1 = accept4$alg(r0, 0x0, 0x0, 0x80000)
io_setup(0x42, &(0x7f0000000100)=<r2=>0x0)
sendmmsg$alg(r1, &(0x7f0000004400)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x810}], 0x1, 0x10)
io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000000)='e', 0x1, 0xfefdffff, 0x0, 0x2}])

2.560013729s ago: executing program 5 (id=6847):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x200200)
ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xb9, 0xf])
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
write$6lowpan_control(r2, &(0x7f0000000380)='disconnect aa:aa:aa:aa:aa:11 1', 0x1e)
ioctl$TCXONC(r2, 0x540a, 0x3)
ioctl$TCXONC(r2, 0x540a, 0x1)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r3, 0x540a, 0x0)

2.388470905s ago: executing program 1 (id=6849):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x200000000000000}}}, 0xb8}}, 0x0)

2.291127788s ago: executing program 1 (id=6850):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000980)=[{&(0x7f00000001c0)=""/33, 0x21}, {0x0}, {&(0x7f0000000580)=""/10, 0xa}, {&(0x7f00000005c0)=""/105, 0x69}, {0x0}, {0x0}, {&(0x7f0000000840)=""/6, 0x6}, {&(0x7f0000000880)=""/196, 0xc4}], 0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x8, <r7=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYRES16=r5, @ANYRES8=0x0, @ANYRESDEC=r3, @ANYRESHEX=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7}, 0x94)
syz_usbip_server_init(0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x20040084)
r8 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1002, 0x28011, r9, 0xffffffffffffc000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r8, 0x84, 0x7a, &(0x7f0000000080), &(0x7f0000000000)=0x8)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
ioperm(0x0, 0x6e, 0xe)
syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010025bd7000fedbdf256500000008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x80)

1.908825752s ago: executing program 5 (id=6855):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2041, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x6, 0xfe, "0062ba7d82000000160000000000f738096304"})
r2 = syz_open_pts(r1, 0x80)
dup3(r2, r1, 0x80000)
r3 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1})
io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newlink={0x4c, 0x10, 0x403, 0x58bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x20}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r11}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1.870733349s ago: executing program 3 (id=6856):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c00000010000305000041000000000000000000", @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x0)

1.699781319s ago: executing program 3 (id=6857):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000001200", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}})

1.62855127s ago: executing program 3 (id=6858):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
read$FUSE(r1, &(0x7f0000000640)={0x2020, 0x0, 0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000001c0)={0xc})
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000280)={0xc, 0x0, <r5=>0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x1efc1000)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x10000006, &(0x7f0000006680))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, <r6=>0x0})
ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f00000002c0)={0xc, <r7=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000300)={0x28, 0x1, r6, r7, <r8=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r6, r8, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)})
setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x0, r2}, {0x2, 0x1, r2}, {0x2, 0x4}, {0x2, 0x1, r2}], {0x4, 0x7}, [{0x8, 0x0, r3}, {0x8, 0x7, r3}], {0x10, 0x2}, {0x20, 0x1}}, 0x54, 0x2)
ioctl$IOMMU_GET_HW_INFO(r1, 0x3b8a, &(0x7f00000000c0)={0x28, 0x0, r6, 0x85, &(0x7f0000000000)=""/133})
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x1d0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @loopback, [0xffffffff, 0xffffff00, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 'wlan1\x00', 'sit0\x00', {}, {0xff}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8, 0x0, {0x87000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xff000000, 0x1ffffff01], 'sit0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x34}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x0, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)

1.447067818s ago: executing program 5 (id=6859):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a0500000000000000000007009a000000004c000000090a0104b7000000000000000700000a0900020073797a31000000000900010073077a3000000000080005400000001408000a4000000000080003400000030008000f4000000006480000000c0a01030000000000000000070000070900020073797a3100000009003253178a7a30000000001c0003801800008008000340000000020900090073797a30000000001400000094f2b942be5fc5884c53c3679b8e4ba5f4383808bc8000b452da36a6b445e9ebfce5fc027b6151500979109ea0ff34f4e5a305d4aac2e3f35db53cfa5dba561486352ced1b6eaea360c2ba245e04b8d90ce217daa900519af1589be4089744e07e15b1598d1ef2389e3906000000d493b50a8c0e344eed0376d010e62f010e1a991a5532fe1a695c198b60d003447e7c4029ad7500"/353], 0xdc}}, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x900, 0x12)
socket$kcm(0x2, 0x5, 0x84)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x8, [@func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0x7, 0x3}, {0x4, 0x3}, {0x2, 0x2}, {0x4}, {0x6, 0x1}, {0xf, 0x4}, {0x5, 0x5}, {0x5, 0x1}, {0x10, 0x2}, {0x8, 0x3}]}, @enum={0x7, 0x1, 0x0, 0x6, 0x4, [{}]}]}, {0x0, [0x0, 0x61, 0x5f, 0x0, 0x2e, 0x0]}}, &(0x7f0000000e40)=""/217, 0x90, 0xd9, 0x1, 0xe}, 0x28)
r2 = syz_open_dev$vcsu(&(0x7f0000000100), 0x400, 0x8142)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000d80)={'erspan0\x00', &(0x7f0000000c00)={'syztnl0\x00', <r3=>0x0, 0x80, 0x8, 0x800, 0x5, {{0x53, 0x4, 0x2, 0x8, 0x14c, 0x66, 0x0, 0xff, 0x2f, 0x0, @broadcast, @broadcast, {[@ssrr={0x89, 0x17, 0xf3, [@multicast1, @multicast2, @empty, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x44, 0xf1, 0x3, 0xe, [{@dev={0xac, 0x14, 0x14, 0x39}, 0xf}, {@multicast1, 0x3}, {@multicast1, 0x1}, {@loopback, 0x10000}, {@local, 0x8001}, {@multicast2, 0x3}, {@multicast1, 0x1}, {@remote, 0x104da3}]}, @rr={0x7, 0x7, 0x8d, [@private=0xa010102]}, @timestamp_prespec={0x44, 0x34, 0xb0, 0x3, 0x1, [{@rand_addr=0x64010101, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@rand_addr=0x64010101, 0x21}, {@rand_addr=0x64010101, 0x2c6e}, {@multicast1, 0x80000000}, {@private=0xa010102, 0x9}]}, @ssrr={0x89, 0x7, 0xd8, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @timestamp_prespec={0x44, 0xc, 0x86, 0x3, 0x4, [{@local, 0x8}]}, @timestamp={0x44, 0x2c, 0x31, 0x0, 0xc, [0x1, 0xff, 0x8, 0x8, 0x4, 0xfffffffb, 0xfffffffe, 0xcca, 0xfffff313, 0x68000]}, @timestamp_addr={0x44, 0xc, 0xeb, 0x1, 0x0, [{@multicast1, 0x3}]}, @timestamp_addr={0x44, 0x54, 0xaa, 0x1, 0x7, [{@multicast1, 0x2}, {@rand_addr=0x64010102, 0x9}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x7d}, {@local, 0x4}, {@multicast2, 0x3}, {@broadcast, 0x800}, {@remote, 0xec8b}, {@remote, 0x9}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}]}}}}})
bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@bloom_filter={0x1e, 0x2, 0x3, 0x80, 0x200, 0xffffffffffffffff, 0x5, '\x00', r3, r1, 0x4, 0x1, 0x1, 0x9}, 0x50)
r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
r5 = getpid()
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000140)={{0x200002, 0x2, 0x5, 0xfffffffe, 'syz0\x00', 0xf5}, 0x3, 0x40, 0x40, r5, 0x1, 0x2, 'syz1\x00', &(0x7f0000000640)=['syz0\x00\x9cB\xd1}\xb7\xe2\xde\xb0\xc0\xab\x18]\xe5\xa1\x1anK\xadL\xe0\x00\xfd\xbc\xf2\x89\x8f\xe5)\xa8\xdeuYD\x14\x84\x01\xd3e?\xde/\x80y]\xa6\xb4^\xa66_\xb2RR\r\xc2\xa6\xb2\xa23\x1e\x880$\x87\xcdb\xa1\xf1\x19\x00d\xf1}\"\x9f#\x9a\xd2T\xfc\x84\xce\x8cW[AQ\xc4R\xec\xef7o\x03\x90\x8c\x01O\x89\xb7\r\x90\xd1\xde\xa6`\xbe\x93\xe96\xeei8\x8b~b+\x02\xbfy\x96\xb3\xc2E{=8\b\b\xc5\v\xeac\x98\xd8\x95\xd3\x1f\x03\x00\x9d\x8f\xeb\x16 \xa0u\xad\xc2\xd4UH\x82\xbb\xe5\xd9\x19\xb7P\xfc\xf2\x02{\xba&\x0f/\xb2d\aC\xd0Q\x9e\xb2\x16\xea\xfe\x06\x92`\xdaV\xe3\xb0'], 0xbe})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680))
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0)
r10 = fsmount(r9, 0x0, 0xa)
fchdir(r10)
lseek(0xffffffffffffffff, 0x1ba2, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e2000000400060008000a00b5"], 0x48}}, 0x4000)
r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a0000000000", @ANYRES32=0x0, @ANYBLOB], 0x48)
r12 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r12, 0x0, 0xb, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r11, <r13=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000004c0)=r7}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x12, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB, @ANYRES8=r13], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0x232, 0x0, 0x90, [0x0, 0x200000000300, 0x200000000330, 0x200000000360], 0x0, 0x0, 0x0}, 0x14a)

1.151873617s ago: executing program 5 (id=6860):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@remote, @in6=@private1, 0x1, 0x794, 0x4e26, 0x0, 0x2, 0x0, 0x20, 0x3a, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x5, 0x6, 0xffff, 0x8251c, 0x2, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x0, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10)
syz_usb_connect(0x5, 0x46, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@rand_addr=0x64010100, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0xee00}, {@in6=@empty, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x6, 0x0, 0x200000000}, {0x0, 0x200000, 0x7}, {0x40000, 0x1900, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x40, 0x70}, [@coaddr={0x14, 0xe, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x104}}, 0x0)

1.029779306s ago: executing program 4 (id=6861):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000014006b02c84e21100af32c6e", 0x10}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000000c0)="4789d3aefc1a4d03345aed327be33c", 0xf}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)

939.946589ms ago: executing program 4 (id=6862):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00001de000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="b8af05d10000000000000f01d9660f78c4020a1bf7b805000000b90000c0fe0fae41d90100000020207f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b877000f00d0", 0x4a}], 0x1, 0x10, 0x0, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00'], 0x34}}, 0x20002000) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) (async)
syz_emit_ethernet(0x5e, &(0x7f0000000ec0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, '\x00', 0x28, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}}}}}}, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="667d0f38c573ababc76fb4360fc9bb25cc00007666f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x32}], 0x1, 0x51, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

863.332466ms ago: executing program 3 (id=6863):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='virt_wifi0\x00', 0x10)
syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000040000000bbfe8000000000000000000000000000aa4e200e22"], 0x0)

840.092236ms ago: executing program 4 (id=6864):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40114)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000280)=0x1800, 0x4)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x1600)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)

815.218632ms ago: executing program 3 (id=6865):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x200200)
ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xb9, 0xf])
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
write$6lowpan_control(r2, &(0x7f0000000380)='disconnect aa:aa:aa:aa:aa:11 1', 0x1e)
ioctl$TCXONC(r2, 0x540a, 0x3)
ioctl$TCXONC(r2, 0x540a, 0x1)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r3, 0x540a, 0x0)

527.8259ms ago: executing program 6 (id=6869):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000080)=ANY=[]}, 0x1, 0x0, 0x0, 0x91}, 0x3)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000200)="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", 0x2000, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r2, 0x89f0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x4d8, 0x2c8, 0x0, 0xffffffff, 0x228, 0x370, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "9401d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67948ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r3, &(0x7f00000030c0)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000600)="92", 0x1}], 0x1}}], 0x1, 0x20000800)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x32600)
shutdown(r3, 0x1)
r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002)
write$binfmt_aout(r6, &(0x7f0000000380)=ANY=[@ANYBLOB], 0xc8)
write$binfmt_aout(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8)
dup3(r6, r5, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
poll(&(0x7f0000000100), 0x0, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff)
getsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f00000000c0), &(0x7f0000002200)=0x4)

527.636529ms ago: executing program 5 (id=6870):
r0 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x86100)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}})
r2 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe, 0x14, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe0]}})
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="18109d000000a70095"], &(0x7f00000003c0)='syzkaller\x00'}, 0x94)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c000904020000010300000904020101010200000724"], 0x0)

406.458253ms ago: executing program 6 (id=6871):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x94}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}, 0x1, 0xf5ffffffffffffff}, 0x0)

352.604931ms ago: executing program 6 (id=6872):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x16, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0xff94}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x54}}, {}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x10000000}}}, &(0x7f0000000580)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)

276.030208ms ago: executing program 6 (id=6873):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58)
r1 = accept4$alg(r0, 0x0, 0x0, 0x80000)
io_setup(0x42, &(0x7f0000000100)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, 0x0, 0x0, 0xfffffdef, 0x0, 0x2}])

206.21351ms ago: executing program 6 (id=6874):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f00000009c0))
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000280)={'sit0\x00', 0x0})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="84010000100001000000000000000000fc00004000000000000000080000ff03000000000000000000000000ffb2f6e8ffecdf000000000a0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x184}}, 0x0)

166.847381ms ago: executing program 4 (id=6875):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0xc8, 0x8, 0xfa04, 0xc8, 0x6c02, 0x208, 0x194, 0x194, 0x208, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[0x0, 0x300], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300)

137.28125ms ago: executing program 3 (id=6876):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20402)
ioctl$int_in(r1, 0x5452, &(0x7f0000000200)=0x4)
write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37)
sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'veth0_vlan\x00', 0x100})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)

0s ago: executing program 6 (id=6877):
socket$qrtr(0x2a, 0x2, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd27, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x700, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x2c000010)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x404c830}, 0x0)

kernel console output (not intermixed with test programs):

 mode
[ 1032.278238][T26127] team0: entered promiscuous mode
[ 1032.283625][T24375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1032.292505][T26127] team0: entered allmulticast mode
[ 1032.298313][T24375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1032.307826][T26127] 8021q: adding VLAN 0 to HW filter on device team0
[ 1032.316615][T26127] bond3: (slave team0): Enslaving as an active interface with a down link
[ 1032.326900][T17866] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[ 1032.510183][T17866] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1032.536287][T17866] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[ 1032.583753][T17866] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1032.584334][T26133] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6425'.
[ 1032.600236][T17866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1032.644190][T17866] usb 2-1: Product: syz
[ 1032.654990][T17866] usb 2-1: Manufacturer: syz
[ 1032.673771][T17866] usb 2-1: SerialNumber: syz
[ 1032.826951][T17865] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[ 1032.897552][T17866] cdc_ether 2-1:1.0: Descriptor too short
[ 1032.915769][T17866] usb 2-1: USB disconnect, device number 72
[ 1032.996886][T17865] usb 6-1: Using ep0 maxpacket: 32
[ 1033.004430][T17865] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1033.016584][T17865] usb 6-1: config 14 has an invalid interface number: 57 but max is 1
[ 1033.025643][T17865] usb 6-1: config 14 has an invalid interface number: 228 but max is 1
[ 1033.034389][T17865] usb 6-1: config 14 has no interface number 0
[ 1033.041370][T17865] usb 6-1: config 14 has no interface number 1
[ 1033.049710][T17865] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 1033.061200][T17865] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 1033.073924][T17865] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[ 1033.086669][T17865] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[ 1033.106778][T17865] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[ 1033.118714][T17865] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1033.131906][T23580] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[ 1033.167930][T17865] usb 6-1: config 14 interface 57 has no altsetting 0
[ 1033.184874][T17865] usb 6-1: config 14 interface 228 has no altsetting 0
[ 1033.205112][T17865] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 1033.225888][T17865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1033.239314][T17865] usb 6-1: Product: syz
[ 1033.247819][T17865] usb 6-1: Manufacturer: syz
[ 1033.264721][T17865] usb 6-1: SerialNumber: syz
[ 1033.276913][T23580] usb 5-1: Using ep0 maxpacket: 32
[ 1033.285514][T23580] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1033.297158][T23580] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[ 1033.321561][T23580] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1033.341748][T26154] FAULT_INJECTION: forcing a failure.
[ 1033.341748][T26154] name failslab, interval 1, probability 0, space 0, times 0
[ 1033.349880][T23580] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 1033.356334][T26154] CPU: 0 UID: 0 PID: 26154 Comm: syz.3.6431 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1033.356362][T26154] Tainted: [L]=SOFTLOCKUP
[ 1033.356368][T26154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1033.356378][T26154] Call Trace:
[ 1033.356385][T26154]  <TASK>
[ 1033.356392][T26154]  dump_stack_lvl+0xe8/0x150
[ 1033.356417][T26154]  should_fail_ex+0x412/0x560
[ 1033.356439][T26154]  should_failslab+0xa8/0x100
[ 1033.356458][T26154]  __kvmalloc_node_noprof+0x178/0x8a0
[ 1033.356479][T26154]  ? rhashtable_init_noprof+0x52e/0xad0
[ 1033.356498][T26154]  ? rhashtable_init_noprof+0x12d/0xad0
[ 1033.356519][T26154]  rhashtable_init_noprof+0x52e/0xad0
[ 1033.356541][T26154]  rhltable_init_noprof+0x1e/0x60
[ 1033.356559][T26154]  mr_table_alloc+0xf1/0x300
[ 1033.356655][T26154]  ? __pfx_ip6mr_new_table_set+0x10/0x10
[ 1033.356701][T26154]  ? __pfx_ipmr_expire_process+0x10/0x10
[ 1033.356721][T26154]  ip6_mroute_setsockopt+0xc55/0xf90
[ 1033.356778][T26154]  ? __pfx_ip6_mroute_setsockopt+0x10/0x10
[ 1033.356826][T26154]  do_ipv6_setsockopt+0x37f/0x3150
[ 1033.356880][T26154]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[ 1033.356896][T26154]  ? kstrtouint+0x6e/0xe0
[ 1033.356918][T26154]  ? aa_label_sk_perm+0x532/0x6e0
[ 1033.356973][T26154]  ? get_pid_task+0x20/0x1f0
[ 1033.357000][T26154]  ? __pfx_aa_label_sk_perm+0x10/0x10
[ 1033.357019][T26154]  ? get_pid_task+0x20/0x1f0
[ 1033.357037][T26154]  ? get_pid_task+0x20/0x1f0
[ 1033.357061][T26154]  ? get_pid_task+0x20/0x1f0
[ 1033.357088][T26154]  ? __lock_acquire+0x6b5/0x2cf0
[ 1033.357121][T26154]  ? aa_sk_perm+0x6d5/0x900
[ 1033.357144][T26154]  ipv6_setsockopt+0x59/0x170
[ 1033.357164][T26154]  rawv6_setsockopt+0x276/0x5f0
[ 1033.357219][T26154]  ? __pfx_rawv6_setsockopt+0x10/0x10
[ 1033.357233][T26154]  ? aa_sock_opt_perm+0xff/0x1a0
[ 1033.357268][T26154]  ? sock_common_setsockopt+0x36/0xc0
[ 1033.357288][T26154]  ? __pfx_sock_common_setsockopt+0x10/0x10
[ 1033.357309][T26154]  do_sock_setsockopt+0x17c/0x1b0
[ 1033.357335][T26154]  __x64_sys_setsockopt+0x13d/0x1b0
[ 1033.357367][T26154]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1033.357384][T26154]  do_syscall_64+0x174/0x580
[ 1033.357401][T26154]  ? trace_irq_disable+0x3b/0x140
[ 1033.357422][T26154]  ? clear_bhb_loop+0x40/0x90
[ 1033.357441][T26154]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1033.357456][T26154] RIP: 0033:0x7f3074f9ce59
[ 1033.357473][T26154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1033.357487][T26154] RSP: 002b:00007f3075f1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1033.357504][T26154] RAX: ffffffffffffffda RBX: 00007f3075215fa0 RCX: 00007f3074f9ce59
[ 1033.357520][T26154] RDX: 00000000000000d1 RSI: 0000000000000029 RDI: 0000000000000003
[ 1033.357530][T26154] RBP: 00007f3075f1e090 R08: 0000000000000004 R09: 0000000000000000
[ 1033.357539][T26154] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001
[ 1033.357549][T26154] R13: 00007f3075216038 R14: 00007f3075215fa0 R15: 00007f307533fa48
[ 1033.357574][T26154]  </TASK>
[ 1033.684631][T23580] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1033.685592][T17865] legousbtower 6-1:14.57: interrupt endpoints not found
[ 1033.694099][T23580] usb 5-1: Product: syz
[ 1033.727891][T23580] usb 5-1: Manufacturer: syz
[ 1033.739571][T23580] usb 5-1: SerialNumber: syz
[ 1033.751536][T23580] usb 5-1: config 0 descriptor??
[ 1033.927609][T17866] usb 2-1: new full-speed USB device number 73 using dummy_hcd
[ 1033.967835][T23581] usb 40-1: device descriptor read/8, error -110
[ 1034.086554][T17865] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 0.0 build 0
[ 1034.111830][T17866] usb 2-1: config 0 has an invalid interface number: 205 but max is 0
[ 1034.128168][T17866] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1034.150569][T17865] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[ 1034.179086][T17866] usb 2-1: config 0 has no interface number 0
[ 1034.209271][T17866] usb 2-1: config 0 interface 205 has no altsetting 0
[ 1034.234325][T17866] usb 2-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a
[ 1034.259963][T23579] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[ 1034.260935][T17866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1034.295561][T17866] usb 2-1: Product: syz
[ 1034.307195][T17866] usb 2-1: Manufacturer: syz
[ 1034.322793][T17866] usb 2-1: SerialNumber: syz
[ 1034.333522][T26145] program syz.4.6428 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1034.347235][T17866] usb 2-1: config 0 descriptor??
[ 1034.359237][T17866] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state.
[ 1034.368537][T23581] usb usb40-port1: attempt power cycle
[ 1034.376419][T23580] gs_usb 5-1:0.0: Couldn't send data format (err=-71)
[ 1034.383016][T17866] dvb-usb: bulk message failed: -22 (3/0)
[ 1034.395310][T23580] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71
[ 1034.416272][T17866] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1034.431904][T23580] usb 5-1: USB disconnect, device number 109
[ 1034.437031][T17866] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device)
[ 1034.460361][T23579] usb 4-1: Using ep0 maxpacket: 8
[ 1034.467911][T17866] usb 2-1: media controller created
[ 1034.469845][T23579] usb 4-1: config 0 has an invalid interface number: 31 but max is 0
[ 1034.474993][T17866] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1034.506518][T23579] usb 4-1: config 0 has no interface number 0
[ 1034.541189][T23579] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 1034.551468][T23579] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1034.574879][T23579] usb 4-1: Product: syz
[ 1034.581469][T23579] usb 4-1: Manufacturer: syz
[ 1034.584613][T17866] dvb-usb: bulk message failed: -22 (6/0)
[ 1034.589507][T23579] usb 4-1: SerialNumber: syz
[ 1034.613549][T23579] usb 4-1: config 0 descriptor??
[ 1034.620995][T17866] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device'
[ 1034.652299][T17866] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input145
[ 1034.666901][T17866] dvb-usb: schedule remote query interval to 150 msecs.
[ 1034.691031][T17866] dvb-usb: bulk message failed: -22 (3/0)
[ 1034.717446][T17866] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected.
[ 1034.753745][T17866] usb 2-1: USB disconnect, device number 73
[ 1034.821316][T26168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1034.843469][T26168] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1034.846129][T17866] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected.
[ 1034.860905][T26168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1034.874304][T26168] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1034.887988][T26168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1034.899011][T26168] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1034.913143][T26168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1034.925944][T26168] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1034.938591][T26168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1034.954091][T23581] usb usb40-port1: unable to enumerate USB device
[ 1034.964984][T26168] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1034.989351][T23579] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[ 1034.998246][T23579] uvcvideo 4-1:0.31: Failed to initialize entity for entity 32774
[ 1035.032988][T23579] uvcvideo 4-1:0.31: Failed to register entities (-22).
[ 1035.095984][T23579] usb 4-1: USB disconnect, device number 87
[ 1035.341560][T26185] loop2: detected capacity change from 0 to 7
[ 1035.379053][T26185] Dev loop2: unable to read RDB block 7
[ 1035.386113][T26185]  loop2: AHDI p1 p2 p3
[ 1035.409864][T26185] loop2: partition table partially beyond EOD, truncated
[ 1035.412220][T26135] usb 6-1: LEGO USB Tower reset control request failed
[ 1035.421691][T26185] loop2: p1 start 1601398130 is beyond EOD, truncated
[ 1035.448012][T26185] loop2: p2 start 1702059890 is beyond EOD, truncated
[ 1035.459628][T17865] usb 6-1: USB disconnect, device number 57
[ 1035.521093][T17865] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected
[ 1035.525425][   T29] audit: type=1326 audit(1781247040.187:3358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26191 comm="syz.4.6443" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8e19ce59 code=0x7ffc0000
[ 1035.539160][T26190] FAULT_INJECTION: forcing a failure.
[ 1035.539160][T26190] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1035.572186][T26190] CPU: 0 UID: 0 PID: 26190 Comm: syz.3.6442 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1035.572212][T26190] Tainted: [L]=SOFTLOCKUP
[ 1035.572219][T26190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1035.572228][T26190] Call Trace:
[ 1035.572235][T26190]  <TASK>
[ 1035.572243][T26190]  dump_stack_lvl+0xe8/0x150
[ 1035.572266][T26190]  should_fail_ex+0x412/0x560
[ 1035.572286][T26190]  _copy_from_iter+0x1d3/0x1670
[ 1035.572306][T26190]  ? rcu_is_watching+0x15/0xb0
[ 1035.572330][T26190]  ? __pfx__copy_from_iter+0x10/0x10
[ 1035.572354][T26190]  ? netlink_sendmsg+0x650/0xb40
[ 1035.572370][T26190]  ? skb_put+0x11b/0x210
[ 1035.572395][T26190]  netlink_sendmsg+0x6c0/0xb40
[ 1035.572418][T26190]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1035.572437][T26190]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1035.572460][T26190]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1035.572484][T26190]  ____sys_sendmsg+0x972/0x9f0
[ 1035.572501][T26190]  ? __might_fault+0xaf/0x130
[ 1035.572527][T26190]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1035.572551][T26190]  ? import_iovec+0x73/0xa0
[ 1035.572573][T26190]  ___sys_sendmsg+0x2a5/0x360
[ 1035.572589][T26190]  ? __lock_acquire+0x6b5/0x2cf0
[ 1035.572609][T26190]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1035.572655][T26190]  ? __fget_files+0x2a/0x420
[ 1035.572672][T26190]  ? __fget_files+0x3a0/0x420
[ 1035.572699][T26190]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1035.572717][T26190]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1035.572742][T26190]  ? __pfx_ksys_write+0x10/0x10
[ 1035.572770][T26190]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1035.572794][T26190]  do_syscall_64+0x174/0x580
[ 1035.572811][T26190]  ? trace_irq_disable+0x3b/0x140
[ 1035.572833][T26190]  ? clear_bhb_loop+0x40/0x90
[ 1035.572851][T26190]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1035.572867][T26190] RIP: 0033:0x7f3074f9ce59
[ 1035.572883][T26190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1035.572896][T26190] RSP: 002b:00007f3075f1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1035.572913][T26190] RAX: ffffffffffffffda RBX: 00007f3075215fa0 RCX: 00007f3074f9ce59
[ 1035.572930][T26190] RDX: 0000000020000080 RSI: 00002000000003c0 RDI: 0000000000000004
[ 1035.572941][T26190] RBP: 00007f3075f1e090 R08: 0000000000000000 R09: 0000000000000000
[ 1035.572951][T26190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1035.572961][T26190] R13: 00007f3075216038 R14: 00007f3075215fa0 R15: 00007f307533fa48
[ 1035.572986][T26190]  </TASK>
[ 1035.573551][   T29] audit: type=1326 audit(1781247040.187:3359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26191 comm="syz.4.6443" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8e19ce59 code=0x7ffc0000
[ 1035.861919][   T29] audit: type=1326 audit(1781247040.187:3360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26191 comm="syz.4.6443" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f9a8e19ce59 code=0x7ffc0000
[ 1035.887933][   T29] audit: type=1326 audit(1781247040.217:3361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26191 comm="syz.4.6443" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8e19ce59 code=0x7ffc0000
[ 1035.919466][   T29] audit: type=1326 audit(1781247040.227:3362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26191 comm="syz.4.6443" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f9a8e19ce59 code=0x7ffc0000
[ 1035.944595][   T29] audit: type=1326 audit(1781247040.227:3363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26191 comm="syz.4.6443" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8e19ce59 code=0x7ffc0000
[ 1035.971307][   T29] audit: type=1326 audit(1781247040.227:3364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26191 comm="syz.4.6443" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9a8e15d68e code=0x7ffc0000
[ 1035.976846][T23579] usb 5-1: new high-speed USB device number 110 using dummy_hcd
[ 1035.997155][   T29] audit: type=1326 audit(1781247040.237:3365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26191 comm="syz.4.6443" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9a8e15d68e code=0x7ffc0000
[ 1036.061954][   T29] audit: type=1326 audit(1781247040.237:3366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26191 comm="syz.4.6443" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8e19ce59 code=0x7ffc0000
[ 1036.114144][T26196] binder: 26195:26196 ioctl c0306201 200000000480 returned -14
[ 1036.135997][   T29] audit: type=1326 audit(1781247040.237:3367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26191 comm="syz.4.6443" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f9a8e19ce59 code=0x7ffc0000
[ 1036.190497][T23579] usb 5-1: config 0 has an invalid interface number: 50 but max is 0
[ 1036.215604][T23579] usb 5-1: config 0 has no interface number 0
[ 1036.235921][T26198] IPv4: Oversized IP packet from 127.202.26.0
[ 1036.252834][T23579] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 211, changing to 11
[ 1036.290237][T23579] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 2047, setting to 1024
[ 1036.325501][T23579] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1036.335988][T23579] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1036.343092][T26204] kAFS: unable to lookup cell ''
[ 1036.366213][T23579] usb 5-1: Product: syz
[ 1036.374535][T23579] usb 5-1: Manufacturer: syz
[ 1036.386851][T23579] usb 5-1: SerialNumber: syz
[ 1036.402312][T23579] usb 5-1: config 0 descriptor??
[ 1036.412532][T26194] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1036.437524][T23579] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0
[ 1036.487450][T17866] usb 4-1: new full-speed USB device number 88 using dummy_hcd
[ 1036.690556][T17866] usb 4-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1036.704745][T17866] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1036.732747][T17866] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1036.756716][T17866] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1036.758936][T23579] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[ 1036.778955][T17866] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1036.794974][T26215] netlink: 'syz.1.6451': attribute type 9 has an invalid length.
[ 1036.814668][T17866] usb 4-1: Product: syz
[ 1036.822466][T17863] usb 5-1: USB disconnect, device number 110
[ 1036.824165][T26215] netlink: 'syz.1.6451': attribute type 7 has an invalid length.
[ 1036.842634][T17866] usb 4-1: Manufacturer: syz
[ 1036.857210][T17866] usb 4-1: SerialNumber: syz
[ 1036.865712][T17863] yurex 5-1:0.50: USB YUREX #0 now disconnected
[ 1036.880425][T17866] usb 4-1: config 0 descriptor??
[ 1036.907422][T17866] usb 4-1: selecting invalid altsetting 0
[ 1036.909055][T26215] netlink: 'syz.1.6451': attribute type 8 has an invalid length.
[ 1036.959296][T23579] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1036.977029][T23579] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1037.009137][T23579] usb 6-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40
[ 1037.031759][T23579] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1037.051975][T23579] usb 6-1: Product: syz
[ 1037.062335][T23579] usb 6-1: Manufacturer: syz
[ 1037.080000][T23579] usb 6-1: SerialNumber: syz
[ 1037.262875][T23580] usb 4-1: USB disconnect, device number 88
[ 1037.315386][T23579] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1037.366708][T23579] usb 6-1: USB disconnect, device number 58
[ 1037.672564][T26224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6454'.
[ 1037.761039][T26224] geneve3: entered promiscuous mode
[ 1037.776536][T26224] geneve3: entered allmulticast mode
[ 1037.972603][T26229] syzkaller0: entered promiscuous mode
[ 1037.978773][T26229] syzkaller0: entered allmulticast mode
[ 1038.071237][T26231] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.6457'.
[ 1038.426538][T26242] netlink: 'syz.1.6462': attribute type 1 has an invalid length.
[ 1038.498337][T26246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6462'.
[ 1038.501376][T26248] xt_hashlimit: size too large, truncated to 1048576
[ 1038.524397][T26246] bond1 (unregistering): Released all slaves
[ 1039.018854][T26265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6469'.
[ 1039.033209][T26265] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6469'.
[ 1039.043451][T26265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6469'.
[ 1039.052961][T26265] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6469'.
[ 1039.106859][T23580] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[ 1039.268933][T23580] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1039.296827][T23580] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1039.306631][T23580] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1039.334758][T23580] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1039.368826][T23580] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1039.397962][T23580] usb 2-1: config 0 descriptor??
[ 1039.415547][T26277] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6472'.
[ 1039.775628][T26288] FAULT_INJECTION: forcing a failure.
[ 1039.775628][T26288] name failslab, interval 1, probability 0, space 0, times 0
[ 1039.790934][T26288] CPU: 0 UID: 0 PID: 26288 Comm: syz.3.6478 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1039.790962][T26288] Tainted: [L]=SOFTLOCKUP
[ 1039.790968][T26288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1039.790977][T26288] Call Trace:
[ 1039.790984][T26288]  <TASK>
[ 1039.790992][T26288]  dump_stack_lvl+0xe8/0x150
[ 1039.791017][T26288]  should_fail_ex+0x412/0x560
[ 1039.791039][T26288]  should_failslab+0xa8/0x100
[ 1039.791056][T26288]  ? skb_clone+0x212/0x3a0
[ 1039.791073][T26288]  kmem_cache_alloc_noprof+0x87/0x650
[ 1039.791094][T26288]  ? __netlink_lookup+0xc6/0x8b0
[ 1039.791116][T26288]  skb_clone+0x212/0x3a0
[ 1039.791136][T26288]  __netlink_deliver_tap+0x404/0x850
[ 1039.791169][T26288]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1039.791193][T26288]  netlink_deliver_tap+0x19c/0x1b0
[ 1039.791216][T26288]  netlink_unicast+0x730/0x8e0
[ 1039.791245][T26288]  netlink_sendmsg+0x813/0xb40
[ 1039.791269][T26288]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1039.791288][T26288]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1039.791312][T26288]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1039.791334][T26288]  ____sys_sendmsg+0x972/0x9f0
[ 1039.791350][T26288]  ? __might_fault+0xaf/0x130
[ 1039.791375][T26288]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1039.791399][T26288]  ? import_iovec+0x73/0xa0
[ 1039.791421][T26288]  ___sys_sendmsg+0x2a5/0x360
[ 1039.791437][T26288]  ? __lock_acquire+0x6b5/0x2cf0
[ 1039.791457][T26288]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1039.791504][T26288]  ? __fget_files+0x2a/0x420
[ 1039.791522][T26288]  ? __fget_files+0x3a0/0x420
[ 1039.791548][T26288]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1039.791567][T26288]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1039.791592][T26288]  ? __pfx_ksys_write+0x10/0x10
[ 1039.791621][T26288]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1039.791639][T26288]  do_syscall_64+0x174/0x580
[ 1039.791656][T26288]  ? trace_irq_disable+0x3b/0x140
[ 1039.791677][T26288]  ? clear_bhb_loop+0x40/0x90
[ 1039.791695][T26288]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1039.791711][T26288] RIP: 0033:0x7f3074f9ce59
[ 1039.791727][T26288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1039.791740][T26288] RSP: 002b:00007f3075f1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1039.791758][T26288] RAX: ffffffffffffffda RBX: 00007f3075215fa0 RCX: 00007f3074f9ce59
[ 1039.791769][T26288] RDX: 0000000020000080 RSI: 00002000000003c0 RDI: 0000000000000004
[ 1039.791779][T26288] RBP: 00007f3075f1e090 R08: 0000000000000000 R09: 0000000000000000
[ 1039.791791][T26288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1039.791801][T26288] R13: 00007f3075216038 R14: 00007f3075215fa0 R15: 00007f307533fa48
[ 1039.791828][T26288]  </TASK>
[ 1040.075599][T23580] plantronics 0003:047F:FFFF.0035: reserved main item tag 0xd
[ 1040.107194][T23580] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0
[ 1040.126865][T23580] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0
[ 1040.136855][T23580] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0
[ 1040.157049][T23580] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0
[ 1040.170071][T23580] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0
[ 1040.204596][T23580] plantronics 0003:047F:FFFF.0035: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[ 1040.278886][T26292] syzkaller0: entered promiscuous mode
[ 1040.284442][T26292] syzkaller0: entered allmulticast mode
[ 1040.301687][T26292] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1040.311091][T26292] IPv6: NLM_F_CREATE should be set when creating new route
[ 1040.318415][T26292] IPv6: NLM_F_CREATE should be set when creating new route
[ 1040.370624][T23580] usb 2-1: USB disconnect, device number 74
[ 1040.577348][T17863] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[ 1040.671287][T26294] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1040.743902][T17863] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1040.758591][T17863] usb 4-1: config 2 has 1 interface, different from the descriptor's value: 3
[ 1040.774258][T17863] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95
[ 1040.785760][T17863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1040.794073][T17863] usb 4-1: Product: syz
[ 1040.798483][T17863] usb 4-1: Manufacturer: syz
[ 1040.805502][T17863] usb 4-1: SerialNumber: syz
[ 1040.865125][T26301] xt_SECMARK: invalid mode: 9
[ 1041.028195][T17863] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1041.074685][T17863] dvb_usb_af9015 4-1:2.0: probe with driver dvb_usb_af9015 failed with error -22
[ 1041.087134][T17863] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1041.096799][T17863] dvb_usb_af9035 4-1:2.0: probe with driver dvb_usb_af9035 failed with error -22
[ 1041.109264][T17863] usb 4-1: USB disconnect, device number 89
[ 1041.177609][T17866] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[ 1041.236915][T17865] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[ 1041.330774][T17866] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1041.346435][T17866] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[ 1041.366086][T17866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1041.371160][T26313] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1041.379792][T17866] usb 6-1: Product: syz
[ 1041.388838][T17866] usb 6-1: Manufacturer: syz
[ 1041.393835][T17866] usb 6-1: SerialNumber: syz
[ 1041.408088][T17865] usb 2-1: Using ep0 maxpacket: 8
[ 1041.422092][T17866] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[ 1041.443695][T17865] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1041.453402][T17865] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1041.464072][T17865] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x8E has an invalid bInterval 0, changing to 7
[ 1041.475867][T17865] usb 2-1: config 1 interface 0 has no altsetting 0
[ 1041.485339][T17865] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[ 1041.506817][T17865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1041.515279][T17865] usb 2-1: Product: syz
[ 1041.520269][T17865] usb 2-1: Manufacturer: syz
[ 1041.524962][T17865] usb 2-1: SerialNumber: syz
[ 1041.571798][T26317] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6)
[ 1041.579073][T26317] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1041.592225][T26317] vhci_hcd vhci_hcd.0: Device attached
[ 1041.753792][T26307] ip6tnl1: entered allmulticast mode
[ 1041.768295][T17864] vhci_hcd vhci_hcd.6: vhci_device speed not set
[ 1041.828109][T17864] usb 45-1: new full-speed USB device number 2 using vhci_hcd
[ 1041.840396][T17866] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1041.853148][T17865] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1041.867547][T17866] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[ 1041.879089][T17865] usb 2-1: USB disconnect, device number 75
[ 1041.886270][T17866] usb 6-1: media controller created
[ 1041.918224][T17866] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1041.922480][T16671] udevd[16671]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1042.067887][T26303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1042.077057][T26303] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1042.347929][T17866] usb 6-1: USB disconnect, device number 59
[ 1042.414597][   T29] kauditd_printk_skb: 88 callbacks suppressed
[ 1042.414613][   T29] audit: type=1326 audit(1781247047.077:3456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26329 comm="syz.1.6493" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff19d79ce59 code=0x0
[ 1042.456001][   T29] audit: type=1326 audit(1781247047.117:3457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26329 comm="syz.1.6493" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff19d79ce59 code=0x0
[ 1042.855523][T26345] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6497'.
[ 1042.987473][T17863] usb 4-1: new high-speed USB device number 90 using dummy_hcd
[ 1043.028404][T26349] netlink: 'syz.1.6499': attribute type 10 has an invalid length.
[ 1043.071630][T26349] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1043.091010][T26353] netlink: 'syz.1.6499': attribute type 17 has an invalid length.
[ 1043.103430][T26353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6499'.
[ 1043.114512][T26353] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6499'.
[ 1043.135686][T26349] team0: Port device bond0 added
[ 1043.171872][T17863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1043.200576][T17863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1043.211644][T26318] vhci_hcd: connection reset by peer
[ 1043.224411][T15634] vhci_hcd vhci_hcd.6: stop threads
[ 1043.229773][T17863] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1043.229823][T17863] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1043.281467][T17863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1043.300776][T15634] vhci_hcd vhci_hcd.6: release socket
[ 1043.302538][T17863] usb 4-1: config 0 descriptor??
[ 1043.325206][T15634] vhci_hcd vhci_hcd.6: disconnect device
[ 1043.735164][T17863] plantronics 0003:047F:FFFF.0036: reserved main item tag 0xd
[ 1043.748447][T17863] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0
[ 1043.759079][T17863] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0
[ 1043.768221][T17863] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0
[ 1043.775894][T17863] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0
[ 1043.784100][T17863] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0
[ 1043.797199][T17865] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[ 1043.819924][T17863] plantronics 0003:047F:FFFF.0036: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[ 1043.850313][T26367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1043.861516][T26367] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1043.906574][T26370] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6506'.
[ 1043.920457][T26370] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6506'.
[ 1043.958602][T17865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1043.967971][   T29] audit: type=1326 audit(1781247048.637:3458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26368 comm="syz.6.6506" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8da939ce59 code=0x0
[ 1043.973199][T17865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1044.003773][T17866] usb 5-1: new high-speed USB device number 111 using dummy_hcd
[ 1044.012280][T17865] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1044.026463][T17863] usb 4-1: USB disconnect, device number 90
[ 1044.042879][T17865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1044.061501][T17865] usb 2-1: config 0 descriptor??
[ 1044.097612][T17861] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[ 1044.179320][T17866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[ 1044.190101][T17866] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[ 1044.199961][T17866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[ 1044.222776][T17866] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[ 1044.237394][T17866] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[ 1044.246798][T17866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1044.254847][T17866] usb 5-1: Product: syz
[ 1044.260076][T17861] usb 6-1: Using ep0 maxpacket: 32
[ 1044.266020][T17866] usb 5-1: Manufacturer: syz
[ 1044.271399][T17866] usb 5-1: SerialNumber: syz
[ 1044.278027][T26360] netlink: 'syz.1.6502': attribute type 1 has an invalid length.
[ 1044.285996][T17861] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1044.296709][T17866] usb 5-1: config 0 descriptor??
[ 1044.303576][T17861] usb 6-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1044.320056][T17866] ums-isd200 5-1:0.0: USB Mass Storage device detected
[ 1044.329799][T17861] usb 6-1: config 1 interface 0 has no altsetting 0
[ 1044.344014][T17861] usb 6-1: language id specifier not provided by device, defaulting to English
[ 1044.357947][T26360] bond1: (slave geneve2): making interface the new active one
[ 1044.358682][T17861] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1044.375572][T17861] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1044.383884][T26360] bond1: (slave geneve2): Enslaving as an active interface with an up link
[ 1044.384448][T17861] usb 6-1: Product: syz
[ 1044.393124][  T542] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[ 1044.397426][T17861] usb 6-1: Manufacturer: ⱎ
[ 1044.410897][T17861] usb 6-1: SerialNumber: syz
[ 1044.414344][T26360] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6502'.
[ 1044.425285][  T542] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[ 1044.438658][  T542] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[ 1044.451305][T26360] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1044.459113][  T542] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[ 1044.596109][T26364] overlayfs: missing 'lowerdir'
[ 1044.626255][T26364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1044.639322][T26364] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1044.654391][T26364] program syz.4.6504 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1044.660982][T17861] usb 6-1: USB disconnect, device number 60
[ 1044.804989][T17866] scsi host1: usb-storage 5-1:0.0
[ 1044.838349][T17866] usb 5-1: USB disconnect, device number 111
[ 1044.882805][T17865] usb 2-1: string descriptor 0 read error: -22
[ 1045.027060][T23579] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[ 1045.095293][T17865] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0037/input/input148
[ 1045.185813][T23579] usb 4-1: config 0 has an invalid interface number: 50 but max is 0
[ 1045.197978][T23579] usb 4-1: config 0 has no interface number 0
[ 1045.205000][T17865] uclogic 0003:256C:006D.0037: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.1-1/input0
[ 1045.205238][T23579] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1045.252193][T23579] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1045.263691][T23579] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1045.272256][T23579] usb 4-1: Product: syz
[ 1045.277273][T23579] usb 4-1: Manufacturer: syz
[ 1045.282015][T23579] usb 4-1: SerialNumber: syz
[ 1045.312075][T23579] usb 4-1: config 0 descriptor??
[ 1045.323325][T17865] usb 2-1: USB disconnect, device number 76
[ 1045.332520][T23579] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0
[ 1045.407289][T17866] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[ 1045.505363][T26392] netlink: 45 bytes leftover after parsing attributes in process `syz.4.6512'.
[ 1045.520645][   T29] audit: type=1326 audit(1781247050.187:3459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26390 comm="syz.4.6512" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9a8e19ce59 code=0x0
[ 1045.576803][T17866] usb 6-1: Using ep0 maxpacket: 8
[ 1045.584094][T17866] usb 6-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 16
[ 1045.606976][T17866] usb 6-1: config 1 interface 0 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 16
[ 1045.617370][T17866] usb 6-1: config 1 interface 0 has no altsetting 0
[ 1045.626137][T17866] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1045.636701][T17866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1045.645024][T17866] usb 6-1: Product: 훌ຣ몇洄棿⩜倝Ṓ氃ꈡѦ魪둣둘꣕敍撌쓃⛺螰ࢷ堯찢ꪬ㸆♭疏鋇⍿㤮⛳臐嚕煖㨹ⷹ惫ᄷ厦哲จ瓵썃䏢螒䮨窃ٌ芷屐ᑽﮆ㗕鱿㎬⮧⢛쐪䎕嚿づ︫槄싪尅碡㟲횝맜똷凁殦᲎蓴쩒Α떁巤贯販颼쌲헑춧콌筘宕쟡
[ 1045.645055][T17866] usb 6-1: Manufacturer: 봗㯤ʬ律쎸驂⅌些ᰓ䝡鮴銼䊀땂㌨⻠㠌㭁瀸袲펈뾱璇鬱莥쩆５䏌฻덋ૂ샗鐫镎捰᪻⮡꘤ꑳ㝊㼐⊡韚柪Ᏹ﹗掉꛳阜㍄洬䈡刭ֿ싿쬇⤏衦譐賍퉋쎇ᤇ⊣ﱕ⓯▨밥鹖槑콢ᢐ덮龨괸㲫獻嗧
[ 1045.645080][T17866] usb 6-1: SerialNumber: ఁ
[ 1045.676360][T26396] Cannot find add_set index 4 as target
[ 1045.708362][T26388] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[ 1045.725513][T26388] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[ 1045.964292][T26388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1045.976442][T26388] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1045.988914][T26388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1045.998069][T26388] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1046.013960][T26388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1046.023133][T26388] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1046.036093][T17866] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71
[ 1046.050224][T17866] usb 6-1: USB disconnect, device number 61
[ 1046.176077][T26404] xt_SECMARK: invalid mode: 9
[ 1046.226558][T26406] netlink: 'syz.1.6516': attribute type 1 has an invalid length.
[ 1046.266229][T26406] bond2: (slave bridge1): making interface the new active one
[ 1046.275446][T26406] bond2: (slave bridge1): Enslaving as an active interface with an up link
[ 1046.303197][ T5637] Bluetooth: hci2: command 0x0406 tx timeout
[ 1046.325086][T26408] team0: entered promiscuous mode
[ 1046.340944][T26408] team_slave_0: entered promiscuous mode
[ 1046.356061][T26408] team_slave_1: entered promiscuous mode
[ 1046.364336][T26408] bond0: entered promiscuous mode
[ 1046.371307][T26408] bond_slave_1: entered promiscuous mode
[ 1046.378242][T26408] team0: entered allmulticast mode
[ 1046.384135][T26408] team_slave_0: entered allmulticast mode
[ 1046.391095][T26408] team_slave_1: entered allmulticast mode
[ 1046.397961][T26408] bond0: entered allmulticast mode
[ 1046.403144][T26408] bond_slave_1: entered allmulticast mode
[ 1046.414421][T26408] 8021q: adding VLAN 0 to HW filter on device team0
[ 1046.423949][T26408] bond2: (slave team0): Enslaving as an active interface with an up link
[ 1046.494051][T26414] IPv4: Oversized IP packet from 127.202.26.0
[ 1046.707167][T23579] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[ 1046.871471][T23579] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1046.895160][T23579] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1046.915855][T23579] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1046.931428][T23579] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1046.941617][T23579] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1046.963742][T23579] usb 5-1: config 0 descriptor??
[ 1047.008454][T17864] vhci_hcd vhci_hcd.6: vhci_device speed not set
[ 1047.387865][T23579] plantronics 0003:047F:FFFF.0038: reserved main item tag 0xd
[ 1047.396116][T23579] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0
[ 1047.404150][T23580] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[ 1047.413627][T23579] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0
[ 1047.424238][T23579] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0
[ 1047.436531][T23579] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0
[ 1047.445279][T23579] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0
[ 1047.473240][T23579] plantronics 0003:047F:FFFF.0038: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[ 1047.581843][T23580] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1047.593836][T23580] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1047.599537][T17861] usb 5-1: USB disconnect, device number 112
[ 1047.607988][T23580] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1047.622431][T23580] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1047.680320][T23580] usb 6-1: config 0 descriptor??
[ 1047.793556][T17865] usb 4-1: USB disconnect, device number 91
[ 1047.835709][T17865] yurex 4-1:0.50: USB YUREX #0 now disconnected
[ 1048.059134][T26445] netlink: 76 bytes leftover after parsing attributes in process `syz.6.6531'.
[ 1048.769912][T23579] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[ 1048.926983][T23579] usb 2-1: Using ep0 maxpacket: 8
[ 1048.942847][T23579] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 122, changing to 7
[ 1048.963185][T23579] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1048.991292][T23579] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1049.011162][T23579] usb 2-1: Product: Ⰺ
[ 1049.021552][T23579] usb 2-1: SerialNumber: 쌎ꎴꔶ⬘ᴅ᙮錁෷뛳ࢼᇔ뽴찚ᵅ玚ዕὝ⵻੝듳ꝴỵ徣겫播ꡪཇ,窏಻솕⼠⃳邡嬴☏䗶∐Ӈ謹᱃妝콲䎒脣卞Ꮆ耶㥒㤨氣鏘곃Უ闱っᢱ뼧寈ﾦ鳍ﺥ껣叺磧䴰ਲ퇢Ꙓ吶㊐㢑ǿⶤ῾菖惀达༩캪㨬嫒ｹ鐭삗ⶡ羀໡䬶퀕蘟ヹݸኾ䬔袠ց氫鮌凘ӗ歐랍⬺氷
[ 1049.344138][T26459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1049.353845][T26459] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1049.371471][T26459] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1049.468383][T26471] netlink: 'syz.4.6538': attribute type 29 has an invalid length.
[ 1049.490079][T26459] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1049.520366][T26471] netlink: 'syz.4.6538': attribute type 29 has an invalid length.
[ 1049.533036][T23579] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1049.550500][T23579] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 1049.578179][T26471] netlink: 'syz.4.6538': attribute type 32 has an invalid length.
[ 1049.584524][T26475] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1049.622465][T26471] netlink: 500 bytes leftover after parsing attributes in process `syz.4.6538'.
[ 1049.841265][T23579] usb 2-1: USB disconnect, device number 77
[ 1049.874540][T16622] udevd[16622]: setting owner of /dev/bus/usb/002/077 to uid=0, gid=0 failed: No such file or directory
[ 1049.988770][T16622] udevd[16622]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1050.207040][T23580] usbhid 6-1:0.0: can't add hid device: -71
[ 1050.213094][T23580] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1050.251082][T23580] usb 6-1: USB disconnect, device number 62
[ 1050.368078][T23573] tipc: Node number set to 1755275024
[ 1050.476814][T26493] netlink: 'syz.6.6545': attribute type 21 has an invalid length.
[ 1050.507045][T26493] netlink: 'syz.6.6545': attribute type 6 has an invalid length.
[ 1050.532453][T26496] netlink: 'syz.6.6545': attribute type 10 has an invalid length.
[ 1050.546882][T26493] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6545'.
[ 1050.696904][T23573] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[ 1050.877582][T23573] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1050.901252][T23573] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1050.924279][T23573] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1050.957057][T23573] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1050.995982][T23573] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1051.009878][T23573] usb 2-1: config 0 descriptor??
[ 1051.497046][T23573] usbhid 2-1:0.0: can't add hid device: -71
[ 1051.503175][T23573] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1051.535159][T23573] usb 2-1: USB disconnect, device number 78
[ 1051.770330][   T29] audit: type=1800 audit(1781247056.437:3460): pid=26499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.6547" name="bus" dev="ramfs" ino=153839 res=0 errno=0
[ 1052.076876][T23580] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[ 1052.226828][T23580] usb 6-1: Using ep0 maxpacket: 8
[ 1052.235730][T23580] usb 6-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[ 1052.245182][T23580] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1052.278409][T23580] usb 6-1: Product: syz
[ 1052.294977][T23580] usb 6-1: Manufacturer: syz
[ 1052.311447][T23580] usb 6-1: SerialNumber: syz
[ 1052.333976][T23580] usb 6-1: config 0 descriptor??
[ 1052.355787][T23580] radio-usb-si4713 6-1:0.0: Si4713 development board discovered: (10C4:8244)
[ 1052.453702][T26525] netlink: 'syz.1.6556': attribute type 12 has an invalid length.
[ 1052.565756][T26528] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6558'.
[ 1052.624531][   T29] audit: type=1800 audit(1781247057.287:3461): pid=26514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6553" name="bus" dev="ramfs" ino=153946 res=0 errno=0
[ 1052.856880][T17861] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[ 1052.983082][T26443] Set syz1 is full, maxelem 65536 reached
[ 1053.018759][T17861] usb 2-1: Using ep0 maxpacket: 16
[ 1053.049154][T17861] usb 2-1: config 0 has an invalid interface number: 216 but max is 0
[ 1053.079068][T17861] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1053.112001][T17861] usb 2-1: config 0 has no interface number 0
[ 1053.126872][T17861] usb 2-1: config 0 interface 216 altsetting 0 endpoint 0xA has invalid maxpacket 4098, setting to 1024
[ 1053.156888][T17861] usb 2-1: config 0 interface 216 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024
[ 1053.181782][T17861] usb 2-1: config 0 interface 216 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1053.220771][T17861] usb 2-1: New USB device found, idVendor=c877, idProduct=d477, bcdDevice=ca.74
[ 1053.238143][T17861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1053.257903][T17861] usb 2-1: Product: syz
[ 1053.267598][T17861] usb 2-1: Manufacturer: syz
[ 1053.278404][T17861] usb 2-1: SerialNumber: syz
[ 1053.294282][T17861] usb 2-1: config 0 descriptor??
[ 1053.308115][T26529] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1053.340591][T17861] usb-storage 2-1:0.216: USB Mass Storage device detected
[ 1053.739757][T26547] xt_hashlimit: size too large, truncated to 1048576
[ 1053.972764][T26543] bridge2: entered promiscuous mode
[ 1053.981740][T23580] radio-usb-si4713 6-1:0.0: probe with driver radio-usb-si4713 failed with error -32
[ 1054.013345][T26543] bridge2: entered allmulticast mode
[ 1054.020415][T23580] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 1054.448969][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.455753][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.868228][T23573] usb 6-1: USB disconnect, device number 63
[ 1054.992156][T26565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6569'.
[ 1055.306947][T23573] usb 5-1: new high-speed USB device number 113 using dummy_hcd
[ 1055.456992][T23573] usb 5-1: Using ep0 maxpacket: 32
[ 1055.464111][T23573] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7
[ 1055.481407][T23573] usb 5-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40
[ 1055.491225][T23573] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1055.499389][T23573] usb 5-1: Product: syz
[ 1055.505038][T23573] usb 5-1: Manufacturer: syz
[ 1055.509926][T23573] usb 5-1: SerialNumber: syz
[ 1055.524584][T23573] usb 5-1: Audio class v2/v3 interfaces need an interface association
[ 1055.585482][T23573] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1055.884878][T26577] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6575'.
[ 1055.900243][T26577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6575'.
[ 1055.929678][T23573] usb 5-1: us122l: couldn't allocate write buffer
[ 1055.939117][T26577] batadv1: entered promiscuous mode
[ 1055.954869][T23573] snd-usb-us122l 5-1:1.1: probe with driver snd-usb-us122l failed with error -22
[ 1055.965542][T26577] batadv1: entered allmulticast mode
[ 1055.995731][T23573] usb 5-1: USB disconnect, device number 113
[ 1056.003258][T26577] 8021q: adding VLAN 0 to HW filter on device batadv1
[ 1056.027042][T17861] usb 2-1: USB disconnect, device number 79
[ 1056.076059][T16622] udevd[16622]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1056.171440][T26582] vlan2: entered promiscuous mode
[ 1056.176616][T26582] syz_tun: entered promiscuous mode
[ 1056.267153][T23581] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[ 1056.306871][T23580] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[ 1056.426888][T23581] usb 6-1: Using ep0 maxpacket: 32
[ 1056.434249][T23581] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1056.443187][T23581] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1056.452176][T23581] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1056.461266][T23581] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1056.471109][T23580] usb 4-1: Using ep0 maxpacket: 32
[ 1056.476450][T23581] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1056.486895][T23581] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1056.500556][T23581] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1056.509992][T23581] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1056.519503][T23580] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1056.529520][T23580] usb 4-1: config 1 has an invalid interface number: 72 but max is 0
[ 1056.538346][T23580] usb 4-1: config 1 has no interface number 0
[ 1056.545690][T23581] usb 6-1: config 0 descriptor??
[ 1056.565061][T23580] usb 4-1: config 1 interface 72 has no altsetting 0
[ 1056.578324][T17861] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[ 1056.599549][T23580] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=fd.5d
[ 1056.609166][T23580] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1056.618529][T23580] usb 4-1: Product: syz
[ 1056.623089][T23580] usb 4-1: Manufacturer: syz
[ 1056.628915][T23580] usb 4-1: SerialNumber: syz
[ 1056.663104][T26588] ip6tnl0: Caught tx_queue_len zero misconfig
[ 1056.747557][T17861] usb 2-1: too many configurations: 53, using maximum allowed: 8
[ 1056.766040][T17861] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1056.781172][T26580] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[25858] was attempted by " ��      ��      �      ��      ��      ��      ��             
     �l@    
\x09$rQ    \x09  \x07
 \x09
     \x09� "[26580]
[ 1056.803505][T17861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1056.812641][T17861] usb 2-1: Product: syz
[ 1056.817132][T17861] usb 2-1: Manufacturer: syz
[ 1056.822118][T17861] usb 2-1: SerialNumber: syz
[ 1056.865500][T26580] netlink: 'syz.5.6576': attribute type 4 has an invalid length.
[ 1056.887730][T26580] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6576'.
[ 1056.913401][T23581] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 64 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1056.935146][T23580] keyspan 4-1:1.72: Keyspan 1 port adapter converter detected
[ 1056.952837][T23580] keyspan 4-1:1.72: found no endpoint descriptor for endpoint 82
[ 1056.962765][T23581] usb 6-1: USB disconnect, device number 64
[ 1056.972394][T23580] keyspan 4-1:1.72: found no endpoint descriptor for endpoint 81
[ 1056.981907][T23580] keyspan 4-1:1.72: found no endpoint descriptor for endpoint 1
[ 1056.991336][T23581] usblp0: removed
[ 1056.998875][T23580] keyspan 4-1:1.72: found no endpoint descriptor for endpoint 2
[ 1057.016117][T23580] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[ 1057.031613][T23580] usb 4-1: USB disconnect, device number 92
[ 1057.062648][T23580] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[ 1057.072925][T17861] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[ 1057.080082][T23580] keyspan 4-1:1.72: device disconnected
[ 1057.087813][T17861] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[ 1057.107053][T17861] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1057.121958][T17861] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[ 1057.144843][T17861] usb 2-1: USB disconnect, device number 80
[ 1057.263704][T26596] netlink: 'syz.6.6582': attribute type 10 has an invalid length.
[ 1057.327164][T17669] Bluetooth: hci4: unexpected event for opcode 0x0c05
[ 1057.521766][T26600] loop2: detected capacity change from 0 to 7
[ 1057.532803][T26600] Dev loop2: unable to read RDB block 7
[ 1057.539371][T26600]  loop2: AHDI p1 p2 p3
[ 1057.543657][T26600] loop2: partition table partially beyond EOD, truncated
[ 1057.567378][T26600] loop2: p1 start 1601398130 is beyond EOD, truncated
[ 1057.586908][T26600] loop2: p2 start 1702059890 is beyond EOD, truncated
[ 1057.845360][T26606] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6585'.
[ 1057.856025][T26608] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6585'.
[ 1057.911044][T26612] netlink: 'syz.6.6588': attribute type 1 has an invalid length.
[ 1057.994255][T26612] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6588'.
[ 1058.011669][T26615] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6589'.
[ 1058.024423][T26612] bond6 (unregistering): Released all slaves
[ 1058.076877][T23580] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[ 1058.229022][T23580] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1058.249962][T23580] usb 2-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40
[ 1058.261656][T23580] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1058.276917][T23580] usb 2-1: Product: syz
[ 1058.288817][T23580] usb 2-1: Manufacturer: syz
[ 1058.293483][T23580] usb 2-1: SerialNumber: syz
[ 1058.315018][T23580] usb 2-1: Audio class v2/v3 interfaces need an interface association
[ 1058.347022][T23581] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[ 1058.375125][T23580] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1058.510583][T23581] usb 6-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00
[ 1058.529397][T23581] usb 6-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[ 1058.538063][T26607] input: syz0 as /devices/virtual/input/input150
[ 1058.556652][T23581] usb 6-1: Product: syz
[ 1058.575640][T23581] usb 6-1: config 0 descriptor??
[ 1058.595377][T23581] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[ 1058.615556][T23581] usb 6-1: Detected FT232H
[ 1058.660793][T23580] usb 2-1: can't set first interface for hiFace device.
[ 1058.678222][T23580] snd-usb-hiface 2-1:1.0: probe with driver snd-usb-hiface failed with error -5
[ 1058.690469][T23580] usb 2-1: can't set first interface for hiFace device.
[ 1058.697582][T23580] snd-usb-hiface 2-1:1.1: probe with driver snd-usb-hiface failed with error -5
[ 1058.712789][T23580] usb 2-1: can't set first interface for hiFace device.
[ 1058.720123][T23580] snd-usb-hiface 2-1:1.2: probe with driver snd-usb-hiface failed with error -5
[ 1058.735631][T23580] usb 2-1: USB disconnect, device number 81
[ 1058.760579][T16622] udevd[16622]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1058.803823][T26617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1058.813872][T26617] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1058.826549][T26617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1058.835697][T26617] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1058.846710][T23581] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[ 1059.313270][T26629] netlink: 'syz.1.6594': attribute type 1 has an invalid length.
[ 1059.382652][T26631] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6594'.
[ 1059.426884][T26633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6595'.
[ 1059.450595][T26633] bridge_slave_1: left allmulticast mode
[ 1059.457737][T26633] bridge_slave_1: left promiscuous mode
[ 1059.463907][T26633] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1059.474968][T26633] bridge_slave_0: left allmulticast mode
[ 1059.485275][T26633] bridge_slave_0: left promiscuous mode
[ 1059.497139][T26633] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1059.552024][T23581] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71
[ 1059.564685][T23581] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1059.573947][T26635] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1059.594122][T23581] usb 6-1: USB disconnect, device number 65
[ 1059.610589][T26629] bond3 (unregistering): Released all slaves
[ 1059.618405][T23581] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1059.631365][T23581] ftdi_sio 6-1:0.0: device disconnected
[ 1060.076952][T17864] usb 5-1: new high-speed USB device number 114 using dummy_hcd
[ 1060.259414][T17864] usb 5-1: config 1 has an invalid interface number: 7 but max is 0
[ 1060.280625][T17864] usb 5-1: config 1 has no interface number 0
[ 1060.296181][T17864] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[ 1060.327952][T17864] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[ 1060.350062][T17864] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1060.379646][T17864] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[ 1060.391124][T17864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1060.405839][T17864] usb 5-1: Product: syz
[ 1060.413211][T17864] usb 5-1: Manufacturer: syz
[ 1060.421499][T17864] usb 5-1: SerialNumber: syz
[ 1060.434963][T26642] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1060.559551][T26648] macsec1: entered allmulticast mode
[ 1060.564996][T26648] veth1_macvtap: entered allmulticast mode
[ 1060.658984][T26642] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1060.899354][T17864] sierra_net 5-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:02:07
[ 1060.924467][T26661] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1061.085261][T26668] tipc: Started in network mode
[ 1061.091359][T26668] tipc: Node identity 2a6ea88c84fd, cluster identity 4711
[ 1061.099122][T26668] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1061.111535][T26668] syzkaller0: entered promiscuous mode
[ 1061.118063][T26668] syzkaller0: entered allmulticast mode
[ 1061.169388][T26668] tipc: Resetting bearer <eth:syzkaller0>
[ 1061.180234][T26667] tipc: Resetting bearer <eth:syzkaller0>
[ 1061.230891][T26667] tipc: Disabling bearer <eth:syzkaller0>
[ 1061.416145][   T29] audit: type=1326 audit(1781247066.077:3462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26676 comm="syz.5.6608" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6de39ce59 code=0x7ffc0000
[ 1061.449121][   T29] audit: type=1326 audit(1781247066.077:3463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26676 comm="syz.5.6608" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6de39ce59 code=0x7ffc0000
[ 1061.475769][   T29] audit: type=1326 audit(1781247066.077:3464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26676 comm="syz.5.6608" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6de39ce59 code=0x7ffc0000
[ 1061.504363][   T29] audit: type=1326 audit(1781247066.077:3465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26676 comm="syz.5.6608" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa6de39ce59 code=0x7ffc0000
[ 1061.537213][   T29] audit: type=1326 audit(1781247066.137:3466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26676 comm="syz.5.6608" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6de39ce59 code=0x7ffc0000
[ 1061.564669][   T29] audit: type=1326 audit(1781247066.137:3467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26676 comm="syz.5.6608" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6de39ce59 code=0x7ffc0000
[ 1061.591241][   T29] audit: type=1326 audit(1781247066.137:3468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26676 comm="syz.5.6608" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa6de39ce59 code=0x7ffc0000
[ 1061.627745][   T29] audit: type=1326 audit(1781247066.137:3469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26676 comm="syz.5.6608" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6de39ce59 code=0x7ffc0000
[ 1061.703727][T17864] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71
[ 1061.719127][T17864] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71
[ 1061.728296][   T29] audit: type=1326 audit(1781247066.137:3470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26676 comm="syz.5.6608" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6de39ce59 code=0x7ffc0000
[ 1061.757470][T17864] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71
[ 1061.769712][T17864] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71
[ 1061.808749][T17864] usb 5-1: USB disconnect, device number 114
[ 1061.824778][   T29] audit: type=1326 audit(1781247066.137:3471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26676 comm="syz.5.6608" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6de39ce59 code=0x7ffc0000
[ 1061.861665][T17864] sierra_net 5-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem
[ 1061.935339][T26684] netlink: 'syz.6.6611': attribute type 1 has an invalid length.
[ 1061.956661][T26682] input: syz0 as /devices/virtual/input/input151
[ 1062.017629][T17864] sierra_net 5-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19
[ 1062.030352][T26687] __nla_validate_parse: 1 callbacks suppressed
[ 1062.030368][T26687] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6611'.
[ 1062.120581][T26689] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6611'.
[ 1062.254685][T26688] batman_adv: batadv0: Adding interface: dummy0
[ 1062.269553][T26688] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1062.353059][T26688] batman_adv: batadv0: Interface activated: dummy0
[ 1062.395440][T26689] bond6 (unregistering): Released all slaves
[ 1062.739323][T26703] loop2: detected capacity change from 0 to 7
[ 1062.758528][T26700] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.6616'.
[ 1062.781862][T26703] Dev loop2: unable to read RDB block 7
[ 1062.812990][T26703]  loop2: AHDI p1 p2 p3
[ 1062.829300][T26703] loop2: partition table partially beyond EOD, truncated
[ 1062.850481][T26703] loop2: p1 start 1601398130 is beyond EOD, truncated
[ 1062.873469][T26703] loop2: p2 start 1702059890 is beyond EOD, truncated
[ 1063.039924][T23581] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[ 1063.081330][T26708] xt_hashlimit: size too large, truncated to 1048576
[ 1063.166182][T26711] FAULT_INJECTION: forcing a failure.
[ 1063.166182][T26711] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1063.192945][T26711] CPU: 1 UID: 0 PID: 26711 Comm: syz.4.6620 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1063.192977][T26711] Tainted: [L]=SOFTLOCKUP
[ 1063.192983][T26711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1063.192993][T26711] Call Trace:
[ 1063.193007][T26711]  <TASK>
[ 1063.193016][T26711]  dump_stack_lvl+0xe8/0x150
[ 1063.193040][T26711]  should_fail_ex+0x412/0x560
[ 1063.193064][T26711]  _copy_from_iter+0x1d3/0x1670
[ 1063.193092][T26711]  ? __pfx__copy_from_iter+0x10/0x10
[ 1063.193107][T26711]  ? sock_alloc_send_pskb+0x896/0x990
[ 1063.193131][T26711]  ? __pfx__copy_from_iter+0x10/0x10
[ 1063.193155][T26711]  copy_page_from_iter+0x220/0x2d0
[ 1063.193176][T26711]  skb_copy_datagram_from_iter+0x306/0x710
[ 1063.193204][T26711]  packet_sendmsg+0x35b1/0x4fb0
[ 1063.193249][T26711]  ? unwind_next_frame+0xa6/0x2550
[ 1063.193286][T26711]  ? __pfx_packet_sendmsg+0x10/0x10
[ 1063.193305][T26711]  ? aa_sk_perm+0x6d5/0x900
[ 1063.193332][T26711]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1063.193351][T26711]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 1063.193380][T26711]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1063.193403][T26711]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1063.193427][T26711]  ____sys_sendmsg+0x972/0x9f0
[ 1063.193451][T26711]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1063.193475][T26711]  ? import_iovec+0x73/0xa0
[ 1063.193497][T26711]  ___sys_sendmsg+0x2a5/0x360
[ 1063.193512][T26711]  ? __lock_acquire+0x6b5/0x2cf0
[ 1063.193533][T26711]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1063.193580][T26711]  ? __fget_files+0x2a/0x420
[ 1063.193598][T26711]  ? __fget_files+0x3a0/0x420
[ 1063.193625][T26711]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1063.193644][T26711]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1063.193668][T26711]  ? __pfx_ksys_write+0x10/0x10
[ 1063.193696][T26711]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1063.193714][T26711]  do_syscall_64+0x174/0x580
[ 1063.193732][T26711]  ? trace_irq_disable+0x3b/0x140
[ 1063.193752][T26711]  ? clear_bhb_loop+0x40/0x90
[ 1063.193771][T26711]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1063.193787][T26711] RIP: 0033:0x7f9a8e19ce59
[ 1063.193804][T26711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1063.193818][T26711] RSP: 002b:00007f9a8efed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1063.193836][T26711] RAX: ffffffffffffffda RBX: 00007f9a8e415fa0 RCX: 00007f9a8e19ce59
[ 1063.193848][T26711] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005
[ 1063.193857][T26711] RBP: 00007f9a8efed090 R08: 0000000000000000 R09: 0000000000000000
[ 1063.193867][T26711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1063.193876][T26711] R13: 00007f9a8e416038 R14: 00007f9a8e415fa0 R15: 00007f9a8e53fa48
[ 1063.193902][T26711]  </TASK>
[ 1063.895030][T23581] usb 2-1: Using ep0 maxpacket: 16
[ 1063.909442][T23581] usb 2-1: config 0 has an invalid interface number: 35 but max is 0
[ 1063.909469][T23581] usb 2-1: config 0 has no interface number 0
[ 1063.909507][T23581] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7
[ 1063.909531][T23581] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid maxpacket 1025, setting to 1024
[ 1063.912367][T23581] usb 2-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c
[ 1063.912394][T23581] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1063.912410][T23581] usb 2-1: Product: syz
[ 1063.912422][T23581] usb 2-1: Manufacturer: syz
[ 1063.912436][T23581] usb 2-1: SerialNumber: syz
[ 1063.915114][T23581] usb 2-1: config 0 descriptor??
[ 1063.915961][T26700] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1063.917713][T23581] cypress_m8 2-1:0.35: Nokia CA-42 V2 Adapter converter detected
[ 1064.161757][T26700] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1064.165520][T26723] netlink: 'syz.3.6622': attribute type 4 has an invalid length.
[ 1064.172684][T23581] usb 2-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0
[ 1064.184280][T23581] usb 2-1: USB disconnect, device number 82
[ 1064.201252][T23581] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0
[ 1064.201594][T23581] cypress_m8 2-1:0.35: device disconnected
[ 1064.283767][T26726] input: syz1 as /devices/virtual/input/input152
[ 1064.520263][T26729] netlink: 'syz.5.6625': attribute type 1 has an invalid length.
[ 1064.642470][T26729] bond1: (slave bridge1): making interface the new active one
[ 1064.666703][T26729] bond1: (slave bridge1): Enslaving as an active interface with an up link
[ 1064.696971][T26732] team0: entered promiscuous mode
[ 1064.702246][T26732] team_slave_0: entered promiscuous mode
[ 1064.719018][T26732] team_slave_1: entered promiscuous mode
[ 1064.733156][T26732] team0: entered allmulticast mode
[ 1064.759413][T26732] team_slave_0: entered allmulticast mode
[ 1064.775634][T26732] team_slave_1: entered allmulticast mode
[ 1064.787303][T17865] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[ 1064.846051][T26732] 8021q: adding VLAN 0 to HW filter on device team0
[ 1064.865575][T26732] bond1: (slave team0): Enslaving as an active interface with an up link
[ 1064.946283][T26737] binder_alloc: binder_alloc_mmap_handler: 26735 200000ffd000-200001000000 already mapped failed -16
[ 1064.970552][T17865] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[ 1064.984580][T26736] binder: BINDER_SET_CONTEXT_MGR already set
[ 1064.985998][T17865] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[ 1064.997098][T26736] binder: 26735:26736 ioctl 4018620d 200000000040 returned -16
[ 1065.036112][T26737] binder_alloc: 26735: binder_alloc_buf, no vma
[ 1065.058834][T26736] binder_alloc: 26735: binder_alloc_buf, no vma
[ 1065.065908][T17865] usb 4-1: config 220 has an invalid descriptor of length 127, skipping remainder of the config
[ 1065.104499][T17865] usb 4-1: config 220 has no interface number 2
[ 1065.134874][T17865] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1065.165889][T26741] netlink: 'syz.5.6628': attribute type 1 has an invalid length.
[ 1065.189363][T17865] usb 4-1: config 220 interface 0 has no altsetting 0
[ 1065.213200][T17865] usb 4-1: config 220 interface 76 has no altsetting 0
[ 1065.223470][T26734] dvmrp0: entered allmulticast mode
[ 1065.231988][T17865] usb 4-1: config 220 interface 1 has no altsetting 0
[ 1065.262678][T17865] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1065.276894][T17865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1065.285170][T17865] usb 4-1: Product: syz
[ 1065.290376][T26746] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6628'.
[ 1065.294870][T17865] usb 4-1: Manufacturer: syz
[ 1065.306519][T17865] usb 4-1: SerialNumber: syz
[ 1065.314018][T26748] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.6630'.
[ 1065.345468][T26749] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6628'.
[ 1065.366122][T26749] bond2 (unregistering): Released all slaves
[ 1065.403318][T26748] bond0: Device is already in use.
[ 1065.751851][T24387] dvmrp0: left allmulticast mode
[ 1066.203509][T26766] syzkaller0: entered promiscuous mode
[ 1066.209981][T26766] syzkaller0: entered allmulticast mode
[ 1066.243764][T26769] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1066.298653][T26764] tipc: Resetting bearer <eth:syzkaller0>
[ 1066.344771][T26764] tipc: Disabling bearer <eth:syzkaller0>
[ 1066.553742][T26783] loop5: detected capacity change from 0 to 7
[ 1066.575649][T26783]  loop5: p1 < > p3 p4
[ 1066.588454][T26783] loop5: partition table partially beyond EOD, truncated
[ 1066.626894][T26783] loop5: p3 size 3645588866 extends beyond EOD, truncated
[ 1066.649328][T26783] loop5: p4 start 33554432 is beyond EOD, truncated
[ 1066.746314][T17588] udevd[17588]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[ 1066.760461][T16671] udevd[16671]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[ 1066.946137][T26794] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1067.240877][T17865] usb 4-1: selecting invalid altsetting 0
[ 1067.285642][T26799] fuse: Bad value for 'fd'
[ 1067.364573][T17865] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1067.374017][T17865] uvcvideo 4-1:220.0: No valid video chain found.
[ 1067.391784][T17865] usb 4-1: selecting invalid altsetting 0
[ 1067.411926][T26802] binder: 26801:26802 ioctl c0306201 0 returned -14
[ 1067.425596][T17865] usbtest 4-1:220.1: probe with driver usbtest failed with error -22
[ 1067.447125][T23581] usb 5-1: new high-speed USB device number 115 using dummy_hcd
[ 1067.464970][T17865] usb 4-1: USB disconnect, device number 93
[ 1067.636897][T23581] usb 5-1: Using ep0 maxpacket: 8
[ 1067.767355][T23581] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[ 1067.802891][T23581] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1067.840620][T23581] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1067.870702][T23581] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1067.905690][T23581] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1067.938446][T23581] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1067.959218][   T29] kauditd_printk_skb: 98 callbacks suppressed
[ 1067.959238][   T29] audit: type=1800 audit(1781247072.617:3570): pid=26785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6641" name="bus" dev="ramfs" ino=156193 res=0 errno=0
[ 1067.986938][T23581] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1068.716881][T23581] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[ 1068.760236][T26823] xt_SECMARK: invalid mode: 9
[ 1068.767010][T17861] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[ 1068.837978][T26825] netlink: 'syz.5.6656': attribute type 1 has an invalid length.
[ 1068.867792][T26825] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6656'.
[ 1068.876863][T23581] usb 4-1: Using ep0 maxpacket: 8
[ 1068.881743][T23581] usb 4-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64
[ 1068.882581][T26825] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6656'.
[ 1068.900902][T23581] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67
[ 1068.909874][T26800] usbtmc 5-1:16.0: simple control status returned aa
[ 1068.919060][T23581] usb 4-1: Product: syz
[ 1068.922800][T26825] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6656'.
[ 1068.923414][T23581] usb 4-1: Manufacturer: syz
[ 1068.939005][T26825] bond2 (unregistering): Released all slaves
[ 1068.947419][T17861] usb 2-1: Using ep0 maxpacket: 16
[ 1068.963142][T23581] usb 4-1: SerialNumber: syz
[ 1068.968513][T17861] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1068.980400][T17861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1068.992140][T17861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1069.002210][T17861] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1069.005324][T23581] usb 4-1: config 0 descriptor??
[ 1069.012714][T17861] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1069.033349][T17861] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1069.043205][T17861] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1069.048077][T23581] gspca_main: sn9c2028-2.14.0 probing 0c45:8003
[ 1069.054125][T17861] usb 2-1: Manufacturer: syz
[ 1069.089193][T17861] usb 2-1: config 0 descriptor??
[ 1069.252034][T23581] gspca_sn9c2028: read1 error -32
[ 1069.463697][T23581] gspca_sn9c2028: read1 error -71
[ 1069.477014][T17861] rc_core: IR keymap rc-hauppauge not found
[ 1069.491883][T17861] Registered IR keymap rc-empty
[ 1069.503370][T17861] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1069.511503][T23581] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -71
[ 1069.527526][T17861] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1069.538391][T23581] usb 4-1: USB disconnect, device number 94
[ 1069.558314][T17861] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[ 1069.584068][T17861] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input153
[ 1069.605944][T17861] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1069.616919][T26821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1069.630304][T26821] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1069.650085][T17861] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1069.677123][T17861] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1069.697012][T17861] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1069.717822][T17861] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1069.747147][T17861] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1069.756845][T23580] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[ 1069.768052][T17861] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1069.787536][T17861] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1069.820770][T17861] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1069.857127][T17861] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1069.899830][T17861] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[ 1069.913295][T23580] usb 6-1: Using ep0 maxpacket: 32
[ 1069.916790][T17861] mceusb 2-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active)
[ 1069.948629][T23580] usb 6-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[ 1069.964156][T23580] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1069.984166][T23580] usb 6-1: Product: syz
[ 1069.993857][T23580] usb 6-1: Manufacturer: syz
[ 1070.017395][T23580] usb 6-1: SerialNumber: syz
[ 1070.063974][T23580] usb 6-1: config 0 descriptor??
[ 1070.091539][T17865] usb 2-1: USB disconnect, device number 83
[ 1070.093658][T23580] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[ 1070.151852][T23580] dvb-usb: bulk message failed: -22 (2/0)
[ 1070.222917][T23580] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1070.261473][T23580] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[ 1070.296360][T23580] usb 6-1: media controller created
[ 1070.305845][T26834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1070.332871][T26834] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1070.346617][T23580] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1070.358083][T26841] Cannot find del_set index 2 as target
[ 1070.395880][T26834] dvb-usb: bulk message failed: -22 (4/0)
[ 1070.440880][T26841] qrtr: Invalid version 116
[ 1070.456607][T26834] cxusb: i2c read failed
[ 1070.468263][T26834] dvb-usb: bulk message failed: -22 (4/0)
[ 1070.485204][T23580] usb 6-1: selecting invalid altsetting 7
[ 1070.500551][T26834] cxusb: i2c read failed
[ 1070.512701][T23580] cxusb: set interface failed
[ 1070.547606][T23580] dvb-usb: bulk message failed: -22 (1/0)
[ 1070.626234][T26834] dvb-usb: bulk message failed: -22 (4/0)
[ 1070.674930][T23580] DVB: Unable to find symbol lgdt330x_attach()
[ 1070.683297][T26845] netlink: 292 bytes leftover after parsing attributes in process `syz.5.6659'.
[ 1070.698382][T23580] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[ 1070.707390][T26834] cxusb: i2c read failed
[ 1070.719997][T26834] dvb-usb: bulk message failed: -22 (4/0)
[ 1070.735295][T26834] cxusb: i2c read failed
[ 1070.847055][T23580] rc_core: IR keymap rc-dvico-portable not found
[ 1070.862466][T23580] Registered IR keymap rc-empty
[ 1070.875274][T23580] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0
[ 1070.901269][T23580] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input154
[ 1070.925982][T23580] dvb-usb: schedule remote query interval to 100 msecs.
[ 1070.939167][T23580] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[ 1071.026856][T23573] usb 4-1: new low-speed USB device number 95 using dummy_hcd
[ 1071.070934][T23580] dvb-usb: bulk message failed: -22 (1/0)
[ 1071.103867][T17864] usb 5-1: USB disconnect, device number 115
[ 1071.216812][T23573] usb 4-1: Invalid ep0 maxpacket: 64
[ 1071.239659][T23580] dvb-usb: bulk message failed: -22 (1/0)
[ 1071.307246][T26861] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1071.321700][   T29] audit: type=1800 audit(1781247075.987:3571): pid=26843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.6662" name="bus" dev="ramfs" ino=156369 res=0 errno=0
[ 1071.321965][T26861] syzkaller0: entered promiscuous mode
[ 1071.353791][T26861] syzkaller0: entered allmulticast mode
[ 1071.358500][T23573] usb 4-1: new low-speed USB device number 96 using dummy_hcd
[ 1071.394883][T23580] dvb-usb: bulk message failed: -22 (1/0)
[ 1071.426152][T17866] usb 6-1: USB disconnect, device number 66
[ 1071.435342][T26861] tipc: Resetting bearer <eth:syzkaller0>
[ 1071.458647][T26860] tipc: Resetting bearer <eth:syzkaller0>
[ 1071.527819][T23573] usb 4-1: Invalid ep0 maxpacket: 64
[ 1071.533618][T23573] usb usb4-port1: attempt power cycle
[ 1071.541982][T17866] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[ 1071.545151][T26860] tipc: Disabling bearer <eth:syzkaller0>
[ 1071.557049][T26865] netlink: 'syz.5.6671': attribute type 1 has an invalid length.
[ 1071.646954][T17864] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[ 1071.672117][T26865] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6671'.
[ 1071.691839][T26865] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6671'.
[ 1071.705819][T26865] bond2 (unregistering): Released all slaves
[ 1071.806136][T26875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6675'.
[ 1071.816901][T17864] usb 5-1: Using ep0 maxpacket: 8
[ 1071.829271][T17864] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1071.838683][T17864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1071.847003][T17864] usb 5-1: Product: syz
[ 1071.851357][T17864] usb 5-1: Manufacturer: syz
[ 1071.856023][T17864] usb 5-1: SerialNumber: syz
[ 1071.869333][T17864] usb 5-1: config 0 descriptor??
[ 1071.900124][T23573] usb 4-1: new low-speed USB device number 97 using dummy_hcd
[ 1071.912639][T26877] loop5: detected capacity change from 0 to 7
[ 1071.927003][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1071.936339][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1071.944927][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1071.954297][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1071.962747][T23573] usb 4-1: Invalid ep0 maxpacket: 64
[ 1071.967249][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1071.977376][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1071.990488][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1072.000232][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1072.048432][T26878] loop5: detected capacity change from 7 to 0
[ 1072.048600][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1072.063937][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1072.072362][T26877] ldm_validate_partition_table(): Disk read failed.
[ 1072.079928][T26877] Dev loop5: unable to read RDB block 0
[ 1072.085559][T26877]  loop5: unable to read partition table
[ 1072.092813][T26877] loop5: partition table beyond EOD, truncated
[ 1072.099135][T26877] loop_reread_partitions: partition scan of loop5 (��ɍ�n/C>|��n���˨��,l�-"@Iy}��c�9��s�GQ��a��G%x�?) failed (rc=-5)
[ 1072.101785][T17864] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1072.117811][T23573] usb 4-1: new low-speed USB device number 98 using dummy_hcd
[ 1072.153489][T17864] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 1072.177036][T23573] usb 4-1: Invalid ep0 maxpacket: 64
[ 1072.185910][T23573] usb usb4-port1: unable to enumerate USB device
[ 1072.194791][T17864] usb 5-1: USB disconnect, device number 116
[ 1072.426024][T26896] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6682'.
[ 1072.623453][T26904] FAULT_INJECTION: forcing a failure.
[ 1072.623453][T26904] name failslab, interval 1, probability 0, space 0, times 0
[ 1072.639657][T26904] CPU: 1 UID: 0 PID: 26904 Comm: syz.5.6685 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1072.639687][T26904] Tainted: [L]=SOFTLOCKUP
[ 1072.639693][T26904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1072.639703][T26904] Call Trace:
[ 1072.639711][T26904]  <TASK>
[ 1072.639719][T26904]  dump_stack_lvl+0xe8/0x150
[ 1072.639745][T26904]  should_fail_ex+0x412/0x560
[ 1072.639769][T26904]  should_failslab+0xa8/0x100
[ 1072.639790][T26904]  __kmalloc_cache_noprof+0x88/0x660
[ 1072.639814][T26904]  ? fl_change+0x19e/0x3940
[ 1072.639928][T26904]  ? __kmalloc_cache_noprof+0x15b/0x660
[ 1072.639953][T26904]  fl_change+0x19e/0x3940
[ 1072.639972][T26904]  ? fl_get+0x9a/0x3b0
[ 1072.639990][T26904]  ? fl_get+0x9a/0x3b0
[ 1072.640009][T26904]  ? fl_get+0x9a/0x3b0
[ 1072.640023][T26904]  ? fl_get+0x9a/0x3b0
[ 1072.640035][T26904]  ? fl_get+0x9a/0x3b0
[ 1072.640051][T26904]  ? fl_get+0x326/0x3b0
[ 1072.640063][T26904]  ? __pfx_fl_change+0x10/0x10
[ 1072.640075][T26904]  ? __pfx_fl_get+0x10/0x10
[ 1072.640088][T26904]  tc_new_tfilter+0xff8/0x1780
[ 1072.640189][T26904]  ? __pfx_tc_new_tfilter+0x10/0x10
[ 1072.640219][T26904]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[ 1072.640243][T26904]  ? __pfx_tc_new_tfilter+0x10/0x10
[ 1072.640253][T26904]  rtnetlink_rcv_msg+0x7d5/0xbe0
[ 1072.640269][T26904]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[ 1072.640283][T26904]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1072.640300][T26904]  ? ref_tracker_free+0x693/0x840
[ 1072.640321][T26904]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1072.640348][T26904]  netlink_rcv_skb+0x232/0x4b0
[ 1072.640372][T26904]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1072.640394][T26904]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1072.640426][T26904]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1072.640448][T26904]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1072.640468][T26904]  netlink_unicast+0x75c/0x8e0
[ 1072.640487][T26904]  netlink_sendmsg+0x813/0xb40
[ 1072.640500][T26904]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1072.640511][T26904]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1072.640527][T26904]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1072.640543][T26904]  ____sys_sendmsg+0x972/0x9f0
[ 1072.640554][T26904]  ? __might_fault+0xaf/0x130
[ 1072.640570][T26904]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1072.640583][T26904]  ? import_iovec+0x73/0xa0
[ 1072.640597][T26904]  ___sys_sendmsg+0x2a5/0x360
[ 1072.640608][T26904]  ? __lock_acquire+0x6b5/0x2cf0
[ 1072.640621][T26904]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1072.640648][T26904]  ? __fget_files+0x2a/0x420
[ 1072.640659][T26904]  ? __fget_files+0x3a0/0x420
[ 1072.640675][T26904]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1072.640686][T26904]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1072.640700][T26904]  ? __pfx_ksys_write+0x10/0x10
[ 1072.640719][T26904]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1072.640729][T26904]  do_syscall_64+0x174/0x580
[ 1072.640742][T26904]  ? trace_irq_disable+0x3b/0x140
[ 1072.640756][T26904]  ? clear_bhb_loop+0x40/0x90
[ 1072.640768][T26904]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1072.640777][T26904] RIP: 0033:0x7fa6de39ce59
[ 1072.640789][T26904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1072.640798][T26904] RSP: 002b:00007fa6df22f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1072.640809][T26904] RAX: ffffffffffffffda RBX: 00007fa6de615fa0 RCX: 00007fa6de39ce59
[ 1072.640816][T26904] RDX: 0000000020000080 RSI: 00002000000003c0 RDI: 0000000000000004
[ 1072.640823][T26904] RBP: 00007fa6df22f090 R08: 0000000000000000 R09: 0000000000000000
[ 1072.640828][T26904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1072.640834][T26904] R13: 00007fa6de616038 R14: 00007fa6de615fa0 R15: 00007fa6de73fa48
[ 1072.640848][T26904]  </TASK>
[ 1072.807467][T17864] usb 5-1: new high-speed USB device number 117 using dummy_hcd
[ 1073.166892][T17864] usb 5-1: Using ep0 maxpacket: 16
[ 1073.175941][T17864] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1073.187606][T17864] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96
[ 1073.197903][T17864] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[ 1073.207663][T17864] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[ 1073.222682][T17864] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1073.232572][T17864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1073.240865][T17864] usb 5-1: SerialNumber: syz
[ 1073.256504][T26891] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1073.271770][T26891] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1073.280395][T17864] hub 5-1:1.0: bad descriptor, ignoring hub
[ 1073.287505][T17864] hub 5-1:1.0: probe with driver hub failed with error -5
[ 1073.396902][T23573] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[ 1073.484407][T26891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1073.498325][T26891] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1073.525138][T17864] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71
[ 1073.549211][T23573] usb 2-1: Using ep0 maxpacket: 16
[ 1073.568121][T23573] usb 2-1: config index 0 descriptor too short (expected 29970, got 18)
[ 1073.578992][T17864] usb 5-1: USB disconnect, device number 117
[ 1073.590877][T23573] usb 2-1: config 3 has an invalid interface number: 20 but max is 0
[ 1073.601515][T23573] usb 2-1: config 3 has no interface number 0
[ 1073.609611][T23573] usb 2-1: config 3 interface 20 has no altsetting 0
[ 1073.629265][T23573] usb 2-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=27.b1
[ 1073.639975][T23573] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1073.650214][T23573] usb 2-1: Product: syz
[ 1073.654653][T23573] usb 2-1: Manufacturer: syz
[ 1073.660834][T23573] usb 2-1: SerialNumber: syz
[ 1073.663381][T26916] netlink: 'syz.4.6689': attribute type 24 has an invalid length.
[ 1073.682129][T26916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6689'.
[ 1073.692184][T26916] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[ 1073.885899][T26909] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6688'.
[ 1073.938046][T23573] usb 2-1: USB disconnect, device number 84
[ 1074.328768][T26938] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[26939] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[26938]
[ 1074.538532][T26944] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1074.683308][T26954] fuse: Unknown parameter 'fU�0x0000000000000005'
[ 1074.765898][T26956] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6703'.
[ 1074.796568][T26956] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6703'.
[ 1074.815274][T26955] create_pit_timer: 55 callbacks suppressed
[ 1074.815290][T26955] kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[ 1074.876605][T26955] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[ 1074.899389][T26955] kvm: requested 13409 ns i8254 timer period limited to 200000 ns
[ 1074.923861][T26955] kvm: requested 53638 ns i8254 timer period limited to 200000 ns
[ 1075.087607][T17864] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[ 1075.260350][T17864] usb 6-1: Using ep0 maxpacket: 16
[ 1075.287402][T17864] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[ 1075.322692][T17864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1075.362554][T17864] usb 6-1: config 0 descriptor??
[ 1075.391053][T17864] hub 6-1:0.0: bad descriptor, ignoring hub
[ 1075.414841][T17864] hub 6-1:0.0: probe with driver hub failed with error -5
[ 1075.435031][T26971] xt_hashlimit: size too large, truncated to 1048576
[ 1075.442505][T17864] gspca_main: sonixj-2.14.0 probing 0471:0327
[ 1075.787725][T26983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1075.806512][T26983] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1076.016996][T23573] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[ 1076.032524][T26989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6714'.
[ 1076.060099][T26989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6714'.
[ 1076.207136][T23573] usb 5-1: Using ep0 maxpacket: 16
[ 1076.225075][T23573] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1076.236746][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[ 1076.254603][T23573] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1076.282869][T23573] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1076.309883][T23573] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1076.331798][T23573] usb 5-1: Product: syz
[ 1076.343635][T23573] usb 5-1: Manufacturer: syz
[ 1076.360472][T23573] usb 5-1: SerialNumber: syz
[ 1076.415951][T23573] usb 5-1: 0:2 : does not exist
[ 1076.605696][T23573] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[ 1076.722974][T23573] usb 5-1: USB disconnect, device number 118
[ 1076.812666][T16622] udevd[16622]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1077.348881][T23573] usb 4-1: new high-speed USB device number 99 using dummy_hcd
[ 1077.546938][T23573] usb 4-1: Using ep0 maxpacket: 8
[ 1077.557964][T23573] usb 4-1: config 0 has an invalid interface number: 31 but max is 0
[ 1077.572962][T23573] usb 4-1: config 0 has no interface number 0
[ 1077.585704][T23573] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 1077.615707][T23573] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1077.630259][T23573] usb 4-1: Product: syz
[ 1077.635550][T23573] usb 4-1: Manufacturer: syz
[ 1077.642235][T23573] usb 4-1: SerialNumber: syz
[ 1077.661915][T23573] usb 4-1: config 0 descriptor??
[ 1077.883089][T23573] uvcvideo 4-1:0.31: probe with driver uvcvideo failed with error -22
[ 1078.100571][   T29] audit: type=1326 audit(1781247082.767:3572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26990 comm="syz.3.6715" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3074f9ce59 code=0x7ff00000
[ 1078.136972][T17864] gspca_sonixj: reg_w1 err -110
[ 1078.139912][   T29] audit: type=1326 audit(1781247082.797:3573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26990 comm="syz.3.6715" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3074f9caeb code=0x7ff00000
[ 1078.142001][T17864] sonixj 6-1:0.0: probe with driver sonixj failed with error -110
[ 1078.167173][   T29] audit: type=1326 audit(1781247082.797:3574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26990 comm="syz.3.6715" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3074f9caeb code=0x7ff00000
[ 1078.252942][   T29] audit: type=1326 audit(1781247082.797:3575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26990 comm="syz.3.6715" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3074f9caeb code=0x7ff00000
[ 1078.280625][   T29] audit: type=1326 audit(1781247082.797:3576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26990 comm="syz.3.6715" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3074f9caeb code=0x7ff00000
[ 1078.305550][   T29] audit: type=1326 audit(1781247082.797:3577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26990 comm="syz.3.6715" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3074f9caeb code=0x7ff00000
[ 1078.332548][   T29] audit: type=1326 audit(1781247082.797:3578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26990 comm="syz.3.6715" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3074f9caeb code=0x7ff00000
[ 1078.357998][   T29] audit: type=1326 audit(1781247082.797:3579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26990 comm="syz.3.6715" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3074f9caeb code=0x7ff00000
[ 1078.382704][   T29] audit: type=1326 audit(1781247082.797:3580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26990 comm="syz.3.6715" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3074f9caeb code=0x7ff00000
[ 1078.407554][   T29] audit: type=1326 audit(1781247082.797:3581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26990 comm="syz.3.6715" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3074f9caeb code=0x7ff00000
[ 1078.435278][T23573] usb 4-1: USB disconnect, device number 99
[ 1078.956623][T27027] loop5: detected capacity change from 0 to 7
[ 1078.963017][T17863] usb 6-1: USB disconnect, device number 67
[ 1078.980415][T27027]  loop5: p1 < > p3 p4
[ 1078.988272][T27027] loop5: partition table partially beyond EOD, truncated
[ 1079.004624][T27027] loop5: p3 size 3645588866 extends beyond EOD, truncated
[ 1079.023358][T27027] loop5: p4 start 33554432 is beyond EOD, truncated
[ 1079.103909][T16622] udevd[16622]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[ 1079.114120][T16671] udevd[16671]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[ 1079.426882][T23580] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[ 1079.447498][T27036] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6730'.
[ 1079.516872][T17863] usb 5-1: new full-speed USB device number 119 using dummy_hcd
[ 1079.587026][T23580] usb 6-1: Using ep0 maxpacket: 16
[ 1079.600012][T23580] usb 6-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config
[ 1079.612012][T23580] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1079.637540][T23580] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1079.671251][T17863] usb 5-1: config 0 has an invalid interface number: 88 but max is 0
[ 1079.673544][T23580] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1079.693442][T17863] usb 5-1: config 0 has no interface number 0
[ 1079.704084][T17863] usb 5-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83
[ 1079.713458][T17863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1079.729144][T17863] usb 5-1: Product: syz
[ 1079.734432][T17863] usb 5-1: Manufacturer: syz
[ 1079.741048][T17863] usb 5-1: SerialNumber: syz
[ 1079.741555][T23580] usb 6-1: Product: syz
[ 1079.750807][T27045] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1079.765958][T17863] usb 5-1: config 0 descriptor??
[ 1079.780362][T23580] usb 6-1: Manufacturer: syz
[ 1079.803549][T23580] usb 6-1: SerialNumber: syz
[ 1079.830475][T27045] bond6: (slave lo): Enslaving as an active interface with an up link
[ 1079.845676][T27045] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[ 1079.889653][T23580] usb 6-1: 0:2 : does not exist
[ 1079.992958][T17863] gspca_main: ALi m5602-2.14.0 probing 0402:5602
[ 1080.091121][T23580] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[ 1080.175307][T23580] usb 6-1: USB disconnect, device number 68
[ 1080.212394][T17588] udevd[17588]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory
[ 1081.822916][T27081] xt_SECMARK: invalid mode: 9
[ 1082.152375][T17863] gspca_m5602: Failed to find a sensor
[ 1082.172921][T17863] ALi m5602 5-1:0.88: ALi m5602 webcam failed
[ 1082.205472][T17863] usb 5-1: USB disconnect, device number 119
[ 1082.247460][T23581] usb 4-1: new high-speed USB device number 100 using dummy_hcd
[ 1082.271704][T27094] netlink: 'syz.4.6749': attribute type 29 has an invalid length.
[ 1082.295294][T27094] netlink: 'syz.4.6749': attribute type 29 has an invalid length.
[ 1082.308010][T27090] binder: 27089:27090 ioctl c0306201 200000000180 returned -14
[ 1082.326058][T27094] netlink: 'syz.4.6749': attribute type 32 has an invalid length.
[ 1082.336791][T27094] netlink: 500 bytes leftover after parsing attributes in process `syz.4.6749'.
[ 1082.388747][T23581] usb 4-1: device descriptor read/64, error -71
[ 1082.459630][T27099] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6751'.
[ 1082.646898][T23581] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[ 1082.787056][T23581] usb 4-1: device descriptor read/64, error -71
[ 1082.908695][T23581] usb usb4-port1: attempt power cycle
[ 1083.227320][T17863] usb 6-1: new high-speed USB device number 69 using dummy_hcd
[ 1083.257100][T23581] usb 4-1: new high-speed USB device number 102 using dummy_hcd
[ 1083.287457][T23581] usb 4-1: device descriptor read/8, error -71
[ 1083.382890][T17863] usb 6-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9
[ 1083.394815][T17863] usb 6-1: config 1 interface 0 has no altsetting 0
[ 1083.404701][T17863] usb 6-1: string descriptor 0 read error: -22
[ 1083.412409][T17863] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1083.422937][T17863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1083.546942][T23581] usb 4-1: new high-speed USB device number 103 using dummy_hcd
[ 1083.578470][T23581] usb 4-1: device descriptor read/8, error -71
[ 1083.697091][T23581] usb usb4-port1: unable to enumerate USB device
[ 1083.843696][T27141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1083.870079][T27141] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1083.870356][T17863] usbhid 6-1:1.0: can't add hid device: -32
[ 1083.883220][T27141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1083.906814][T27150] syz.1.6771: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1
[ 1083.907215][T17863] usbhid 6-1:1.0: probe with driver usbhid failed with error -32
[ 1083.923789][T27141] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1083.935506][T27150] CPU: 0 UID: 0 PID: 27150 Comm: syz.1.6771 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1083.935535][T27150] Tainted: [L]=SOFTLOCKUP
[ 1083.935542][T27150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1083.935552][T27150] Call Trace:
[ 1083.935559][T27150]  <TASK>
[ 1083.935567][T27150]  dump_stack_lvl+0xe8/0x150
[ 1083.935604][T27150]  warn_alloc+0x249/0x340
[ 1083.935633][T27150]  ? __pfx_warn_alloc+0x10/0x10
[ 1083.935674][T27150]  __vmalloc_node_range_noprof+0x132/0x1750
[ 1083.935698][T27150]  ? __mutex_trylock_common+0x158/0x260
[ 1083.935722][T27150]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1083.935747][T27150]  ? trace_contention_end+0x3d/0x140
[ 1083.935769][T27150]  ? __mutex_lock+0x319/0x1550
[ 1083.935796][T27150]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1083.935815][T27150]  ? tomoyo_path_number_perm+0x219/0x630
[ 1083.935838][T27150]  ? dvb_demux_do_ioctl+0x320/0x540
[ 1083.935865][T27150]  ? __pfx___mutex_lock+0x10/0x10
[ 1083.935883][T27150]  ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0
[ 1083.935907][T27150]  vmalloc_noprof+0xb2/0xe0
[ 1083.935927][T27150]  ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0
[ 1083.935951][T27150]  dvb_dmxdev_set_buffer_size+0xbe/0x1f0
[ 1083.935979][T27150]  dvb_demux_do_ioctl+0x45d/0x540
[ 1083.936005][T27150]  dvb_usercopy+0x199/0x2e0
[ 1083.936025][T27150]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[ 1083.936047][T27150]  ? __pfx_dvb_usercopy+0x10/0x10
[ 1083.936077][T27150]  ? __fget_files+0x3a0/0x420
[ 1083.936096][T27150]  ? __fget_files+0x2a/0x420
[ 1083.936116][T27150]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[ 1083.936137][T27150]  dvb_demux_ioctl+0x29/0x40
[ 1083.936160][T27150]  __se_sys_ioctl+0xfc/0x170
[ 1083.936182][T27150]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1083.936200][T27150]  do_syscall_64+0x174/0x580
[ 1083.936216][T27150]  ? trace_irq_disable+0x3b/0x140
[ 1083.936237][T27150]  ? clear_bhb_loop+0x40/0x90
[ 1083.936256][T27150]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1083.936273][T27150] RIP: 0033:0x7ff19d79ce59
[ 1083.936289][T27150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1083.936302][T27150] RSP: 002b:00007ff19e6fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1083.936320][T27150] RAX: ffffffffffffffda RBX: 00007ff19da15fa0 RCX: 00007ff19d79ce59
[ 1083.936331][T27150] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000003
[ 1083.936341][T27150] RBP: 00007ff19d832d6f R08: 0000000000000000 R09: 0000000000000000
[ 1083.936350][T27150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1083.936360][T27150] R13: 00007ff19da16038 R14: 00007ff19da15fa0 R15: 00007ff19db3fa48
[ 1083.936388][T27150]  </TASK>
[ 1083.936395][T27150] Mem-Info:
[ 1083.955325][T27141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1083.981978][T17864] usb 5-1: new high-speed USB device number 120 using dummy_hcd
[ 1083.989222][T27141] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1084.233497][T27150] active_anon:15249 inactive_anon:1 isolated_anon:0
[ 1084.233497][T27150]  active_file:4111 inactive_file:56727 isolated_file:0
[ 1084.233497][T27150]  unevictable:768 dirty:244 writeback:0
[ 1084.233497][T27150]  slab_reclaimable:6967 slab_unreclaimable:115174
[ 1084.233497][T27150]  mapped:31051 shmem:1459 pagetables:2177
[ 1084.233497][T27150]  sec_pagetables:3 bounce:0
[ 1084.233497][T27150]  kernel_misc_reclaimable:0
[ 1084.233497][T27150]  free:1056598 free_pcp:24126 free_cma:0
[ 1084.236810][T27141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1084.280878][T27150] Node 0 active_anon:60996kB inactive_anon:4kB active_file:16148kB inactive_file:226708kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:70768kB dirty:972kB writeback:0kB shmem:4300kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15520kB pagetables:8552kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1084.325277][T27150] Node 1 active_anon:0kB inactive_anon:0kB active_file:296kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:53436kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1084.335357][T27141] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1084.376477][T27150] Node 0 DMA free:11264kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1084.408220][T27141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1084.408529][T27150] lowmem_reserve[]: 0 2492 2493 2493 2493
[ 1084.418791][T27141] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1084.422787][T27150] Node 0 DMA32 free:683524kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:60996kB inactive_anon:4kB active_file:16148kB inactive_file:226708kB unevictable:1536kB writepending:972kB zspages:0kB present:3129332kB managed:2552776kB mlocked:0kB bounce:0kB free_pcp:49700kB local_pcp:24520kB free_cma:0kB
[ 1084.488356][T17864] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[ 1084.508690][T17864] usb 5-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00
[ 1084.528570][T17864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1084.532237][T23581] usb 6-1: USB disconnect, device number 69
[ 1084.536698][T27150] lowmem_reserve[]: 0 0 0 0 0
[ 1084.559698][T17864] usb 5-1: config 0 descriptor??
[ 1084.585521][T27150] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:680kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB
[ 1084.676197][T27150] lowmem_reserve[]: 0 0 0 0 0
[ 1084.695800][T27150] Node 1 Normal free:3532160kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:296kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:46976kB local_pcp:22052kB free_cma:0kB
[ 1084.711222][T27158] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1084.762920][T27150] lowmem_reserve[]: 0 0 0 0 0
[ 1084.771313][T27143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1084.794450][T27143] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1084.794926][T27162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1084.810802][T27150] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (M) = 11264kB
[ 1084.829299][T27162] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1084.873941][T27153] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[ 1084.881090][T27150] Node 0 DMA32: 7748*4kB (UME) 4302*8kB (UME) 2154*16kB (UME) 669*32kB (UME) 707*64kB (UME) 463*128kB (UME) 476*256kB (UME) 296*512kB (UME) 181*1024kB (UM) 1*2048kB (M) 0*4096kB = 686592kB
[ 1084.922980][T27150] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1084.938479][T27150] Node 1 Normal: 11*4kB (UM) 7*8kB (U) 9*16kB (UM) 10*32kB (U) 14*64kB (UM) 14*128kB (UM) 11*256kB (UM) 11*512kB (UM) 10*1024kB (UM) 10*2048kB (UM) 852*4096kB (UM) = 3532212kB
[ 1084.961545][T27150] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1084.972229][T27150] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[ 1084.989591][T27150] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1085.007648][T27150] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[ 1085.032619][T27150] 62297 total pagecache pages
[ 1085.100377][T17864] pantherlord 0003:0F30:0111.0039: item fetching failed at offset 2/40
[ 1085.128453][T27150] 0 pages in swap cache
[ 1085.129233][T17864] pantherlord 0003:0F30:0111.0039: parse failed
[ 1085.134456][T27150] Free swap  = 124996kB
[ 1085.155220][T17864] pantherlord 0003:0F30:0111.0039: probe with driver pantherlord failed with error -22
[ 1085.165514][T27168] netlink: 'syz.3.6776': attribute type 1 has an invalid length.
[ 1085.176104][T27150] Total swap = 124996kB
[ 1085.204643][T27170] vlan0: entered promiscuous mode
[ 1085.217013][T27150] 2097051 pages RAM
[ 1085.219950][T27171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6776'.
[ 1085.241538][T27150] 0 pages HighMem/MovableOnly
[ 1085.258574][T27150] 427072 pages reserved
[ 1085.268898][T27150] 0 pages cma reserved
[ 1085.276316][T27173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6776'.
[ 1085.302582][T17864] usb 5-1: USB disconnect, device number 120
[ 1085.344948][T27173] bond1 (unregistering): Released all slaves
[ 1085.620005][T27181] xt_hashlimit: size too large, truncated to 1048576
[ 1085.754293][T27189] netlink: 27 bytes leftover after parsing attributes in process `syz.1.6781'.
[ 1085.906617][T27191] netlink: 'syz.1.6782': attribute type 12 has an invalid length.
[ 1085.929799][T27191] netlink: 'syz.1.6782': attribute type 29 has an invalid length.
[ 1085.949663][T27191] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6782'.
[ 1086.584221][T27208] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6789'.
[ 1087.139337][T27226] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6796'.
[ 1087.637699][T27240] netlink: 'syz.4.6802': attribute type 1 has an invalid length.
[ 1087.721061][T27240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6802'.
[ 1087.760327][T27240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6802'.
[ 1087.772414][T27240] bond4 (unregistering): Released all slaves
[ 1088.294482][T27257] loop2: detected capacity change from 0 to 7
[ 1088.308990][T27257] Dev loop2: unable to read RDB block 7
[ 1088.342783][T27257]  loop2: AHDI p1 p2 p3
[ 1088.350811][T27257] loop2: partition table partially beyond EOD, truncated
[ 1088.364795][T27257] loop2: p1 start 1601398130 is beyond EOD, truncated
[ 1088.375914][T27257] loop2: p2 start 1702059890 is beyond EOD, truncated
[ 1089.247213][T17864] usb 5-1: new high-speed USB device number 121 using dummy_hcd
[ 1089.429153][T17864] usb 5-1: Using ep0 maxpacket: 16
[ 1089.434998][T17864] usb 5-1: too many configurations: 17, using maximum allowed: 8
[ 1089.453654][T17864] usb 5-1: string descriptor 0 read error: -71
[ 1089.466893][T17864] usb 5-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48
[ 1089.481912][T17864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1089.523270][T17864] r8152-cfgselector 5-1: Unknown version 0x0000
[ 1089.539217][T17864] r8152-cfgselector 5-1: rejected 8 configurations due to insufficient available bus power
[ 1089.570635][T17864] r8152-cfgselector 5-1: no configuration chosen from 8 choices
[ 1089.607878][T17864] r8152-cfgselector 5-1: USB disconnect, device number 121
[ 1089.616283][T27295] netlink: 'syz.1.6822': attribute type 24 has an invalid length.
[ 1089.633640][T27295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6822'.
[ 1089.649311][T27295] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[ 1089.909943][T27311] netlink: 548 bytes leftover after parsing attributes in process `syz.3.6830'.
[ 1090.046876][T23573] usb 6-1: new high-speed USB device number 70 using dummy_hcd
[ 1090.056846][T17866] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[ 1090.219577][T23573] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1090.228526][T23573] usb 6-1: config 1 interface 0 has no altsetting 0
[ 1090.240014][T23573] usb 6-1: string descriptor 0 read error: -22
[ 1090.240116][T17866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[ 1090.246395][T23573] usb 6-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.40
[ 1090.267625][T17866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[ 1090.278972][T17866] usb 2-1: New USB device found, idVendor=0582, idProduct=d728, bcdDevice=a0.a7
[ 1090.288840][T17866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1090.291822][T23573] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1090.310960][T17866] usb 2-1: config 0 descriptor??
[ 1090.324788][T27305] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[ 1090.436855][T23581] usb 4-1: new high-speed USB device number 104 using dummy_hcd
[ 1090.543924][T23580] usb 2-1: USB disconnect, device number 85
[ 1090.596890][T23581] usb 4-1: Using ep0 maxpacket: 8
[ 1090.603491][T23581] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[ 1090.615021][T23581] usb 4-1: config 0 has no interface number 0
[ 1090.626355][T23581] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1090.637605][T23581] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1090.649510][T23581] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1090.669832][T23581] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1090.689650][T23581] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1090.704213][T23581] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1090.723985][T23581] usb 4-1: config 0 descriptor??
[ 1090.750492][T23581] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1090.829690][T23573] input: HID 28bd:1903 Mouse as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/0003:28BD:1903.003A/input/input155
[ 1090.915174][T23573] uclogic 0003:28BD:1903.003A: input,hidraw0: USB HID v0.03 Mouse [HID 28bd:1903] on usb-dummy_hcd.5-1/input0
[ 1090.993509][T23573] usb 6-1: USB disconnect, device number 70
[ 1091.088489][T27331] fido_id[27331]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[ 1091.299937][    C1] ldusb 4-1:0.55: usb_submit_urb failed (-19)
[ 1091.299943][T17864] usb 4-1: USB disconnect, device number 104
[ 1091.343884][T17864] ldusb 4-1:0.55: LD USB Device #0 now disconnected
[ 1091.353980][T27322] ldusb: No device or device unplugged -19
[ 1091.365070][T27332] ldusb: No device or device unplugged -19
[ 1091.397415][T17866] usb 5-1: new high-speed USB device number 122 using dummy_hcd
[ 1091.466654][T27339] netlink: 548 bytes leftover after parsing attributes in process `syz.1.6841'.
[ 1091.557848][T17866] usb 5-1: Using ep0 maxpacket: 16
[ 1091.572255][T17866] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[ 1091.583093][T17866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1091.593607][T17866] usb 5-1: Product: syz
[ 1091.600589][T17866] usb 5-1: Manufacturer: syz
[ 1091.605702][T17866] usb 5-1: SerialNumber: syz
[ 1092.761441][T27375] netlink: 'syz.5.6855': attribute type 1 has an invalid length.
[ 1092.816548][T27378] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6856'.
[ 1092.828747][T27375] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1092.944653][T27382] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[ 1092.951222][T27382] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 1092.960049][T27382] vhci_hcd vhci_hcd.0: Device attached
[ 1092.991167][T27375] bond2: (slave ip6gretap1): making interface the new active one
[ 1093.035449][T27375] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[ 1093.052507][T17866] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71
[ 1093.083824][T17866] usb 5-1: USB disconnect, device number 122
[ 1093.211975][T27389] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6859'.
[ 1093.217398][T27390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6850'.
[ 1093.240052][T23573] usb 36-1: SetAddress Request (62) to port 0
[ 1093.253487][T23573] usb 36-1: new SuperSpeed USB device number 62 using vhci_hcd
[ 1093.295345][T27389] geneve2: entered promiscuous mode
[ 1093.307137][T27389] geneve2: entered allmulticast mode
[ 1093.515851][T27386] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1093.623357][T27396] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6861'.
[ 1093.847144][T27383] vhci_hcd: connection reset by peer
[ 1093.876014][T24387] vhci_hcd vhci_hcd.1: stop threads
[ 1093.884027][T27405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6864'.
[ 1093.897511][T24387] vhci_hcd vhci_hcd.1: release socket
[ 1093.912231][T24387] vhci_hcd vhci_hcd.1: disconnect device
[ 1094.142723][T27417] Cannot find del_set index 2 as target
[ 1094.170664][T27417] qrtr: Invalid version 116
[ 1094.358030][T23581] usb 6-1: new high-speed USB device number 71 using dummy_hcd
[ 1094.534075][T23581] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1094.555549][T23581] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1094.568157][T27428] 
[ 1094.570515][T27428] =====================================================
[ 1094.577534][T27428] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[ 1094.585212][T27428] syzkaller #0 Tainted: G             L     
[ 1094.591270][T27428] -----------------------------------------------------
[ 1094.598470][T27428] syz.3.6876/27428 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[ 1094.606362][T27428] ffff88802bb0f0c0 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0
[ 1094.615300][T27428] 
[ 1094.615300][T27428] and this task is already holding:
[ 1094.622679][T27428] ffff88807936d028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0
[ 1094.632492][T27428] which would create a new lock dependency:
[ 1094.638430][T27428]  (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3}
[ 1094.641663][T27429] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1094.646628][T27428] 
[ 1094.646628][T27428] but this new dependency connects a SOFTIRQ-irq-safe lock:
[ 1094.646640][T27428]  (&client->buffer_lock){..-.}-{3:3}
[ 1094.646659][T27428] 
[ 1094.646659][T27428] ... which became SOFTIRQ-irq-safe at:
[ 1094.646668][T27428]   lock_acquire+0x106/0x350
[ 1094.682245][T27428]   _raw_spin_lock+0x2e/0x40
[ 1094.686926][T27428]   evdev_pass_values+0xb9/0xbd0
[ 1094.691867][T27428]   evdev_events+0x1e6/0x340
[ 1094.696448][T27428]   input_pass_values+0x288/0x890
[ 1094.701535][T27428]   input_event_dispose+0x3e5/0x6b0
[ 1094.706808][T27428]   input_inject_event+0x1dc/0x330
[ 1094.711910][T27428]   led_trigger_event+0x138/0x210
[ 1094.716998][T27428]   kbd_bh+0x1c6/0x2e0
[ 1094.721112][T27428]   tasklet_action_common+0x2da/0x4b0
[ 1094.726565][T27428]   handle_softirqs+0x22a/0x840
[ 1094.731412][T27428]   __irq_exit_rcu+0xca/0x220
[ 1094.736097][T27428]   irq_exit_rcu+0x9/0x30
[ 1094.740419][T27428]   sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1094.746209][T27428]   asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1094.752263][T27428]   _raw_spin_unlock_irq+0x29/0x50
[ 1094.757367][T27428]   n_tty_ioctl_helper+0x38a/0x4d0
[ 1094.762567][T27428]   tty_ioctl+0x9c5/0xde0
[ 1094.766944][T27428]   __se_sys_ioctl+0xfc/0x170
[ 1094.771608][T27428]   do_syscall_64+0x174/0x580
[ 1094.776268][T27428]   entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1094.782239][T27428] 
[ 1094.782239][T27428] to a SOFTIRQ-irq-unsafe lock:
[ 1094.789314][T27428]  (tasklist_lock){.+.+}-{3:3}
[ 1094.789336][T27428] 
[ 1094.789336][T27428] ... which became SOFTIRQ-irq-unsafe at:
[ 1094.801962][T27428] ...
[ 1094.801969][T27428]   lock_acquire+0x106/0x350
[ 1094.809116][T27428]   _raw_read_lock+0x36/0x50
[ 1094.813698][T27428]   __do_wait+0xde/0x740
[ 1094.817928][T27428]   do_wait+0x1e7/0x510
[ 1094.822069][T27428]   kernel_wait+0xd6/0x1c0
[ 1094.826473][T27428]   call_usermodehelper_exec_work+0xbe/0x230
[ 1094.832448][T27428]   process_scheduled_works+0xb5d/0x1860
[ 1094.838072][T27428]   worker_thread+0xa53/0xfc0
[ 1094.842736][T27428]   kthread+0x389/0x470
[ 1094.846879][T27428]   ret_from_fork+0x514/0xb70
[ 1094.851539][T27428]   ret_from_fork_asm+0x1a/0x30
[ 1094.856377][T27428] 
[ 1094.856377][T27428] other info that might help us debug this:
[ 1094.856377][T27428] 
[ 1094.866591][T27428] Chain exists of:
[ 1094.866591][T27428]   &client->buffer_lock --> &new->fa_lock --> tasklist_lock
[ 1094.866591][T27428] 
[ 1094.879733][T27428]  Possible interrupt unsafe locking scenario:
[ 1094.879733][T27428] 
[ 1094.888111][T27428]        CPU0                    CPU1
[ 1094.893459][T27428]        ----                    ----
[ 1094.898834][T27428]   lock(tasklist_lock);
[ 1094.903065][T27428]                                local_irq_disable();
[ 1094.910068][T27428]                                lock(&client->buffer_lock);
[ 1094.917516][T27428]                                lock(&new->fa_lock);
[ 1094.924442][T27428]   <Interrupt>
[ 1094.927949][T27428]     lock(&client->buffer_lock);
[ 1094.933259][T27428] 
[ 1094.933259][T27428]  *** DEADLOCK ***
[ 1094.933259][T27428] 
[ 1094.941388][T27428] 7 locks held by syz.3.6876/27428:
[ 1094.946566][T27428]  #0: ffff88802c807110 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0
[ 1094.956157][T27428]  #1: ffff8880203be230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa4/0x330
[ 1094.966242][T27428]  #2: ffffffff8e95cd20 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb5/0x330
[ 1094.975901][T27428]  #3: ffffffff8e95cd20 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890
[ 1094.985592][T27428]  #4: ffffffff8e95cd20 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340
[ 1094.994740][T27428]  #5: ffff88807936d028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0
[ 1095.004904][T27428]  #6: ffffffff8e95cd20 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0
[ 1095.013959][T27428] 
[ 1095.013959][T27428] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[ 1095.024346][T27428] -> (&client->buffer_lock){..-.}-{3:3} {
[ 1095.030068][T27428]    IN-SOFTIRQ-W at:
[ 1095.034160][T27428]                     lock_acquire+0x106/0x350
[ 1095.040303][T27428]                     _raw_spin_lock+0x2e/0x40
[ 1095.046457][T27428]                     evdev_pass_values+0xb9/0xbd0
[ 1095.052948][T27428]                     evdev_events+0x1e6/0x340
[ 1095.059171][T27428]                     input_pass_values+0x288/0x890
[ 1095.065742][T27428]                     input_event_dispose+0x3e5/0x6b0
[ 1095.072495][T27428]                     input_inject_event+0x1dc/0x330
[ 1095.079250][T27428]                     led_trigger_event+0x138/0x210
[ 1095.085831][T27428]                     kbd_bh+0x1c6/0x2e0
[ 1095.091452][T27428]                     tasklet_action_common+0x2da/0x4b0
[ 1095.098561][T27428]                     handle_softirqs+0x22a/0x840
[ 1095.104976][T27428]                     __irq_exit_rcu+0xca/0x220
[ 1095.111220][T27428]                     irq_exit_rcu+0x9/0x30
[ 1095.117166][T27428]                     sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1095.124481][T27428]                     asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1095.132118][T27428]                     _raw_spin_unlock_irq+0x29/0x50
[ 1095.138804][T27428]                     n_tty_ioctl_helper+0x38a/0x4d0
[ 1095.145506][T27428]                     tty_ioctl+0x9c5/0xde0
[ 1095.151411][T27428]                     __se_sys_ioctl+0xfc/0x170
[ 1095.157644][T27428]                     do_syscall_64+0x174/0x580
[ 1095.163877][T27428]                     entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1095.171403][T27428]    INITIAL USE at:
[ 1095.175294][T27428]                    lock_acquire+0x106/0x350
[ 1095.181449][T27428]                    _raw_spin_lock+0x2e/0x40
[ 1095.187510][T27428]                    evdev_pass_values+0xb9/0xbd0
[ 1095.194372][T27428]                    evdev_events+0x1e6/0x340
[ 1095.200454][T27428]                    input_pass_values+0x288/0x890
[ 1095.206957][T27428]                    input_event_dispose+0x330/0x6b0
[ 1095.213624][T27428]                    input_inject_event+0x1dc/0x330
[ 1095.220206][T27428]                    evdev_write+0x325/0x4c0
[ 1095.226302][T27428]                    vfs_write+0x29a/0xb90
[ 1095.232114][T27428]                    ksys_write+0x150/0x270
[ 1095.238012][T27428]                    do_syscall_64+0x174/0x580
[ 1095.244173][T27428]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1095.251626][T27428]  }
[ 1095.254116][T27428]  ... key      at: [<ffffffff9a7ca840>] evdev_open.__key.27+0x0/0x20
[ 1095.262424][T27428] 
[ 1095.262424][T27428] the dependencies between the lock to be acquired
[ 1095.262433][T27428]  and SOFTIRQ-irq-unsafe lock:
[ 1095.275930][T27428]   -> (tasklist_lock){.+.+}-{3:3} {
[ 1095.281218][T27428]      HARDIRQ-ON-R at:
[ 1095.285369][T27428]                         lock_acquire+0x106/0x350
[ 1095.291854][T27428]                         _raw_read_lock+0x36/0x50
[ 1095.298345][T27428]                         __do_wait+0xde/0x740
[ 1095.304575][T27428]                         do_wait+0x1e7/0x510
[ 1095.310714][T27428]                         kernel_wait+0xd6/0x1c0
[ 1095.317059][T27428]                         call_usermodehelper_exec_work+0xbe/0x230
[ 1095.324950][T27428]                         process_scheduled_works+0xb5d/0x1860
[ 1095.332510][T27428]                         worker_thread+0xa53/0xfc0
[ 1095.339105][T27428]                         kthread+0x389/0x470
[ 1095.345175][T27428]                         ret_from_fork+0x514/0xb70
[ 1095.351776][T27428]                         ret_from_fork_asm+0x1a/0x30
[ 1095.358585][T27428]      SOFTIRQ-ON-R at:
[ 1095.362741][T27428]                         lock_acquire+0x106/0x350
[ 1095.369232][T27428]                         _raw_read_lock+0x36/0x50
[ 1095.375737][T27428]                         __do_wait+0xde/0x740
[ 1095.381901][T27428]                         do_wait+0x1e7/0x510
[ 1095.387990][T27428]                         kernel_wait+0xd6/0x1c0
[ 1095.394403][T27428]                         call_usermodehelper_exec_work+0xbe/0x230
[ 1095.402282][T27428]                         process_scheduled_works+0xb5d/0x1860
[ 1095.409818][T27428]                         worker_thread+0xa53/0xfc0
[ 1095.416404][T27428]                         kthread+0x389/0x470
[ 1095.422479][T27428]                         ret_from_fork+0x514/0xb70
[ 1095.429067][T27428]                         ret_from_fork_asm+0x1a/0x30
[ 1095.435830][T27428]      INITIAL USE at:
[ 1095.439902][T27428]                        lock_acquire+0x106/0x350
[ 1095.446310][T27428]                        _raw_write_lock_irq+0x3d/0x50
[ 1095.453164][T27428]                        copy_process+0x2b4c/0x4440
[ 1095.459787][T27428]                        kernel_clone+0x2d7/0x940
[ 1095.466201][T27428]                        user_mode_thread+0x110/0x180
[ 1095.472956][T27428]                        rest_init+0x23/0x300
[ 1095.479106][T27428]                        start_kernel+0x38a/0x3e0
[ 1095.485635][T27428]                        x86_64_start_reservations+0x24/0x30
[ 1095.493032][T27428]                        x86_64_start_kernel+0x143/0x1c0
[ 1095.500041][T27428]                        common_startup_64+0x13e/0x147
[ 1095.506880][T27428]      INITIAL READ USE at:
[ 1095.511373][T27428]                             lock_acquire+0x106/0x350
[ 1095.518207][T27428]                             _raw_read_lock+0x36/0x50
[ 1095.525061][T27428]                             __do_wait+0xde/0x740
[ 1095.531558][T27428]                             do_wait+0x1e7/0x510
[ 1095.537960][T27428]                             kernel_wait+0xd6/0x1c0
[ 1095.544632][T27428]                             call_usermodehelper_exec_work+0xbe/0x230
[ 1095.552866][T27428]                             process_scheduled_works+0xb5d/0x1860
[ 1095.560744][T27428]                             worker_thread+0xa53/0xfc0
[ 1095.567750][T27428]                             kthread+0x389/0x470
[ 1095.574151][T27428]                             ret_from_fork+0x514/0xb70
[ 1095.581155][T27428]                             ret_from_fork_asm+0x1a/0x30
[ 1095.588288][T27428]    }
[ 1095.590945][T27428]    ... key      at: [<ffffffff8e60a058>] tasklist_lock+0x18/0x40
[ 1095.598917][T27428]    ... acquired at:
[ 1095.602873][T27428]    _raw_read_lock+0x36/0x50
[ 1095.607539][T27428]    send_sigurg+0x12b/0x420
[ 1095.612115][T27428]    sk_send_sigurg+0x6c/0x2e0
[ 1095.616883][T27428]    queue_oob+0x42c/0x4f0
[ 1095.621318][T27428]    unix_stream_sendmsg+0xcb1/0xe80
[ 1095.626589][T27428]    ____sys_sendmsg+0x972/0x9f0
[ 1095.631513][T27428]    ___sys_sendmsg+0x2a5/0x360
[ 1095.636350][T27428]    __x64_sys_sendmsg+0x1bd/0x2a0
[ 1095.641462][T27428]    do_syscall_64+0x174/0x580
[ 1095.646217][T27428]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1095.652276][T27428] 
[ 1095.654585][T27428]  -> (&f_owner->lock){....}-{3:3} {
[ 1095.659866][T27428]     INITIAL USE at:
[ 1095.663830][T27428]                      lock_acquire+0x106/0x350
[ 1095.670055][T27428]                      _raw_write_lock_irq+0x3d/0x50
[ 1095.676721][T27428]                      __f_setown+0x67/0x370
[ 1095.682696][T27428]                      fcntl_dirnotify+0x3f9/0x6a0
[ 1095.689196][T27428]                      do_fcntl+0x77e/0x1a20
[ 1095.695261][T27428]                      __se_sys_fcntl+0xc8/0x150
[ 1095.701572][T27428]                      do_syscall_64+0x174/0x580
[ 1095.707886][T27428]                      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1095.715526][T27428]     INITIAL READ USE at:
[ 1095.719926][T27428]                           lock_acquire+0x106/0x350
[ 1095.726674][T27428]                           _raw_read_lock_irqsave+0x48/0x60
[ 1095.734123][T27428]                           send_sigio+0x38/0x370
[ 1095.740523][T27428]                           dnotify_handle_event+0x169/0x440
[ 1095.747986][T27428]                           fsnotify+0x168e/0x1ae0
[ 1095.754497][T27428]                           __fsnotify_parent+0x50d/0x620
[ 1095.761593][T27428]                           __kernel_read+0x774/0x9b0
[ 1095.768341][T27428]                           integrity_kernel_read+0x89/0xd0
[ 1095.775682][T27428]                           ima_calc_file_hash+0x446/0x860
[ 1095.782869][T27428]                           ima_collect_measurement+0x51d/0x9c0
[ 1095.790484][T27428]                           process_measurement+0x12cd/0x1c80
[ 1095.797922][T27428]                           ima_file_check+0xe1/0x130
[ 1095.804777][T27428]                           security_file_post_open+0xb3/0x260
[ 1095.812308][T27428]                           path_openat+0x2e4d/0x3860
[ 1095.819148][T27428]                           do_file_open+0x23e/0x4a0
[ 1095.825808][T27428]                           do_sys_openat2+0x113/0x200
[ 1095.832641][T27428]                           __x64_sys_openat+0x138/0x170
[ 1095.839649][T27428]                           do_syscall_64+0x174/0x580
[ 1095.846397][T27428]                           entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1095.854451][T27428]   }
[ 1095.857023][T27428]   ... key      at: [<ffffffff9a4ac880>] file_f_owner_allocate.__key+0x0/0x20
[ 1095.865987][T27428]   ... acquired at:
[ 1095.869857][T27428]    _raw_read_lock_irqsave+0x48/0x60
[ 1095.875218][T27428]    send_sigio+0x38/0x370
[ 1095.879623][T27428]    kill_fasync+0x24d/0x4d0
[ 1095.884207][T27428]    lease_break_callback+0x26/0x30
[ 1095.889398][T27428]    __break_lease+0x81f/0x1ea0
[ 1095.894233][T27428]    vfs_remove_acl+0x21c/0x830
[ 1095.899099][T27428]    path_removexattrat+0x4c4/0x750
[ 1095.904313][T27428]    __x64_sys_fremovexattr+0x62/0x70
[ 1095.909932][T27428]    do_syscall_64+0x174/0x580
[ 1095.914709][T27428]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1095.920790][T27428] 
[ 1095.923099][T27428] -> (&new->fa_lock){....}-{3:3} {
[ 1095.928211][T27428]    INITIAL USE at:
[ 1095.932175][T27428]                    lock_acquire+0x106/0x350
[ 1095.938240][T27428]                    _raw_write_lock_irq+0x3d/0x50
[ 1095.944730][T27428]                    fasync_remove_entry+0xf1/0x1c0
[ 1095.951312][T27428]                    sock_fasync+0x85/0xf0
[ 1095.957203][T27428]                    __fput+0x890/0xa60
[ 1095.962733][T27428]                    task_work_run+0x1d9/0x270
[ 1095.968872][T27428]                    do_exit+0x70f/0x22c0
[ 1095.974579][T27428]                    do_group_exit+0x21b/0x2d0
[ 1095.980722][T27428]                    get_signal+0x1284/0x1330
[ 1095.986774][T27428]                    arch_do_signal_or_restart+0xbc/0x840
[ 1095.993877][T27428]                    exit_to_user_mode_loop+0xa9/0x680
[ 1096.000707][T27428]                    do_syscall_64+0x353/0x580
[ 1096.006875][T27428]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1096.014334][T27428]    INITIAL READ USE at:
[ 1096.018671][T27428]                         lock_acquire+0x106/0x350
[ 1096.025179][T27428]                         _raw_read_lock_irqsave+0x48/0x60
[ 1096.032381][T27428]                         kill_fasync+0x199/0x4d0
[ 1096.038879][T27428]                         sock_wake_async+0x137/0x160
[ 1096.045635][T27428]                         unix_write_space+0x3bb/0x470
[ 1096.052565][T27428]                         sock_wfree+0x214/0x740
[ 1096.058885][T27428]                         unix_wfree+0x162/0x1b0
[ 1096.065210][T27428]                         skb_release_head_state+0x358/0x360
[ 1096.072663][T27428]                         __kfree_skb+0x24/0x210
[ 1096.078984][T27428]                         unix_release_sock+0x9ad/0xc80
[ 1096.085911][T27428]                         unix_release+0x92/0xd0
[ 1096.092226][T27428]                         sock_close+0xc3/0x240
[ 1096.098541][T27428]                         __fput+0x44f/0xa60
[ 1096.104533][T27428]                         task_work_run+0x1d9/0x270
[ 1096.111219][T27428]                         exit_to_user_mode_loop+0x193/0x680
[ 1096.118574][T27428]                         do_syscall_64+0x353/0x580
[ 1096.125165][T27428]                         entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1096.133161][T27428]  }
[ 1096.135669][T27428]  ... key      at: [<ffffffff9a4ac8a0>] fasync_insert_entry.__key+0x0/0x20
[ 1096.144335][T27428]  ... acquired at:
[ 1096.148123][T27428]    _raw_read_lock_irqsave+0x48/0x60
[ 1096.153494][T27428]    kill_fasync+0x199/0x4d0
[ 1096.158090][T27428]    evdev_pass_values+0x627/0xbd0
[ 1096.163216][T27428]    evdev_events+0x1e6/0x340
[ 1096.167914][T27428]    input_pass_values+0x288/0x890
[ 1096.173018][T27428]    input_event_dispose+0x330/0x6b0
[ 1096.178296][T27428]    input_inject_event+0x1dc/0x330
[ 1096.183484][T27428]    evdev_write+0x325/0x4c0
[ 1096.188060][T27428]    vfs_write+0x29a/0xb90
[ 1096.192472][T27428]    ksys_write+0x150/0x270
[ 1096.196980][T27428]    do_syscall_64+0x174/0x580
[ 1096.201742][T27428]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1096.207818][T27428] 
[ 1096.210175][T27428] 
[ 1096.210175][T27428] stack backtrace:
[ 1096.216057][T27428] CPU: 1 UID: 0 PID: 27428 Comm: syz.3.6876 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1096.216078][T27428] Tainted: [L]=SOFTLOCKUP
[ 1096.216084][T27428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1096.216092][T27428] Call Trace:
[ 1096.216100][T27428]  <TASK>
[ 1096.216107][T27428]  dump_stack_lvl+0xe8/0x150
[ 1096.216128][T27428]  __lock_acquire+0x2a94/0x2cf0
[ 1096.216148][T27428]  ? kill_fasync+0x199/0x4d0
[ 1096.216165][T27428]  lock_acquire+0x106/0x350
[ 1096.216177][T27428]  ? kill_fasync+0x199/0x4d0
[ 1096.216194][T27428]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1096.216221][T27428]  _raw_read_lock_irqsave+0x48/0x60
[ 1096.216241][T27428]  ? kill_fasync+0x199/0x4d0
[ 1096.216256][T27428]  kill_fasync+0x199/0x4d0
[ 1096.216272][T27428]  ? kill_fasync+0x53/0x4d0
[ 1096.216288][T27428]  evdev_pass_values+0x627/0xbd0
[ 1096.216303][T27428]  ? evdev_pass_values+0x631/0xbd0
[ 1096.216317][T27428]  evdev_events+0x1e6/0x340
[ 1096.216329][T27428]  ? evdev_events+0x79/0x340
[ 1096.216340][T27428]  ? input_pass_values+0x8d/0x890
[ 1096.216352][T27428]  input_pass_values+0x288/0x890
[ 1096.216365][T27428]  ? input_handle_event+0x70c/0xf30
[ 1096.216382][T27428]  input_event_dispose+0x330/0x6b0
[ 1096.216398][T27428]  input_inject_event+0x1dc/0x330
[ 1096.216414][T27428]  ? input_inject_event+0xb5/0x330
[ 1096.216429][T27428]  evdev_write+0x325/0x4c0
[ 1096.216441][T27428]  ? __lock_acquire+0x6b5/0x2cf0
[ 1096.216454][T27428]  ? __pfx_evdev_write+0x10/0x10
[ 1096.216466][T27428]  ? bpf_lsm_file_permission+0x9/0x20
[ 1096.216484][T27428]  ? security_file_permission+0x75/0x260
[ 1096.216499][T27428]  ? rw_verify_area+0x255/0x4d0
[ 1096.216514][T27428]  ? __pfx_evdev_write+0x10/0x10
[ 1096.216527][T27428]  vfs_write+0x29a/0xb90
[ 1096.216544][T27428]  ? __pfx_vfs_write+0x10/0x10
[ 1096.216560][T27428]  ? __fget_files+0x2a/0x420
[ 1096.216575][T27428]  ? __fget_files+0x2a/0x420
[ 1096.216588][T27428]  ? __fget_files+0x3a0/0x420
[ 1096.216601][T27428]  ? __fget_files+0x2a/0x420
[ 1096.216617][T27428]  ksys_write+0x150/0x270
[ 1096.216633][T27428]  ? __pfx_ksys_write+0x10/0x10
[ 1096.216650][T27428]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1096.216663][T27428]  do_syscall_64+0x174/0x580
[ 1096.216677][T27428]  ? trace_irq_disable+0x3b/0x140
[ 1096.216693][T27428]  ? clear_bhb_loop+0x40/0x90
[ 1096.216756][T27428]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1096.216781][T27428] RIP: 0033:0x7f3074f9ce59
[ 1096.216797][T27428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1096.216808][T27428] RSP: 002b:00007f3075f1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1096.216823][T27428] RAX: ffffffffffffffda RBX: 00007f3075215fa0 RCX: 00007f3074f9ce59
[ 1096.216833][T27428] RDX: 0000000000000037 RSI: 0000200000000040 RDI: 0000000000000004
[ 1096.216841][T27428] RBP: 00007f3075032d6f R08: 0000000000000000 R09: 0000000000000000
[ 1096.216849][T27428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1096.216857][T27428] R13: 00007f3075216038 R14: 00007f3075215fa0 R15: 00007f307533fa48
[ 1096.216871][T27428]  </TASK>
[ 1096.519991][T23581] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1096.529021][T23581] usb 6-1: config 1 has no interface number 1
[ 1096.535274][T23581] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1096.548729][T23581] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1096.665234][T23581] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1096.674819][T23581] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1096.682872][T23581] usb 6-1: Product: syz
[ 1096.690042][T23581] usb 6-1: Manufacturer: syz
[ 1096.694722][T23581] usb 6-1: SerialNumber: syz
[ 1096.909168][T23581] usb 6-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[ 1096.917134][T23581] usb 6-1: MIDIStreaming interface descriptor not found
[ 1096.948818][T23581] usb 6-1: USB disconnect, device number 71
[ 1096.974045][T16498] udevd[16498]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1098.376872][T23573] usb 36-1: device descriptor read/8, error -110
[ 1098.787692][T23573] usb usb36-port1: attempt power cycle
[ 1099.358096][T23573] usb usb36-port1: unable to enumerate USB device