last executing test programs: 8m20.211794132s ago: executing program 3 (id=1325): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) getpid() bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0xbf93, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000080), 0x0}, 0x20) setns(0xffffffffffffffff, 0x4000000) 8m19.968687001s ago: executing program 3 (id=1328): syz_usb_connect(0x5, 0x46, &(0x7f0000000600)=ANY=[@ANYBLOB="1201100335fe6510ca1a8eb232920102030109023400010d0190020904329e0201039e0809050806100006040802230725010305f804090507020002040266072a0101030300b8eb"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x2, 0x1dc, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1ca, 0x2, 0x1, 0x7f, 0x88, 0xc, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xfff7}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x9, 0x1, 0x2}, {0x6, 0x24, 0x1a, 0xfffa, 0x14}, [@country_functional={0x6, 0x24, 0x7, 0x1, 0x8}, @mdlm_detail={0x81, 0x24, 0x13, 0x2, "4e026b59b3313dbfcb829bebca5378002a5d34a6ab8f985b6b22343c4fbce37490928ca1d1e2211a02dd43bb69da0b3e8da4d32e234b132aa5a99fce6c71232d0d049cca9662f70b05140e9d83c906e5912e30724cf36490b8e058fe64e93dad507ba1eb49d8afc7724e928b1fda97948a663acd1bcb02d7580af037cc"}, @mdlm_detail={0x18, 0x24, 0x13, 0x6, "2bcd5ec32dbf9cd8fc740b247b0669a623d0e535"}, @mdlm_detail={0xcf, 0x24, 0x13, 0xb1, "d1aefa45d8791ffdc9e46d2fba7063f18104b387af1d6428230f8b2f8b80696b2a18cf493dea41dde293ca2fa7974bcc739735fe3014b6a7688326fe08245e8b11ca39eb18f4a908b2bd1c4439fa0c9484fc398f2069fd83ed5ce970533054a62dab6c0496e81828e3b74fe17221b93e9ef4133cc1468816e513ea3d6d87a4d5abdeac112dd33dcdbb25c54468bbcc89f1312ce736eef1744e473529516d712c134807a44c326b6f67a86914d9704054a129fc0256f95e32cfadb6011d7fe40e1e4f90c8dd2974d44aa359"}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xa, 0xf7, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x4, 0x98, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x4, 0x8, 0x3}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x250, 0x44, 0xfe, 0xd, 0xff, 0x14}, 0x39, &(0x7f0000000440)={0x5, 0xf, 0x39, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x54, 0x3, 0x8, 0x7fff, 0xe}, @ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x2, 0xff00, 0x4, [0xff0000, 0x3f3f]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x19, 0x7f, 0x1, 0xc}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0xa, 0x5a, 0xf6d7}]}, 0x3, [{0xe4, &(0x7f0000000480)=@string={0xe4, 0x3, "1f25d56efcae8769b99c7c768212a7c03709e3be079544d7e15b0252095d9cf5c46b50975707f732f3063fc5e77569468c8879261955680bb9b49bde4da6df9418c4a57d169d3fccb49481d213dcd04699ac6bd85eb8e1771b0a085a128a3dbf6604f9823284b8eb17eb7ba947a60566994450231140de1d8b5474b4a75e7ae80c5808c67e114ebf02c202d1565d5ba1d482289f06231b9db31ae50ccf90ed2f7bf5db99c0d032d948681d9b9858c9593875f4f2d1d22a1bfedec1aa2f6bc8c94788de88d2be63c901b39cfab6fec6698d3a71c266a59eb6c62657a9c5950d459bd9"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x429}}]}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x60, 0x10, 0x403, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x80646}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private0}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x404ce90}, 0x20048040) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@rand_addr=0x64010100, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0xee00}, {@in6=@empty, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x6, 0x0, 0x200000000}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x40, 0x70}, [@coaddr={0x14, 0xe, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x104}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001c"], 0x104}}, 0x0) 8m18.175123899s ago: executing program 3 (id=1335): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007882b740422c0917b7ca010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x24, &(0x7f0000000140)={0x40, 0x9, 0x1, "a9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000000c0)={0x40, 0x18, 0x1, '$'}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0}, &(0x7f0000000500)={0x44, &(0x7f0000000200)={0x20, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8m15.379848571s ago: executing program 3 (id=1345): mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 8m15.066651129s ago: executing program 3 (id=1347): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0xffff}, {}, {0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x21, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 8m14.644533389s ago: executing program 3 (id=1349): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27, 0x810}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x2700, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 8m13.759455089s ago: executing program 32 (id=1349): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27, 0x810}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x2700, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 6m41.330138571s ago: executing program 4 (id=1828): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x2) 6m40.348229928s ago: executing program 4 (id=1831): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000780)={'vcan0\x00', 0x400}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040091}, 0x0) 6m40.147381236s ago: executing program 4 (id=1832): r0 = syz_io_uring_setup(0x31c5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x20, 0x27, 0x2, 0x0, 0x0, r0}, &(0x7f00000002c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000b00000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 6m39.203442246s ago: executing program 4 (id=1836): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0) unshare(0x26020480) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 6m38.290651467s ago: executing program 4 (id=1847): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x2, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) close(0x3) 6m37.906989922s ago: executing program 4 (id=1849): unshare(0x22020600) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 6m37.423792754s ago: executing program 33 (id=1849): unshare(0x22020600) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 33.507366276s ago: executing program 2 (id=3049): r0 = socket$igmp6(0xa, 0x3, 0x2) newfstatat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) getresgid(&(0x7f0000001140)=0x0, &(0x7f0000001180)=0x0, &(0x7f00000011c0)) read$FUSE(0xffffffffffffffff, &(0x7f000001b380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmmsg$unix(0xffffffffffffffff, &(0x7f000001b300)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000600)="d1dea0f87c6eee08d8168114551bc7b2cc8ba2ddd00c7a413ce74fb45e215fe43810035586af472322b0bb5f4b9fd96d8ef9705f4243aadeda5abed3393f47ef106ff4271b539761cb0c6db7e97c6fc9aaea28b805fe46bc1a2fdb77b6baf87256df528eafd7967c84447422d44b01c40525645a7a0a47174300b5db95e123ed8daa51c6fe7af7e473b68fc6fcbe8b6172fb4aad9d6a2591e62ac33bae79a016b875ed03e3a6e9c8cb81a4fd65e6", 0xae}, {&(0x7f0000000880)="f144240fb779dd14e0d666b5997fc169288372e1b93849ab0d37daf042c53f5e0e555a0078d401906100e2b8f420069cb6081694d974662e02349ab4918c4308447b8818851db9bdccce1271ae42629c3d81abc5a124fb32799cf5f08a40f69a77d698b4df95adea4a64aa7019e8d8a25da27d129b217928b7dea92fac71d6302e968328f869d6a53cb56333dba1a42f2d5e363c4fdba3cd6e0f98a5e83d8d0ce07165adbc74c394e9efc74578eb8f7c0ad597d4d59c7daa87e633f4950ab368510fa0c83f4b76db1fd87b6b73b752b5f7e4b9f05af8a5eb6933289d3f6167ddab", 0xe1}, {&(0x7f0000000a80)="c88771057aab335bf75e6145c6cf2b1026738499c8ca3dcc1c37d80e4210e82f074b40af9d8f99f9b150e4196748543bf7276c99c881ee21c4c5f5dbb5018c8924fe1b6b615f7c8e4ef3f512ee576a61cc6c96902ab9cca9f5dc2e6ba79506e57ad9f0403a53993cc567d8b500f5e6dc782d15ee3312904400fa2796e73c0093338ceebdf75bf185300d4f3fe43a42f21a6b9b61a738078db9435bc7bb07db24c6b8de23298d77b7b633d088780ad8d92da4ed557c6e2e7879479717", 0xbc}, {&(0x7f0000000b80)="bd79a3b348960e6cacd8edd39cc54dda16fe44e20c2bb71b1fe7a5a34f16d965f93b4554547a42c36ba6964f10626d26967e231a44e1464c255726fc9a39d2ffaa3d6c", 0x43}, {&(0x7f0000000c00)="72d7d2d257ae582a537e723295afcac1084b6d7ed52a56e28db4754081f7c48f8db761d0c0bfc683cf8524c063e4", 0x2e}, {&(0x7f0000000c40)="0a7ec1c35f820f6b6c4ea316d045b153a02c7bff07800971d1fb275c3a1ab066f05c9bf4d4875e52c0536668454a0b94a358aa78accf42a571e538b97f847548c9fa24059e565642f6c499c729c3c2634f19591eb9cb", 0x56}], 0x6, &(0x7f0000000e40)=ANY=[@ANYBLOB="1c080000000000000020000000000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32], 0x88, 0x8000}}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000f00)="68ab66c023d8384c2559ae556ec73be9825ce0b2ba8dd22cbbad2a22c51c48c10a0111d5f51a1b06dd61752bbce7e429979a47b966cccc409f74d5d667943464a941522227d21219f8f9eae232bb04f87b1cb869c818283488e900cab7fb72442cc97aea579a73bafc1f6bc2874b1f01a545906c0fa97e1ffe792e9e8cab", 0x7e}], 0x1, &(0x7f000001b240)=[@rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r0, r0, r0]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1, r3}}}], 0x78, 0x4884}}], 0x2, 0x40) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) setfsuid(0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=@getspdinfo={0x14, 0x25, 0x300, 0x70bd2b, 0x25dfdbfe, 0xffff, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x4008080) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a3100000000140005800800014000000000080002"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40008d0) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) r11 = syz_usb_connect$uac2(0x5, 0xa8, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x1ccc, 0x5}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r11, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r11, 0x0, 0x0) syz_usb_control_io$uac2(r11, 0x0, &(0x7f0000000800)={0x44, &(0x7f00000004c0)={0x0, 0x15, 0x1, "d1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r11, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000003c0)={0x0, 0x19}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xff}}, './file0\x00'}) read$nci(0xffffffffffffffff, &(0x7f000001a240)=""/4096, 0x1000) ioctl$IOMMU_GET_HW_INFO(r7, 0x3b8a, &(0x7f0000000080)={0x28, 0x0, r9, 0x1004, &(0x7f0000002b40)=""/4100}) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xfffffff2, 0x6}) 30.983442485s ago: executing program 2 (id=3053): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r3 = syz_ublk_setup_io_uring(0x81d, &(0x7f0000000040)={0x0, 0x30b5, 0x100, 0x2, 0x373}, &(0x7f00000005c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0xffffffff, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb351, 0x400, 0x2100, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2000400, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x40000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r7, '\x00', {0xfff9, 0x5e8, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) close(0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) 28.346661613s ago: executing program 0 (id=3056): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$l2tp(r1, &(0x7f0000000600)=""/187, 0xbb, 0x40, &(0x7f00000006c0)={0x2, 0x0, @multicast2}, 0x10) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x2, 0x7fff0000}]}) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r5, 0xfffffffc) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x40080) close_range(r4, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x8, 0x2, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa13, 0x40000007}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x5, 0x180, 0x2000000000000004, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x4, 0xfffffffbfffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f00000004c0)={r10, 0x0, 0x4, 0x0, 0x2, [], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) 28.020837764s ago: executing program 6 (id=3058): syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b02000105200809c04e143900000000092401fdff0811004708240a0000097f000904010000010220000904010101010220000905010940000204d80825018030cc00000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f0000000100)={0x14, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x335, @time={0x101, 0x10001}, 0x1b, {}, 0x2, 0x0, 0x6}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6, 0x5, 0x4, 0x0, 0x8, 0xa5b4}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40001}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x7, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x2c}}]}, &(0x7f0000000180)=0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r6) r8 = socket(0x10, 0x803, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd3f000000000000090e0000850000002e000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x8, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$AUTOFS_IOC_PROTOVER(r8, 0x80049363, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a30000000005c000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d3000000000000020000000000a03001000000000000000070000090900010073797a3000000000140000001100010000000000000000000000000a"], 0xc4}, 0x1, 0x1000000}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000000)) tkill(r0, 0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0) 27.8266224s ago: executing program 1 (id=3059): pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff}, 0x80) r1 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x8000) mprotect(&(0x7f000002c000/0x1000)=nil, 0x1000, 0x2) write$6lowpan_control(r2, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') read$FUSE(r3, &(0x7f0000004900)={0x2020}, 0x2020) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0xe2) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xe2) keyctl$chown(0x4, r1, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'lo\x00', 0x7101}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x48004}, 0x0) socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x6a, 0x1, 0x0, &(0x7f0000000640)) close(r6) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x5, 0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000010401e04df304000010203010902720003010910080904000000010100000a240106000a0002010209040100000102000009040905000b2402014004090100000009050109000405f70d0725010c09400009040200000102000009040201010102000009058209ff0305090807250104060400"], 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0x9, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000440)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000280)="691e", 0x2}], 0x1}, 0x20008110) 27.199011311s ago: executing program 2 (id=3060): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES16, @ANYRES64], 0x84}}, 0x240488c1) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000000d0a7a31000000000900010073797a3100000d00"], 0x2c}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) r5 = fanotify_init(0x200, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r5, 0x161, 0x8000000, r6, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x551a00, 0x1e0) 26.60314515s ago: executing program 6 (id=3061): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0xa3e}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x882) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000440)={0x0, 0x0, {0x3, 0x2, 0x0, 0x2, 0x3}, 0x4}) write$sndseq(r1, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {0x8}, @raw32}], 0x1c) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r2, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x0, 0x7, 0x3, 0x4, 0x3, 0x3e, 0xfffffff6, 0x3da, 0x40, 0x2d1, 0xd2d, 0x5, 0x38, 0x1, 0x78, 0x7, 0x4004}, [{0x3, 0x880, 0x4, 0x6, 0x7f, 0x2, 0x6, 0x7}]}, 0x78) close(r2) r3 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x208000, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x5e21, @loopback}, 0x2) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f00000000c0)={r6, 0x0, 0x4, 0x0, 0x8001}) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) r8 = socket$inet6(0xa, 0x3, 0xb) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r14, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r13}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x0) setsockopt$inet6_int(r8, 0x29, 0x17, 0x0, 0x20) r15 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r15, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) 25.496667138s ago: executing program 6 (id=3062): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000440)={0x0, @sdr={0x34565559, 0x8}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000304280100000000080000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r10, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r11 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r11, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f903, 0x0, '\x00', @string=0x0}}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='maps\x00') ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x50000, 0x14000}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(r12, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x21, 0xc, 0x0, 0x75, 0x81, 0x10, 0x0, 0x0, 0x82, 0x9, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xff, 0x0, '\x00', 0x7}) ioctl$KVM_RUN(r4, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 24.6182137s ago: executing program 5 (id=3063): syz_open_procfs(0x0, &(0x7f0000019080)='net/ip_vs\x00') creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000003c0)='system.posix_acl_default\x00', &(0x7f0000000600)=ANY=[], 0x2c, 0x0) r0 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x12) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000200)='memory.pressure\x00', 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000380)={'\x00', 0x0, 0x63, 0x6, 0x1000000008, 0x0, 0x0}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000400)=r3) write$cgroup_pressure(r2, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0xff, "810000cc2b000000000000fa25ffff00ffffff"}) r6 = syz_open_pts(r5, 0x141601) fcntl$setstatus(r6, 0x4, 0x102800) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) lsm_set_self_attr(0x67, 0x0, 0x23, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r8 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f2e, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r8, 0xe) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000002dc0)=@broute={'broute\x00', 0x20, 0x2, 0x14e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000002a80], 0x0, 0x0, &(0x7f0000002a80)=ANY=[@ANYBLOB]}, 0x78) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0xe8902, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) write$cgroup_pressure(r2, &(0x7f0000000180)={'full', 0x20, 0x2, 0x20, 0x1000000}, 0x2f) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x0, 0x0, &(0x7f0000001a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x31, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) pread64(r0, &(0x7f00000190c0)=""/102356, 0x18fd4, 0x1c) 24.065372363s ago: executing program 0 (id=3064): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x0, 0x7ffffdbd}]}) r4 = syz_open_dev$media(&(0x7f0000000000), 0xa, 0x41) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66667a4, 0x0, &(0x7f0000000fc0)}) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000200)={0x80, 0x0, r2}) r5 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmdt(r5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e0, 0xe4b, 0xa20]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100) r7 = fsopen(&(0x7f0000000000)='erofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000240)='source', &(0x7f0000000380)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\'Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14\\/\\\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x3, 0x323000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x4e21, 0x2, @empty, 0x8ac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r6 = fsopen(&(0x7f00000011c0)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec22ff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r7, &(0x7f0000000200)={0x2, 0x4e24, @local}, 0x10) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000400)={{0x84, @empty, 0x4e21, 0x3, 'lc\x00', 0x4, 0x9, 0x63}, {@private=0xa010102, 0x4623, 0x3, 0x100000cd, 0x12d5f, 0x3}}, 0x44) sendmmsg$sock(r7, &(0x7f00000005c0), 0x0, 0x20000000) writev(r5, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) mbind(&(0x7f00001b0000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000180)=0x81, 0x9, 0x0) 23.84894076s ago: executing program 2 (id=3066): r0 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000100)=0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="dbe104b35716e67da422221d3286", 0xe, 0x20008894, &(0x7f0000000100)={0x11, 0x3, r5, 0x1, 0x5, 0x6, @remote}, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000003800010326bd700203dcdf2510000008"], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x20004814) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r7, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x40010) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000300)="b9800000c00f3235000800000f302e0f0766b8b1008ee80f01cf26f30f09e3f366b891000f00d80fc76a30c74424000070ffffc744240200000100c7442406000000000f011424660f38800d05000000", 0x50}], 0x1, 0x43, 0x0, 0x0) 23.590603459s ago: executing program 5 (id=3067): sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80a0}, 0x4000) r0 = memfd_secret(0x0) r1 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000070904000001020d0000052406000105240000000d240f0100000000000000000006241a00000809058103000200fe000904010001020d00000904010102020d00000905820200020942f90905030210"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = syz_usb_connect$hid(0x7, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x32, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x90, 0x0, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0xd5f}}, {{{0x9, 0x5, 0x81, 0x3, 0x79f, 0xa1, 0x7, 0x80}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x8, 0x83, 0x6}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x2, 0x8, 0x7, 0xcf, 0xff}, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xfcff}}]}) syz_usb_control_io$hid(r2, &(0x7f0000000440)={0x24, &(0x7f00000002c0)={0x20, 0x5, 0x4c, {0x4c, 0x23, "aafb9850df283668d251c6775e2f9c24f9d16fe831cf2c29586b18a370f58db561789a1d63aeaee4bd319bd9524b4651a882dae40014188ae73ba38d5bb6062305800bc24adc4e5c8cd5"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41e}}, &(0x7f00000013c0)={0x0, 0x22, 0x12, {[@local=@item_012={0x2, 0x2, 0x0, "d5b1"}, @local=@item_4={0x3, 0x2, 0x8, "d3802a5e"}, @main=@item_4={0x3, 0x0, 0x9, "e193d688"}, @main=@item_4={0x3, 0x0, 0x8, "0be06073"}]}}, &(0x7f00000003c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x1, 0x1, {0x22, 0x256}}}}, &(0x7f0000000780)={0x2c, &(0x7f0000000480)={0x40, 0x15, 0x23, "d9450fd2f5a318dcaed98b5a33c63376438c696e4139e2c5465220898daf5b222183e8"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x97}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x11}, &(0x7f0000000600)={0x20, 0x1, 0x7e, "452af242f6efb241b1ee94bf0a6faeaadb866ba000977624320163423619f0b1969ea48e95ac3d9a595251b8bd51c1d11616969b8f61e4dc9f69c5bb00b28e385a1bfc49201500de4d63e312c99530b910f4c7a846c18bae4c9e6a8c59c1b07d2554fb26b2485b4148f67b539d8bf51374c32cb31577457a0629e2974364"}, &(0x7f0000000740)={0x20, 0x3, 0x1, 0x1a}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x480001, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='attr/fscreate\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x22, 0x3, 0x50000}]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) syz_clone3(&(0x7f0000000080)={0x1810000, 0x0, 0x0, 0x0, {0x20080027}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r7, &(0x7f0000002140)={0x2020}, 0x2020) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0xb30, 0x539, 0xf, 0x7, 0xf, 0x40, 0x2, 0xfff, 0x7fff, 0x4, 0x5, 0x8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b703000001000000850000000c00000095"], &(0x7f0000000000)='syzkaller\x00', 0xe, 0xff5, &(0x7f00000003c0)=""/4085}, 0x94) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x13, r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 23.346049224s ago: executing program 1 (id=3068): socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x1000000, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000000c0)=0x5, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0x3, 0x101840) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000080)={0x2, 0x0, 0x9, {0xe7ff, 0x0, 0x406, 0xadd7}}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r3, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000140)={0x28, 0x4, r4, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, 0x0) r5 = socket(0x2, 0x5, 0x77) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f00000003c0)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4e20, 0xfffffffd, @local}, 0x0, {[0x6, 0x0, 0x1, 0x2, 0x0, 0x9]}}, 0x5c) r6 = socket$inet6(0xa, 0x400000000001, 0x100) sendto$inet6(r6, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e1d, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080008006000000014040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x9}]}) fsopen(0x0, 0x1) close_range(r7, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 18.740183256s ago: executing program 1 (id=3069): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fanotify_init(0x200, 0x48801) fanotify_mark(r6, 0x1, 0x1001, r4, 0x0) write$vhost_msg_v2(r5, &(0x7f0000002b00)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x4}}, 0x48) syz_open_procfs$namespace(0x0, 0x0) r7 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r7, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x0, 0x81, 0xffffffff}) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r8, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x10000) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_usb_disconnect(0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0c032abdf500fedbdf250b00000028000180080006000000000008000700", @ANYRES32=0x0, @ANYBLOB="1400040000000000000000000000ffffffffffff08000200070000000800030005000000080003000400000005000500020000000800020003000000050005007f000000"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) socket$nl_netfilter(0x10, 0x3, 0xc) 17.625572327s ago: executing program 5 (id=3070): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r3 = syz_ublk_setup_io_uring(0x81d, &(0x7f0000000040)={0x0, 0x30b5, 0x100, 0x2, 0x373}, &(0x7f00000005c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) r9 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r9, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0xffffffff, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb351, 0x400, 0x2100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2000400, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x40000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r7, '\x00', {0xfff9, 0x5e8, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) close(0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) 16.945185131s ago: executing program 0 (id=3071): syz_usb_connect(0x0, 0x24, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc)=0x2, 0x5, 0x1, 0x0, &(0x7f0000000000), 0x1000000) r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x40, 0xa8, 0x0) lseek(r0, 0x0, 0x3) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r2 = memfd_secret(0x80000) syz_open_dev$dri(&(0x7f0000000040), 0x8001, 0x10140) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) iopl(0x3) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x1, 0x70bd24, 0x25dfd402, {0x0, 0x0, 0x0, r5, 0x64e98, 0x12ad1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP_WIFI={0x5}, @IFLA_BRPORT_VLAN_TUNNEL={0x5, 0x1d, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc084}, 0x200088c2) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c0002800500010000"], 0x84}}, 0x0) r6 = socket(0xb, 0x3, 0x140000) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000490004002bbd7000fcdbdf250a002000", @ANYRES32=r7, @ANYBLOB="6a92a144"], 0x1c}, 0x1, 0x0, 0x0, 0x4040040}, 0x56592a445bc89e6d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000d40)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0x201, 0x4, 0x8, 0x1, 0x20, 0x3}, 0x60, &(0x7f0000000b00)={0x5, 0xf, 0x60, 0x6, [@ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0xb, 0xf0f, 0xaf5f, [0xf0, 0xc000, 0x0, 0xff, 0xff0000]}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x2, 0xf00f, 0x6, [0x21, 0xffff0f, 0x3f00]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x5, 0x0, 0x4000}, @wireless={0xb, 0x10, 0x1, 0xc, 0x66, 0x8, 0x7, 0x6}, @generic={0xe, 0x10, 0xb, "db84d033f90365e63f0e48"}]}, 0x5, [{0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x439}}, {0x89, &(0x7f0000000c80)=@string={0x89, 0x3, "6cbced0828f21acd9bb2060d78e014af1d7e645a54e250b2b4d58d78823878aa6c2c5538a211e72ccea4d63fd15495e7e4f6391d06905f2fa83609ca4f019fa68f64bd9140eda0595fb517f42e87a31d746569db3ea63c06f6dc5a765799f458b013d3b9af3269334871873c1f0fafd10ad2634aa52a4da83686d17fd6b080ff28f48ceeb4ac01"}}]}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="02000000000080008000"], 0xa0}}, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, 0x0) 15.104770079s ago: executing program 6 (id=3072): r0 = syz_open_procfs(0x0, &(0x7f0000019200)='wchan\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000019080)=@file={0x0, './file0\x00'}, 0x66) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x1, 0x180, 0x2000000000000004, 0x10, 0xed, 0x50, 0x7fffffffffffe, 0x2, 0x0, 0xfffffffbfffffffe, 0x8000000000000000, 0xf4a, 0xa5, 0xbdb], 0x40000, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0xf07, 0x0, 0x1}) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000080), 0x0) recvmmsg(r3, 0x0, 0x0, 0x10122, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0xec14, 0x0, 0x0, 'queue0\x00', 0xfffffffe}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x24008050) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x2f8, 0x118, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xff], 'veth0_macvtap\x00', 'wg1\x00', {}, {}, 0x6, 0x7d, 0x0, 0x48}, 0x0, 0xf0, 0x118, 0x0, {0x0, 0x4c00}, [@common=@hbh={{0x48}, {0x1000000, 0x2, 0x1, [0x1, 0xfff9, 0x6, 0x7, 0x6, 0x0, 0x6, 0x7ff, 0x25f2, 0x1, 0x8, 0xfffa, 0xfffd, 0x6, 0x8, 0x40], 0xf}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x800}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x20}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0xff000000, 0x0, 0xff], 'veth0_to_hsr\x00', 'dvmrp1\x00', {0xff}, {}, 0x32, 0xf, 0x2, 0x12}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x6, 0xa9b, 0x2c018, '\x00', 'syz1\x00', {0x5fd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) splice(0xffffffffffffffff, &(0x7f0000000040)=0x7, 0xffffffffffffffff, 0x0, 0xfffffffffffff629, 0x9) bind$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x17, 0x0, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, 0x14) syz_emit_ethernet(0xe4, &(0x7f0000019240)={@multicast, @broadcast, @void, {@llc_tr={0x11, {@llc={0x6, 0x1, "19", "75af80c1458faeb17cab5c941cd1292ce203e774bbbe7a38fa32dd2898c2bb420db0572e3c6ec85c29e660736181812d0e0c9608c171f92660b2362dbd7ffb09b0a08bf900f737ab66a97355bf004739ed846e38e8b8a61325595baf4c3fdd3cbda49ebb65e48e31cd89089e4da126b344d00853de346a69bab2db12d56ee949fc9ffb44ef5355b17f14e0a94eac014cc0d2bb9076390e5e250e6e28ba63c63f249c792e251adc7cfe6d0400ab7952c83cf11420add7877a521f4a1cd90e66ed4f470d8b62672053cfebc29289e96e92efa3a9"}}}}}, &(0x7f0000019340)={0x0, 0x2, [0xc49, 0x72c, 0x779, 0x459]}) pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) 10.802653831s ago: executing program 0 (id=3073): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000080000000100f5ff0000000000000000", @ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r3, 0x107, 0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r8}]}, 0x20}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x400801c}, 0x4000080) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000700"/20, @ANYRES32=0x0, @ANYBLOB="04010100010a0000140003007866726d30000000000000000000000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000ffdbdf250100000000000000014100000018001700010000000000006574683a7465616d30000000eeb44147e1eacef687acb7db9c239a9b149db6ef946e78b647cd292bec3a5a6ef3af6c55f05c2dccebfe94d30cd00a71d9dcfa8d2d09ab15c58683183c8f8d3e70a9c279d89bb2f9915d3bbbf293d933120eb419b8f954b4f345da49e8647c62716198a55777cb55fa"], 0x34}}, 0x2800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8923, &(0x7f0000000480)={'lo\x00', @local}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x70}, 0x1, 0x7}, 0x0) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x104, r12, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xe}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan1\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffff9}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x3a}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xf}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffffa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x38b8}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x51}, 0x40080c5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) getpid() 10.783078451s ago: executing program 2 (id=3074): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000000c0)) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @private=0xa010101, 0x4e24, 0x1, 'none\x00', 0x5, 0x32bd, 0x9}, {@loopback, 0x4e25, 0x2, 0xfffffffe, 0x8, 0x12d5c}}, 0x44) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x8, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e0179832927deecf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236749b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ff7944f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990604b9f12033688caa0b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d600"}, @TCA_GRED_PARMS={0x38, 0x1, {0x8, 0xd, 0x20000003, 0x5, 0x3, 0x100, 0x7, 0x5, 0xdce, 0x1, 0xa, 0x1a, 0x1d, 0x0, 0xffff8000, 0x9}}]}}]}, 0x170}}, 0x24040004) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x77, &(0x7f0000000380)=ANY=[@ANYBLOB="12015002000000106307302040000102030109026500030168c0c00904000000010100000a2401ff0f0f0002010205240503"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x4c, &(0x7f0000000080), 0xfe41) recvmsg$unix(r8, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)}, 0x40002020) sendmsg$unix(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x20000080}, 0x40880) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) 9.985232107s ago: executing program 1 (id=3075): syz_ublk_setup_io_uring(0x7f06, &(0x7f0000000040)={0x0, 0xfb2b, 0x20, 0x1, 0x166}, 0x0, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000e6000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x3c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xc, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0x6, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x8, 0x2ea473, 0x2eb80c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r5, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x2fc247}) close_range(r2, 0xffffffffffffffff, 0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r7 = socket$qrtr(0x2a, 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x10, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x1c}}, [@alu={0x4, 0x0, 0x4, 0x6, 0x6, 0x18, 0x8}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x42}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$qrtr(r7, &(0x7f0000000040)={0x2a, 0x4, 0x7ffe}, 0xc) close_range(r6, r7, 0x0) socket$inet(0x2, 0x80001, 0x84) 9.186573617s ago: executing program 0 (id=3076): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x504, 0x4) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(0xffffffffffffffff, &(0x7f0000000800)={0xa, 0x4e24, 0xc0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xc58e}, 0x1c) writev(r4, &(0x7f0000000780)=[{&(0x7f0000000840)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}, {&(0x7f00000006c0)="e0fb38a8687d08adc98d824715dd517262b66c112fa38c9570632a26b38822e603655510dc40839bfd04523642d66ae5c572cfa44b1c423ae0533963f3e966df1f216b1f10a7b6bc7b9f7d8ee98d18e33fb365bd5fa824c42f2d0a6bc074218c1e2070e75a9fb72445986a19ae6de63c5a64159a905d63e347c54f5a89052b30bcc913c0239a335562a97a28bb64ba1ef64dde86412d7c23b69eceb0ec0e62781b16a3882b0bd91b03c99ea8c6800f841a39bb0de8", 0xb5}], 0x2) syz_open_dev$sg(0x0, 0x0, 0x40100) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) preadv(r5, &(0x7f0000000300)=[{&(0x7f0000000680)=""/15, 0x45}], 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000640)=""/13, 0x2}, 0x20) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r3, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) 8.497760114s ago: executing program 5 (id=3077): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) inotify_init() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000480)=@attr_other={0x0, 0x1, 0x1, &(0x7f0000000440)=0x6}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x154, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x2, 0x12, 0xfc, 0x3}}, @TCA_CHOKE_STAB={0x104, 0x2, "0600000000000000b3da2c64426a1d777a61e2fad4599fb11a71e149072d265bbcf090bd7bbe0e5d2de66213d88d7e773024ba3482c95f5dc6359186172ae22ed9616876e0ec13f573a7c2f0d185109a8457e43c5390e59a84747ee7b311ecc2f8bac84497d72789a3fa4ab2e321de479655bda89963ae5f37684f73a07ca9d223dfe04aae9e1ff7f8441133075f4355c81d80a33e4907edd482cafffa6cf279ea06d0d17b9770d10d6978345f4fb5f2b61619e5e3b4b4090c77e69d028f41ab371e8c6bef4485fe557e260ff37e8f6a854d0b686963dcfea9a71953940f9d6ec1de1d4e2221adfd549d529a594013b2dcde2d070f6ba92fcbb700"}, @TCA_CHOKE_MAX_P={0x20, 0x3, 0x10}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x24040800}, 0x40020) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x2a809000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') ioctl$KVM_CREATE_VM(r7, 0xae01, 0x6) read$FUSE(r7, &(0x7f0000004100)={0x2020}, 0x2020) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x20902, 0x0) write$sequencer(r8, &(0x7f0000000200)=ANY=[@ANYRES32=r8], 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r9 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r9, 0x5411, &(0x7f0000000140)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000100fffc0900010073797a30000000002c000000030a010200000000000000000100fffd0900010073797a30000000000900030073797a300000000054000000060a01040000000000000000010000000800a615cf595a115ecb9da40b40000000002c000480280001800a00010072616e6765f6ff001800028004000380080001400000001008000240000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xc8}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x6, 0x8400) eventfd2(0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x4, 0x10100) 6.106979751s ago: executing program 6 (id=3078): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x82, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x4, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) fsopen(&(0x7f0000000200)='adfs\x00', 0x1) close(r3) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000400)) getpid() socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x20000080) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f00000001c0)={0x1d, r5}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000000140)=0x1, 0x4) sendmsg$can_raw(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xd209f6d83486bb56) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20d42, 0x4) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}, 0x50) syz_fuse_handle_req(r6, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f000000a380)="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", 0x2000, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x78, 0x0, 0x9, {0x1, 0x800, 0x0, {0x5, 0x4, 0x5, 0x0, 0x90, 0x1, 0xf, 0x4, 0x8, 0x8000, 0x6, r8, r9, 0x8, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) 6.006816471s ago: executing program 1 (id=3079): r0 = syz_open_dev$rtc(&(0x7f00000001c0), 0x0, 0x440) ioctl$RTC_UIE_OFF(r0, 0x7004) r1 = socket(0x400000000010, 0x3, 0x0) r2 = syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff038}, {0x20, 0xf, 0x0, 0xffffefff}, {0x6}]}, 0x10) timer_create(0x1, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg(r5, &(0x7f0000000180), 0x4000190, 0xc03e) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lc\x00', 0x1, 0x400000, 0x4}, 0x2c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r8, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r9 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, 0x0, 0x0, 0x237, 0xe4, 0x18, 0x0, 0x12}) unshare(0x20000400) 4.369921672s ago: executing program 5 (id=3080): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f06b5c01000000090401001186eeea000905821704"], 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000180)={0x28, 0x245f6e86cba75af9, 0x0, 0x0, 0x6, 0x9}) unshare(0x2c020400) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) unshare(0x2000400) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) splice(r2, &(0x7f0000000140)=0xffffffffffffffff, r3, 0x0, 0x1, 0x0) r4 = creat(&(0x7f0000000480)='./file0\x00', 0x4) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x19) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000000000000000050006"], 0x44}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES32=r2], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000340)={0x7, 0x0, [{0x40000001, 0x5dc0, 0x7, 0x8, 0x7ff, 0x700c, 0x9}, {0x40000001, 0x9, 0x4, 0x3a9, 0xa, 0x6, 0x8}, {0x80000008, 0x5, 0x2, 0x7ff, 0x1, 0x0, 0x1}, {0xc0000001, 0xfffffffd, 0x7, 0xff, 0x0, 0x8, 0x9}, {0x2, 0x100, 0x5, 0x5, 0x8, 0x1, 0x400}, {0x2, 0x6, 0x0, 0x3, 0x2, 0x4, 0x2}, {0xa, 0x6, 0x0, 0x51, 0x7, 0x5, 0x5}]}) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060003000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000580)) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000240), 0x3) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="fedbdf252e814c00"], 0x14}], 0x1}, 0x4008840) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r8, &(0x7f00000011c0)=[{{&(0x7f00000004c0)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000500)="00e325289fb4d1bc00e02c640fdfbd2cdf6e2e9201fbe878062a6f97595f0f4e450b2f36d53276dcfeee7803c53382aae94c2cbf61d5c8796e2669af563c74d282", 0x41}], 0x1}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001180)="1b", 0x1}], 0x1}}], 0x2, 0x4000) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x42, 0x0) sendfile(r9, r9, 0x0, 0xa) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f0000000100)=ANY=[]) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000000)=0x22) unshare(0x200) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) 2.070399526s ago: executing program 1 (id=3081): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x0, 0x7ffffdbd}]}) r4 = syz_open_dev$media(&(0x7f0000000000), 0xa, 0x41) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66667a4, 0x0, &(0x7f0000000fc0)}) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000200)={0x80, 0x0, r2}) r5 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmdt(r5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e0, 0xe4b, 0xa20]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100) r7 = fsopen(&(0x7f0000000000)='erofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000240)='source', &(0x7f0000000380)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\'Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14\\/\\\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0) io_destroy(r7) io_destroy(r7) r8 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b7403340861a22753635f10203010902120001000000000904"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$printer(r9, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x20, 0x0, 0x18, {0x18, 0x10, "f414af86bbaf77043fe772b74ef85ae68a9c3914a746"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x425}}}, &(0x7f00000002c0)={0x34, &(0x7f0000000140)={0x0, 0x5, 0x13, "7f4730468d75ba633abb417514f20480867a56"}, &(0x7f0000000180)={0x0, 0xa, 0x1}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xd5}, &(0x7f0000000200)={0x20, 0x0, 0x17, {0x15, "caafabc7ab1b7637bd7e9897dea750ff0ca9c63c4e"}}, &(0x7f0000000240)={0x20, 0x1, 0x1, 0x16}, &(0x7f0000000280)={0x20, 0x0, 0x1, 0x9}}) socket$netlink(0x10, 0x3, 0x4) 121.864845ms ago: executing program 0 (id=3083): mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8005, &(0x7f0000000000)=0x3f, 0x9, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0xf8, 0xf8, 0x468, 0x468, 0x1e0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @local, [0xffffff00, 0xffffff00, 0xffffffff], [0x0, 0x0, 0x0, 0xff000000], 'macvtap0\x00', 'ip6_vti0\x00', {}, {0xff}, 0x6, 0x7, 0x0, 0x24}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private1}}}, {{@ipv6={@mcast2, @loopback, [], [0xffffff00, 0x0, 0xffffffff, 0xff], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@mark={{0x30}, {0x14, 0x2, 0x1}}, @common=@inet=@ecn={{0x28}, {0x0, 0x10, 0x0, 0x8}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x19904000}}}, {{@ipv6={@rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x3a}, [0x0, 0xffffff00, 0xffffff00, 0xff], [0xffffff00, 0x0, 0xff, 0xffffffff], 'rose0\x00', 'batadv_slave_0\x00', {}, {}, 0x0, 0xc1, 0x5}, 0x0, 0x120, 0x160, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x4, 0x3, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x8, 0x8]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x10, 0x10001, @ipv6=@private0, 0x4e21}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x9, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001800dd8d000000000200000002000004fe0000060014000008001e80"], 0x2c}, 0x1, 0x0, 0x0, 0x40084}, 0x4000000) set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300), 0x106, 0x8}}, 0x20) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xc0202, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="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", 0x200}, {0x0, 0x20000}], 0x2) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r4, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000280)={'sit0\x00', 0x0}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x80000001, 0x162842) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001ac0)={r5, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e00000010e200", [0x0, 0x400]}}) ioctl$LOOP_CLR_FD(r6, 0x4c01) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f00000002c0)={0x8, {"8a58c5a9e86b7ef6e8411d6728e6e290125c601288ab30df32fc51976be76cea2f951b33e3841e9f72291843a840924c4e1054e735e758132481eda5d901085c05012aa70c2789dca4ce33ed11d6d0e8231217cbbe0cfc7628cf5d6d70792ce608a6beb05769b42423e557f805fc8960614ac0a5779dc705777b876d4e5a756424710012190f40abe31cc7de4cec734319e964aa72068406e30d4b1bce9217c81d6b4e52f7ca1446edd7b4a245f71ac7304877a0f3123aed366e39fadaaacbce0aaf7f0cb0df482ff01a30640551b5ffdca47abaad64602d15355927334cfa808f54095a2215904cd9c1491d189a1e32f3ea7434c8fef8ce05c5c934fb300ff0dd744c423eb4dd6eecb666cb7282de267528dfec922c4d037bb7b44c04cf460f7dba631ffcac667c381c73585a5065d3f2e044dcb700112a69371c11f9e38c8e42cb66c15742ec2f918970dd65ee2dd9fd72e1aab679851a040a3cc27d99b95edc89310c517310799bff2117e2b2b1360f97217b481e4f1bbe31682658a756b69ac8a11261aeeae21c3ee6d89ce022bc582c9513d3aded4880ea29b4c4135ade64ca7d9d1939305d0e522e5ca4c1fa546972beb76f0d4644c1b58febd2010b358e748f18c47ad0c04935f54c7e270435cac57b02eb4026882981807933ea51fb268af188ffb8b89e2159880c8a103c520cc432982cc62ab6eef25e27eb107a7d68eb4d40f111e20ea0e9c032c450b2eb35e0f3d3026c0f08e61ce2635f2a8cd4bb0b3143c20ff6e6893b7bcd13a1e7acc94743f7843b56d4162efbe2447ec2f58e47a1466f2e25a98938a8ed7892901f34ef322440bcbcbec0343d75bfddb5b731c21bca1534706d5c227164a85f29ccba3d9cb9b881524376ed968cfe4f9de0cb2aca040066bdc145d6741067ebf3a4c7eeb0d6f9bac10f630ae4c0d9a53c27bd82d3a13b5c8a9216b3d73b8a94fb7df17b953ba915b0592d6bbf9ed5d1a703fb272216212431692918ad95e85c616c7f4f1907b58b80483cd1a244a6f48c29a6cbd795112bec0aa4f05fcd66a72d6be48b35648f83be9cac6c74579ea2d859bd5a172963400c178da395a41e05d7aac5e08c40532cfe187cd9e49adc8f1fbd9ab5eca4b24b9bff231780e8b41429697935c6dfa7233c0b1ce362af190e227701d2a2660d15882f965f4b137c63b1b6e0027c694567fd2b6f536ca41d87836d94803170d91d2ba9752700aff79e042adf10aeaef76237ec25116f7634ee6fa6861e5c99651efe8b5fea45f1dd64228fc010068205129027f961e86ef3f37936702eb00719e5e95299d4e74aae067e3a999f2c891bc0778e9c537655d443f2d8072288e6afba8f4b584e82a1508607b79a1ca36a347040f09b923e063c3e13fb3521617bb5a06d9c8622a93f24c9b1e4553cdeaa42ff736cf5cea524e0c185923562294e9dc0e1cdeedac8191899f742cb7c118637aa85cecd1d8e68a52a3a651e55f950bb23ec484d712563c1e0c5ea8216b7d7e4d9d3c581a490b4d2061050f46abec59760c15e65a5efedbf56602e3c346bcf2c37cb7722f4863624f7e019a22e426e7a27769d152f8631f4cf73b94e875434dde82612c6578a60d98472c036115471bded49c127a1de82181c9b38eeca15e1d5bcf214ba5bcc8a709f5ab0d7615676b02abb1a5fa14e60008413ae25a252f0c3d6a3aa87d649a72864beb0fcb56942be8c2ed3b00eb81eb5fd0fad15a4dc406702fe0638efdb81f1ed66d3e16521a4d0f23285c610a2a6f12fe3dae9e5f85b3576afd1a66be283e461f06e6729dd1a07cd918a20cc092fb8dc3f770dca9ed3634d190f38ad789eeac09cf269ed9333ab6813afe77ab276c40697bab5385cafdc3b6b2919f0b6cc574e0a6cb55aabc803d0e478b6e171f75b0071f5dc29cf4e4956fc6dcbdafc8d8f98b01e88545ecf10394e591ab899a53cfba1a6fa2e6e959a7940f277f9c962c1148d0d6e3b2c077f78e8492946403f7503eeecf6fcf0fc94faf966a58a50f8903a949c0b913022f65deb8873066f49ed21563ab353ca9bddae562a6dcb456ce884f2a72f57132c0eef7f18d1888541452c8e9ec1ab6460a5f67853e51f85ed0d24a496cb723d425e658d5ef07ee0b9e5147d27e3e8e726b661192be6af7e96996b65530999ed11401fc949a58eb59189639b8a0e94b3f8da7f5b2dde9622dd73abb4469996b14d8ef399715ebb4fc925f277370f0d58c8a4eb58af412681eeb4d702ccdb17b4124f49d8f24bc330da9508325fa89404eec8773dd9465b0552b9e193a65705776c0e2b23ea4794f3152786da7b9b9adb957996081b77a8203ed07761c0fbf37f2ab987c18e649d5c8b4386fe0f24261210e1533e6aeebafb13458553e257b4c2875c56585f0b94770f4ef169d1d177605d59c2d40e7dfa3c9340ce3bf869f6c145c2544b6b5af3fd3a3c5b3e402f838cf014340145705ce85fc6b8ecc5af151d224eeeb7a0f4c3a19d09a95d9360e15312fe517a48b9bd08515940c55489395e9851727b78cc350f7f1aac198bf55c8ab1e7e4c9501fef35ddf54714984078d6718409520b3c96b5d7db8359caeb76d6194f8cf9d160393c40b68cc5599c30b129bad6701fbfe4cc721e98b2ebb2d372e989ff1b7f5d2e46143b8677998985af0cbb59025ea6508abe2ef858a071f6d8dbba273a5c97c032ded5c37944692ece86fd8d45f096291fe445673116f858a25b6525b0db7e1b69b4da4df3b46ad0ee16e1c5cbf44b5fb25714b67a300b26030bde59c42339072207a8fe0ff2252f467097a81befc617a0798ee2743627d88b5bbe0347c3642456be4fc969ac7b5b8a0c69fd7e2b8cb19b5d62b4a4e2c19f11b11c48545c2b44bb32d89e46692491034a70ead9ed4e2806f673af7b78a754d53c46a79de94412a1f7030c5448e3088898a067fd9bd8a5317a0a84e5d544a4d97b67fd5c372bc183c3fc8019243d29b8347fddeaea4f41f2225534b3a9418457688ad40157ce3d7a66de83ebbb859fe5b3095248c00d13c0d078d710862d3c7e898b1787e0f4c82dfe6ae33ef236234366ce53999817e68957d14dfa8851c2f67271563c87161718d4bc47340d2dac6af2a53e17fc9eaef5ffbd0cad9b496fbfb78d1f9e124f51b26b38a75dd2358292123701430bb72d1d498e837aab8c00c4bf069fc49297e75570f0efa27029a60245e28091ac61c1b099454ed98dd38e6c6c5fa7676ce587c4e0e3b696fb9784276e0775a85ff1a2540a23416f17e084ef5d0c45f857e78bbc47c4aea7e46e699998909212f7dc414ddd53424d83cc6ff99dcda2ac6ef8c104f733f74a95eb61c728691f9e51fbcd5f8d6d5a137a05913bb685f925a3a758934b621a883de2a01da8da054dce8cdebc9413f80fe1171050cd98d2a268b043f0b5178c6f51fe03ae0393de23c377aaa00981c3ad2a680d3c93f2c825fad2542740e496a697b803ebb148e276fb6be38a366c6e33e6e0a096f3f1c0bd752ae4c3318535a53621f87b7a10907d4562da10e1639148cfc80d5e4d39715edbccea0cf30d07c7e4d95a87c24d4c8f5abcb6cc9bd821069ac8cc02676a925b0fc7cb768ae73803435dc1a44e312b9bb3cc97dfd8975ee6a2219b8f05c7cb98e16713aafd093333944626f586062834bf6e88044a2939e4cebcfac5589bd756771b33009da6bcefc8df577b629a4ccd381f931f67abd7da0b35fc12e371be7cc996b7ff372bb4c3370c09dbaca15fe674ccae4f06fbdd933091b8dc635077ee91e12ed6c0a16741f2e99fa8f134966e7b0de1befb3afd62b3f6d87f1501ef164e85fa6e9d899be8eb532141bb70dcb2743bc4767c74973fe81b106b75854a3a4538e64969b9572ab986c6549f453a81cb88eab43b0896bbd372a08207929870720e90d97bc4a2837ff20c742ca0d30a75c25542dd40078f19a6d0cdf81889d4a672d48a88e30c2e344733bea8a6828ffabebcca339694d34cb21c79326dd03deb057e021780f4301c25b4adc6070ad7500f855d388084dec0950ae6fc26cabacca6c4f8f43acba90e75be40a7d82c83b739cbcd45eb8049c2574bc3db0902b8b2c0e474021d42d271905c6b1a59191e6d6bebc223799bcba3bcfb66e7f199b7ceff88f514b4a2c1029a2b506df6636fcbd32e0b2902eeeb0d61e33d7693e104663d11d8f1f284934d14bd00e9359f41111be588dcf79d16ed7c8fd8c7b596805acdce10d897fdd5228838b8467ad218c623f57b5c61c93841c9d793ec72e8a2310f79a0ccc878e8bad720a315e5b55ce71dae995a3e72ccec8c2f9f67f5c5cddcc9e9962673e79e481d918115db8f854089fd0bf7f716f30fd4de26b06963f7b9df81ee50683ccbf4452d9789c2ea169fc6166065a8c8c4f9298301e73866e6a43a1b786a3f4769b81b1ccd3348b5247783725fd115406671da7726aa3a343c4b82af55b47deec3a784fc99f506a5b6854aa0bd0c6104e4f40d1f6232e6f1fb858116e8cb56ad3012cab1816c0f2658255603d31f4d99717dfc5f84eb454dda8bfed3ccb2e5f1b7cb64dd45d7c2601a24fa5c7884c9cc90c84927a171a7b168d8c91b1cb490bbd422f7573b79279c0a4d081dd40bb62b2e67da659c08be6964f9f5f9b51cc4a2bb22e172c8c882e064af13cd74dbca2a2bde925636a405fc03e1e28b4c23f6265d1f0eceeb0f44a73a09a140660abeb3d0ba588807065f15d4be26d266c54e21d07ad5287e6ceaea2e7fa494bdf6e6240f3d94c8352922335d242f9f9124072c47b6059eb0a1ba42dba8f97df8b972cf611088e815e5bc1c5c974c0efa43de4474aea59920cc2cc92efa074de2ec49503b76c4fd2f07c54391bb044cb73d01912009a9bae66a3dbe420a0bdf4e6850356dc51db0ada737caf2ffea4ff70deaf7a8e73c3c065c18c9041356cb19b7322eb30e1628b94eda7b13db096e5f96c79c3e2025b541fa8bc51fd4c38b3e964f5b5f911d5e3f2d12de6a09d5fe3189ae772dc8932ad2936c2d3437280022b80bafaf1d051ee85ca98646a1c1ebbf66605e77409c933f6b43470e1fc76a6743c00c14daaee696a0a6c40108d8b119fe0893d658f211cf82d978dcf7b3a12fc88e866299526915f0558d1c3ef94561866ecedfe75e38dd1adf7e1a7ad3c9f9cf97d419d4e6a405a567881ea5928fa36ca010177ea109fef175425de5955705f25ad253498ccb49892f24830d7cf59d4b29144581a35b86f1f2dce357d164b26006c58b4a8daaa21fd023627d26834a8eb0b9ed88e2eae4f65d5c4275714a210d4d5169835f62e74190541487c3ac8096a6f6d6370bb01dbff490005d7bc67ac09bac904b4087e728ec864ba0eaac5695437f6e29439fcb4f536b04c10da91d7f2320f52927171618e046b8330bf4b308aac27a14fb4af6aabdc3ab40fe3a708832f026c1683d05e71dab1fd73ae31ef8ff952e0b32e95fbd3cb1120a25acbdcf2936fab1be8f1a8deb3d72d1f169bdf36a49a8430c1b3197d1ba3c2f0b6d212bb09aad723d95dde316e260fc061fecf0f6f4f327a2d1b44a4da191c0e6f99a612070cb7007a9105e06490083b8fb1c53132a4c28710b3834745ea428a23aec83703952da49d885a8254f0013f66389ba8d4e7c90e83d4c5c62accc5cfa1e3cbc5d12c97671f7d0a113b9f38e836c8dff51c2ff0e1c7f2e140bbf4f1cd4a599c9e7e26c9a343ab8e303854c05aa32047b52bbb6390627f125e62e9156803914a7cab0458bdaf1470219466aee1104b60776cb0731", 0x1000}}, 0x1006) write$UHID_INPUT(r7, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) bpf$ITER_CREATE(0x21, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv4={0x8902, @icmp={{0x5, 0x4, 0x0, 0x4, 0x30, 0x65, 0x0, 0x2, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0x3, 0x0, 0x0, 0x6, 0x1f, {0x5, 0x4, 0x3, 0x3a, 0x7ff, 0x66, 0x1ce2, 0xd9, 0x2f, 0xe5c, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) socket$netlink(0x10, 0x3, 0x10) 0s ago: executing program 5 (id=3084): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000012640)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x28, r3, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1000, 0x31}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0103000000000000000001000000080001002d00000008000300"], 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) syz_open_procfs(0x0, 0x0) unshare(0x66000080) r9 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'tunl0\x00', 0x0}) r11 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000000)=0xd) writev(r11, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000001c0)='H', 0x1}], 0x2) r12 = gettid() accept4$inet(r0, 0x0, &(0x7f0000000400), 0x800) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r10, @ANYRES32=r10, @ANYRESHEX=r6, @ANYRES32=r12], 0x28}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x58}}, 0x8000) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): dVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 739.570659][ T9] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 739.581408][ T9] usb 1-1: Manufacturer: syz [ 739.595565][ T9] usb 1-1: SerialNumber: syz [ 739.749500][ C1] usb 2-1: tower_interrupt_in_callback: usb_submit_urb failed (-1) [ 739.778907][T10477] usb 2-1: USB disconnect, device number 82 [ 739.827991][T10477] legousbtower 2-1:14.228: LEGO USB Tower #-160 now disconnected [ 739.882471][ T9] usbhid 1-1:36.0: couldn't find an input interrupt endpoint [ 739.915385][ T9] usb 1-1: USB disconnect, device number 81 [ 740.465201][ T5728] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 740.628129][ T5728] usb 3-1: Using ep0 maxpacket: 16 [ 740.681717][ T5728] usb 3-1: config index 0 descriptor too short (expected 37359, got 202) [ 740.725914][ T5728] usb 3-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 740.778424][ T5728] usb 3-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 740.849925][ T5728] usb 3-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 740.894957][ T5728] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 741.000937][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.084416][ T5728] usb 3-1: Product: syz [ 741.116831][ T5728] usb 3-1: Manufacturer: syz [ 741.153329][ T5728] usb 3-1: SerialNumber: syz [ 741.239397][ T5728] usb 3-1: 0:2 : does not exist [ 741.612758][ T5728] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 741.922653][ T5728] usb 3-1: USB disconnect, device number 101 [ 742.039441][T14785] udevd[14785]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 742.786669][T15143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.842413][T15143] 8021q: adding VLAN 0 to HW filter on device team0 [ 742.983772][T15143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 743.014183][T15150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2747'. [ 743.416599][T15143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 743.483556][T15143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 743.538559][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 743.547656][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 743.681612][T15143] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 744.446163][T13152] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.453351][T13152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 744.467454][T15163] kvm: pic: level sensitive irq not supported [ 744.467761][T15163] kvm: pic: non byte read [ 744.504715][T15163] kvm: pic: level sensitive irq not supported [ 744.504804][T15163] kvm: pic: non byte read [ 744.522523][T15163] kvm: pic: level sensitive irq not supported [ 744.522603][T15163] kvm: pic: non byte read [ 744.538183][T15163] kvm: pic: level sensitive irq not supported [ 744.538267][T15163] kvm: pic: non byte read [ 744.561245][T15163] kvm: pic: level sensitive irq not supported [ 744.561329][T15163] kvm: pic: non byte read [ 744.578167][T15163] kvm: pic: level sensitive irq not supported [ 744.578283][T15163] kvm: pic: non byte read [ 744.590024][T15163] kvm: pic: level sensitive irq not supported [ 744.590122][T15163] kvm: pic: non byte read [ 744.613283][T13152] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.620470][T13152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 744.715894][T15163] kvm: pic: level sensitive irq not supported [ 744.715974][T15163] kvm: pic: non byte read [ 744.745951][T15163] kvm: pic: level sensitive irq not supported [ 744.746038][T15163] kvm: pic: non byte read [ 744.796143][T13152] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.803495][T13152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 744.918678][T15163] kvm: pic: level sensitive irq not supported [ 744.918775][T15163] kvm: pic: non byte read [ 745.820952][T15162] netlink: 'syz.0.2750': attribute type 12 has an invalid length. [ 746.393186][T15170] loop5: detected capacity change from 0 to 7 [ 746.588644][T15170] Dev loop5: unable to read RDB block 7 [ 746.604215][T15170] loop5: unable to read partition table [ 746.627244][T15170] loop5: partition table beyond EOD, truncated [ 746.643767][T15170] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 747.082634][T10477] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 747.281003][T10477] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 747.314879][T10477] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.344530][T10477] usb 1-1: Product: syz [ 747.360818][T10477] usb 1-1: Manufacturer: syz [ 747.376935][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.385891][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.401442][T10477] usb 1-1: SerialNumber: syz [ 747.432926][T10477] usb 1-1: config 0 descriptor?? [ 747.885615][T15184] netlink: 'syz.0.2755': attribute type 1 has an invalid length. [ 748.222919][T15197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.237874][T15197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.592325][T10477] usb 1-1: Firmware version (0.0) predates our first public release. [ 748.651307][T10477] usb 1-1: Please update to version 0.2 or newer [ 748.843632][T10477] usb 1-1: USB disconnect, device number 82 [ 749.105154][ T5728] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 749.278294][ T5728] usb 3-1: unable to get BOS descriptor or descriptor too short [ 749.312742][ T5728] usb 3-1: not running at top speed; connect to a high speed hub [ 749.345978][ T5728] usb 3-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 749.410603][ T5728] usb 3-1: config 1 interface 0 has no altsetting 0 [ 749.447457][ T5728] usb 3-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 749.475715][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.484146][ T5728] usb 3-1: Manufacturer: а [ 749.532886][T15211] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 749.543901][T15211] ALSA: mixer_oss: invalid index 137438 [ 749.549634][T15211] ALSA: mixer_oss: invalid OSS volume '0A"wYT' [ 749.557862][T15211] ALSA: mixer_oss: invalid OSS volume ');xiP_ngK' [ 749.566153][T15211] ALSA: mixer_oss: invalid OSS volume '`N5F>! @xeROAļ;1' [ 749.605706][T15211] ALSA: mixer_oss: invalid OSS volume 'i6ҝd)u' [ 749.644025][T15211] ALSA: mixer_oss: invalid OSS volume 'hAfq' [ 749.668057][T15211] ALSA: mixer_oss: invalid OSS volume '' [ 750.951709][T15227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.968381][T15227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.045383][T10477] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 753.222604][ T5728] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input120 [ 753.306432][T10477] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.385102][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 753.396485][T10477] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 753.472648][ T5728] usb 3-1: USB disconnect, device number 102 [ 753.478904][T10477] usb 6-1: config 0 interface 0 has no altsetting 0 [ 753.516460][ C0] appletouch 3-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 753.535160][T10477] usb 6-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 753.650356][ T5728] appletouch 3-1:1.0: input: appletouch disconnected [ 753.663952][T10477] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.746419][T10477] usb 6-1: config 0 descriptor?? [ 754.295592][T15261] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 754.302149][T15261] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 754.316701][T10477] chicony 0003:04F2:1236.0043: unknown main item tag 0x4 [ 754.323830][T10477] chicony 0003:04F2:1236.0043: unknown main item tag 0x7 [ 754.335053][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 754.352671][T15261] vhci_hcd vhci_hcd.0: Device attached [ 754.370242][T10477] chicony 0003:04F2:1236.0043: item 0 2 0 9 parsing failed [ 754.421764][T10477] chicony 0003:04F2:1236.0043: Chicony hid parse failed: -22 [ 754.456413][T10477] chicony 0003:04F2:1236.0043: probe with driver chicony failed with error -22 [ 754.466052][ T5728] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 754.569607][T15262] vhci_hcd: connection closed [ 754.570083][ T13] vhci_hcd vhci_hcd.6: stop threads [ 754.595250][ T9] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 754.613815][ T13] vhci_hcd vhci_hcd.6: release socket [ 754.636308][ T13] vhci_hcd vhci_hcd.6: disconnect device [ 754.655293][ T5728] usb 3-1: Using ep0 maxpacket: 8 [ 754.672518][ T5728] usb 3-1: unable to get BOS descriptor or descriptor too short [ 754.690826][ T5728] usb 3-1: config 4 interface 0 has no altsetting 0 [ 754.703892][ T5728] usb 3-1: string descriptor 0 read error: -22 [ 754.719801][ T5728] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 754.755556][ T5728] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 754.765818][ T29] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 754.832080][ T5728] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 754.896997][ T5728] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 754.935915][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 754.951242][ T5728] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 754.963228][ T29] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 754.989611][ T5728] usb 3-1: media controller created [ 755.017745][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 755.075205][ T5728] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 755.083700][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 755.100476][ T29] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 755.120453][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.169233][ T29] usb 2-1: config 0 descriptor?? [ 755.179400][ T5728] zl10353_read_register: readreg error (reg=127, ret==0) [ 755.192618][ T29] hub 2-1:0.0: USB hub found [ 755.321992][ T5728] usb 3-1: USB disconnect, device number 103 [ 755.353094][T15270] xt_policy: output policy not valid in PREROUTING and INPUT [ 755.412045][ T29] hub 2-1:0.0: 1 port detected [ 755.479048][ T24] usb 6-1: USB disconnect, device number 33 [ 755.613563][T15267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.623359][T15267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.665634][ T5720] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 755.839271][T15267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.848454][T15267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.861867][T15271] netlink: 'syz.0.2774': attribute type 2 has an invalid length. [ 755.870277][T15271] netlink: 'syz.0.2774': attribute type 8 has an invalid length. [ 755.878194][T15271] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2774'. [ 756.061583][T15267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.097540][T15267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.133171][T15267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.170846][T15267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.222805][T15267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.254819][T15267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.499134][ T29] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 756.525947][ T29] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 756.561914][T15284] netlink: 'syz.5.2777': attribute type 21 has an invalid length. [ 756.571276][T15284] IPv6: NLM_F_CREATE should be specified when creating new route [ 756.585804][T15284] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 756.593149][T15284] IPv6: NLM_F_CREATE should be set when creating new route [ 756.600501][T15284] IPv6: NLM_F_CREATE should be set when creating new route [ 756.607813][T15284] IPv6: NLM_F_CREATE should be set when creating new route [ 756.619284][T15285] netlink: 'syz.5.2777': attribute type 21 has an invalid length. [ 756.645624][ T29] usbhid 2-1:0.0: can't add hid device: -32 [ 756.659603][T15285] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 756.674163][ T29] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 756.939788][T15289] netlink: 'syz.5.2779': attribute type 11 has an invalid length. [ 756.953334][T15289] netlink: 448 bytes leftover after parsing attributes in process `syz.5.2779'. [ 757.035465][ T5699] usb 2-1: USB disconnect, device number 83 [ 757.245151][T10477] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 757.417069][T10477] usb 3-1: Using ep0 maxpacket: 32 [ 757.438626][T10477] usb 3-1: unable to get BOS descriptor or descriptor too short [ 757.471993][T10477] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 757.506037][T10477] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 757.536094][T10477] usb 3-1: config 14 has no interface number 0 [ 757.562151][T10477] usb 3-1: config 14 has no interface number 1 [ 757.590103][T10477] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 757.631461][T10477] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 757.662843][T10477] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 757.693402][T10477] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 757.720297][T10477] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 757.768489][T10477] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 757.830771][T10477] usb 3-1: config 14 interface 57 has no altsetting 0 [ 757.858333][T10477] usb 3-1: config 14 interface 228 has no altsetting 0 [ 757.900857][T10477] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 757.941847][T10477] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.974075][T10477] usb 3-1: Product: syz [ 757.989143][T10477] usb 3-1: Manufacturer: syz [ 758.004095][T10477] usb 3-1: SerialNumber: syz [ 758.406462][ T5720] usb 1-1: unable to get BOS descriptor or descriptor too short [ 758.435961][ T5720] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 758.459471][ T5720] usb 1-1: can't read configurations, error -71 [ 758.541113][T10477] legousbtower 3-1:14.57: interrupt endpoints not found [ 758.723173][ T30] audit: type=1326 audit(1784036753.251:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15302 comm="syz.6.2783" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe83b59de59 code=0x0 [ 758.959162][T10477] legousbtower 3-1:14.228: get version request failed: -121 [ 758.979070][T10477] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -121 [ 759.515360][ T5720] usb 1-1: new full-speed USB device number 84 using dummy_hcd [ 759.601296][T15316] fuse: Bad value for 'fd' [ 759.637368][T15298] IPv6: Can't replace route, no match found [ 759.666088][ T30] audit: type=1326 audit(1784036754.191:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15315 comm="syz.6.2785" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83b59de59 code=0x7ffc0000 [ 759.692210][T15298] IPv6: Can't replace route, no match found [ 759.713922][T15314] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 759.728273][T15309] netlink: 'syz.1.2781': attribute type 1 has an invalid length. [ 759.757898][ T5720] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 759.811297][ T5720] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 759.827293][ T30] audit: type=1326 audit(1784036754.191:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15315 comm="syz.6.2785" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83b59de59 code=0x7ffc0000 [ 759.856806][ T9] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 759.919717][ T5720] usb 1-1: config 0 interface 0 has no altsetting 0 [ 759.975420][ T5720] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 760.038377][ T30] audit: type=1326 audit(1784036754.191:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15315 comm="syz.6.2785" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fe83b59de59 code=0x7ffc0000 [ 760.063447][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 760.083204][ T5720] usb 1-1: Product: syz [ 760.110999][ T5720] usb 1-1: Manufacturer: syz [ 760.149610][ T5720] usb 1-1: SerialNumber: syz [ 760.199547][ T5720] usb 1-1: config 0 descriptor?? [ 760.211039][ T30] audit: type=1326 audit(1784036754.201:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15315 comm="syz.6.2785" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83b59de59 code=0x7ffc0000 [ 760.225344][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 760.349478][ T5720] usb 1-1: selecting invalid altsetting 0 [ 760.391282][ T30] audit: type=1326 audit(1784036754.201:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15315 comm="syz.6.2785" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fe83b59de59 code=0x7ffc0000 [ 760.468568][T15312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.486487][T15312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.503703][ T30] audit: type=1326 audit(1784036754.201:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15315 comm="syz.6.2785" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83b59de59 code=0x7ffc0000 [ 760.665403][ T5720] usb 1-1: USB disconnect, device number 84 [ 760.735260][ T30] audit: type=1326 audit(1784036754.201:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15315 comm="syz.6.2785" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83b59de59 code=0x7ffc0000 [ 760.762814][ T30] audit: type=1326 audit(1784036754.221:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15315 comm="syz.6.2785" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe83b59de59 code=0x7ffc0000 [ 760.794769][ T30] audit: type=1326 audit(1784036754.221:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15315 comm="syz.6.2785" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83b59de59 code=0x7ffc0000 [ 760.982274][T14405] udevd[14405]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 761.075437][ T9] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 761.268522][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 761.312366][ T9] usb 2-1: language id specifier not provided by device, defaulting to English [ 761.340884][ T5720] usb 3-1: USB disconnect, device number 104 [ 761.365539][ T9] usb 2-1: New USB device found, idVendor=04b4, idProduct=9320, bcdDevice= 0.40 [ 761.383329][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.395975][ T9] usb 2-1: Product: syz [ 761.400853][ T9] usb 2-1: Manufacturer: syz [ 761.405957][ T9] usb 2-1: SerialNumber: syz [ 762.570745][T15308] syz.0.2784 (15308): drop_caches: 2 [ 763.502400][T15352] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 763.671444][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 763.724652][ T9] usb 2-1: MIDIStreaming interface descriptor not found [ 764.216462][ T9] usb 2-1: USB disconnect, device number 84 [ 764.666390][T14787] udevd[14787]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 765.933359][T12021] Bluetooth: hci4: unexpected event for opcode 0xe78c [ 767.730211][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 767.730225][ T30] audit: type=1326 audit(1784036762.261:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15385 comm="syz.0.2797" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532bf9de59 code=0x7ffc0000 [ 767.771813][T15386] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 767.872037][ T30] audit: type=1326 audit(1784036762.261:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15385 comm="syz.0.2797" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532bf9de59 code=0x7ffc0000 [ 767.973121][ T30] audit: type=1326 audit(1784036762.261:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15385 comm="syz.0.2797" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532bf9de59 code=0x7ffc0000 [ 768.094945][ T30] audit: type=1326 audit(1784036762.261:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15385 comm="syz.0.2797" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532bf9de59 code=0x7ffc0000 [ 768.135467][ T9] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 768.153548][ T30] audit: type=1326 audit(1784036762.261:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15385 comm="syz.0.2797" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f532bf9de59 code=0x7ffc0000 [ 768.208086][ T30] audit: type=1326 audit(1784036762.261:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15385 comm="syz.0.2797" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532bf9de59 code=0x7ffc0000 [ 768.251234][ T30] audit: type=1326 audit(1784036762.261:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15385 comm="syz.0.2797" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532bf9de59 code=0x7ffc0000 [ 768.285707][ T30] audit: type=1326 audit(1784036762.261:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15385 comm="syz.0.2797" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532bf9de59 code=0x7ffc0000 [ 768.315240][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 768.325981][ T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 768.345432][ T29] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 768.359010][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 768.371167][ T30] audit: type=1326 audit(1784036762.261:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15385 comm="syz.0.2797" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532bf9de59 code=0x7ffc0000 [ 768.404461][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.415258][ T9] usb 1-1: Product: syz [ 768.422025][ T9] usb 1-1: Manufacturer: syz [ 768.427558][ T9] usb 1-1: SerialNumber: syz [ 768.433564][ T30] audit: type=1326 audit(1784036762.291:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15385 comm="syz.0.2797" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532bf9de59 code=0x7ffc0000 [ 768.555423][ T24] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 768.563115][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 768.578257][ T29] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 768.605228][ T29] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 768.626828][ T29] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 768.647156][ T29] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 768.692552][ T9] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 768.701624][ T29] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 768.746840][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 768.765771][ T29] usb 3-1: New USB device found, idVendor=ee87, idProduct=db1e, bcdDevice=61.23 [ 768.784698][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.799429][ T24] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 768.815548][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.848214][ T24] usb 6-1: Product: syz [ 768.854575][ T24] usb 6-1: Manufacturer: syz [ 768.864711][ T24] usb 6-1: SerialNumber: syz [ 768.885811][ T24] usb 6-1: config 0 descriptor?? [ 768.892610][ T9] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 768.918142][ T24] streamzap 6-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 768.920983][ T9] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 769.029801][ T29] usb 3-1: usb_control_msg returned -32 [ 769.035739][ T29] usbtmc 3-1:16.0: can't read capabilities [ 769.046895][T15398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 769.146864][T15390] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2799'. [ 769.162752][T15390] lo: Caught tx_queue_len zero misconfig [ 769.239536][ T29] usb 6-1: USB disconnect, device number 34 [ 769.308614][ T9] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 769.324349][ T9] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 769.526471][ T9] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 769.693847][ T9] usb 1-1: USB disconnect, device number 85 [ 769.818390][T14785] udevd[14785]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 769.847455][T15403] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 769.937727][T12021] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 769.950333][T12021] Bluetooth: hci4: Injecting HCI hardware error event [ 769.962044][T12317] Bluetooth: hci4: hardware error 0x00 [ 769.981982][T10477] usb 3-1: USB disconnect, device number 105 [ 771.880223][T15428] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 772.021162][T12317] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 772.339273][T15430] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 772.400681][T15429] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 772.500555][T15429] bond1 (unregistering): Released all slaves [ 772.915494][T15434] netlink: 'syz.6.2809': attribute type 61 has an invalid length. [ 773.305365][ T29] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 773.489365][ T29] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 773.528558][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.560500][ T29] usb 6-1: Product: syz [ 773.575266][ T29] usb 6-1: Manufacturer: syz [ 773.589908][ T29] usb 6-1: SerialNumber: syz [ 773.615436][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 773.622752][ C1] bridge0: topology change detected, propagating [ 773.629593][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 773.636901][ C1] bridge0: topology change detected, propagating [ 773.661338][ T29] usb 6-1: config 0 descriptor?? [ 773.855860][ T9] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 773.954408][T15436] bridge_slave_0: left allmulticast mode [ 773.968114][T15436] bridge_slave_0: left promiscuous mode [ 774.005290][T15436] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.039711][ T9] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 774.084577][T15436] bridge_slave_1: left allmulticast mode [ 774.091946][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 774.121082][T15436] bridge_slave_1: left promiscuous mode [ 774.134410][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 774.151180][T15436] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.208439][ T9] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 774.262805][ T9] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 774.290233][T15436] bond0: (slave bond_slave_0): Releasing backup interface [ 774.300673][ T9] usb 2-1: Manufacturer: syz [ 774.372001][ T9] usb 2-1: config 0 descriptor?? [ 774.427695][ T9] igorplugusb 2-1:0.0: endpoint incorrect [ 774.832717][T15436] bond0: (slave bond_slave_1): Releasing backup interface [ 774.886642][ T9] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 774.980944][T15436] team0: Port device team_slave_0 removed [ 775.028319][T15436] team0: Port device team_slave_1 removed [ 775.045504][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 775.059520][T15436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 775.090442][ T9] usb 3-1: config 5 interface 0 has no altsetting 0 [ 775.104957][T15436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 775.123861][ T9] usb 3-1: New USB device found, idVendor=15c2, idProduct=0034, bcdDevice=12.b6 [ 775.151841][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.180133][ T9] usb 3-1: Product: syz [ 775.195659][ T9] usb 3-1: Manufacturer: syz [ 775.212174][ T9] usb 3-1: SerialNumber: syz [ 775.329252][T15436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 775.352503][T15436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 775.426691][T15436] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 775.618939][T15452] bridge0: port 3(vlan4) entered blocking state [ 775.642747][T15452] bridge0: port 3(vlan4) entered disabled state [ 775.691266][T15452] vlan4: entered allmulticast mode [ 775.699008][T15452] geneve0: entered allmulticast mode [ 775.782476][ T29] usb 6-1: USB disconnect, device number 35 [ 775.789646][T15452] vlan4: entered promiscuous mode [ 775.795375][T15452] geneve0: entered promiscuous mode [ 776.249135][ T5720] usb 2-1: USB disconnect, device number 85 [ 777.116635][ T9] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 777.125236][ T5720] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 777.183955][ T9] imon 3-1:5.0: unable to initialize intf0, err -19 [ 777.206918][ T29] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 777.208624][ T9] imon:imon_probe: failed to initialize context! [ 777.267617][ T9] imon 3-1:5.0: unable to register, err -19 [ 777.314918][ T9] usb 3-1: USB disconnect, device number 106 [ 777.324512][ T5720] usb 2-1: Using ep0 maxpacket: 16 [ 777.356968][ T5720] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 777.409654][ T5720] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 777.418968][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 777.440275][ T29] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 777.466256][ T5720] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 777.489089][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.503379][ T5720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 777.525272][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 777.538690][ T5720] usb 2-1: SerialNumber: syz [ 777.569386][ T5720] usb 2-1: 0:2 : does not exist [ 777.576431][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 777.624045][ T29] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 777.674123][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.717661][ T29] usb 6-1: config 0 descriptor?? [ 777.859592][T15461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 777.906373][T15461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.185536][ T29] input: HID 0458:5013 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5013.0044/input/input121 [ 778.432074][ T29] input: HID 0458:5013 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5013.0044/input/input122 [ 778.671540][ T29] kye 0003:0458:5013.0044: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.5-1/input0 [ 778.779306][ T29] usb 6-1: USB disconnect, device number 36 [ 778.849660][ T9] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 779.006208][T15479] fido_id[15479]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 779.056123][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 779.088698][ T9] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 779.122211][ T9] usb 1-1: config 0 has no interface number 0 [ 779.138268][ T9] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 779.170526][ T9] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 779.187958][ T9] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 779.202315][ T9] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 779.216523][ T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 779.238151][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.276641][ T9] usb 1-1: config 0 descriptor?? [ 779.333089][ T9] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 779.363874][T10477] usb 2-1: USB disconnect, device number 86 [ 779.565315][ T29] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 779.579504][T15478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2820'. [ 779.638654][ T24] usb 1-1: USB disconnect, device number 86 [ 779.668734][ T24] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 779.680833][T15491] trusted_key: encrypted_key: master key parameter 'user' is invalid [ 779.728007][T15491] netlink: 'syz.2.2822': attribute type 16 has an invalid length. [ 779.729876][ T29] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 779.793283][ T29] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 779.811230][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.840249][ T29] usb 6-1: Product: syz [ 779.852927][ T29] usb 6-1: Manufacturer: syz [ 779.870795][ T29] usb 6-1: SerialNumber: syz [ 779.910009][ T29] usb 6-1: config 0 descriptor?? [ 779.956054][ T29] streamzap 6-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 780.325565][T15481] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2821'. [ 780.557031][T10477] usb 6-1: USB disconnect, device number 37 [ 781.735350][T10477] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 781.885169][ T9] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 781.915487][T10477] usb 2-1: Using ep0 maxpacket: 32 [ 781.942406][T10477] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 781.960165][T10477] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 781.991148][T10477] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 782.009013][T10477] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 782.044145][T10477] usb 2-1: config 0 interface 0 has no altsetting 0 [ 782.065539][ T9] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 782.076808][T15513] netlink: 'syz.6.2830': attribute type 13 has an invalid length. [ 782.085989][T10477] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 782.097987][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.110559][T10477] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 782.119960][ T9] usb 3-1: Product: syz [ 782.125763][T10477] usb 2-1: Product: syz [ 782.130179][ T9] usb 3-1: Manufacturer: syz [ 782.136559][T10477] usb 2-1: Manufacturer: syz [ 782.141469][ T9] usb 3-1: SerialNumber: syz [ 782.153723][T10477] usb 2-1: SerialNumber: syz [ 782.161817][ T9] usb 3-1: config 0 descriptor?? [ 782.180894][T10477] usb 2-1: config 0 descriptor?? [ 782.206474][T10477] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 782.244958][T10477] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 782.762024][T15503] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 782.769464][ T29] usb 2-1: USB disconnect, device number 87 [ 782.769502][ C0] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 782.821662][ T29] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 783.058590][T15507] bridge_slave_0: left allmulticast mode [ 783.064959][T15507] bridge_slave_0: left promiscuous mode [ 783.083609][T15507] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.122762][T15507] bridge_slave_1: left allmulticast mode [ 783.136279][T15521] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2831'. [ 783.155218][T15507] bridge_slave_1: left promiscuous mode [ 783.161910][T15507] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.177240][T15521] openvswitch: netlink: Message has 512 unknown bytes. [ 783.235980][T15521] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 783.289599][T15507] bond0: (slave bond_slave_0): Releasing backup interface [ 783.313543][T15507] bond0: (slave bond_slave_1): Releasing backup interface [ 783.358033][T15507] team0: Port device team_slave_0 removed [ 783.387265][T15507] team0: Port device team_slave_1 removed [ 783.401947][T15507] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 783.567160][T10477] usb 3-1: USB disconnect, device number 107 [ 784.968716][T15537] netlink: 'syz.5.2835': attribute type 10 has an invalid length. [ 785.025208][T15537] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 785.117608][T15537] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 785.156293][T15534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2834'. [ 786.096591][T15550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 786.129046][T15550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.587227][T15556] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2840'. [ 787.067523][T15570] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2843'. [ 787.275181][T12471] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 787.492922][T12471] usb 3-1: config 0 has an invalid interface number: 205 but max is 0 [ 787.553567][T12471] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 787.627828][T12471] usb 3-1: config 0 has no interface number 0 [ 787.664740][T12471] usb 3-1: config 0 interface 205 has no altsetting 0 [ 787.727466][T12471] usb 3-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 787.788257][T12471] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.872858][T12471] usb 3-1: Product: syz [ 787.909511][T12471] usb 3-1: Manufacturer: syz [ 787.951846][T12471] usb 3-1: SerialNumber: syz [ 788.020349][T12471] usb 3-1: config 0 descriptor?? [ 788.081974][T12471] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 788.166872][T12471] dvb-usb: bulk message failed: -22 (3/0) [ 788.276911][T12471] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 788.302661][T15569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.385619][T12471] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 788.398470][T15569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.472644][T12471] usb 3-1: media controller created [ 788.524491][T12471] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 788.765370][T12471] dvb-usb: bulk message failed: -22 (6/0) [ 788.810056][T12471] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 788.894818][T12471] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input123 [ 789.017425][T12471] dvb-usb: schedule remote query interval to 150 msecs. [ 789.061143][T12471] dvb-usb: bulk message failed: -22 (3/0) [ 789.125329][T12471] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 789.181899][T15578] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 789.219511][T12471] dvb-usb: bulk message failed: -22 (1/0) [ 789.284331][T12471] dvb-usb: error while querying for an remote control event. [ 789.505261][T12471] dvb-usb: bulk message failed: -22 (1/0) [ 789.546593][ T29] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 789.562041][T12471] dvb-usb: error while querying for an remote control event. [ 789.746508][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 789.762117][T12471] dvb-usb: bulk message failed: -22 (1/0) [ 789.775883][ T29] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 789.799051][T12471] dvb-usb: error while querying for an remote control event. [ 789.812447][ T29] usb 2-1: config 0 has no interface number 0 [ 789.850304][ T29] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 789.881501][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.920041][ T29] usb 2-1: Product: syz [ 789.939530][ T29] usb 2-1: Manufacturer: syz [ 789.956259][ T29] usb 2-1: SerialNumber: syz [ 789.985133][T12471] dvb-usb: bulk message failed: -22 (1/0) [ 790.004668][ T29] usb 2-1: config 0 descriptor?? [ 790.019595][T12471] dvb-usb: error while querying for an remote control event. [ 790.215279][T12471] dvb-usb: bulk message failed: -22 (1/0) [ 790.239408][T15589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2848'. [ 790.250076][T12471] dvb-usb: error while querying for an remote control event. [ 790.381869][T15589] team0: Cannot enslave team device to itself [ 790.410342][T15594] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 790.465240][T12471] dvb-usb: bulk message failed: -22 (1/0) [ 790.472133][T15594] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 790.480692][ T29] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 790.491905][T12471] dvb-usb: error while querying for an remote control event. [ 790.499981][ T29] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 790.639236][T15598] RDS: rds_bind could not find a transport for ::ffff:172.30.0.7, load rds_tcp or rds_rdma? [ 790.685217][T12471] dvb-usb: bulk message failed: -22 (1/0) [ 790.693042][T12471] dvb-usb: error while querying for an remote control event. [ 790.915157][T12471] dvb-usb: bulk message failed: -22 (1/0) [ 790.925274][T12471] dvb-usb: error while querying for an remote control event. [ 790.981996][T15603] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2851'. [ 791.039177][T10477] usb 3-1: USB disconnect, device number 108 [ 791.293226][T10477] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 792.216246][T12471] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 792.308350][ T29] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000038: -71 [ 792.344888][ T29] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 792.386718][ T29] usb 2-1: USB disconnect, device number 88 [ 792.407840][T12471] usb 6-1: unable to get BOS descriptor or descriptor too short [ 792.441562][T12471] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 792.512708][T12471] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 792.548290][T15622] usb usb7: usbfs: process 15622 (syz.0.2855) did not claim interface 0 before use [ 792.585136][T12471] usb 6-1: string descriptor 0 read error: -22 [ 792.603501][T12471] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 792.650811][T12471] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.765070][T12471] usb 6-1: selecting invalid altsetting 1 [ 792.787868][T12471] usb 6-1: unit 3 not found! [ 792.979693][T12471] usb 6-1: cannot request logical cluster ID: 0 (err: -5) [ 793.017598][T15623] macsec0: entered allmulticast mode [ 793.024325][T12471] usb 6-1: invalid MIXER UNIT descriptor 6 [ 793.058390][T15623] veth1_macvtap: entered allmulticast mode [ 793.067957][T15623] macsec0: left allmulticast mode [ 793.104662][T15623] veth1_macvtap: left allmulticast mode [ 793.307956][T12471] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -5 [ 793.356425][T12471] usb 6-1: USB disconnect, device number 38 [ 793.879721][T15629] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 793.912994][T15629] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 793.933806][T15629] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 794.069776][ T13] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.083023][ T13] netdevsim netdevsim6 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 794.173292][T15636] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2858'. [ 795.338438][T15649] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2860'. [ 795.768359][T15648] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 796.353232][T15658] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[15661] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[15658] [ 796.564006][ T30] kauditd_printk_skb: 120 callbacks suppressed [ 796.564028][ T30] audit: type=1800 audit(1784036791.061:361): pid=15658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2861" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 797.185117][T12471] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 797.405985][T12471] usb 6-1: Using ep0 maxpacket: 32 [ 797.408141][T12471] usb 6-1: unable to get BOS descriptor or descriptor too short [ 797.414599][T12471] usb 6-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 797.414635][T12471] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.414699][T12471] usb 6-1: Product: syz [ 797.414718][T12471] usb 6-1: Manufacturer: syz [ 797.414735][T12471] usb 6-1: SerialNumber: syz [ 797.932873][T12471] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 798.120997][T12471] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 798.167012][T12471] usb 6-1: disable ehci-hcd to run US-144 [ 798.209549][T12471] usb 6-1: disable ehci-hcd to run US-144 [ 798.247829][T12471] usb 6-1: disable ehci-hcd to run US-144 [ 798.292451][T12471] usb 6-1: USB disconnect, device number 39 [ 798.408294][T14785] udevd[14785]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 799.137884][T15694] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2869'. [ 799.203548][T15694] openvswitch: netlink: Message has 512 unknown bytes. [ 799.371194][T15694] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 800.086023][T12471] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 800.239494][T15710] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2873'. [ 800.285206][T12471] usb 1-1: Using ep0 maxpacket: 16 [ 800.310567][T12471] usb 1-1: unable to get BOS descriptor or descriptor too short [ 800.328386][T15710] netdevsim netdevsim6: Direct firmware load for  failed with error -2 [ 800.363147][T12471] usb 1-1: config 3 has an invalid interface number: 74 but max is 0 [ 800.376072][T15710] netdevsim netdevsim6: Falling back to sysfs fallback for:  [ 800.388056][T12471] usb 1-1: config 3 has no interface number 0 [ 800.411553][T15708] netlink: 388 bytes leftover after parsing attributes in process `syz.5.2872'. [ 800.420893][T12471] usb 1-1: config 3 interface 74 altsetting 1 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 800.432004][T12471] usb 1-1: config 3 interface 74 altsetting 1 has an endpoint descriptor with address 0xC3, changing to 0x83 [ 800.447204][T12471] usb 1-1: config 3 interface 74 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 800.459164][T12471] usb 1-1: config 3 interface 74 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 800.471204][T12471] usb 1-1: config 3 interface 74 altsetting 1 has an endpoint descriptor with address 0xB1, changing to 0x81 [ 800.485179][T12471] usb 1-1: config 3 interface 74 altsetting 1 endpoint 0x81 has invalid maxpacket 9507, setting to 1024 [ 800.497740][T12471] usb 1-1: config 3 interface 74 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 1024 [ 800.525760][T12471] usb 1-1: config 3 interface 74 altsetting 1 has an endpoint descriptor with address 0x49, changing to 0x9 [ 800.581849][T15707] bond4: option ad_user_port_key: invalid value (34621) [ 800.591083][T15707] bond4: option ad_user_port_key: allowed values 0 - 1023 [ 800.627975][T15707] bond4 (unregistering): Released all slaves [ 800.641120][T12471] usb 1-1: config 3 interface 74 altsetting 1 endpoint 0x9 has invalid maxpacket 17751, setting to 1024 [ 800.757751][T12471] usb 1-1: config 3 interface 74 altsetting 1 bulk endpoint 0x9 has invalid maxpacket 1024 [ 800.796534][T12471] usb 1-1: config 3 interface 74 altsetting 1 has 8 endpoint descriptors, different from the interface descriptor's value: 6 [ 800.864180][T12471] usb 1-1: config 3 interface 74 has no altsetting 0 [ 800.887406][T12471] usb 1-1: New USB device found, idVendor=045e, idProduct=0468, bcdDevice=b2.9c [ 800.927230][T12471] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.977385][T12471] usb 1-1: Product: syz [ 800.994077][T12471] usb 1-1: Manufacturer: syz [ 801.019573][T12471] usb 1-1: SerialNumber: syz [ 801.068179][T15702] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 801.087160][T15702] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 801.547452][T15702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.636140][T15702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 801.715321][T12471] ipaq 1-1:3.74: PocketPC PDA converter detected [ 801.741384][T12471] usb 1-1: active config #3 != 1 ?? [ 801.794421][T12471] usb 1-1: USB disconnect, device number 87 [ 801.865139][ T5699] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 802.037255][ T5699] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.087197][ T5699] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 802.119490][ T5699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.148423][ T5699] usb 2-1: config 0 descriptor?? [ 802.374122][ T5699] usbhid 2-1:0.0: can't add hid device: -71 [ 802.408820][ T5699] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 802.455203][ T5699] usb 2-1: USB disconnect, device number 89 [ 802.835975][T12471] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 802.895187][ T24] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 802.935151][T10477] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 802.969946][ T5699] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 803.006465][T12471] usb 6-1: Using ep0 maxpacket: 8 [ 803.024409][T12471] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 803.078688][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 803.139244][T12471] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 803.145793][ T5699] usb 2-1: Using ep0 maxpacket: 32 [ 803.175224][ T24] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 803.188058][T12471] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 803.200207][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 803.217421][ T5699] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 803.233546][T12471] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 803.247116][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.255349][T12471] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 803.264843][ T5699] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 803.284795][T12471] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 803.297253][T12471] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 803.297907][T15740] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 803.318914][T12471] usb 6-1: config 168 interface 0 has no altsetting 0 [ 803.333340][T12471] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 803.341460][T12471] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 803.357810][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 803.359724][ T5699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.394014][T12471] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 803.445660][T12471] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 803.495820][T12471] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 803.526504][T12471] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 803.545536][T12471] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 803.560350][T12471] usb 6-1: config 168 interface 0 has no altsetting 0 [ 803.569858][ T5699] usb 2-1: config 0 descriptor?? [ 803.587804][ T5699] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 803.616426][T12471] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 803.645603][T12471] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 803.678746][T15740] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 803.690733][T12471] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 803.713030][T15740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.724692][T12471] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 803.738662][T15740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.754682][ T5699] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 803.756514][T12471] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 803.776380][T12471] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 803.788830][T12471] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 803.835506][ T24] usb 3-1: USB disconnect, device number 109 [ 803.855936][T12471] usb 6-1: config 168 interface 0 has no altsetting 0 [ 803.885374][T12471] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 803.902357][T12471] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.925838][T12471] usb 6-1: Product: syz [ 803.936854][T12471] usb 6-1: Manufacturer: syz [ 803.950289][T12471] usb 6-1: SerialNumber: syz [ 803.964346][T15743] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 804.263488][T12471] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 804.315806][T12471] usb 6-1: USB disconnect, device number 40 [ 804.718695][ T5699] usb 2-1: USB disconnect, device number 90 [ 804.759520][ T5699] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 806.186567][ T24] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 806.411604][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 806.564948][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 806.680104][ T24] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 806.776033][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.867485][ T24] usb 3-1: config 0 descriptor?? [ 808.822945][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.829736][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.163651][T15798] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2893'. [ 809.340319][T15798] ip6erspan0: entered allmulticast mode [ 809.823881][T15804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 809.869590][T15804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.229772][T15809] netlink: 'syz.6.2895': attribute type 10 has an invalid length. [ 810.260097][T15808] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 810.405428][T15809] team0 (unregistering): Port device team_slave_0 removed [ 810.457139][T15809] team0 (unregistering): Port device team_slave_1 removed [ 811.395667][ T5699] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 811.585231][ T5699] usb 6-1: Using ep0 maxpacket: 32 [ 811.603984][ T5699] usb 6-1: config 0 interface 0 has no altsetting 0 [ 811.623434][ T5699] usb 6-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 811.660006][ T5699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.705792][ T5699] usb 6-1: config 0 descriptor?? [ 812.176653][T15819] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 812.176673][ T24] usbhid 3-1:0.0: can't add hid device: -32 [ 812.177018][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 812.448505][ T5699] hid-retrode 0003:0403:97C1.0045: unknown main item tag 0x0 [ 812.459524][ T5699] hid-retrode 0003:0403:97C1.0045: unknown main item tag 0x0 [ 812.468416][ T5699] hid-retrode 0003:0403:97C1.0045: unknown main item tag 0x0 [ 812.476312][ T5699] hid-retrode 0003:0403:97C1.0045: unknown main item tag 0x0 [ 812.483862][ T5699] hid-retrode 0003:0403:97C1.0045: unknown main item tag 0x0 [ 812.491781][ T5699] hid-retrode 0003:0403:97C1.0045: unknown main item tag 0x0 [ 812.499568][ T5699] hid-retrode 0003:0403:97C1.0045: unknown main item tag 0x0 [ 812.507516][ T5699] hid-retrode 0003:0403:97C1.0045: unknown main item tag 0x0 [ 812.517221][ T5699] hid-retrode 0003:0403:97C1.0045: unknown main item tag 0x0 [ 812.526471][ T5699] hid-retrode 0003:0403:97C1.0045: unknown main item tag 0x0 [ 812.550487][ T5699] hid-retrode 0003:0403:97C1.0045: hidraw0: USB HID v0.04 Device [HID 0403:97c1] on usb-dummy_hcd.5-1/input0 [ 812.622915][T15829] fuse: Bad value for 'fd' [ 812.854895][ T5699] usb 6-1: USB disconnect, device number 41 [ 812.969627][T15834] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2901'. [ 813.389324][T15843] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 813.544539][T15847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.592273][T15847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.925263][ T24] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 814.108146][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 814.154559][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 814.195167][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 814.233972][ T24] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 814.267726][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.296608][ T24] usb 6-1: Product: syz [ 814.317247][ T24] usb 6-1: Manufacturer: syz [ 814.331529][ T24] usb 6-1: SerialNumber: syz [ 814.372755][ T24] usb 6-1: config 0 descriptor?? [ 815.285269][ T5699] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 815.380711][T15868] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 815.445255][ T5699] usb 2-1: Using ep0 maxpacket: 16 [ 815.453571][ T5699] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 815.466971][ T5699] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 815.507922][ T5699] usb 2-1: config 0 interface 0 has no altsetting 0 [ 815.538555][ T5699] usb 2-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 815.555205][ T5699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.620298][ T5699] usb 2-1: config 0 descriptor?? [ 815.664345][ T5699] usbhid 2-1:0.0: can't add hid device: -22 [ 815.693772][ T5699] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 816.018741][T15862] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 816.082060][ T5699] usb 2-1: USB disconnect, device number 91 [ 817.137698][T15891] kernel read not supported for file / 7âW)s!Qfsr)rO2:"T+͟v|ղDvc֠6xc: (pid: 15891 comm: syz.1.2913) [ 817.180674][ T30] audit: type=1800 audit(1784036811.691:362): pid=15891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2913" name=20019C1437B3CFFCC3A25729AB7393A7C721518FF6ECA56673F58772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=65186 res=0 errno=0 [ 819.115222][ T5720] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 819.335153][ T5720] usb 1-1: Using ep0 maxpacket: 32 [ 819.401130][ T5720] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 819.448741][ T5720] usb 1-1: config 0 has no interface number 0 [ 819.542047][ T5720] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 819.579286][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.650898][ T5720] usb 1-1: Product: syz [ 819.681419][ T5720] usb 1-1: Manufacturer: syz [ 819.723417][ T5720] usb 1-1: SerialNumber: syz [ 819.767861][ T5720] usb 1-1: config 0 descriptor?? [ 820.245239][ T29] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 820.323574][ T5720] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 820.379563][T15914] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 820.419867][ T5720] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 820.485155][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 820.561581][ T29] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 820.640702][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.654513][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.695447][ T5720] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 820.729004][ T29] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 820.774461][ T5720] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -61 [ 820.840187][ T29] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 820.895326][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.991912][ T29] usb 2-1: config 0 descriptor?? [ 821.072681][ T5699] hid_parser_main: 29 callbacks suppressed [ 821.072708][ T5699] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 821.279162][ T5699] hid-generic 0000:0000:0000.0046: hidraw0: HID v0.00 Device [syz1] on syz0 [ 821.546594][ T29] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.0047/input/input126 [ 821.739604][ T29] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.0047/input/input127 [ 821.981891][ T29] kye 0003:0458:5013.0047: input,hiddev0,hidraw1: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0 [ 822.129448][ T29] usb 2-1: USB disconnect, device number 92 [ 822.517041][T15926] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.2920'. [ 822.607728][T15924] fido_id[15924]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 823.015487][T15919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.062317][T15919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.108169][ T9] usb 1-1: USB disconnect, device number 89 [ 823.348785][T15937] netlink: 'syz.0.2922': attribute type 12 has an invalid length. [ 823.641120][T15937] openvswitch: netlink: Actions may not be safe on all matching packets [ 824.135437][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 824.235054][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 824.645199][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 824.665050][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 824.825246][ T24] iguanair 6-1:0.0: failed to get version [ 824.883232][ T24] iguanair 6-1:0.0: probe with driver iguanair failed with error -110 [ 824.902111][T15953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2925'. [ 824.964672][T15955] netlink: 'syz.0.2925': attribute type 10 has an invalid length. [ 824.992252][ T24] usb 6-1: USB disconnect, device number 42 [ 825.010846][T15953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2925'. [ 825.445166][ T24] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 825.638895][ T24] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 825.759490][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 825.792074][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 825.813899][ T24] usb 6-1: Product: syz [ 825.825546][ T24] usb 6-1: Manufacturer: syz [ 825.841345][ T24] usb 6-1: SerialNumber: syz [ 825.848925][T15964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 825.875336][T15964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 826.299280][ T24] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 43 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 826.743481][ T24] usb 6-1: USB disconnect, device number 43 [ 826.828385][ T24] usblp0: removed [ 827.496916][T15983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 827.532970][T15983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.020571][T15996] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 829.078736][T16000] fuse: Bad value for 'fd' [ 829.725223][ T9] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 829.927418][ T9] usb 1-1: config 253 has an invalid interface number: 130 but max is 0 [ 829.946621][ T9] usb 1-1: config 253 has no interface number 0 [ 829.952981][ T9] usb 1-1: config 253 interface 130 has no altsetting 0 [ 829.964148][ T9] usb 1-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed [ 829.974960][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.036771][ T9] usb 1-1: Product: syz [ 830.049903][ T9] usb 1-1: Manufacturer: syz [ 830.057073][ T9] usb 1-1: SerialNumber: syz [ 830.766745][T16004] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 830.829083][T16004] syz_tun: entered allmulticast mode [ 830.892495][T16004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2936'. [ 830.942123][T16003] syz_tun: left allmulticast mode [ 830.986704][ T9] dvb-usb: found a 'EvolutePC TVWay+' in cold state, will try to load a firmware [ 831.322434][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 831.337363][ T9] dib0700: firmware download failed at 7 with -22 [ 831.397725][ T9] usb 1-1: USB disconnect, device number 90 [ 831.659107][T16034] loop5: detected capacity change from 0 to 6 [ 831.673533][T16034] Dev loop5: unable to read RDB block 6 [ 831.689290][T16034] loop5: AHDI p3 [ 831.734279][T16034] loop5: partition table partially beyond EOD, truncated [ 835.943198][T16064] netlink: 'syz.6.2949': attribute type 1 has an invalid length. [ 836.495879][ T24] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 836.540472][T16073] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2952'. [ 836.564788][T16073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 836.581062][T16073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 836.675562][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 836.696157][ T24] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 836.721139][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 836.732646][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 836.743799][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 836.758128][ T24] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 836.776660][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.785561][T16077] kvm: MWAIT instruction emulated as NOP! [ 836.799868][ T24] usb 2-1: config 0 descriptor?? [ 836.938406][T16081] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 837.266455][ T24] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.0048/input/input128 [ 837.393395][ T24] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.0048/input/input129 [ 837.598669][ T24] kye 0003:0458:5013.0048: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0 [ 837.720786][T10477] usb 2-1: USB disconnect, device number 93 [ 838.050635][T16096] fido_id[16096]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 838.479963][T16103] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2958'. [ 839.072995][T16112] loop5: detected capacity change from 0 to 6 [ 839.207932][T16112] Dev loop5: unable to read RDB block 6 [ 839.217460][T16112] loop5: AHDI p3 [ 839.258896][T16112] loop5: partition table partially beyond EOD, truncated [ 839.681037][ T30] audit: type=1326 audit(1784036834.191:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16102 comm="syz.2.2958" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa5a919de59 code=0x0 [ 841.985155][ T5699] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 842.177467][ T5699] usb 1-1: Using ep0 maxpacket: 16 [ 842.227059][ T5699] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 842.288347][ T5699] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 842.367393][ T5699] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 842.415703][ T5699] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 842.505791][ T5699] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 842.554511][ T5699] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.597383][ T5699] usb 1-1: config 0 descriptor?? [ 842.945163][T10477] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 843.072602][ T5699] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0049/input/input130 [ 843.140184][T10477] usb 6-1: descriptor type invalid, skip [ 843.166719][T10477] usb 6-1: descriptor type invalid, skip [ 843.192151][T10477] usb 6-1: not running at top speed; connect to a high speed hub [ 843.252129][T10477] usb 6-1: config 1 has an invalid descriptor of length 165, skipping remainder of the config [ 843.308115][ T5699] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0049/input/input131 [ 843.325285][T10477] usb 6-1: too many endpoints for config 1 interface 0 altsetting 58: 242, using maximum allowed: 30 [ 843.394077][T10477] usb 6-1: config 1 interface 0 altsetting 58 has 0 endpoint descriptors, different from the interface descriptor's value: 242 [ 843.460220][T10477] usb 6-1: config 1 interface 0 has no altsetting 0 [ 843.485914][ T5699] kye 0003:0458:5013.0049: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 843.521183][T10477] usb 6-1: New USB device found, idVendor=04b4, idProduct=9320, bcdDevice= 0.40 [ 843.560278][T10477] usb 6-1: New USB device strings: Mfr=222, Product=2, SerialNumber=3 [ 843.573497][ T5699] usb 1-1: USB disconnect, device number 91 [ 843.612880][T10477] usb 6-1: Product: syz [ 843.637355][T10477] usb 6-1: Manufacturer: syz [ 843.676371][T10477] usb 6-1: SerialNumber: syz [ 843.911470][T16145] fido_id[16145]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 844.295439][T16154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.347595][T16154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.475412][ T24] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 844.658690][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 844.684950][ T24] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 844.748858][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.797457][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 844.847574][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 844.929026][ T24] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 844.973935][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.078012][ T24] usb 1-1: config 0 descriptor?? [ 845.085142][ T5699] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 845.294648][ T5699] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 845.381528][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.420513][ T5699] usb 2-1: Product: syz [ 845.431260][ T5699] usb 2-1: Manufacturer: syz [ 845.436757][ T5699] usb 2-1: SerialNumber: syz [ 845.534925][ T5699] usb 2-1: config 0 descriptor?? [ 845.629610][ T24] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.004A/input/input132 [ 845.852943][T12317] Bluetooth: hci5: urb ffff8880342e2c00 submission failed (2) [ 845.874409][ T24] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.004A/input/input133 [ 845.928413][ T5699] usb 2-1: USB disconnect, device number 94 [ 846.177144][ T24] kye 0003:0458:5013.004A: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 846.392735][ T24] usb 1-1: USB disconnect, device number 92 [ 846.678108][T16170] netlink: 'syz.2.2973': attribute type 1 has an invalid length. [ 846.699769][ T5720] hid-generic 00A0:0006:0003.004B: unknown main item tag 0x0 [ 846.725812][T10477] usb 6-1: selecting invalid altsetting 0 [ 846.747973][ T5720] hid-generic 00A0:0006:0003.004B: unknown main item tag 0x0 [ 846.771830][T10477] usb 6-1: can't set first interface for hiFace device. [ 846.777253][ T5720] hid-generic 00A0:0006:0003.004B: unknown main item tag 0x0 [ 846.798759][T16172] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 846.813047][ T5720] hid-generic 00A0:0006:0003.004B: unknown main item tag 0x0 [ 846.833633][ T5720] hid-generic 00A0:0006:0003.004B: unknown main item tag 0x0 [ 846.866890][T10477] snd-usb-hiface 6-1:1.0: probe with driver snd-usb-hiface failed with error -5 [ 846.869087][ T5720] hid-generic 00A0:0006:0003.004B: unknown main item tag 0x0 [ 846.885295][ T5720] hid-generic 00A0:0006:0003.004B: unknown main item tag 0x0 [ 846.892916][ T5720] hid-generic 00A0:0006:0003.004B: unknown main item tag 0x0 [ 846.904939][ T5720] hid-generic 00A0:0006:0003.004B: unknown main item tag 0x0 [ 846.914305][ T5720] hid-generic 00A0:0006:0003.004B: unknown main item tag 0x0 [ 846.939474][ T5720] hid-generic 00A0:0006:0003.004B: hidraw0: HID v0.05 Device [syz0] on syz0 [ 846.977130][T16168] fido_id[16168]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 847.004467][T10477] usb 6-1: USB disconnect, device number 44 [ 847.058770][T16175] usb usb8: usbfs: process 16175 (syz.0.2974) did not claim interface 0 before use [ 847.148719][T16175] input: syz1 as /devices/virtual/input/input134 [ 847.463247][T16182] fido_id[16182]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 847.523746][T16194] netdevsim netdevsim5: Firmware load for '..' refused, path contains '..' component [ 847.665191][T10477] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 847.872248][T10477] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 847.906851][T10477] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.942938][T10477] usb 1-1: Product: syz [ 847.968285][T10477] usb 1-1: Manufacturer: syz [ 847.991589][T10477] usb 1-1: SerialNumber: syz [ 848.031689][T10477] usb 1-1: config 0 descriptor?? [ 848.322663][T10477] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 848.632675][T16200] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 850.413936][T16215] xt_time: unknown flags 0x4 [ 851.221344][T10477] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 851.255331][T10477] usb 1-1: USB disconnect, device number 93 [ 851.335267][ T9] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 851.525173][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 851.545831][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 851.578074][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.604881][ T30] audit: type=1326 audit(1784036846.131:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16220 comm="syz.6.2985" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83b59de59 code=0x7ffc0000 [ 851.636174][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 851.661168][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 851.689583][ T30] audit: type=1326 audit(1784036846.211:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16220 comm="syz.6.2985" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe83b59de59 code=0x7ffc0000 [ 851.726770][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 851.757686][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.803671][ T9] usb 2-1: config 0 descriptor?? [ 851.810392][ T30] audit: type=1326 audit(1784036846.251:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16220 comm="syz.6.2985" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83b59de59 code=0x7ffc0000 [ 851.852474][ T30] audit: type=1326 audit(1784036846.261:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16220 comm="syz.6.2985" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe83b59de59 code=0x7ffc0000 [ 851.877626][ T30] audit: type=1326 audit(1784036846.321:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16220 comm="syz.6.2985" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83b59de59 code=0x7ffc0000 [ 851.991889][T16226] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 852.030958][ T30] audit: type=1326 audit(1784036846.371:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16220 comm="syz.6.2985" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe83b59de59 code=0x7ffc0000 [ 852.083466][ T30] audit: type=1326 audit(1784036846.431:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16220 comm="syz.6.2985" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83b59de59 code=0x7ffc0000 [ 852.117181][ T30] audit: type=1326 audit(1784036846.451:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16220 comm="syz.6.2985" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83b59de59 code=0x7ffc0000 [ 852.192367][ T30] audit: type=1326 audit(1784036846.461:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16220 comm="syz.6.2985" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fe83b59de59 code=0x7ffc0000 [ 852.330190][ T9] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.004C/input/input135 [ 852.396492][ T30] audit: type=1326 audit(1784036846.461:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16220 comm="syz.6.2985" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83b59de59 code=0x7ffc0000 [ 852.497943][ T9] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.004C/input/input136 [ 852.658466][ T9] kye 0003:0458:5013.004C: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0 [ 852.670847][ T5720] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 852.733155][T16238] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 852.852431][ T9] usb 2-1: USB disconnect, device number 95 [ 852.889907][ T5720] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 852.924301][T16238] netlink: 'syz.2.2988': attribute type 10 has an invalid length. [ 853.015332][ T5720] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 853.063880][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 853.119343][ T5720] usb 1-1: Product: syz [ 853.146678][ T5720] usb 1-1: Manufacturer: syz [ 853.152602][T16239] fido_id[16239]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 853.189771][ T5720] usb 1-1: SerialNumber: syz [ 853.475485][ T5720] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 94 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 853.568325][ T5720] usb 1-1: USB disconnect, device number 94 [ 853.653252][ T5720] usblp0: removed [ 855.983808][T16258] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 856.438177][T16275] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2997'. [ 856.595108][ T9] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 856.615189][T10477] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 856.776209][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 856.787607][ T9] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 856.796436][T10477] usb 2-1: Using ep0 maxpacket: 16 [ 856.805251][ T9] usb 6-1: config 0 has no interface number 0 [ 856.813567][ T9] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 856.830807][T10477] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 856.840162][ T9] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 856.852677][T10477] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 856.862414][T10477] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.870860][ T9] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 856.889033][T10477] usb 2-1: config 0 descriptor?? [ 856.895647][T16277] netlink: 'syz.2.2998': attribute type 29 has an invalid length. [ 856.904579][ T9] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 856.917829][T16277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2998'. [ 856.930206][ T9] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 856.941829][T16277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 856.956034][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.964610][T16277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.008927][ T9] usb 6-1: config 0 descriptor?? [ 857.033268][ T9] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 857.313934][T16280] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2996'. [ 859.093869][ T5699] usb 6-1: USB disconnect, device number 45 [ 859.138223][ T5699] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 859.176713][T10477] usb 2-1: string descriptor 0 read error: -71 [ 859.249476][T10477] usb 2-1: USB disconnect, device number 96 [ 859.975110][ T5720] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 860.135139][ T5720] usb 2-1: device descriptor read/64, error -71 [ 860.395409][ T5720] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 860.555119][ T5720] usb 2-1: device descriptor read/64, error -71 [ 860.685957][ T5720] usb usb2-port1: attempt power cycle [ 861.125631][ T5720] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 861.147716][ T5720] usb 2-1: device descriptor read/8, error -71 [ 861.385123][ T5720] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 861.435820][ T5720] usb 2-1: device descriptor read/8, error -71 [ 861.580382][ T5720] usb usb2-port1: unable to enumerate USB device [ 861.619134][T16325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.633344][T16325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.756839][T10477] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 861.765176][ T5728] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 861.918745][T16326] bond2: Unable to set up delay as MII monitoring is disabled [ 861.925691][ T5728] usb 1-1: Using ep0 maxpacket: 16 [ 861.937437][T10477] usb 6-1: Using ep0 maxpacket: 16 [ 861.949700][T16329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3009'. [ 861.970600][T16326] bond2 (unregistering): Released all slaves [ 861.980785][ T5728] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 861.993138][T10477] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 862.007468][T10477] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 862.032211][ T5728] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 862.033041][T10477] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 862.051014][T10477] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.060415][T10477] usb 6-1: Product: syz [ 862.065307][T10477] usb 6-1: Manufacturer: syz [ 862.071063][T10477] usb 6-1: SerialNumber: syz [ 862.102884][ T5728] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 862.137155][ T5728] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 862.166813][T10477] usb 6-1: 0:2 : does not exist [ 862.173454][T10477] usb 6-1: unit 9 not found! [ 862.184939][ T5728] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 862.223077][ T5728] usb 1-1: config 0 has no interface number 0 [ 862.253610][ T5728] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 862.320875][ T5728] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 862.367292][ T5728] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 862.432483][ T5728] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 862.500413][ T5728] usb 1-1: config 0 interface 125 has no altsetting 0 [ 862.538459][ T5728] usb 1-1: config 0 interface 125 has no altsetting 2 [ 862.582721][ T5728] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 862.624056][ T5728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.662933][ T5728] usb 1-1: Product: syz [ 862.680846][ T5728] usb 1-1: Manufacturer: syz [ 862.693283][ T5728] usb 1-1: SerialNumber: syz [ 862.726377][ T5728] usb 1-1: config 0 descriptor?? [ 862.770353][ T5728] usb 1-1: selecting invalid altsetting 2 [ 862.805443][T14785] udevd[14785]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 863.625263][T12471] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 863.747425][ C1] usb 1-1: async_complete: urb error -71 [ 863.753220][ C1] usb 1-1: async_complete: urb error -71 [ 863.781625][ T5728] get_1284_register: usb error -71 [ 863.855313][T12471] usb 2-1: Using ep0 maxpacket: 32 [ 863.866945][ T5728] usb 1-1: USB disconnect, device number 95 [ 863.884942][T12471] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 863.924946][T12471] usb 2-1: New USB device found, idVendor=04fc, idProduct=0231, bcdDevice=6f.a9 [ 863.958990][T12471] usb 2-1: New USB device strings: Mfr=1, Product=237, SerialNumber=2 [ 863.993985][T12471] usb 2-1: Product: syz [ 864.000479][ T5720] usb 6-1: USB disconnect, device number 46 [ 864.028517][T12471] usb 2-1: Manufacturer: syz [ 864.042469][T12471] usb 2-1: SerialNumber: syz [ 864.074112][T12471] usb 2-1: config 0 descriptor?? [ 864.104528][T12471] spcp8x5 2-1:0.0: required endpoints missing [ 864.374524][T16349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 864.413020][T16349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 864.741199][T16353] netlink: 676 bytes leftover after parsing attributes in process `syz.1.3011'. [ 864.801097][T16353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 864.842066][T16353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 865.067490][T12471] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 865.251335][T12471] usb 1-1: Using ep0 maxpacket: 16 [ 865.262153][T12471] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 865.278426][T12471] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 865.289244][T12471] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.301136][T12471] usb 1-1: Product: syz [ 865.307037][T12471] usb 1-1: Manufacturer: syz [ 865.311915][T12471] usb 1-1: SerialNumber: syz [ 865.324085][T12471] r8152-cfgselector 1-1: Unknown version 0x0000 [ 865.335166][T12471] r8152-cfgselector 1-1: config 0 descriptor?? [ 865.425482][ T5720] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 865.571028][T12471] r8152-cfgselector 1-1: Needed 1 retries to read version [ 865.595099][ T5720] usb 6-1: Using ep0 maxpacket: 32 [ 865.614886][ T5720] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 865.656984][ T5720] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.693272][ T5720] usb 6-1: config 0 descriptor?? [ 865.737453][ T5720] as10x_usb: device has been detected [ 865.760532][ T5720] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 865.853725][ T5720] usb 6-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 865.973011][T16345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.070279][T16345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.296627][ T5720] as10x_usb: error during firmware upload part1 [ 866.317105][ T5720] Registered device nBox DVB-T Dongle [ 866.325913][ T5720] usb 6-1: USB disconnect, device number 47 [ 866.472577][T12471] usb 2-1: USB disconnect, device number 101 [ 866.591715][ T5720] Unregistered device nBox DVB-T Dongle [ 866.604664][ T5720] as10x_usb: device has been disconnected [ 866.960474][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 866.960501][ T30] audit: type=1326 audit(1784036861.491:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16369 comm="syz.5.3017" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ff19de59 code=0x7ffc0000 [ 867.064496][T16370] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 867.076481][ T30] audit: type=1326 audit(1784036861.491:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16369 comm="syz.5.3017" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ff19de59 code=0x7ffc0000 [ 867.171221][ T30] audit: type=1326 audit(1784036861.491:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16369 comm="syz.5.3017" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ff19de59 code=0x7ffc0000 [ 867.304420][ T30] audit: type=1326 audit(1784036861.581:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16369 comm="syz.5.3017" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ff19de59 code=0x7ffc0000 [ 867.329802][T16372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 867.350840][T16372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 867.352411][ T5720] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 867.426903][ T30] audit: type=1326 audit(1784036861.581:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16369 comm="syz.5.3017" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f45ff19de59 code=0x7ffc0000 [ 867.491439][ T30] audit: type=1326 audit(1784036861.581:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16369 comm="syz.5.3017" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ff19de59 code=0x7ffc0000 [ 867.533288][ T30] audit: type=1326 audit(1784036861.591:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16369 comm="syz.5.3017" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ff19de59 code=0x7ffc0000 [ 867.561225][ T5720] usb 6-1: unable to get BOS descriptor or descriptor too short [ 867.596740][ T30] audit: type=1326 audit(1784036861.591:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16369 comm="syz.5.3017" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ff19de59 code=0x7ffc0000 [ 867.659539][ T5720] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 867.701928][ T30] audit: type=1326 audit(1784036861.581:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16369 comm="syz.5.3017" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ff19de59 code=0x7ffc0000 [ 867.765144][ T5720] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 867.782296][ T30] audit: type=1326 audit(1784036861.591:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16369 comm="syz.5.3017" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f45ff19de59 code=0x7ffc0000 [ 867.822598][ T24] r8152-cfgselector 1-1: USB disconnect, device number 96 [ 867.830337][ T5720] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.871795][ T5720] usb 6-1: Product: syz [ 867.883805][ T5720] usb 6-1: Manufacturer: syz [ 867.897043][ T5720] usb 6-1: SerialNumber: syz [ 868.183063][ T5720] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 868.358482][ T5720] usb 6-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 868.453917][ T5720] usb 6-1: found format II with max.bitrate = 4, frame size=7372 [ 868.463198][T16387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 868.550143][T16387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 868.797295][ T5720] usb 6-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 868.834939][ T5720] usb 6-1: found format II with max.bitrate = 4, frame size=7372 [ 869.011459][ T5720] usb 6-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 869.030374][T16394] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 869.184845][ T5720] usb 6-1: USB disconnect, device number 48 [ 869.316161][T14785] udevd[14785]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 870.201497][T16404] pic_ioport_write: 79 callbacks suppressed [ 870.201520][T16404] kvm: pic: level sensitive irq not supported [ 870.210971][T16404] picdev_read: 79 callbacks suppressed [ 870.211714][T16404] kvm: pic: non byte read [ 870.228993][T16404] kvm: pic: level sensitive irq not supported [ 870.241182][T16404] kvm: pic: non byte read [ 870.260363][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.267498][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.299809][T16404] kvm: pic: level sensitive irq not supported [ 870.299898][T16404] kvm: pic: non byte read [ 870.330031][T16404] kvm: pic: level sensitive irq not supported [ 870.330115][T16404] kvm: pic: non byte read [ 870.367678][T16404] kvm: pic: level sensitive irq not supported [ 870.367769][T16404] kvm: pic: non byte read [ 870.411902][T16404] kvm: pic: level sensitive irq not supported [ 870.411982][T16404] kvm: pic: non byte read [ 870.423524][T16404] kvm: pic: level sensitive irq not supported [ 870.423601][T16404] kvm: pic: non byte read [ 870.460638][T16404] kvm: pic: level sensitive irq not supported [ 870.460724][T16404] kvm: pic: non byte read [ 870.472553][T16404] kvm: pic: level sensitive irq not supported [ 870.472658][T16404] kvm: pic: non byte read [ 870.488387][T16404] kvm: pic: level sensitive irq not supported [ 870.488472][T16404] kvm: pic: non byte read [ 872.292084][T16429] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3030'. [ 872.355723][T16423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 872.417792][T16429] loop8: detected capacity change from 0 to 7 [ 872.489685][T16429] Dev loop8: unable to read RDB block 7 [ 872.508683][T16429] loop8: unable to read partition table [ 872.522873][T16429] loop8: partition table beyond EOD, truncated [ 872.541234][T16429] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 872.605198][T12471] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 872.854812][T12471] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 872.908603][T12471] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 872.949274][T12471] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 873.016588][T12471] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.082755][T16430] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 873.123534][T12471] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 873.712105][T16437] netlink: del zone limit has 4 unknown bytes [ 873.969399][T12464] usb 6-1: USB disconnect, device number 49 [ 875.294525][T16444] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 875.858736][T16458] batadv_slave_1: entered promiscuous mode [ 875.917847][T16459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3045'. [ 877.158478][T16454] batadv_slave_1: left promiscuous mode [ 877.589918][T16476] pic_ioport_write: 79 callbacks suppressed [ 877.589942][T16476] kvm: pic: level sensitive irq not supported [ 877.622311][T16476] picdev_read: 79 callbacks suppressed [ 877.622340][T16476] kvm: pic: non byte read [ 877.754921][T16476] kvm: pic: level sensitive irq not supported [ 877.778836][T16476] kvm: pic: non byte read [ 877.856165][T16476] kvm: pic: level sensitive irq not supported [ 877.856243][T16476] kvm: pic: non byte read [ 877.889826][T16476] kvm: pic: level sensitive irq not supported [ 877.889915][T16476] kvm: pic: non byte read [ 877.918554][T16476] kvm: pic: level sensitive irq not supported [ 877.918644][T16476] kvm: pic: non byte read [ 877.991208][T16476] kvm: pic: level sensitive irq not supported [ 877.991281][T16476] kvm: pic: non byte read [ 878.030322][T16476] kvm: pic: level sensitive irq not supported [ 878.030380][T16476] kvm: pic: non byte read [ 878.092176][T16476] kvm: pic: level sensitive irq not supported [ 878.092277][T16476] kvm: pic: non byte read [ 878.103386][T10477] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 878.178341][T16476] kvm: pic: level sensitive irq not supported [ 878.178456][T16476] kvm: pic: non byte read [ 878.227310][T16476] kvm: pic: level sensitive irq not supported [ 878.227388][T16476] kvm: pic: non byte read [ 878.280400][T10477] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 878.359892][T10477] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 878.423693][T10477] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.533024][T10477] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 879.139901][T16497] bond4: Unable to set up delay as MII monitoring is disabled [ 879.147869][T16500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3040'. [ 879.244802][T16497] bond4 (unregistering): Released all slaves [ 879.915119][ T24] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 880.125468][T10477] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -110 [ 880.133920][T10477] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 880.161788][T10477] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 880.190702][T10477] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 880.222746][ T24] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 880.347305][T10477] usb 1-1: USB disconnect, device number 97 [ 880.370702][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 880.570868][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 880.771210][ T24] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 880.819129][ T24] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 880.850382][ T24] usb 2-1: Manufacturer: syz [ 880.931900][ T24] usb 2-1: config 0 descriptor?? [ 880.964797][ T24] igorplugusb 2-1:0.0: endpoint incorrect [ 882.068302][ T30] kauditd_printk_skb: 127 callbacks suppressed [ 882.068322][ T30] audit: type=1326 audit(1784036876.601:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16518 comm="syz.2.3049" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a919de59 code=0x7ffc0000 [ 882.174885][T16519] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 882.294879][ T30] audit: type=1326 audit(1784036876.601:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16518 comm="syz.2.3049" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a919de59 code=0x7ffc0000 [ 882.409392][ T9] usb 2-1: USB disconnect, device number 102 [ 882.433473][T16522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.510295][T16522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.553898][ T30] audit: type=1326 audit(1784036876.631:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16518 comm="syz.2.3049" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a919de59 code=0x7ffc0000 [ 882.663090][ T30] audit: type=1326 audit(1784036876.631:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16518 comm="syz.2.3049" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a919de59 code=0x7ffc0000 [ 882.815450][ T30] audit: type=1326 audit(1784036876.691:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16518 comm="syz.2.3049" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a919de59 code=0x7ffc0000 [ 883.007457][ T30] audit: type=1326 audit(1784036876.691:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16518 comm="syz.2.3049" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa5a919dbc2 code=0x7ffc0000 [ 883.168357][ T30] audit: type=1326 audit(1784036876.691:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16518 comm="syz.2.3049" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa5a919dc57 code=0x7ffc0000 [ 883.302771][ T30] audit: type=1326 audit(1784036876.691:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16518 comm="syz.2.3049" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa5a915ab51 code=0x7ffc0000 [ 883.479463][ T30] audit: type=1326 audit(1784036876.691:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16518 comm="syz.2.3049" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fa5a919ec49 code=0x7ffc0000 [ 883.514730][T16530] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 883.613705][ T30] audit: type=1326 audit(1784036876.691:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16518 comm="syz.2.3049" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa5a915abbb code=0x7ffc0000 [ 883.914626][T16530] netlink: 'syz.1.3051': attribute type 21 has an invalid length. [ 883.929729][T16530] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3051'. [ 883.970122][T16530] netlink: 'syz.1.3051': attribute type 4 has an invalid length. [ 884.008653][T16530] netlink: 'syz.1.3051': attribute type 3 has an invalid length. [ 884.138543][T16530] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3051'. [ 884.555173][ T24] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 884.725957][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 884.747833][ T24] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 884.780891][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.838373][ T24] usb 6-1: Product: syz [ 884.866338][ T24] usb 6-1: Manufacturer: syz [ 884.887786][ T24] usb 6-1: SerialNumber: syz [ 884.922704][ T24] usb 6-1: config 0 descriptor?? [ 885.155816][ T24] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 885.518422][T16547] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 885.835116][T12464] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 886.017977][T12464] usb 2-1: not running at top speed; connect to a high speed hub [ 886.045820][T12464] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 4 [ 886.103236][T12464] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 886.212935][T12464] usb 2-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 886.267439][T12464] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.301863][T12464] usb 2-1: Product: 嘼ᅐ充뒕鵭ऴ얹ጡ䗛蟵ﶬ薉ຳ孮ῖ퇝六붴굶ᨱ಑蛎眹櫏䞠ֿꑊ੧⫅ॏ綷ౕ텽㛄Ꮣၼᛁ鄚覥鯽ᒬ틁쵱ᢜ [ 886.367533][T12464] usb 2-1: Manufacturer: ⃓ꆭ넎흲ﳩᑪ뀱ᐟ赩俆蕫谣ꖧꎄ쥅듞談꫱想᨟璄앖史쓵颦䎃㕁ሏ⺆똥㠵ᷗ橡⿶㑇茬♄線鹗ꐁ⛘沎㎽鸥覂앧ℾဥ氟ƁꝦԒ㩸ર斡ꏄ⫹꟏㐗㕫퉕i濾᪣䉂믨飲쉤Ԙس絈ᩮ卛㧕뫟ᲊ௾්턶캱ょ漷 [ 886.415360][ T24] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 886.508752][T12464] usb 2-1: SerialNumber: ࠾ [ 886.532409][T10477] usb 6-1: USB disconnect, device number 50 [ 887.136227][T12464] usb 2-1: USB disconnect, device number 103 [ 887.479358][T14372] udevd[14372]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 887.530265][T16561] veth0_macvtap: Caught tx_queue_len zero misconfig [ 887.573498][T16562] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3057'. [ 889.165314][T10477] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 889.368594][T10477] usb 2-1: config 1 has an invalid interface number: 9 but max is 2 [ 889.416650][T10477] usb 2-1: config 1 has an invalid interface number: 9 but max is 2 [ 889.468750][T10477] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 889.527476][T10477] usb 2-1: config 1 has no interface number 2 [ 889.565242][T10477] usb 2-1: config 1 interface 9 has no altsetting 0 [ 889.609473][T10477] usb 2-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 889.660912][T10477] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.714736][T10477] usb 2-1: Product: syz [ 889.741406][T10477] usb 2-1: Manufacturer: syz [ 889.765193][T10477] usb 2-1: SerialNumber: syz [ 890.207310][T16580] netlink: 'syz.6.3062': attribute type 1 has an invalid length. [ 890.445910][ T30] kauditd_printk_skb: 102 callbacks suppressed [ 890.445930][ T30] audit: type=1326 audit(1784036884.981:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16579 comm="syz.6.3062" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe83b59de59 code=0x0 [ 890.516018][T16580] bond1: entered promiscuous mode [ 890.587647][T16580] 8021q: adding VLAN 0 to HW filter on device bond1 [ 890.658967][T16582] vlan2: entered allmulticast mode [ 890.694565][T16582] bond1: entered allmulticast mode [ 890.943971][T16583] bond1: (slave bridge1): making interface the new active one [ 890.988939][T16583] bridge1: entered promiscuous mode [ 891.025596][T16583] bridge1: entered allmulticast mode [ 891.118482][T16583] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 891.217354][T10477] usb 2-1: 0:2 : does not exist [ 891.270391][T16590] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 891.307357][T16590] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 891.349900][T16590] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 891.372308][T16590] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 891.557178][T10477] usb 2-1: USB disconnect, device number 104 [ 892.266319][T12464] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 892.461719][T12464] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 892.505167][T12464] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 892.547673][T12464] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 892.564938][T10477] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 892.622811][T12464] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 892.683021][T12464] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 892.717100][T12464] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.757038][T10477] usb 2-1: config 14 has an invalid interface number: 135 but max is 0 [ 892.767809][T12464] usb 6-1: Product: syz [ 892.800879][T12464] usb 6-1: Manufacturer: syz [ 892.805923][T10477] usb 2-1: config 14 has no interface number 0 [ 892.823957][T12464] usb 6-1: SerialNumber: syz [ 892.840680][T10477] usb 2-1: too many endpoints for config 14 interface 135 altsetting 252: 111, using maximum allowed: 30 [ 892.865262][T16607] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 892.914878][T10477] usb 2-1: config 14 interface 135 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 111 [ 892.990677][T10477] usb 2-1: config 14 interface 135 has no altsetting 0 [ 893.043886][T10477] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=fb.9d [ 893.100838][T10477] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.140066][T16599] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 893.148390][T16607] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 893.162486][T10477] usb 2-1: Product: syz [ 893.175298][T10477] usb 2-1: Manufacturer: syz [ 893.214236][T10477] usb 2-1: SerialNumber: syz [ 893.295222][T12317] Bluetooth: hci3: command 0x0406 tx timeout [ 893.375309][T12317] Bluetooth: hci1: command 0x0c1a tx timeout [ 893.382325][T12317] Bluetooth: hci2: command 0x0c1a tx timeout [ 893.388602][T12317] Bluetooth: hci0: command 0x0406 tx timeout [ 893.597747][T16615] veth0_macvtap: Caught tx_queue_len zero misconfig [ 893.621112][T16610] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 894.836285][T16620] vimc link validate: Scaler:src:4096x2160 (0x33424752, 5, 0, 0, 8) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 895.398740][T16617] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 895.864416][T12464] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 895.933780][T12464] cdc_ncm 6-1:1.0: dwNtbInMaxSize=15 is too small. Using 2048 [ 896.027376][T12464] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 896.556989][T10477] usb-storage 2-1:14.135: USB Mass Storage device detected [ 896.757502][T10477] usb-storage 2-1:14.135: device ignored [ 896.972853][T10477] usb 2-1: USB disconnect, device number 105 [ 898.283716][T12464] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 898.529120][T12464] usb 6-1: USB disconnect, device number 51 [ 898.635845][T12464] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 899.269216][ T30] audit: type=1326 audit(1784036893.791:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16635 comm="syz.0.3071" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532bf9de59 code=0x7ffc0000 [ 899.661907][ T30] audit: type=1326 audit(1784036893.791:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16635 comm="syz.0.3071" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532bf9de59 code=0x7ffc0000 [ 899.962104][ T30] audit: type=1326 audit(1784036893.841:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16635 comm="syz.0.3071" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f532bf9de59 code=0x7ffc0000 [ 900.265676][ T30] audit: type=1326 audit(1784036893.841:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16635 comm="syz.0.3071" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532bf9de59 code=0x7ffc0000 [ 900.540450][ T30] audit: type=1326 audit(1784036893.841:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16635 comm="syz.0.3071" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532bf9de59 code=0x7ffc0000 [ 900.768254][ T30] audit: type=1326 audit(1784036893.881:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16635 comm="syz.0.3071" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f532bf9de59 code=0x7ffc0000 [ 900.963369][ T30] audit: type=1326 audit(1784036893.881:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16635 comm="syz.0.3071" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532bf9de59 code=0x7ffc0000 [ 901.226539][ T30] audit: type=1326 audit(1784036893.881:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16635 comm="syz.0.3071" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532bf9de59 code=0x7ffc0000 [ 901.431540][ T30] audit: type=1326 audit(1784036893.891:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16635 comm="syz.0.3071" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f532bf9de59 code=0x7ffc0000 [ 901.582012][ T30] audit: type=1326 audit(1784036893.891:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16635 comm="syz.0.3071" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f532bf9de59 code=0x7ffc0000 [ 905.127127][T16652] team0: Device xfrm0 is of different type [ 905.215408][T16656] tipc: Enabled bearer , priority 10 [ 905.415396][T16652] : renamed from lo [ 905.886513][T16657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 905.924050][T16657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.317815][T10477] tipc: Node number set to 2622529862 [ 907.114627][T16666] netlink: 'syz.0.3076': attribute type 4 has an invalid length. [ 907.661967][T10477] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 907.876994][T10477] usb 6-1: Using ep0 maxpacket: 32 [ 907.947053][T10477] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 908.052076][T10477] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.183382][T10477] usb 6-1: config 0 descriptor?? [ 908.354017][T10477] gspca_main: sq930x-2.14.0 probing 041e:403c [ 909.441325][T16670] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3077'. [ 909.829338][T10477] gspca_sq930x: ucbus_write failed -110 [ 909.866668][T10477] sq930x 6-1:0.0: probe with driver sq930x failed with error -110 [ 910.333028][T16681] fuse: Bad value for 'fd' [ 910.432355][ T24] usb 6-1: USB disconnect, device number 52 [ 911.975647][ T5728] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 912.176850][ T5728] usb 6-1: Using ep0 maxpacket: 32 [ 912.220293][ T5728] usb 6-1: config index 0 descriptor too short (expected 27632, got 27) [ 912.279711][ T5728] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 912.341970][ T5728] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 912.447946][ T5728] usb 6-1: config 1 has no interface number 0 [ 912.509977][ T5728] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 912.607860][ T5728] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 912.678832][ T5728] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 912.753739][ T5728] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.992996][ T5728] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 913.682805][ T5728] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 914.739054][ T5728] snd_usb_pod 6-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 915.102824][T10477] usb 6-1: USB disconnect, device number 53 [ 915.232029][T10477] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 915.860996][T16693] xt_TPROXY: Can be used only with -p tcp or -p udp [ 916.105119][T16693] loop9: detected capacity change from 0 to 2640 [ 916.143632][T16697] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3084'. [ 916.177843][T16693] buffer_io_error: 11 callbacks suppressed [ 916.177902][T16693] Buffer I/O error on dev loop9, logical block 0, async page read [ 916.328843][T16696] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 916.465418][T16693] Buffer I/O error on dev loop9, logical block 1, async page read [ 916.636015][T10477] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 916.660268][T16700] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 916.704890][T16689] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 916.725219][T16700] Buffer I/O error on dev loop9, logical block 1, lost async page write [ 916.812185][T16700] Buffer I/O error on dev loop9, logical block 2, lost async page write [ 916.904458][T10477] usb 6-1: config 0 has no interfaces? [ 916.935596][T16700] Buffer I/O error on dev loop9, logical block 3, lost async page write [ 916.996249][T10477] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 917.034126][T16701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 917.044389][T16700] Buffer I/O error on dev loop9, logical block 4, lost async page write [ 917.048669][T10477] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.106763][T16701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 917.138889][T16700] Buffer I/O error on dev loop9, logical block 5, lost async page write [ 917.195059][T16692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 917.214065][T10477] usb 6-1: Product: syz [ 917.230637][T10477] usb 6-1: Manufacturer: syz [ 917.251872][T10477] usb 6-1: SerialNumber: syz [ 917.268643][T16692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 917.299002][T16700] Buffer I/O error on dev loop9, logical block 6, lost async page write [ 917.361329][T10477] usb 6-1: config 0 descriptor?? [ 917.657654][ T12] ------------[ cut here ]------------ [ 917.664686][ T12] time_after(jiffies, timeout) [ 917.664723][ T12] WARNING: io_uring/io_uring.c:2365 at io_ring_exit_work+0x4d0/0x9a0, CPU#0: kworker/u8:0/12 [ 917.682134][ T12] Modules linked in: [ 917.687514][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 917.700360][ T12] Tainted: [L]=SOFTLOCKUP [ 917.705592][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 917.717066][ T12] Workqueue: iou_exit io_ring_exit_work [ 917.723587][ T12] RIP: 0010:io_ring_exit_work+0x4d0/0x9a0 [ 917.730438][ T12] Code: c6 05 4c fd 15 0f 01 48 c7 c7 a0 3d 49 8c be 25 00 00 00 48 c7 c2 c0 38 49 8c e8 8b 82 77 00 e9 70 fe ff ff e8 f1 85 9b 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 eb 9a c7 84 24 b0 00 00 00 [ 917.753142][ T12] RSP: 0018:ffffc90000117960 EFLAGS: 00010293 [ 917.761497][ T12] RAX: ffffffff812aeb8f RBX: 000000010000f084 RCX: ffff88801dea0000 [ 917.770638][ T12] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 917.779888][ T12] RBP: ffffc90000117af0 R08: ffffc900001178e7 R09: 1ffff92000022f1c [ 917.789087][ T12] R10: dffffc0000000000 R11: fffff52000022f1d R12: dffffc0000000000 [ 917.797982][ T12] R13: 000000010000f083 R14: 0000000000002000 R15: ffff888051c0c000 [ 917.806755][ T12] FS: 0000000000000000(0000) GS:ffff888124f56000(0000) knlGS:0000000000000000 [ 917.816581][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 917.823853][ T12] CR2: 000000110c42e7b9 CR3: 000000007b66a000 CR4: 00000000003526f0 [ 917.832831][ T12] DR0: 0000000000000000 DR1: 00000000000000ff DR2: 0000000000000000 [ 917.841629][ T12] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 917.850996][ T12] Call Trace: [ 917.854861][ T12] [ 917.858367][ T12] ? __pfx_io_ring_exit_work+0x10/0x10 [ 917.864681][ T12] ? rcu_is_watching+0x15/0xb0 [ 917.870095][ T12] ? process_scheduled_works+0xa20/0x14e0 [ 917.876364][ T12] process_scheduled_works+0xa8e/0x14e0 [ 917.882455][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 917.889461][ T12] ? assign_work+0x3cf/0x5d0 [ 917.894835][ T12] worker_thread+0xa47/0xfb0 [ 917.900348][ T12] kthread+0x388/0x470 [ 917.905055][ T12] ? __pfx_worker_thread+0x10/0x10 [ 917.910924][ T12] ? __pfx_kthread+0x10/0x10 [ 917.916274][ T12] ret_from_fork+0x514/0xb70 [ 917.921638][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 917.927733][ T12] ? __switch_to+0xc89/0x1420 [ 917.933149][ T12] ? __pfx_kthread+0x10/0x10 [ 917.938648][ T12] ret_from_fork_asm+0x1a/0x30 [ 917.944284][ T12] [ 917.947722][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 917.955025][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 917.965894][ T12] Tainted: [L]=SOFTLOCKUP [ 917.970230][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 917.980398][ T12] Workqueue: iou_exit io_ring_exit_work [ 917.985994][ T12] Call Trace: [ 917.989295][ T12] [ 917.992255][ T12] vpanic+0x56c/0xa60 [ 917.996301][ T12] ? __pfx__printk+0x10/0x10 [ 918.000946][ T12] ? __pfx_vpanic+0x10/0x10 [ 918.005476][ T12] panic+0xc5/0xd0 [ 918.009223][ T12] ? __pfx_panic+0x10/0x10 [ 918.013715][ T12] __warn+0x315/0x4c0 [ 918.017709][ T12] ? io_ring_exit_work+0x4d0/0x9a0 [ 918.022837][ T12] ? io_ring_exit_work+0x4d0/0x9a0 [ 918.027958][ T12] __report_bug+0x331/0x530 [ 918.032551][ T12] ? io_ring_exit_work+0x4d0/0x9a0 [ 918.037673][ T12] ? __pfx___report_bug+0x10/0x10 [ 918.042738][ T12] ? irqentry_exit+0x218/0x8f0 [ 918.047784][ T12] ? trace_irq_disable+0x3b/0x140 [ 918.052957][ T12] ? io_ring_exit_work+0x4d2/0x9a0 [ 918.058088][ T12] ? io_ring_exit_work+0x4d0/0x9a0 [ 918.063220][ T12] ? io_ring_exit_work+0x4d0/0x9a0 [ 918.068343][ T12] report_bug+0x16a/0x220 [ 918.072731][ T12] ? io_ring_exit_work+0x4d0/0x9a0 [ 918.077944][ T12] ? io_ring_exit_work+0x4d2/0x9a0 [ 918.083066][ T12] handle_bug+0x9c/0x200 [ 918.087342][ T12] exc_invalid_op+0x1a/0x50 [ 918.091855][ T12] asm_exc_invalid_op+0x1a/0x20 [ 918.096748][ T12] RIP: 0010:io_ring_exit_work+0x4d0/0x9a0 [ 918.102476][ T12] Code: c6 05 4c fd 15 0f 01 48 c7 c7 a0 3d 49 8c be 25 00 00 00 48 c7 c2 c0 38 49 8c e8 8b 82 77 00 e9 70 fe ff ff e8 f1 85 9b 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 eb 9a c7 84 24 b0 00 00 00 [ 918.122096][ T12] RSP: 0018:ffffc90000117960 EFLAGS: 00010293 [ 918.128287][ T12] RAX: ffffffff812aeb8f RBX: 000000010000f084 RCX: ffff88801dea0000 [ 918.136352][ T12] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 918.144427][ T12] RBP: ffffc90000117af0 R08: ffffc900001178e7 R09: 1ffff92000022f1c [ 918.152428][ T12] R10: dffffc0000000000 R11: fffff52000022f1d R12: dffffc0000000000 [ 918.160419][ T12] R13: 000000010000f083 R14: 0000000000002000 R15: ffff888051c0c000 [ 918.168432][ T12] ? io_ring_exit_work+0x4cf/0x9a0 [ 918.173579][ T12] ? __pfx_io_ring_exit_work+0x10/0x10 [ 918.179123][ T12] ? rcu_is_watching+0x15/0xb0 [ 918.183959][ T12] ? process_scheduled_works+0xa20/0x14e0 [ 918.189717][ T12] process_scheduled_works+0xa8e/0x14e0 [ 918.195294][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 918.201307][ T12] ? assign_work+0x3cf/0x5d0 [ 918.205914][ T12] worker_thread+0xa47/0xfb0 [ 918.210538][ T12] kthread+0x388/0x470 [ 918.214621][ T12] ? __pfx_worker_thread+0x10/0x10 [ 918.219740][ T12] ? __pfx_kthread+0x10/0x10 [ 918.224379][ T12] ret_from_fork+0x514/0xb70 [ 918.229004][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 918.234153][ T12] ? __switch_to+0xc89/0x1420 [ 918.238854][ T12] ? __pfx_kthread+0x10/0x10 [ 918.243488][ T12] ret_from_fork_asm+0x1a/0x30 [ 918.248317][ T12] [ 918.251974][ T12] Kernel Offset: disabled [ 918.256325][ T12] Rebooting in 86400 seconds..