last executing test programs: 7m5.152488319s ago: executing program 2 (id=790): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) read$dsp(r0, &(0x7f0000000300)=""/79, 0x4f) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f00000000c0)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, &(0x7f0000000080)="f68becea12e5e07bec27ee5b70772d69f2fa0a744fb58eeaa7856e7f04"}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r1, 0x3b8c, &(0x7f0000000180)={0x30, r2, 0x1, 0x0, 0xf, 0x6, 0xf2, &(0x7f0000000100)=""/101}) write$vga_arbiter(r1, &(0x7f00000001c0)=@unlock_all, 0xb) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) (async) read$dsp(r0, &(0x7f0000000300)=""/79, 0x4f) (async) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) (async) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f00000000c0)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, &(0x7f0000000080)="f68becea12e5e07bec27ee5b70772d69f2fa0a744fb58eeaa7856e7f04"}) (async) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r1, 0x3b8c, &(0x7f0000000180)={0x30, r2, 0x1, 0x0, 0xf, 0x6, 0xf2, &(0x7f0000000100)=""/101}) (async) write$vga_arbiter(r1, &(0x7f00000001c0)=@unlock_all, 0xb) (async) 7m4.975575498s ago: executing program 2 (id=791): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffb, 0x6, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="080005020000", &(0x7f0000001200)=""/4115, 0x0, 0x10, 0x1, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0xc, 0xfe, 0x0, 0x80000}, {0x5c, 0xd, 0x81, 0xc8}, {0x6, 0x0, 0x4, 0x7ffffe39}]}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffb, 0x6, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="080005020000", &(0x7f0000001200)=""/4115, 0x0, 0x10, 0x1, 0x0}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0xc, 0xfe, 0x0, 0x80000}, {0x5c, 0xd, 0x81, 0xc8}, {0x6, 0x0, 0x4, 0x7ffffe39}]}) (async) 7m4.82807045s ago: executing program 2 (id=792): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'veth1_to_team\x00', @random="dac563320d66"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r7, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r7, &(0x7f00000007c0)={0x1, {&(0x7f0000000080)=""/158, 0x9e, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg(r7, &(0x7f0000000a00)={0x1, {&(0x7f0000000240)=""/39, 0x27, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r7, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f0000000340)=""/69, 0x45, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r7, &(0x7f0000002b00)={0x2, 0x0, {&(0x7f00000003c0)=""/14, 0xe, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r7, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r8, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0x2f, 0x40000, &(0x7f0000000a80)={0x11, 0x19, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 7m4.698828978s ago: executing program 2 (id=794): socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x8, 0x20000f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7m1.394276653s ago: executing program 2 (id=805): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f0000002080)=0x3a, 0x23b) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000001e40)={0x44, &(0x7f0000001c40)={0x40, 0x15, 0x1, '!'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0xfffffffffffffeb8) syz_usb_control_io$uac2(r4, &(0x7f00000001c0)={0x14, &(0x7f0000000080)={0x40, 0xb, 0x21, {0x21, 0x30, "b120ec7b31dc7b4af7c56f7dcdb540bd817a744bfb4f6f9c4f2fc8a6cc6c53"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}}, &(0x7f0000000480)={0x44, &(0x7f0000000200)={0x40, 0x10, 0x1f, "aa8c2c94ff4a18fe7b6da8a55e7762fe480a09d0cc0be76141cf691c2de641"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000002c0)={0x20, 0x81, 0x3, "723df8"}, &(0x7f0000000a80)=ANY=[@ANYBLOB="0900000000fabe504bbba8dffe7440c70a7d8de325e9b097944c4e89220500ce698b3e743227eee945e614462c2dc7992619c0c511e4d5686b374db525ffd21dda106a3811d0aa374ead90c2fae19d152e646c630d0e9d648d38215777fb5f0935cb07d5f743284d41505e3ca2652bf38570024e3530c70000000000000000000000000000defe75e79a50570e08f77b70f982294a59ecfcbaec7325b8b51907118063b0376200f88586156bc04c849f59f8df339e6c01a12d9bbf22031f816f13df7838399e9a7e250874ff67429cd0bec58e5a22da815833fa234c4e09392e3f56b8449de09342823f601e07b70b35a7805f6a592655b29082451368e7122db102756dcd8ec0d090829d"], &(0x7f00000003c0)={0x20, 0x83, 0x2, "a6e6"}, &(0x7f0000000400)={0x20, 0x84, 0x2, "06f9"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "ca1cfb"}}) 6m58.285369353s ago: executing program 2 (id=819): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x1000, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000180)={0x6, 0x6}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) (rerun: 64) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="c709bc297d2688e026", 0x9}], 0x1}}], 0x1, 0x41) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 64) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x80) (rerun: 64) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r3, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0xffff, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 6m42.770911527s ago: executing program 32 (id=819): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x1000, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000180)={0x6, 0x6}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) (rerun: 64) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="c709bc297d2688e026", 0x9}], 0x1}}], 0x1, 0x41) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 64) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x80) (rerun: 64) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r3, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0xffff, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 4.976065717s ago: executing program 4 (id=2745): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) ppoll(&(0x7f00000002c0)=[{r1, 0x200}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0)=0x2) sendmsg$nl_route(r0, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, &(0x7f0000000240)="235913100000004a3525c373b8be3e8d2672540e4fff5fe7", 0x0, 0x18}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x1, 0x3e, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2, 0x1], 0x10000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x70000, 0x30000, 0x0, 0x2, 0x2, 0x10, 0x3, 0x7, 0x0, 0x8, 0x9}, {0xe000, 0x2, 0xc, 0x0, 0x22, 0x0, 0xfd, 0x0, 0x7, 0xff}, {0xb000, 0x8080000, 0xc, 0x0, 0x27, 0xc4, 0x0, 0x0, 0x8, 0xfd, 0x44, 0x3}, {0x4000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x3, 0x9, 0x9, 0x7, 0x8, 0xf, 0x4}, {0x80a0000, 0xeeee8000, 0xb, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3f, 0x6}, {0xb000, 0x0, 0x9, 0x76, 0x2, 0x1, 0x2, 0x80, 0x0, 0xff, 0x6}, {0xeeee8000, 0xeeee0000, 0x3, 0x4, 0x6, 0x0, 0xa1, 0x2, 0x0, 0x0, 0x4}, {0x2, 0x50000, 0xc, 0x3, 0x9, 0x7, 0x9, 0x40, 0x26, 0x0, 0x0, 0xf}, {0x80a0000, 0x8cc}, {0x60000, 0xfffc}, 0xddf8ffd3, 0x0, 0x0, 0x110, 0xe, 0xf801, 0xb000, [0x80000004, 0x0, 0x10000, 0xfffffffffffdffff]}) r5 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r5, 0xfffff000) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.975553779s ago: executing program 1 (id=2746): r0 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x11, &(0x7f0000000040)=0x2, 0x4) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x7}, 'port0\x00', 0x44, 0xa04f2, 0x10000000, 0x8000088, 0x6, 0x4, 0x80000001}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000004c0)={0x800100, 0xfffffffd, 0x0, 0x8, 0x9, 0x6}) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000980)=[{&(0x7f0000000440)="4800000014001d1009074beafd0d8c560a84606080ffe0064e204e20590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b", 0x48}], 0x1) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000029008188e6b62aa73772cc9f1ba1f848430000005e140602000006020e00280010000700028000001294", 0x2e}], 0x1}, 0x0) r6 = fcntl$dupfd(r0, 0x0, r1) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, 0x0, 0x0}, 0x94) write$FUSE_ATTR(r6, &(0x7f0000000380)={0x78, 0x0, 0x0, {0x7fffffff, 0xfffffffc, 0x0, {0x3, 0xb, 0xffffffffffffffff, 0x40, 0x9, 0x6, 0x757, 0x2, 0x6, 0x0, 0x0, 0xee00, 0x0, 0x8bfffffd, 0x223b8fb9}}}, 0x78) close(r7) readv(r6, &(0x7f0000000180)=[{&(0x7f0000000200)=""/132, 0x84}], 0x1) 4.818354148s ago: executing program 1 (id=2749): r0 = socket(0x840000000002, 0x3, 0x100) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e22, 0x453, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0xa818, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e24, @rand_addr=0x64010100}], 0xa4) connect$inet(r0, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000380), 0x7f7a, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x3a, &(0x7f0000000240)=ANY=[@ANYRES64], 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xe, 0x8001, 0x7a, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x2}, 0x0) syz_open_dev$video4linux(0x0, 0xffffffffffffffff, 0x787203) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000300)={0xffffffffffffff5e, 0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) getpid() socket$kcm(0x10, 0x2, 0x4) r6 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)="79fb6fad", 0x4}], 0x1}, 0x8d1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)}, 0x8010) 4.353602076s ago: executing program 0 (id=2754): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000140)={@my=0x1}) (async) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES16=r0], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8080) 4.291453593s ago: executing program 0 (id=2755): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000004040)=[{0x3, &(0x7f0000003fc0)=0x3, 0x82}], 0x1, 0x0, &(0x7f00000040c0)={0x77359400}, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r1, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0xa010102}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000002080)="04", 0x1}], 0x1}}], 0x2, 0xc080) 4.052592477s ago: executing program 4 (id=2756): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x80000, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b7030000200000007910300000000000200000000100000095000000000000001cc56fbad4e5756058a081283654fcf115029232109ea547f4b0410749548298a8cd7890378780df4c4971c84e179ab11776f5aeb9a95f37c063b126f28dee87354090ab8c3587d88e940857236bcf8e48257f60fe82b47dbdd05670ab671007f819798539cb7eadfe9772113755ab5461d067e14d881a9ea0c2c66e7b80693b07e80f7b318a"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x22) r2 = socket(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="90000000051405012cbd7000fbdbdf0100000000000800030000000015fd00012ce379552fc285"], 0x90}, 0x1, 0x0, 0x0, 0x20040081}, 0x40010) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0xf170, 0xa1d, 0x8, 0x5, 0x0, 0x3, 0x2, 0x0, 0xfffffffffffffffc], 0x10000, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x1, 0x0, 0x7, 0x8, 0x5, 0x0, 0x3, 0x0, 0x8, 0x6, 0x45}, {0xffff6000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0xeeee0000, 0x8080000, 0xb, 0x4, 0x5, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfd}, {0x0, 0xdddd0000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4, 0x2}, {0x200000, 0x6000, 0x8, 0x3, 0x8, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x100000, 0xeeee0000, 0xe, 0x2, 0x70, 0x1, 0x2, 0x0, 0x0, 0x3, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x1, 0x0, 0xa1, 0x20, 0x0, 0xff, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x5, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0x0, 0x0, 0x0, 0x118, 0xc, 0xf800, 0x0, [0x8000000000000001, 0x0, 0xffffffffffffffff, 0x1]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x6}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd25, 0x60000000, {0x60, 0x0, 0x0, r7, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r8, 0x0) setsockopt$inet6_tcp_int(r1, 0x11a, 0x3, &(0x7f0000000000)=0x100, 0x4) landlock_restrict_self(r0, 0x0) landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0) 3.910072652s ago: executing program 4 (id=2757): r0 = socket$kcm(0x10, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602200000000e000a00140000000280", 0x2a}, {&(0x7f0000000400)="6a718e5e", 0x4}], 0x2}, 0x0) 3.876145582s ago: executing program 1 (id=2758): r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_proto_private(r0, 0x89e1, &(0x7f0000001080)) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x450300, 0x0) r2 = io_uring_setup(0x1020, &(0x7f0000000040)={0x0, 0x6a0d, 0x3000, 0x1, 0x1c1, 0x0, r1}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000e00000/0x3000)=nil, 0x3000, &(0x7f0000000000)='/dev/adsp1\x00') mmap(&(0x7f0000e01000/0x1000)=nil, 0x1000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r2, 0x21, &(0x7f0000000340)={0x0, 0x2fc3f, 0x10, 0x2, 0x377, 0x0, r2}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d408000010000000950000002bd7db84"], &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 3.732466327s ago: executing program 4 (id=2759): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) (async) keyctl$restrict_keyring(0xa, 0x0, 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000140)=r1) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = userfaultfd(0x80001) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x13, r4, 0x91c6b000) (async) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) (async) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001000000000000000000000000000000500000000000000000000000000000005000000000000000000000000000000050000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000010001000000000084010500fc01000000000000000000000000000100000000330000000000000064010100000000000000000000000000ff340000000000000000000000000000402000007f000001000000000000000000000000000020003c00000002000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac14144300000000000000000000000000000000330000000200000000000000000000000000ffffac1414aa000000000000000000000000000000000000000020010000000000000000000000000000000004d26c000000000000000000000000000000000000090000000100000000000000000c000000000000008f700000ac1e0101000000000000000000000000000004d23c00"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r6 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x26e}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) write$FUSE_NOTIFY_RESEND(r2, &(0x7f0000000cc0)={0x14}, 0x14) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa019600ba9380d440fe0000000000002900000003000000", 0xfe60) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000280)=@fd={0xa, 0x5, 0x4, 0x0, 0x2c3, {}, {0xc00c5ce84d9f3440, 0xc, 0x0, 0xc5, 0xfe, 0x1, "cbe98af1"}, 0x3, 0x4, {}, 0x4}) 3.708044823s ago: executing program 4 (id=2760): syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001800)={'#! ', '\xe9\x1fq\x89Y\x1e\x923aK', [{0x20, 'R\n\t\xe5j$\x8e\xbb\x86\xd8\xd7\xac\x19L{\x15LK\xceb\xe2\x10\xac?\xad\xa4\xc9\xf5h\x82\x9c\xe8\x87\x00\x00\x00\x00\x00\x00\x00@\x9b\xafS\x14\xc7\"\x00\x14w\xbe\xaa\xda8\x8bS\xa6\xc8\xb7\xbdD\xaai>\xe7u?J\x1b\x95\xdf\xdc\x1d\xee\xbe\xed\x8f\xce\xd9Q\xabC\xdc\x8e\xc4<\xc0\xdfz'}, {0x20, '.\\'}, {0x20, '%^\\\x93\xca\xe9[\x04\fu\xd3\x10.\xee\\Q$e\xa9=B\x19I\xd2Le\x14P\x86\xd3\xe5b\x93y\xdf\xfb\x17B7\a\x9c\xb5?\x0f\xc8\x9b\x9aol)\x87Z\xcc\xa5\xc2\xffb\xb8\x00\xbb\n\xcb\xb1\xdaa\x18\xacG\t\x8e\x00*\xf8R\xa9\x8e\xaaUw\xc0!\x1fa\xf5\xecf\x14B\xd4\xd4\r\x143Y=\xa6!\x94P\xdb\x81vr\x8c\xfd/6\x16\xd8\x16\x82\xb6Z\xaep\xc3\xaan\xfd\x13\xf2\xc5\x97n\xdd \x96\x0en\xe9\xaa&LN\xf0\xed<\xa7(a\xa8H\xb3\xee\x13~r\xbe\x13!\xb0iJ9(|Pp\xd5\xf5\x1b\xa5\xa4\x86\xfd\x1a\xc1C\xa3u\x9d\x9d\tz&V\xfe\v\x9a\xc6\x9e \xf6\x88\xaa!p\xd3nF\b\x1e9\xd3=%\xd3)\xd0%\x18\xbd\x87\xdb\x96\xbe\xc1\xfb\x00\xe1\xd3\xee\xb2P\x93\x15\xf9\xd5^\x9b\xa9\xd9\xf0\xf3\xf1\xdf&A\xdb\x97r\x99\x12|\x0e\xc0\xed\x92\xc2;\xee\x19l\x16Ww\\\xeb3\xa7\xb4XO\x1a\xf0\"\x9d\x86\xebV\xb4\xd8=h,\x84C)F\x16\xa1O\xb2\xc0\xf3\xbdT\xd1\xe5/\xa7p\x9d: \xfcwL\x066[\xe6=2\xd8HZku|u\xdb\xab\xe2\x11\xfa\xf3\x91\x1c^\xe0\xb5\x807K\xc9u5\xeb47\x1b\x96\xc5\xb17\x91\xfd\xb0\xa8\x12\xc4\xf1\x81\x86\xd2\x89P\x01Q2El\xda\x01*\xdeg.\x8d\xf3B\n\xd1\xf1\ai\xac\x12\x0f\f\x8e\x12\x86\xc0\xe4\xce\x82\x16P\x1a\x18\x1c\xc9\x03\\C\"\x1fa\xcc\xc8\xe5\x04(\xc3\xedZ\xbf\x1e\x1a\x99\x81J\xb8j=\xa7\xbc?\xf8?q\xf3P\xea\x1a\xa0\xb3'}, {0x20, '/dev/loop#\x00,\xc5\x18\xf4tn\xbbq\xe9\x01 \x83zY\x14\xf5\xb69\x14\x11\xdc5\x95\xfb\x03~\x1b\x1d\v}\x11d 4\xbfA\x1e/\xfc\xc3\xb8\x02\xe7J\x00\v{\xd1\x9c\xe8C\x97@-g\xdee\x1b\xb8\x00\x00\xad\xf2\xd5!\xa3\xd1\x03.\xffj!\x85\xf0g=\r\xc7w1c`K\xeb<\xfc\xa4\xaa^\xfb\"\xb4 g\x93\x06c\xb7M\xde\xaf\xd4\xcc\xaa\x93\x05YZ\x94z\xc5\xefF\xedWX\x8ft-\x90\xb0\xfds\xe8W\x7f\xad\x85\xbf\xc3\xb46=\x7f\x04?5\xd1vpuD\x9bK\xd5q\x10\x8cT\"\x93\x13\xb3b\xc1b\x18\xac\xfdk\xdb\xbavR\x01^lN\x8dgjv8\xa9k\x19\xc1d\x8b\xf6\xef\x8f\xcf\x1c\xe2\xd7\x02\xa2i'}, {0x20, 'NFQUEUE\x00'}]}, 0x2d7) write$UHID_INPUT(r0, &(0x7f00000007c0)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183f9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf063a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c838587b915337169ee054655f26a04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f9fd2b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc5334906805534cdae1e47240af7761a18fc8bd0a694be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b124e4ebe0d9883ef100f1934e42794146382c1d628fd2ebe5859b6c243824903d056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423b38b9196fafaaf87b2796eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ee64f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c734052af9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437bf21419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f826c11a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746733d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7bfba20f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb1326a2a4f23f11181186f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c1169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0e2f3bc9974e3388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a420b9f72e79de817f676c2a224300d749571ad43f49d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d026f58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a63941564c65bb36dfb6bea4aab1ae7a4f285c2177aa98406eb2cc10934aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc47f6bad0b9513710600cfa4d69fcd5763cdcc4f2c2b7cd7d4491fd52f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9fe9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d179527cd58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4675a8b090be2365c0b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2d27c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab0ea678cb823bd1e7bbd1e927841af08f5427878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df8f7b9d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f44888b14941b5911b050e9319fe88033f830a8490917a9c0572ebbc5492b4e1083a2e3d77215a34abef947b5b9a950e780662de18873e55899c92db3ad3d437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb0466c237376ca2944ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c7c636b3a2b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e4", 0x1000}}, 0x1006) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x40182, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x28, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x4b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8044}, 0x20008000) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$sndpcmp(0x0, 0xc, 0x64a202) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x8, 0x1, 0x0, 0xeba, 0x1000000000, 0x7, 0xfa13, 0x6}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x8000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r5, &(0x7f0000000180)=0xfe5f, 0x12) syz_usb_connect(0x6, 0x24, 0x0, 0x0) r6 = syz_open_dev$I2C(0x0, 0x1, 0x402) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') copy_file_range(r7, 0x0, r7, &(0x7f0000000180)=0xfffffffffffff470, 0x0, 0x0) pwrite64(r6, 0x0, 0x0, 0x26c) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x129a82, 0x13e) 3.690873436s ago: executing program 1 (id=2761): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000600), 0x14, 0x40080) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000000)={0xf010000, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="205aba"], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000007c0)={0x20, 0x17, 0x4, "549b3e82"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000380)={0x0, 0xe, 0x4, "2ae84be4"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 3.531333874s ago: executing program 3 (id=2762): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0xd, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x7, 0x1, 0x80, "d30580c9042b7275077bafe6410c2087850000000000000000000090001500", 0x47314356}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000010000)=ANY=[@ANYBLOB="4800ffec1300090527bd70001f2ffc5bdf25421f142c4e65e09ad211df86be5a37b57f70602318946dfc6156bb9e38159d142aa3614bbd66dac0", @ANYRES32=r2, @ANYBLOB="0800040064010104080008000001000008000200e000000208000100ac1414aa08000900030000000800090007010000", @ANYRESHEX=r0], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000010140)=0x0) r4 = socket$key(0xf, 0x3, 0x2) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f00000101c0)={0xd6, {{0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0x23}, 0x40}}}, 0x88) r6 = socket(0x840000000002, 0x3, 0x100) r7 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9D\x8a\'\xf1V?\x95\x19A^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x4) ftruncate(r7, 0x80079a0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r6, 0x0, 0x29, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$TUNSETSNDBUF(r8, 0x400454d4, &(0x7f0000000080)=0x3) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020306001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a0000000000000100000000000000000000000000000000000000000000000004000400000080000000000000000000000000000000000000000000000000000200010000000000000000fd0000000005000500000000000a00000000000000fe8800000000000000000000000000010000000000000000030007000000000002000000ffffffff0000000000000000020013"], 0xd8}}, 0x0) sched_setattr(r3, &(0x7f0000010180)={0x38, 0x0, 0x3d, 0x0, 0x0, 0x368f, 0x93d, 0x8000000000000000, 0x2, 0x8}, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto(r9, &(0x7f0000010080)="2f228d640e28c8653159cc8e84883210265bbb83c1b2a88a063b2a855413f737e0aa3e1c4ee63267baaeee0838ef7b", 0x2f, 0x8001, &(0x7f00000100c0)=@caif=@dbg={0x25, 0x7f, 0x4}, 0x80) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000080)=0x8) 3.453441242s ago: executing program 3 (id=2763): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) socket$nl_xfrm(0x10, 0x3, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x101, 0x2, 0x0, 0x80], 0x8080000, 0x4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.355174215s ago: executing program 5 (id=2764): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x40810, 0x3}, [@IFLA_MTU={0x8, 0x4, 0x100}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$PTP_EXTTS_REQUEST2(r5, 0x40603d10, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="680000001000370429bd7000fcdbdf2500000000", @ANYRES32=r4, @ANYBLOB="890c020000000000480012800b0001006970366772650000380002800400120008000100", @ANYRES32=r4, @ANYBLOB="14000700ff0200000000000000000000000000011400060020010000000000000000000000008001155186ce7873f68270b223"], 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x38, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044000}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r6, &(0x7f0000000c00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000940)={0x244, r8, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x4, 0x9}}}}, [@NL80211_ATTR_NAN_FUNC={0x204, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x5}, @NL80211_NAN_FUNC_SERVICE_INFO={0x48, 0xb, "03d609d38ff4c580ecca189e76b0acb8fd8585eeda44cbdc34c047b7e02d0f2d52affcd6310373e2d3cd1be4e04ede16aa34be3fa1a91a74ee7de2ba667b4f058e847b11"}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x14c, 0xe, 0x0, 0x1, [{0x41, 0x0, "73548ac373f8b7c718d659a6f583635fd8628e6abc464ddae1603b60fa921542ea023a61420dbdb5a47f1f05cd60cb490ef565fc637768613c925e7e63"}, {0x101, 0x0, "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"}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x2}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "d4c11e0d4dad"}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xc}, @NL80211_NAN_FUNC_SERVICE_INFO={0x3a, 0xb, "4c33d4cb22ce7886fd63cac697a97cf713e9ee47015ffd3e850545bd297d8dc9fe9e650e915a853a1b77cd8e951fd429db2df5d1297e"}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x8}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xda}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x40840}, 0x4) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, r7, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x48000}, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000900)={'dummy0\x00', &(0x7f0000000640)=@ethtool_perm_addr={0x4b}}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004880}, 0x0) 3.350784161s ago: executing program 0 (id=2765): r0 = openat$tun(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x50, 0xffffffffffffffff, 0x0) r1 = socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r4, 0xf505, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002d80), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002d00), &(0x7f0000002d40)='./file0\x00', 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) syz_fuse_handle_req(r5, &(0x7f0000000200)="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", 0x2000, &(0x7f0000002c00)={&(0x7f0000002200)={0x50, 0x0, 0x0, {0x7, 0x5, 0xbb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x7135, &(0x7f0000000300)={0x0, 0x9734, 0x4000, 0x3, 0x145}, &(0x7f00000003c0), 0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_procfs(0x0, &(0x7f0000002280)='cgroup\x00') socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10e) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) 2.867905381s ago: executing program 5 (id=2766): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) ppoll(&(0x7f00000002c0)=[{r1, 0x200}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0)=0x2) sendmsg$nl_route(r0, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, &(0x7f0000000240)="235913100000004a3525c373b8be3e8d2672540e4fff5fe7", 0x0, 0x18}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x1, 0x3e, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2, 0x1], 0x10000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x70000, 0x30000, 0x0, 0x2, 0x2, 0x10, 0x3, 0x7, 0x0, 0x8, 0x9}, {0xe000, 0x10000, 0xc, 0x0, 0x22, 0x0, 0xfd, 0x0, 0x7, 0xff}, {0xb000, 0x8080000, 0xc, 0x0, 0x27, 0xc4, 0x0, 0x0, 0x8, 0xfd, 0x44, 0x3}, {0x4000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x9, 0x9, 0x7, 0x8, 0xf, 0x4}, {0x80a0000, 0xeeee8000, 0xb, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3f, 0x6}, {0xb000, 0x0, 0x9, 0x76, 0x2, 0x1, 0x2, 0x80, 0x0, 0xff, 0x6}, {0xeeee8000, 0xeeee0000, 0x3, 0x4, 0x6, 0x0, 0xa1, 0x2, 0x0, 0x0, 0x4}, {0x2, 0x50000, 0xc, 0x3, 0x9, 0x7, 0x9, 0x40, 0x26, 0x0, 0x0, 0xf}, {0x80a0000, 0x8cc}, {0x60000, 0xfffc}, 0xddf8ffd3, 0x0, 0x0, 0x110, 0xe, 0xf801, 0xb000, [0x80000004, 0x0, 0x10000, 0xfffffffffffdffff]}) r5 = socket$packet(0x11, 0x3, 0x300) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, &(0x7f0000000100)="c4e17d28970090000048b8de0f0000000000000f23c00f21f835030001000f23f866baa000ec66baa100ec430fc75b0066b8e2008ed866baf80cb894eab284ef66bafc0c66ed640f01ca3e450f300f79db", 0x51}], 0x1, 0x15, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r5, 0xfffff000) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.532296651s ago: executing program 3 (id=2767): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="89020000000000002400128009000100626f6e6400000000140002800500010006000000058bc76441000000a32ccd35f6c102d6e49093fd818b068c703c9cb313ce88081444a01be14a0257f98be115141b1566f4af59ccc0987f"], 0x44}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c00000044000900000000000000000005000000080002000cb5"], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000040) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x800481, &(0x7f0000000200)=ANY=[@ANYBLOB="04bb6c", @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRES16=r3, @ANYRESDEC=0x0, @ANYRES64=r0]) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80000) sendmmsg(r5, &(0x7f000000af40)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000041c0)='|', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004100)=[{&(0x7f0000001cc0)="f3fae2da", 0x4}, {0x0}], 0x2}}], 0x2, 0x4008810) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="b00000000000000000040000000000000400000000000000ffffffffffffffffff07000000000000fffdfffff7ffff7fff1f0000ff0700000300000000000880fcffffffffffffff230000000000000002000000000000000500000000000000958349079428695182000000000000000200000006000000070000000040000000000000", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="02000000ffffff7f00000000000000000000000009"], 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000740)=0x0, &(0x7f0000000780), &(0x7f00000007c0)) syz_mount_image$fuse(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@allow_other}, {}], [{@obj_user={'obj_user', 0x3d, 'PPPPPP'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@flag='async'}, {@obj_role={'obj_role', 0x3d, '\x03\x03\x03\x03\x03\x03'}}]}}, 0x1, 0x0, &(0x7f0000000900)="4f3124699e0a65805dd53760ce006c1b539f0c3f90f07df32d82b865a5788cea0538fc36deb83b81a44faee4eead14831e399c792f0e42818f82267a00f9cfd7841e422398200126c922f2f90fb2ec6f0f911a11fbf013336e") getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010102}}, 0xc9a, 0x81, 0xd7df, 0x3, 0x5}, &(0x7f00000001c0)=0x98) r10 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x1) fchdir(r11) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000003c0)=[{0x7, 0x6, 0x0, 0x8}]}) close_range(r12, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 2.371590088s ago: executing program 0 (id=2768): socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x1, 0x9, 0x6, 0x9, 0x8}, 0x7, 0xd6}, [{0x656, 0x5, 0xea6, 0x9, 0x6, 0x61443da9}, {0x4, 0x400, 0x7, 0x5, 0xcd00, 0x1}, {0x2, 0x4, 0x5, 0xbb, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffffff7, 0x800}, {0x100, 0x8, 0x971, 0x9bd, 0x20, 0x1ff}, {0x5, 0x4911, 0x3, 0x2, 0x251, 0xffffffff}, {0x800, 0x3a1b, 0xffff, 0xfff, 0x81, 0x4}, {0xffffffff, 0xffffffff, 0x80, 0x3, 0x25}, {0xffff, 0x4, 0x2, 0x4, 0x4, 0x8001}, {0x5, 0x101, 0x5, 0xd0, 0xff, 0x8}, {0x1000, 0x4, 0x7f, 0xffffffff, 0x6, 0x2}, {0xfff, 0x5, 0x8, 0xe3d, 0x3, 0x8001}, {0x8, 0x0, 0x3, 0xc6, 0x2, 0x3}, {0x5da, 0x4, 0xa6a, 0x0, 0xfff, 0x6eed}, {0x1, 0x7, 0x7, 0x6, 0x800, 0x7}, {0x4, 0x6, 0x4, 0x4, 0x8b7f, 0x800000}, {0x9, 0x6, 0x0, 0xa, 0x9, 0x8001}, {0xd73, 0x6, 0x0, 0x1, 0x6}, {0x1, 0x1, 0x0, 0x3, 0x9, 0xd}, {0x8000, 0xd1, 0xffffff6e, 0x7, 0x7, 0x8}, {0x7, 0x8, 0x7ff, 0x5, 0x0, 0x3}, {0x9, 0x100, 0x461, 0x8, 0x0, 0x1000}, {0xffff, 0x8, 0xfffffff6, 0x5, 0x7ff, 0x10}, {0xffffffff, 0x9, 0x3, 0x0, 0x4, 0x10}, {0x9, 0xb932, 0x7, 0xff, 0x0, 0x81}, {0x3, 0x80000000, 0x200, 0x1, 0x40, 0x7fff}, {0xffff, 0x7, 0xf, 0x6, 0xa78, 0x7}, {0x9, 0x6f, 0x101, 0xfffffff9, 0xffffff7f, 0x4197}, {0x1, 0x9, 0x800, 0xfffffffb, 0x2}, {0x5, 0x8000, 0x3, 0xd, 0x500, 0x7}, {0xe1, 0xfff, 0x4, 0x2, 0x1, 0x6}, {0x0, 0x403a, 0x10000, 0x3, 0x8000, 0x3}, {0x5, 0x4, 0x80000000, 0x3, 0x9, 0x8}, {0x0, 0x8, 0x480000, 0x7, 0x80}, {0xfbdb, 0x70e6bfee, 0x8, 0x0, 0xffff, 0x3}, {0xdf0f, 0x4, 0xffff, 0x1, 0x4, 0x2}, {0x54f, 0x5, 0x89, 0x80000001, 0x1, 0x5}, {0x8, 0x5f33, 0x7, 0x2, 0x5, 0x5}, {0x9, 0x9, 0x3, 0x81, 0x1, 0x673}, {0x7ff, 0x6, 0x3, 0xb, 0x3, 0x7}, {0x81, 0x100, 0xd326, 0x7fff, 0x7fffffff, 0x8}, {0x0, 0x100, 0x6, 0x7, 0x7fff, 0x4}, {0x1000, 0x9, 0x8, 0x5, 0x3ff, 0x8}, {0x2, 0x5, 0x48, 0x85, 0xfffffff7, 0x9}, {0x3, 0xa, 0x1731c, 0x4, 0x2, 0x3}, {0x746b289, 0xe, 0x4, 0x1ff, 0xca5d, 0xee0}, {0x6, 0xffff, 0x8, 0xff, 0x10001}, {0x7240, 0xffffffff, 0x4ed, 0x8, 0x7, 0x6}, {0x7, 0x9, 0x7, 0xa, 0x40000000, 0xffffffff}, {0x1ff, 0x8, 0x1, 0x1, 0x7, 0x6}, {0x9, 0x4, 0x0, 0x2, 0x9, 0x3}, {0x5, 0x0, 0x6, 0x6, 0x7, 0x340}, {0x8000, 0x8, 0xc0000000, 0x400, 0xd, 0x48}, {0x4, 0xccfd, 0x0, 0x7ed, 0x10000, 0x4}, {0x7da, 0x1, 0x5, 0x1000, 0x3, 0xf80}, {0x5, 0x57acc37c, 0x8, 0x80000000, 0x800, 0x9}, {0x7c, 0x3, 0x10, 0x3, 0x1, 0x5}, {0x2, 0x4, 0x8, 0x5, 0xda, 0x8001}, {0x8cd, 0x0, 0x9, 0x6, 0x800, 0xffff}, {0x6, 0x80000001, 0x3ef, 0x1000, 0x4caa12c5, 0x6}, {0x9, 0x4, 0xadc9, 0x401, 0x8, 0x5}, {0x6, 0x7, 0xb4d0, 0x1, 0x2, 0x4}, {0x8001, 0xfffffffd, 0x824, 0x8, 0xa5, 0x7}, {0x1, 0xffffffff, 0xed7e, 0x8, 0x400, 0x6}, {0x4, 0x2c24, 0x2e1, 0x1, 0x9, 0x6}, {0x7, 0x7fff, 0x7, 0x8, 0xe0, 0x6}, {0x8, 0x9, 0xb, 0xffff, 0xfffffffe, 0x7de8}, {0xc55e, 0x4, 0x4, 0x6, 0x9, 0x3}, {0xffff, 0x5, 0x7, 0x0, 0x380, 0x9}, {0x5, 0x6bd, 0x6, 0x9, 0x5, 0xd1c8}, {0x6, 0x401, 0x4, 0x200, 0x7fffffff, 0x10000}, {0x8, 0xf, 0x1ce00, 0x3, 0x1ff, 0xe7}, {0x1000, 0x2, 0x0, 0x5, 0x4}, {0x8d8c, 0xb9, 0x3, 0x2, 0x8000, 0x6}, {0xbc7, 0xc1, 0x6, 0x7ff, 0x9, 0x1}, {0x4, 0x2ab, 0xfffffffe, 0x4, 0xa055, 0x3b2}, {0x2, 0x401, 0x0, 0x1, 0x4, 0x2}, {0x3, 0x8, 0x7fff, 0x7fffffff, 0xffffc998, 0xa}, {0x3, 0x3b, 0x7, 0x7, 0x7, 0xffff}, {0x5bfb3be2, 0x9, 0x6ed, 0x6, 0xc6, 0x5}, {0x80000001, 0xd90, 0x6e4, 0x7, 0x100, 0x8001}, {0x4, 0x2000, 0x3, 0x9, 0x2, 0x4}, {0x9, 0x8, 0x858, 0x5, 0x6, 0xfffffac8}, {0x27b373d6, 0x6, 0xa4, 0x8, 0x1}, {0x7, 0x10, 0x3, 0xd, 0x9, 0x2}, {0x48fe, 0x9, 0xcb, 0x3, 0x3, 0x101}, {0x0, 0xd, 0x1, 0x5, 0x6f86, 0x9}, {0xfff, 0x8, 0x7ff, 0x3, 0x2, 0xa}, {0x3, 0x8, 0xffffffff, 0x3, 0xb8a, 0x8}, {0x0, 0x9, 0x8, 0x6, 0x0, 0x9}, {0x8, 0x7, 0x4, 0xffff, 0x4, 0x5}, {0x1, 0x6, 0x14fd, 0x4, 0x4, 0x5}, {0x1, 0x9, 0x8, 0xb, 0x8, 0x2}, {0x4, 0x9, 0x1ff, 0x1, 0x4, 0x7f}, {0x7, 0x6, 0x1, 0xbf, 0xb, 0x5}, {0xd, 0x4, 0x9, 0x5, 0x6, 0x5}, {0x4, 0x8, 0x9e1, 0x0, 0x9, 0x3}, {0x8, 0x1, 0x1, 0x1, 0x2, 0x6}, {0x4, 0x2, 0x18a, 0x6, 0x40, 0xd}, {0x1, 0x5, 0x8, 0x1, 0x1, 0x2e}, {0x7, 0x1, 0x80, 0x8, 0xfffffff9, 0xffffffff}, {0xfffffffd, 0x3, 0x9, 0x2e18c0, 0x1, 0x5}, {0x8, 0x4, 0xfffffbff, 0x0, 0x9b, 0x1}, {0x5, 0x8, 0xd1, 0x8, 0x2, 0x86}, {0xf, 0x5, 0x9, 0x9, 0xfffffcd7, 0x5}, {0x2, 0x3, 0x3, 0x9, 0x7, 0x6}, {0x3, 0xadc, 0x2, 0x101, 0x800, 0x4df}, {0xf, 0x3, 0x6, 0x6, 0x2, 0x6}, {0x3, 0x5, 0x8001, 0x6, 0x8, 0x7}, {0x8001, 0x7, 0xffff7fff, 0x1, 0xc, 0x1}, {0x5, 0x40, 0x4, 0x2, 0x4, 0x9866}, {0xb, 0x81, 0x1, 0x9, 0x4, 0x8}, {0x5, 0x8, 0x7, 0x10, 0x7, 0x401}, {0x1, 0xfffffff7, 0x3, 0x7, 0xbb, 0x4}, {0x9, 0x0, 0x22, 0x1cc, 0xc92c, 0x6}, {0x3, 0x1ff, 0x7, 0x7fffffff, 0x9d}, {0x3ff, 0x8000, 0x9, 0xb23, 0x1, 0x5}, {0x2, 0x2580, 0x1, 0x7ff, 0x1, 0x1}, {0x3, 0x9048, 0x8000, 0x237c, 0x9, 0x9}, {0x5, 0xec, 0xff, 0x9, 0x401, 0x5}, {0x5, 0x80, 0x7, 0x8000, 0x7, 0x2}, {0x1, 0xb7, 0x6, 0x1, 0x6, 0x38}, {0x3, 0x8, 0x6c, 0x8, 0x9, 0xef}, {0x10, 0x10000, 0x3, 0x8, 0x6ac}, {0x4, 0x9, 0xf8ec, 0x1, 0x6, 0x3}, {0xdf, 0xff, 0xfff, 0x80000000, 0x81, 0x101}, {0x9, 0x2, 0xffffffff, 0x9, 0x8}, {0x1a5b, 0x3, 0x800, 0x7, 0x2, 0x4}], [{0x4}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x5}, {0x2}, {0x3}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {}, {0x4}, {0x1, 0x1}, {0x6}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x4, 0x1}, {}, {}, {0x2}, {0x2}, {0x4, 0x1}, {0x6, 0x1}, {0x3}, {0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x1}, {0x2, 0x1}, {}, {0x6, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x2}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x8bcdc3a00eb84eb7}, {0x4}, {0x0, 0x1}, {0x3}, {0x2}, {0x2}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x3}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) r11 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fea10080bd2dca8a9848a3c728f1c46b7b31afdc88e51c47f40b2b6c0100005a", 0x40}], 0x1}, 0x40000) socket$inet_icmp_raw(0x2, 0x3, 0x1) r12 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000740)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6047, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x1, 0x5, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0xe0, 0x60}}}}}]}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r12, 0x0, 0x0) syz_usb_control_io$hid(r12, 0x0, 0x0) syz_usb_control_io(r12, 0x0, 0x0) syz_usb_control_io$lan78xx(r12, 0x0, 0x0) syz_usb_control_io$hid(r12, &(0x7f0000000980)={0x24, 0x0, 0x0, &(0x7f0000000780), 0x0}, 0x0) 2.012042732s ago: executing program 5 (id=2769): timer_create(0x0, &(0x7f0000000100)={0x0, 0x21}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x8e03a000) sched_setattr(0x0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000e00)={0xe62b, 0x80000000000000, 0x309, 0x0, 0x9, 0x9f69, 0x0, 0x200000000002000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x30, 0x80000001, 0x0, 0x0, 0x0, 0x6, 0x0, 0x17000000, 0xffffffffffffffff}) 2.0019607s ago: executing program 5 (id=2770): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x40000000}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d96000010000000000000000000000000000000000052700000ffef00", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) 1.655850708s ago: executing program 3 (id=2771): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r3, 0x8800000) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) sendfile(r4, r3, 0x0, 0x558410e9) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000280)=0x80000001, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8, @loopback, 0x7}, @in={0x2, 0x4e23, @broadcast}], 0x2c) 1.36002484s ago: executing program 5 (id=2772): unlink(&(0x7f00000000c0)='./cgroup/cgroup.procs\x00') syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') unshare(0x2c020400) r3 = eventfd(0x3) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x3000, 0x0, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000003c0)={0x5, 0x3000, 0x0, r3, 0x4}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0xf) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000400)=ANY=[@ANYBLOB="8f506370d700de40390d6ff5d310592b608bdc93e7f6e8aee03f6ac56a5c3c5c61a090821c6eaae97aa7dcbd18fa42cdf88f55c8eb28e9e8e0a073216bfc555b6ca900ba70d948c8f5afb0fcfd8d043483c8295ef23e7ad2d5bc1436a86f403b62500f32d3f03c3be33d816c519e446ff0519d2fcccde9b66fb5dd1df6fc6acfe08b04bd88e36ccf17c0"], 0x18) connect$inet6(r4, &(0x7f0000000140)={0xa, 0xdffd, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c) writev(r4, 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r5, 0xc0045401, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000304020000000400000000000000", @ANYRES32=0x0, @ANYBLOB="0003000000000000240012800b000100627269646765000014000280060027000e0000000500290000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/ip6_tables_targets\x00') preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1, 0x10000009, 0xffffffff) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './cgroup/cgroup.procs\x00'}) 583.292033ms ago: executing program 1 (id=2773): syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') (async) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000001c0), 0x80040, 0x0) ioctl$FE_GET_EVENT(r1, 0x80286f4e, &(0x7f00000003c0)={0x0, {0x0, 0x0, @qam}}) epoll_create(0x3ff) (async) r2 = epoll_create1(0x80000) ioctl$DVB_DVR_DMX_EXPBUF(r0, 0xc00c6f3e, &(0x7f0000000140)={0x52d, 0x0, r2}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x50000001}) (async) fsetxattr(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="957c7205000000"], &(0x7f00000000c0)='\\[\x00', 0x3, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r6, &(0x7f0000000580)={'#! ', './file0', [{0x20, '&{'}, {0x20, '\x00'}, {0x20, 'new '}, {0x20, 'user:'}], 0xa, "e230b9a9ba2d7706ef2b55cc0fb018e6577f1315fb37388921507163a9b156f6cd27c718dbd69f6da5ead40ab2d178588ff4da8bd0938f442048b254352b9d95e91b46cb21931336abb60afee27ee0d00bb8ab4bbc1aca776d151844353ff4fe"}, 0x7b) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4000f2, 0x1000) (async) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r7 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$setperm(0x5, r7, 0x82004) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000540)={0x0, &(0x7f0000001140)=""/4096, &(0x7f0000000300), &(0x7f00000001c0), 0x5, r8}, 0x38) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x14, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@ldst={0x3, 0x0, 0x3, 0xb, 0xb, 0x100, 0xfffffffffffffffc}, @map_fd={0x18, 0x8}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 370.257039ms ago: executing program 4 (id=2774): socket$netlink(0x10, 0x3, 0x15) r0 = socket(0xf, 0x803, 0x3) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) r1 = gettid() r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/59, 0x3b}, {&(0x7f0000000300)=""/69, 0x45}], 0x2) tkill(r1, 0x8) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r7, &(0x7f00000001c0)='\\', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r8 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r4, 0xa, 0x1) fcntl$setlease(r8, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r9, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6}]}) close_range(r10, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$FICLONE(r5, 0x40049409, r5) 275.873784ms ago: executing program 0 (id=2775): semget$private(0x0, 0x6, 0x0) (async) r0 = semget$private(0x0, 0x6, 0x0) semctl$GETZCNT(r0, 0x3, 0xf, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000340)=""/183) bind$netlink(r2, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async) bind$netlink(r2, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) socket(0x400000000010, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x4044}, 0x40000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x4202, 0x0) socket(0x400000000010, 0x6, 0x0) (async) r6 = socket(0x400000000010, 0x6, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x20, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x20, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt$inet_sctp_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r11 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r11, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x0, '\x00', @p_u32=0x0}}) pwritev(r11, &(0x7f0000000080)=[{&(0x7f0000000200)="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", 0x2ac}], 0x1, 0x2000d, 0x8) (async) pwritev(r11, &(0x7f0000000080)=[{&(0x7f0000000200)="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", 0x2ac}], 0x1, 0x2000d, 0x8) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0xffe0, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xa0}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) r12 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141902) writev(r12, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) writev(r12, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000180)={0x3, 0x4098f907, 0x3}) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000280)={0xae, 0x11, 0x7, 0xd4, "efed394388c485c05e32e97b3bb8dea293f65dce24737846954bf84a29302491"}) (async) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000280)={0xae, 0x11, 0x7, 0xd4, "efed394388c485c05e32e97b3bb8dea293f65dce24737846954bf84a29302491"}) 272.279769ms ago: executing program 5 (id=2776): r0 = fsopen(&(0x7f0000000280)='ufs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:,:/', 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) r2 = socket$inet(0xa, 0x801, 0x84) r3 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r4 = dup(r3) write$binfmt_elf64(r4, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xff, 0x78, 0xb3, 0x5, 0x2, 0x3e, 0xcd, 0x3c9, 0x40, 0x2ea, 0x10002, 0x5, 0x38, 0x1, 0x6, 0x6b1, 0x400}, [{0x3, 0x81, 0xff, 0x9, 0x7, 0x9, 0x7}], "", ['\x00']}, 0x178) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, &(0x7f0000000100)={&(0x7f0000000580)={{@hyper, 0x1}, {@local, 0x2}, 0x400, "619798849692ed5deb5d9f582156a0832deec4a97ad612068fc3f6660ed2837b71ed68570d4b38ea66ee71e67c3ab11c6f07fcfb8a0ebeb8e5420127521b50954c182da044abda65cfe877c245922abfe2a50db72eed9a62a008c7fbf815cf7646f36927b472f59354b0dddfb969647c9f4458d9ba4623a54c5e59767061e115cf2fbcee09ff444dc1af84efda4e0d5edbb9937e5cbc8119b99865a9df9436fb0847468645d4e5f18ee29e7f1a419fde44534e1f85f6834c741ac963d14091014fd3fedd96d335609593152c8fffb5bb46b7aad347826c5b34ea82af688172dae52aeefd8d34166390c9db013fcf7752193e5a0af0d3929282ac16cac761f47e074a9eb1230ce52e908ff5ee941e1429f45597a52f661e92e4959161ffd9af22284114fda892a83b17d6fb89cf555b627764bfc273e29d9749d84991e8e6cb50cf6790624bed27d7944f8d182d94d357c3fa04eac19c7a2a52a570f41666c0aae7cefb9139a26eb065d8ab3ad3ec8c50e0e20923d8d7dc420c54fa60dd6e9ee0c74848f39dd98681462bdb8733f9c6c9c5560b5d4feeb8a15f71ef4e7f42e348a5787cc995b440d9a1e42fa6eb7831d8a595b14eef7c89a0fab428103c4beb7cf1d86a1e729692e28d93d88239eccf89de2209abe4e977ecb2e1eccd812cebf5c85a26da9f7752d0539a15c2759223f818f3fc8235eb57997a667482f4fc23e27bef673fb2236d6885f8eaeeb60fe9a334af9746ab56d95fcdfdd76282ed3a0ffdb604abdbfd5d8730b4fbf57fac543ebdda1fc0da67a9a587c9730083f5290761d241b81b0ba94e06c97571520618e76c51326ca3bc56554e3712c511f5ce34ee5b7e9b7daefa6587f1fd924ab6eaed98ab7775684ba9fe735b3fba0d5668fd3e4839176e10c142307d3b769b8f8b0de7c443d3015c926bc448532ea3137a12e1f2f64f092a54888ad73434e1aa02c5eeb2309bb72f17e0e169df28bbbbee77cb0fbc66c1e410de50d793e279a1c88bc04ab12565963cdf40e60a48e41a029eb99b1112aa2936389b37d1c71c8e8bc6af5bd9839620900b68b844f456ac8e2b3f5f7a41561bdce57c19e58fc494da6835c90fec35366fe2824f5bbb2f48113977338d2d19e0b76ef3e32a666238a981c7a78a4c2d48589272b3646476f2873969abd8adf4f0ca3a6f63cab3d0fb484346bcdd318bad9e2bfa1d933cd347841f320a03567988eae7e44325a7e4261fc38a8600ae019c40dffb1852fd6cf9d9122faca920081087c0d46ee40e1069b8e062fe0badf90ba80b1b790f235d67df5b7478268fc0293426ba516081d3766b3e0ce6ddb8ec8355a62dfbcb4a9ba154e993e9446a3d25e07cb98da4b214480cce5ad532943d9d271c324b38715017818fd3093d4fffeb17830a1c6ece2eaae4c7f5c4f8600163ca95aa8b855009ffd630"}, 0x418, 0x4c}) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r6 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x54, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff1, 0x5}, {0x6, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xc, 0x2, 0x0, 0x1, [{0x4}, {0x4}]}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x4}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x8000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x8, 0x8, 0x1b, 0x1ff}, {0x7, 0x3, 0x3, 0x8}, {0x2, 0x31, 0x8, 0x54}, {0x8, 0x1, 0xf1, 0x9}, {0x7667, 0x3, 0xe, 0x21}, {0x8000, 0x98, 0x1, 0x8001}]}, 0x10) r7 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x0, 0xa, 0x1, "18"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 176.434208ms ago: executing program 1 (id=2777): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) socket$nl_xfrm(0x10, 0x3, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x101, 0x2, 0x0, 0x80], 0x8080000, 0x4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 122.169588ms ago: executing program 3 (id=2778): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x5830c0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x5830c0, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) (async) userfaultfd(0x801) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) 87.357178ms ago: executing program 0 (id=2779): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) syz_emit_ethernet(0x151e, &(0x7f00000071c0)={@multicast, @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x14e8, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, @empty, [{0xe, 0x2c, "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"}, {0x5}, {0x2, 0x1c, "db75bc8320b627f3687a71322554b99717e9ef8eee6e5db351986e2438059ce1df7c381829f485452ad1c5aa022bdf1f9cabeddec6ab4d200dfb3a8308fb02a4b9700b914f1727908d43c7ed1ef086f769bbf749e5ebf6129b3abf51f8ebf816f6e180eceac7b11a05bdd85d165df78990569677914692e74059eb7b52c991257850b26b2c664abc865b8728dcf92b9a6f733ab14e85a22fe202501f0fb0bfc08c900e156c063fe30d32b5ee871dffaeb47a8e7b9816ce872eca19e4f90ffdc910338a5a419578d1c1bca7ac079d163270b1a8b8b2870619e21725cb3e54e37944fe6277"}, {0x1, 0x200, "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"}, {0x4, 0x15, "6f5daa961dd947cd4c864c83239f1559999d28b60d3f8c617baf71ecfc0dd8ab34f8fffff074a2e8b32b21c824db79399edffe15f2fa82765c20bbf3276a2dd23a57c19b584bb2bb06ddbce0a8eace131885ab4f92be98b3e19880e0a23cd7fb5f0a38774b2cfeee05e559db7bfc7c8ad6c6e9169ee9da285f35bd61bf95f3646191b5cfb23b73584f786d2763b0eef56328535e264c6eeb87ffe9f79e1200408cb3bec0e2773d716a"}, {0x19, 0x15, "3fe99c40a5cf5a24f51179980a115023c54a68ed86d3ddce62c8d0331753721b4ed27ef8ca8fbf452f816665b3e2b0b8518aa9318ef4c31501cc94a6b745dcae347a67ee84003f40a88d4daf13d049ae51ebeb34f706fb648e3ac6011393d1c24a02ce56f4efa653792b04f7736412aa396e32de8aed265ef82bb961e3c30b0c221c847ea62d07fdd32b612ace989491c69a1ef0fa3f1b39ad61f7701a645755debcf01070c854fd"}, {0x3, 0xd, "e99a1b87fe61891355a90c055f80c6c23925d094ea556a156fe58eebfc7dddb2b24c5b82a4860c70bff35a781646939005491f8734c6869435e62ca3b931af2cff36d39fce4ad4a531546478f8f41e4e8be2b7a9dd750ab57047130e3372eac6b7a3a2b5dbf38b"}, {0x1, 0x16, "7b126b168c6ebf83c6824f2bd89088ccdc48d1123f6a191ae76e0d710a4ba80950be028e5a71b4327770c6edd5e59c1adb53a06409e7a51ba3e612441e73f396aa6997616cd671b7f1a246880c7be2d5eb1d2ffc85242deafea7d8ca782b39d0e4f11f3aa0f882dd85c9ab42c6205f8bd379cd149058bd0e93b6434425ec38f479b62096b637b6585190023b1bd725c7528538b001c53c67862e4910214aa88eaa98077c4233b8b0b46ec9a0b625bc"}]}}}}}}, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) unshare(0x20000400) socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r5, 0xc0045401, 0x0) read$FUSE(r3, &(0x7f0000001040)={0x2020}, 0x2020) r6 = io_uring_setup(0x5bb0, &(0x7f0000000080)={0x0, 0xb2ec, 0x100, 0x0, 0x2f}) pause() close(r6) write$FUSE_INIT(r0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000fc0)=[@acquire_done={0x40106309, 0x2}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) read$FUSE(r0, &(0x7f0000005180)={0x2020}, 0x2020) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r8 = fsopen(&(0x7f00000003c0)='overlay\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\x00\xb1\xed8~\x92\xae\x82\xbe\xe7\xfd_\xc1\x83\xb7\xd4\xee\x9a\xa5\xc1\x8e\xc5\xcb|\x95-\xc8\x8f\xa1\xd6\xe2\r!\x81`\xa4P\xd2\xb2.9e\xa04\x1as#\x19\x83\xe42\xec\x91\xdb\x8e\x8b\x85\xc1\xado\xde\xf1s\xf9\xd3-z\x96\xd8\xbf\xbb\x19\xd6c\xe2\xc4\xf0d\xdb\xe9\x1c\x8d|\" \x12\xac\x7f4AJ\x1d\vS\xd9_\xd4\xeeQ\xd4u\x10\xd7j\xe3\xab\xbc\xffY\x8dA=l`V\x10\xbf\xd1\xbfbz\"\xd0\xeaX\x99\x9c\x14\x83\xe1\xc3.!R\x93\xf4S\x95\xc7\x90we\x82\xf81\x9f\x04\xe0\xa9\xa9\xe0\xf0\xa8R\xfbQ<\x11\xc3P\xbe\x1eR\xc1\xbfES\x99\xda\xfc\x8ff\xf9\xa0\x18\xd0\x00w\\\xf2\xba\xa4 \xaa\xbc\x9b\xd4\x86\xef\t\xb7\xd2\xec\xe8\xde\xe5u\x123V\x8a\x10\xa1^\x0e\x80N\xceD\xd5[-.', 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'vlan1\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="0503d6fcd3fc140000006788031c09102c28", 0x12, 0x4d040, &(0x7f0000000000)={0x11, 0x11, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) 0s ago: executing program 3 (id=2780): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r0, 0x5) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000df000000bfa300000000000007030000f0ffffff720af0fff8ffffff71a4f0ff000000005d040200000000001d400500000000004704000001ed0000620300ff000000003f440000000000007a0a00fe00ffffffc30300ff40000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b98"], 0x0, 0xf, 0x0, 0x0, 0x0, 0xe4}, 0x94) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x2f, 0x91, 0x2, 0x4, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00', 0x1, 0x700, 0xcf, 0x1}}) sendmsg$nl_xfrm(r1, &(0x7f00000006c0)={&(0x7f0000000180), 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7f0000000002000028bd7000fedbdf25fe800000000000000000000000be0d00000101010000000300000000000000004e2400024e23fffe0a00808084000000", @ANYRESOCT=r2, @ANYRES32=0xee01, @ANYRES16=r1], 0x10c}, 0x1, 0x0, 0x0, 0x800}, 0x48004) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x6, 0x9, &(0x7f0000000080)={{0x2b, @multicast2, 0x0, 0x2, 'wlc\x00', 0x6, 0x1, 0x3}, {@empty, 0x2, 0x2, 0x7, 0x0, 0x2}}, 0x44) getsockopt$inet_tcp_int(r5, 0x6, 0x9, 0x0, &(0x7f0000000040)) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$ARCH_SHSTK_LOCK(0x1e, r7, 0x2, 0x5003) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x10) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x800) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x90dd74d1177361d0, 0x4, 0x2, 0x5, 0x0, @private0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8, 0x10718c1d47ca7e95, 0x9, 0xc}}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00') getdents(r10, &(0x7f0000000000)=""/39, 0x27) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r10, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)=ANY=[@ANYBLOB="f8000401", @ANYRES16=0x0, @ANYBLOB="000827bd7000fcdbdf25040000003800018008000100", @ANYRES32=r3, @ANYBLOB="080003000200000008000100", @ANYRES32=r3, @ANYBLOB="140002006e696376663000000000000000000000080003000000000084000180080003000100000008000100", @ANYRES32=r3, @ANYBLOB="08000300030000001400020070696d7265673100000000000000000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f746f5f7465616d00000014000200626f6e645f736c6176655f31000000001400020073797a6b616c6c65723000000000000008000100", @ANYRES32=r6, @ANYBLOB="2800018014000200766972745f776966693000000000000008000300020000000800030001000000"], 0xf8}, 0x1, 0x0, 0x0, 0x2004810}, 0x240008c0) io_uring_enter(r10, 0x2564, 0x43f1, 0x2, &(0x7f00000001c0)={[0x346]}, 0x8) kernel console output (not intermixed with test programs): em28xx 6-1:0.0: dvb set to bulk mode. [ 612.066401][ T8672] em28xx 6-1:0.0: Binding DVB extension [ 612.091541][ T24] usb 6-1: USB disconnect, device number 63 [ 612.112660][ T24] em28xx 6-1:0.0: Disconnecting em28xx [ 612.296023][ T8672] em28xx 6-1:0.0: Registering input extension [ 612.311923][ T24] em28xx 6-1:0.0: Closing input extension [ 612.360114][ T24] em28xx 6-1:0.0: Freeing device [ 612.442977][ T5924] snd-usb-us122l 2-1:1.1: usb_set_interface error [ 612.453469][ T5924] snd-usb-us122l 2-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 612.473471][ T5924] usb 2-1: USB disconnect, device number 6 [ 612.632270][T15107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.643706][T15107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.662960][T15107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.676518][T15107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.698973][ T24] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 612.724238][T15107] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 612.856326][ T8672] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 612.866374][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 612.873171][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.884279][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.894459][ T24] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 612.904211][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.925450][ T24] usb 6-1: config 0 descriptor?? [ 612.984945][ T5193] Dev loop3: unable to read RDB block 7 [ 612.990709][ T8672] usb 1-1: device descriptor read/64, error -71 [ 612.997499][ T5193] loop3: unable to read partition table [ 613.003470][ T5193] loop3: partition table beyond EOD, truncated [ 613.112614][ T5193] Dev loop3: unable to read RDB block 7 [ 613.120018][ T5193] loop3: unable to read partition table [ 613.129428][ T5193] loop3: partition table beyond EOD, truncated [ 613.236368][ T8672] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 613.345240][ T24] hid_parser_main: 21 callbacks suppressed [ 613.345257][ T24] ft260 0003:0403:6030.002E: unknown main item tag 0x0 [ 613.371279][ T24] ft260 0003:0403:6030.002E: unknown main item tag 0x0 [ 613.396550][ T8672] usb 1-1: device descriptor read/64, error -71 [ 613.521426][ T8672] usb usb1-port1: attempt power cycle [ 613.543707][ T24] ft260 0003:0403:6030.002E: chip code: 0000 0000 [ 613.556558][ T9] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 613.717448][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 613.736985][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 613.748088][ T24] ft260 0003:0403:6030.002E: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 613.814956][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 613.833128][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.851884][ T9] usb 4-1: Product: syz [ 613.869731][ T9] usb 4-1: Manufacturer: syz [ 613.881000][ T9] usb 4-1: SerialNumber: syz [ 613.911814][ T9] usb 4-1: config 0 descriptor?? [ 613.926442][ T8672] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 613.974533][ T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 613.987143][ T8672] usb 1-1: device descriptor read/8, error -71 [ 614.001866][ T24] ft260 0003:0403:6030.002E: failed to retrieve status: -32, no wakeup [ 614.022644][ T24] ft260 0003:0403:6030.002E: failed to retrieve status: -5 [ 614.045828][ T9] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 614.233153][T15095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2437'. [ 614.242427][ T8672] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 614.250275][T15095] netlink: 'syz.5.2437': attribute type 21 has an invalid length. [ 614.260707][T15095] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2437'. [ 614.302283][ T8672] usb 1-1: device descriptor read/8, error -71 [ 614.364736][T15123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.374263][ T24] ft260 0003:0403:6030.002E: failed to reset I2C controller: -71 [ 614.399908][T15123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.417076][ T8672] usb usb1-port1: unable to enumerate USB device [ 614.460466][ T24] usb 6-1: USB disconnect, device number 64 [ 614.526796][ T5924] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 614.686576][ T5924] usb 2-1: Using ep0 maxpacket: 16 [ 614.700923][ T5924] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 614.711928][ T5924] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 614.724134][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.739725][ T5924] usb 2-1: config 0 descriptor?? [ 614.758808][ T5924] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input69 [ 615.069517][ T5178] bcm5974 2-1:0.0: could not read from device [ 615.211644][T15136] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2449'. [ 615.231186][T15129] bcm5974 2-1:0.0: could not read from device [ 615.240463][ T5178] bcm5974 2-1:0.0: could not read from device [ 615.265157][ T5178] bcm5974 2-1:0.0: could not read from device [ 615.266895][ T9] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 615.285362][T15136] 8021q: adding VLAN 0 to HW filter on device bond1 [ 615.293381][ T5924] usb 2-1: USB disconnect, device number 7 [ 615.325562][T15132] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2449'. [ 615.359886][ T9] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 615.368500][ T9] em28xx 4-1:0.0: board has no eeprom [ 615.376895][T15132] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2449'. [ 615.389545][T15136] netlink: 'syz.5.2449': attribute type 4 has an invalid length. [ 615.419709][T15136] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2449'. [ 615.459950][T15136] .`: renamed from bond0 (while UP) [ 615.469293][ T9] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 615.487051][ T9] em28xx 4-1:0.0: dvb set to bulk mode. [ 615.501830][ T5808] em28xx 4-1:0.0: Binding DVB extension [ 615.613999][T15141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.668400][T15141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.669894][ T5808] em28xx 4-1:0.0: Registering input extension [ 615.709457][T15141] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.2451'. [ 616.166440][ T5924] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 616.316482][ T5924] usb 6-1: device descriptor read/64, error -71 [ 616.499036][ T5808] usb 4-1: USB disconnect, device number 111 [ 616.506113][ T5808] em28xx 4-1:0.0: Disconnecting em28xx [ 616.512473][ T5808] em28xx 4-1:0.0: Closing input extension [ 616.556009][ T5193] Dev loop3: unable to read RDB block 7 [ 616.568011][ T5193] loop3: unable to read partition table [ 616.574936][ T5808] em28xx 4-1:0.0: Freeing device [ 616.586391][ T5924] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 616.708497][ T5193] loop3: partition table beyond EOD, truncated [ 616.744354][ T5193] Dev loop3: unable to read RDB block 7 [ 616.753985][ T5193] loop3: unable to read partition table [ 616.763674][ T5193] loop3: partition table beyond EOD, truncated [ 616.776321][ T5924] usb 6-1: device descriptor read/64, error -71 [ 616.912892][ T5924] usb usb6-port1: attempt power cycle [ 617.208942][ T24] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 617.248228][T15173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.257292][T15173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.266299][ T5924] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 617.288341][ T5924] usb 6-1: device descriptor read/8, error -71 [ 617.367377][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 617.374133][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 617.384872][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 617.398855][ T24] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 617.408314][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.418566][ T24] usb 4-1: config 0 descriptor?? [ 617.426296][ T8672] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 617.435589][ T24] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 617.526523][ T5924] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 617.557302][ T5924] usb 6-1: device descriptor read/8, error -71 [ 617.586359][ T8672] usb 1-1: Using ep0 maxpacket: 8 [ 617.594796][ T8672] usb 1-1: config 0 has an invalid interface number: 24 but max is 3 [ 617.603198][ T8672] usb 1-1: config 0 has an invalid interface number: 250 but max is 3 [ 617.611535][ T8672] usb 1-1: config 0 has an invalid descriptor of length 203, skipping remainder of the config [ 617.621915][ T8672] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 4 [ 617.631353][ T8672] usb 1-1: config 0 has no interface number 0 [ 617.637757][ T8672] usb 1-1: config 0 has no interface number 1 [ 617.643878][ T8672] usb 1-1: config 0 interface 24 has no altsetting 0 [ 617.650746][ T8672] usb 1-1: config 0 interface 250 has no altsetting 0 [ 617.657685][ T8672] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=12.b3 [ 617.667036][ T5924] usb usb6-port1: unable to enumerate USB device [ 617.673573][ T8672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.684262][ T8672] usb 1-1: config 0 descriptor?? [ 618.212326][T15182] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2464'. [ 618.223655][T15182] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2464'. [ 618.378541][T15186] fuse: Bad value for 'user_id' [ 618.383819][T15186] fuse: Bad value for 'user_id' [ 618.719821][T15200] netlink: 'syz.4.2469': attribute type 29 has an invalid length. [ 618.790916][T15200] netlink: 428 bytes leftover after parsing attributes in process `syz.4.2469'. [ 618.800175][T15200] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2469'. [ 618.846623][ T5956] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 619.007401][ T5956] usb 2-1: Using ep0 maxpacket: 16 [ 619.018662][ T5956] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 619.035217][ T5956] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 619.044616][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.053323][ T5956] usb 2-1: Product: syz [ 619.058857][ T5956] usb 2-1: Manufacturer: syz [ 619.066405][ T5956] usb 2-1: SerialNumber: syz [ 619.076985][ T5956] usb 2-1: config 0 descriptor?? [ 619.090502][ T5956] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 619.101699][ T5956] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 619.136392][T15212] binder: 15210:15212 ioctl c0306201 0 returned -14 [ 619.149444][T15212] netlink: 'syz.5.2472': attribute type 12 has an invalid length. [ 619.158579][T15212] netlink: 'syz.5.2472': attribute type 29 has an invalid length. [ 619.168089][T15212] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2472'. [ 619.193676][T15213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.280222][T15213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.292378][T15216] binder: 15210:15216 ioctl c0306201 0 returned -14 [ 619.357293][T15218] binder: 15210:15218 ioctl 400454d0 9 returned -22 [ 619.380562][T15218] binder: 15210:15218 ioctl c0189379 200000000140 returned -22 [ 619.502910][T15195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.530827][T15195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.992054][ T9] usb 4-1: USB disconnect, device number 112 [ 620.020055][ T5193] Dev loop3: unable to read RDB block 7 [ 620.028963][ T5193] loop3: unable to read partition table [ 620.035712][ T5193] loop3: partition table beyond EOD, truncated [ 620.044555][T15228] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2473'. [ 620.073877][T15228] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2473'. [ 620.124499][T15235] loop2: detected capacity change from 0 to 7 [ 620.141039][ T5819] Dev loop2: unable to read RDB block 7 [ 620.147432][ T5819] loop2: AHDI p1 p2 p3 [ 620.151916][ T5819] loop2: partition table partially beyond EOD, truncated [ 620.169726][ T5819] loop2: p1 start 1818582900 is beyond EOD, truncated [ 620.177330][ T5819] loop2: p3 start 335544320 is beyond EOD, truncated [ 620.194082][T15235] Dev loop2: unable to read RDB block 7 [ 620.205799][T15235] loop2: AHDI p1 p2 p3 [ 620.212020][T15235] loop2: partition table partially beyond EOD, truncated [ 620.228515][T15235] loop2: p1 start 1818582900 is beyond EOD, truncated [ 620.242556][ T8672] usb 1-1: string descriptor 0 read error: -71 [ 620.260485][T15235] loop2: p3 start 335544320 is beyond EOD, truncated [ 620.286736][ T8672] usb 1-1: USB disconnect, device number 3 [ 620.365282][ T5193] Dev loop3: unable to read RDB block 7 [ 620.378408][ T5193] loop3: unable to read partition table [ 620.385606][ T5193] loop3: partition table beyond EOD, truncated [ 620.393079][ T5956] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 620.465446][ T9] hid (null): unknown global tag 0xd [ 620.482114][ T5956] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 620.493124][ T9] hid (null): unknown global tag 0xc [ 620.499704][ T5956] em28xx 2-1:0.0: board has no eeprom [ 620.505347][ T9] hid (null): unknown global tag 0xd [ 620.526909][ T9] hid-generic 07FF:0006:0002.002F: collection stack underflow [ 620.534987][ T9] hid-generic 07FF:0006:0002.002F: item 0 4 0 12 parsing failed [ 620.543623][ T9] hid-generic 07FF:0006:0002.002F: probe with driver hid-generic failed with error -22 [ 620.573830][ T5193] Dev loop3: unable to read RDB block 7 [ 620.580318][ T5956] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 620.589315][ T5193] loop3: unable to read partition table [ 620.595042][ T5956] em28xx 2-1:0.0: dvb set to bulk mode. [ 620.602186][ T5193] loop3: partition table beyond EOD, truncated [ 620.612707][ T9] em28xx 2-1:0.0: Binding DVB extension [ 620.701936][ T9] em28xx 2-1:0.0: Registering input extension [ 620.742281][ T5193] Dev loop3: unable to read RDB block 7 [ 620.754454][ T5193] loop3: unable to read partition table [ 620.761292][ T5193] loop3: partition table beyond EOD, truncated [ 620.806459][ T8672] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 620.976270][ T8672] usb 1-1: Using ep0 maxpacket: 32 [ 620.983400][ T8672] usb 1-1: config 3 has an invalid interface number: 171 but max is 29 [ 620.995350][ T8672] usb 1-1: config 3 has 1 interface, different from the descriptor's value: 30 [ 621.004877][ T8672] usb 1-1: config 3 has no interface number 0 [ 621.006611][ T9] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 621.013106][ T8672] usb 1-1: config 3 interface 171 altsetting 108 endpoint 0x1 has invalid wMaxPacketSize 0 [ 621.029696][ T8672] usb 1-1: config 3 interface 171 has no altsetting 0 [ 621.039686][ T8672] usb 1-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice= c.e5 [ 621.049200][ T8672] usb 1-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 621.057504][ T8672] usb 1-1: Product: syz [ 621.061882][ T8672] usb 1-1: Manufacturer: syz [ 621.066771][ T8672] usb 1-1: SerialNumber: syz [ 621.176387][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 621.182989][ T9] usb 4-1: config 64 has an invalid interface number: 19 but max is 0 [ 621.191547][ T9] usb 4-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 621.204164][ T9] usb 4-1: config 64 has no interface number 0 [ 621.210452][ T9] usb 4-1: too many endpoints for config 64 interface 19 altsetting 0: 251, using maximum allowed: 30 [ 621.221872][ T9] usb 4-1: config 64 interface 19 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 251 [ 621.235316][ T5956] usb 6-1: new full-speed USB device number 69 using dummy_hcd [ 621.242986][ T9] usb 4-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 621.252639][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.291302][ T8672] as10x_usb: device has been detected [ 621.298715][ T8672] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 621.320161][ T8672] usb 1-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 621.335673][ T8672] as10x_usb: error during firmware upload part1 [ 621.343058][ T8672] Registered device Sky IT Digital Key (green led) [ 621.348125][ T8672] usb 1-1: USB disconnect, device number 4 [ 621.377654][ T8672] Unregistered device Sky IT Digital Key (green led) [ 621.380377][ T8672] as10x_usb: device has been disconnected [ 621.408135][ T5956] usb 6-1: config 150 has an invalid interface number: 204 but max is 2 [ 621.417110][ T5956] usb 6-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 621.427648][ T5956] usb 6-1: config 150 has no interface number 0 [ 621.435162][ T5956] usb 6-1: config 150 interface 204 has no altsetting 0 [ 621.445381][ T5956] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 621.455323][ T5956] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.463938][ T5956] usb 6-1: Product: syz [ 621.470102][ T5956] usb 6-1: Manufacturer: syz [ 621.485289][ T5956] usb 6-1: SerialNumber: syz [ 621.494125][T15297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.511970][T15297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.524323][ T9] usb 4-1: string descriptor 0 read error: -71 [ 621.546098][ T5876] usb 2-1: USB disconnect, device number 8 [ 621.567461][ T5876] em28xx 2-1:0.0: Disconnecting em28xx [ 621.573765][ T5876] em28xx 2-1:0.0: Closing input extension [ 621.590181][T15342] loop2: detected capacity change from 0 to 7 [ 621.597258][ T9] usb 4-1: probing VID:PID(2201:012C) [ 621.610383][ T5819] Dev loop2: unable to read RDB block 7 [ 621.613794][ T9] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 621.620969][ T5819] loop2: AHDI p1 p2 p3 [ 621.634833][ T5819] loop2: partition table partially beyond EOD, truncated [ 621.637849][ T5876] em28xx 2-1:0.0: Freeing device [ 621.652357][ T5819] loop2: p1 start 1818582900 is beyond EOD, truncated [ 621.661035][ T5819] loop2: p3 start 335544320 is beyond EOD, truncated [ 621.669257][ T9] vub300 4-1:64.19: probe with driver vub300 failed with error -22 [ 621.680551][T15342] Dev loop2: unable to read RDB block 7 [ 621.688714][T15342] loop2: AHDI p1 p2 p3 [ 621.693505][ T9] usb 4-1: USB disconnect, device number 113 [ 621.702121][T15342] loop2: partition table partially beyond EOD, truncated [ 621.714045][T15342] loop2: p1 start 1818582900 is beyond EOD, truncated [ 621.724633][ T5956] xr_serial 6-1:150.204: skipping garbage [ 621.732343][T15342] loop2: p3 start 335544320 is beyond EOD, truncated [ 621.739487][ T5956] xr_serial 6-1:150.204: xr_serial converter detected [ 621.753472][ T5956] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 621.770555][ T5956] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 621.801244][ T5956] usb 6-1: USB disconnect, device number 69 [ 621.831205][ T5956] xr_serial 6-1:150.204: device disconnected [ 621.925774][T15391] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2489'. [ 622.141551][ T5193] Dev loop3: unable to read RDB block 7 [ 622.156532][ T5193] loop3: unable to read partition table [ 622.168626][ T5193] loop3: partition table beyond EOD, truncated [ 622.686674][ T8672] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 622.856293][ T8672] usb 6-1: Using ep0 maxpacket: 8 [ 622.862930][ T8672] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 622.872509][ T8672] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 622.883832][ T8672] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 622.910334][ T8672] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 622.929666][ T8672] usb 6-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 622.947852][ T8672] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.967892][ T8672] usb 6-1: config 0 descriptor?? [ 622.981710][ T8672] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 623.146287][ T5924] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 623.180478][ T8672] usb 6-1: USB disconnect, device number 70 [ 623.204314][T15423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2494'. [ 623.287495][T15423] macvlan2: entered promiscuous mode [ 623.296305][ T5924] usb 2-1: Using ep0 maxpacket: 16 [ 623.303476][ T5924] usb 2-1: config 3 has an invalid interface number: 114 but max is 0 [ 623.325643][T15423] bond0: entered promiscuous mode [ 623.341304][ T5924] usb 2-1: config 3 has no interface number 0 [ 623.356154][T15423] bond_slave_0: entered promiscuous mode [ 623.370771][ T5193] Dev loop3: unable to read RDB block 7 [ 623.377193][ T5924] usb 2-1: config 3 interface 114 has no altsetting 0 [ 623.387092][ T5193] loop3: unable to read partition table [ 623.390547][T15423] bond_slave_1: entered promiscuous mode [ 623.396070][ T5193] loop3: partition table beyond EOD, truncated [ 623.418539][ T5924] usb 2-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice= d.d3 [ 623.428828][T15423] veth0_to_hsr: entered promiscuous mode [ 623.437724][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.471361][ T5924] usb 2-1: Product: syz [ 623.475560][ T5924] usb 2-1: Manufacturer: syz [ 623.480886][T15423] syz_tun: entered promiscuous mode [ 623.488894][ T5924] usb 2-1: SerialNumber: syz [ 623.498165][T15423] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 623.586454][ T8672] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 623.718494][ T5924] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 623.744115][ T5924] gspca_sn9c2028: read1 error -71 [ 623.759638][ T5924] gspca_sn9c2028: read1 error -71 [ 623.765271][ T8672] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.786586][ T5924] gspca_sn9c2028: read1 error -71 [ 623.796289][ T8672] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.806077][ T8672] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 623.825666][ T5924] sn9c2028 2-1:3.114: probe with driver sn9c2028 failed with error -71 [ 623.835292][ T8672] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 623.846094][ T5924] usb 2-1: USB disconnect, device number 9 [ 623.861045][ T8672] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.876868][ T8672] usb 6-1: config 0 descriptor?? [ 624.048009][ T5193] Dev loop3: unable to read RDB block 7 [ 624.054633][ T5193] loop3: unable to read partition table [ 624.067269][ T5193] loop3: partition table beyond EOD, truncated [ 624.157802][ T5193] Dev loop3: unable to read RDB block 7 [ 624.163553][ T5193] loop3: unable to read partition table [ 624.176656][ T5193] loop3: partition table beyond EOD, truncated [ 624.228131][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 624.256847][T15483] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2505'. [ 624.330229][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.343944][ T8672] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 624.352175][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.366294][ T8672] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 624.373749][ T8672] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 624.388629][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 624.396296][ T8672] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 624.405730][ T8672] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 624.413357][ T9] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 624.413386][ T9] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 624.413406][ T9] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 624.413426][ T9] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 624.413446][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 624.413466][ T9] usb 1-1: config 0 has no interface number 0 [ 624.413504][ T9] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 624.413531][ T9] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 624.413553][ T9] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 624.413585][ T9] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 624.413610][ T9] usb 1-1: config 0 interface 125 has no altsetting 0 [ 624.413627][ T9] usb 1-1: config 0 interface 125 has no altsetting 2 [ 624.535070][ T9] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 624.545609][ T8672] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 624.553852][ T8672] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 624.555350][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.561563][ T8672] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 624.616386][ T8672] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 624.631766][ T8672] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 624.664822][ T5193] Dev loop3: unable to read RDB block 7 [ 624.676469][ T8672] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 624.792119][ T8678] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 624.805790][ T8672] usb 6-1: USB disconnect, device number 71 [ 624.912322][ T5193] loop3: unable to read partition table [ 624.918587][ T9] usb 1-1: Product: syz [ 624.926590][ T9] usb 1-1: Manufacturer: syz [ 624.932475][ T5193] loop3: partition table beyond EOD, truncated [ 624.943372][ T9] usb 1-1: SerialNumber: syz [ 624.959381][ T8678] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 624.970447][ T8678] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 624.971926][ T9] usb 1-1: config 0 descriptor?? [ 625.011017][ T8678] usb 2-1: New USB device found, idVendor=08b7, idProduct=8000, bcdDevice= 0.00 [ 625.024913][ T9] usb 1-1: selecting invalid altsetting 2 [ 625.031863][ T8678] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 625.060060][ T8678] usb 2-1: SerialNumber: syz [ 625.133841][ T5193] Dev loop3: unable to read RDB block 7 [ 625.140590][ T5193] loop3: unable to read partition table [ 625.147362][ T5193] loop3: partition table beyond EOD, truncated [ 625.290823][ T5193] Dev loop3: unable to read RDB block 7 [ 625.292173][ T8678] usb 2-1: 0:2 : does not exist [ 625.310629][ T5193] loop3: unable to read partition table [ 625.339234][ T5193] loop3: partition table beyond EOD, truncated [ 625.741926][ T8678] usb 2-1: USB disconnect, device number 10 [ 625.801891][ T5193] Dev loop3: unable to read RDB block 7 [ 625.808386][ T5193] loop3: unable to read partition table [ 625.814745][ T5193] loop3: partition table beyond EOD, truncated [ 625.973728][T15555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.983862][T15555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.037208][ T8678] usb 1-1: USB disconnect, device number 5 [ 626.115521][ T5193] Dev loop3: unable to read RDB block 7 [ 626.121518][ T5193] loop3: unable to read partition table [ 626.128378][ T5193] loop3: partition table beyond EOD, truncated [ 626.224224][T15585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2516'. [ 626.376588][ T5876] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 626.384376][ T9] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 626.536422][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 626.663449][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 626.675245][ T9] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 626.690342][ T9] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 626.702479][ T5876] usb 2-1: config 252 has an invalid interface number: 15 but max is 0 [ 626.710677][T15587] loop2: detected capacity change from 0 to 7 [ 626.711737][ T5876] usb 2-1: config 252 has no interface number 0 [ 626.723714][ T5876] usb 2-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 626.725363][T15587] Dev loop2: unable to read RDB block 7 [ 626.743915][T15587] loop2: AHDI p1 p2 p3 [ 626.744090][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=015b, bcdDevice= 0.40 [ 626.757819][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.758316][T15587] loop2: partition table partially beyond EOD, truncated [ 626.766098][ T9] usb 6-1: Product: ж [ 626.778380][ T9] usb 6-1: Manufacturer: ﳿ [ 626.784724][ T9] usb 6-1: SerialNumber: 䓸퀩䋀璘äµá„´î­ ê’©æ‹§Öªë˜ˆíŒ’⦇쎇䖂潔ç™æƒ [ 626.784846][T15587] loop2: p1 start 1818582900 is beyond EOD, [ 626.794031][ T5876] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 626.809761][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.809842][T15587] truncated [ 626.818308][ T5876] usb 2-1: Product: syz [ 626.825583][T15587] loop2: p3 start 335544320 is beyond EOD, truncated [ 626.827368][ T5876] usb 2-1: Manufacturer: syz [ 626.841984][ T5876] usb 2-1: SerialNumber: syz [ 626.900183][ T5876] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 626.950651][T15601] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2518'. [ 627.026949][ T5193] Dev loop3: unable to read RDB block 7 [ 627.036334][ T5193] loop3: unable to read partition table [ 627.053287][ T5193] loop3: partition table beyond EOD, truncated [ 627.076412][ T7736] usb 2-1: Failed to submit usb control message: -71 [ 627.077093][ T5876] usb 2-1: USB disconnect, device number 11 [ 627.089997][ T7736] usb 2-1: unable to send the bmi data to the device: -71 [ 627.124472][ T7736] usb 2-1: unable to get target info from device [ 627.133122][ T5193] Dev loop3: unable to read RDB block 7 [ 627.148136][ T7736] usb 2-1: could not get target info (-71) [ 627.154058][ T5193] loop3: unable to read partition table [ 627.167617][ T7736] usb 2-1: could not probe fw (-71) [ 627.173164][ T5193] loop3: partition table beyond EOD, truncated [ 627.196423][ T8672] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 627.269039][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 627.279560][ T9] usb 6-1: MIDIStreaming interface descriptor not found [ 627.426343][ T8672] usb 1-1: Using ep0 maxpacket: 8 [ 627.467254][ T8672] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 627.485492][ T8672] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 627.505273][ T8672] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 627.549871][ T8672] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 627.563433][ T8672] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 627.574869][ T8672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.630591][ T9] usb 6-1: USB disconnect, device number 72 [ 627.813451][ T8672] usb 1-1: GET_CAPABILITIES returned 0 [ 627.823682][ T8672] usbtmc 1-1:16.0: can't read capabilities [ 628.027786][ T9] usb 6-1: new full-speed USB device number 73 using dummy_hcd [ 628.145765][T15672] netlink: 'syz.0.2518': attribute type 2 has an invalid length. [ 628.182509][T15672] !: entered promiscuous mode [ 628.195636][ T9] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 628.206299][ T9] usb 6-1: can't read configurations, error -61 [ 628.218235][ T5193] Dev loop3: unable to read RDB block 7 [ 628.224450][ T5193] loop3: unable to read partition table [ 628.231476][ T5193] loop3: partition table beyond EOD, truncated [ 628.309704][ T5193] Dev loop3: unable to read RDB block 7 [ 628.319967][ T5193] loop3: unable to read partition table [ 628.327942][ T5193] loop3: partition table beyond EOD, truncated [ 628.346768][ T9] usb 6-1: new full-speed USB device number 74 using dummy_hcd [ 628.410935][ T5193] Dev loop3: unable to read RDB block 7 [ 628.416500][ T8678] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 628.427558][ T5193] loop3: unable to read partition table [ 628.696594][ T9] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 628.828053][ T9] usb 6-1: can't read configurations, error -61 [ 628.842907][ T5193] loop3: partition table beyond EOD, truncated [ 628.849713][ T9] usb usb6-port1: attempt power cycle [ 628.856302][ T8678] usb 2-1: Using ep0 maxpacket: 16 [ 629.024027][T15670] syz.1.2524 (15670): drop_caches: 1 [ 629.073388][ T8678] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 629.100196][ T8678] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 629.115193][ T8678] usb 2-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 629.128897][ T8678] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 225, changing to 11 [ 629.147898][T15692] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2528'. [ 629.162932][T15670] syz.1.2524 (15670): drop_caches: 1 [ 629.182702][ T8678] usb 2-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 629.209156][ T5193] Dev loop3: unable to read RDB block 7 [ 629.214777][ T5193] loop3: unable to read partition table [ 629.221097][ T5193] loop3: partition table beyond EOD, truncated [ 629.240728][ T8678] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 629.257521][ T8678] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.270752][ T8678] usb 2-1: Product: syz [ 629.274976][ T8678] usb 2-1: Manufacturer: syz [ 629.280450][ T8678] usb 2-1: SerialNumber: syz [ 629.316333][ T9] usb 6-1: new full-speed USB device number 75 using dummy_hcd [ 629.339324][ T9] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 629.347360][ T9] usb 6-1: can't read configurations, error -61 [ 629.636493][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 629.636512][ T29] audit: type=1326 audit(1776105825.704:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15695 comm="syz.4.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a1d9c819 code=0x7ffc0000 [ 629.656804][ T9] usb 6-1: new full-speed USB device number 76 using dummy_hcd [ 629.673686][ T29] audit: type=1326 audit(1776105825.704:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15695 comm="syz.4.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a1d9c819 code=0x7ffc0000 [ 629.768419][ T29] audit: type=1326 audit(1776105825.704:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15695 comm="syz.4.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc0a1d9c819 code=0x7ffc0000 [ 629.769825][ T9] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 629.803935][ T9] usb 6-1: can't read configurations, error -61 [ 629.824136][ T9] usb usb6-port1: unable to enumerate USB device [ 629.833437][ T29] audit: type=1326 audit(1776105825.704:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15695 comm="syz.4.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a1d9c819 code=0x7ffc0000 [ 629.881123][ T29] audit: type=1326 audit(1776105825.704:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15695 comm="syz.4.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc0a1d9c4ab code=0x7ffc0000 [ 629.932761][ T29] audit: type=1326 audit(1776105825.704:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15695 comm="syz.4.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc0a1d9c4ab code=0x7ffc0000 [ 629.966100][ T29] audit: type=1326 audit(1776105825.704:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15695 comm="syz.4.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc0a1d9c4ab code=0x7ffc0000 [ 629.975191][ T8672] usb 1-1: USB disconnect, device number 6 [ 630.004111][ T29] audit: type=1326 audit(1776105825.704:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15695 comm="syz.4.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc0a1d9c4ab code=0x7ffc0000 [ 630.400242][ T29] audit: type=1326 audit(1776105825.704:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15695 comm="syz.4.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc0a1d9c4ab code=0x7ffc0000 [ 630.456133][ T29] audit: type=1326 audit(1776105825.704:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15695 comm="syz.4.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc0a1d9c4ab code=0x7ffc0000 [ 630.584581][ T5193] Dev loop3: unable to read RDB block 7 [ 630.593991][ T5193] loop3: unable to read partition table [ 630.614310][ T5193] loop3: partition table beyond EOD, truncated [ 630.878944][T15729] loop6: detected capacity change from 0 to 7 [ 630.889728][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 630.899655][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 630.908555][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 630.918267][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 630.944347][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 630.954107][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 630.962704][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 630.972351][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 630.980697][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 630.990313][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 631.029623][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 631.039292][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 631.170952][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 631.180617][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 631.202259][T15729] ldm_validate_partition_table(): Disk read failed. [ 631.244424][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 631.254248][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 631.276308][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 631.285924][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 631.295462][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 631.305078][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 631.316344][T15729] Dev loop6: unable to read RDB block 0 [ 631.324453][T15729] loop6: unable to read partition table [ 631.388096][T15729] loop6: partition table beyond EOD, truncated [ 631.423676][ T8678] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 631.486311][ T8678] usb 2-1: MIDIStreaming interface descriptor not found [ 631.553219][T15729] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾-ý?‹ºÐ œëÜ%õ«`Éæˆ{í©³­ô÷5 FLQkÝŠA€) failed (rc=-5) [ 632.018378][ T8678] usb 2-1: USB disconnect, device number 12 [ 632.774145][ T5193] Dev loop3: unable to read RDB block 7 [ 632.789395][ T5193] loop3: unable to read partition table [ 632.806937][ T5193] loop3: partition table beyond EOD, truncated [ 632.896106][ T5876] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 633.083132][ T5876] usb 6-1: Using ep0 maxpacket: 16 [ 633.145727][ T5876] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 633.160207][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.193023][ T5876] usb 6-1: Product: syz [ 633.219687][ T5876] usb 6-1: Manufacturer: syz [ 633.224366][ T5876] usb 6-1: SerialNumber: syz [ 633.257173][ T5876] usb 6-1: config 0 descriptor?? [ 633.366477][ T8678] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 633.374292][ T5924] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 633.536505][ T5924] usb 1-1: Using ep0 maxpacket: 16 [ 633.541839][ T8678] usb 4-1: Using ep0 maxpacket: 8 [ 633.554382][ T8678] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 633.564196][ T8678] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.573023][ T8678] usb 4-1: Product: syz [ 633.581728][ T8678] usb 4-1: Manufacturer: syz [ 633.586765][ T8678] usb 4-1: SerialNumber: syz [ 633.668472][ T5924] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 633.679910][ T5924] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 633.721729][ T5876] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 633.769761][T15822] syz.0.2545 (15822): drop_caches: 1 [ 633.815784][ T5876] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 633.816983][T15823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.834143][T15823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.854348][ T5876] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 633.865988][T15823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.877450][ T5876] usb 6-1: media controller created [ 633.879014][T15823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.906125][ T5924] usb 1-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 634.059024][ T5924] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 225, changing to 11 [ 634.070528][ T5924] usb 1-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 634.100854][ T5876] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 634.147701][ T5924] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 634.158423][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.167526][ T5924] usb 1-1: Product: syz [ 634.171801][ T5924] usb 1-1: Manufacturer: syz [ 634.176890][ T5924] usb 1-1: SerialNumber: syz [ 634.333481][T15822] syz.0.2545 (15822): drop_caches: 1 [ 634.425763][ T5876] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 634.451583][ T5876] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 634.629660][ T5876] usb 6-1: USB disconnect, device number 77 [ 634.745119][ T5876] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 635.966468][ T8678] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 635.976305][ T8678] usb 4-1: clock source 0 is not valid, cannot use [ 636.006652][ T8678] usb 4-1: 1:1: cannot get freq (v2/v3): err -71 [ 636.016596][ T8678] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 636.091821][ T8678] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 636.107237][ T5193] Dev loop3: unable to read RDB block 7 [ 636.114819][ T8678] usb 4-1: clock source 0 is not valid, cannot use [ 636.134104][ T5193] loop3: unable to read partition table [ 636.163454][ T5193] loop3: partition table beyond EOD, truncated [ 636.164825][ T8678] usb 4-1: 2:1: cannot get freq (v2/v3): err -71 [ 636.224214][ T8678] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 636.389023][ T5193] Dev loop3: unable to read RDB block 7 [ 636.394730][ T5193] loop3: unable to read partition table [ 636.431220][ T5193] loop3: partition table beyond EOD, truncated [ 636.641028][ T5924] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 636.676428][ T8678] usb 4-1: USB disconnect, device number 114 [ 636.693155][ T5924] usb 1-1: MIDIStreaming interface descriptor not found [ 636.733255][ T5193] Dev loop3: unable to read RDB block 7 [ 636.766742][ T5193] loop3: unable to read partition table [ 636.778962][ T5193] loop3: partition table beyond EOD, truncated [ 637.205406][ T5924] usb 1-1: USB disconnect, device number 7 [ 637.301099][ T5193] Dev loop3: unable to read RDB block 7 [ 637.328346][ T5193] loop3: unable to read partition table [ 637.363337][ T5193] loop3: partition table beyond EOD, truncated [ 637.540484][ T5193] Dev loop3: unable to read RDB block 7 [ 637.546108][ T5193] loop3: unable to read partition table [ 637.582454][ T5193] loop3: partition table beyond EOD, truncated [ 637.826550][ T9] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 637.847858][ T5956] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 637.976557][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 637.984044][ T9] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 637.993281][ T9] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 638.015472][ T9] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 638.046667][ T5956] usb 4-1: Using ep0 maxpacket: 16 [ 638.070908][ T5956] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.086366][ T9] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 638.138358][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 638.148232][ T5956] usb 4-1: config 0 interface 0 has no altsetting 0 [ 638.200916][ T5956] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 638.214221][ T9] usb 6-1: config 0 has no interface number 0 [ 638.268546][ T9] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 638.289437][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.304446][ T9] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 638.315529][ T5956] usb 4-1: config 0 descriptor?? [ 638.396662][ T9] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 638.407197][ T9] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 638.426656][ T9] usb 6-1: config 0 interface 125 has no altsetting 0 [ 638.433758][ T9] usb 6-1: config 0 interface 125 has no altsetting 2 [ 638.502553][ T9] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 638.518711][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.536652][T15987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.557319][ T9] usb 6-1: Product: syz [ 638.561589][ T9] usb 6-1: Manufacturer: syz [ 638.586304][ T9] usb 6-1: SerialNumber: syz [ 638.597504][ T9] usb 6-1: config 0 descriptor?? [ 638.604855][ T9] usb 6-1: selecting invalid altsetting 2 [ 638.614122][T15987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.645327][T15987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.681368][T15987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.715778][T15987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.783861][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 638.786136][ T29] audit: type=1326 audit(1776105834.864:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16019 comm="syz.1.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da619c819 code=0x7ffc0000 [ 638.830161][T15987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.892132][T15987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.036750][T15987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.058033][T15987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.085526][T15987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.122848][ T29] audit: type=1326 audit(1776105834.864:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16019 comm="syz.1.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da619c819 code=0x7ffc0000 [ 639.151429][ T29] audit: type=1326 audit(1776105834.864:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16019 comm="syz.1.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8da619c819 code=0x7ffc0000 [ 639.177674][ T29] audit: type=1326 audit(1776105834.864:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16019 comm="syz.1.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da619c819 code=0x7ffc0000 [ 639.203832][ T29] audit: type=1326 audit(1776105834.864:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16019 comm="syz.1.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f8da619c819 code=0x7ffc0000 [ 639.204344][ T5956] hid_parser_main: 28 callbacks suppressed [ 639.204385][ T5956] mcp2221 0003:04D8:00DD.0031: unknown main item tag 0x0 [ 639.254159][ T29] audit: type=1326 audit(1776105834.864:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16019 comm="syz.1.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da619c819 code=0x7ffc0000 [ 639.459347][ T5956] mcp2221 0003:04D8:00DD.0031: unknown main item tag 0x0 [ 639.476475][ T5956] mcp2221 0003:04D8:00DD.0031: unknown main item tag 0x0 [ 639.486117][ T5956] mcp2221 0003:04D8:00DD.0031: unknown main item tag 0x0 [ 639.494608][ T5956] mcp2221 0003:04D8:00DD.0031: unknown main item tag 0x0 [ 639.510918][ C0] usb 6-1: async_complete: urb error -32 [ 639.517049][ T9] get_1284_register: usb error -32 [ 639.532709][ T5956] mcp2221 0003:04D8:00DD.0031: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 639.714850][ T29] audit: type=1326 audit(1776105834.864:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16019 comm="syz.1.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f8da619c819 code=0x7ffc0000 [ 639.836607][ T29] audit: type=1326 audit(1776105834.864:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16019 comm="syz.1.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da619c819 code=0x7ffc0000 [ 639.921009][T16039] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 639.977345][T16038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.985959][T16038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.100870][ C0] usb 4-1: input irq status -75 received [ 640.106876][ T29] audit: type=1326 audit(1776105834.864:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16019 comm="syz.1.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8da615d04e code=0x7ffc0000 [ 640.164390][ T29] audit: type=1326 audit(1776105834.864:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16019 comm="syz.1.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da619c819 code=0x7ffc0000 [ 640.603844][ T5956] usb 4-1: USB disconnect, device number 115 [ 640.689754][ T5193] Dev loop3: unable to read RDB block 7 [ 640.705677][ T5193] loop3: unable to read partition table [ 640.728059][ T5193] loop3: partition table beyond EOD, truncated [ 640.809633][ T5193] Dev loop3: unable to read RDB block 7 [ 640.822253][ T5193] loop3: unable to read partition table [ 640.834687][ T5193] loop3: partition table beyond EOD, truncated [ 641.068134][T16086] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 641.283493][ T5808] usb 6-1: USB disconnect, device number 78 [ 641.332135][T16094] bond1: option mode: unable to set because the bond device is up [ 641.349763][T16094] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2573'. [ 641.358901][ T5956] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 641.392261][T16094] bond1: option mode: unable to set because the bond device is up [ 641.403800][T16097] loop2: detected capacity change from 0 to 7 [ 641.411124][T16097] Dev loop2: unable to read RDB block 7 [ 641.419947][T16097] loop2: AHDI p1 p2 p3 [ 641.424356][T16097] loop2: partition table partially beyond EOD, truncated [ 641.433799][T16097] loop2: p1 start 1818582900 is beyond EOD, truncated [ 641.440801][T16097] loop2: p3 start 335544320 is beyond EOD, truncated [ 641.486037][T16102] netlink: 'syz.5.2573': attribute type 4 has an invalid length. [ 641.507043][T16102] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2573'. [ 641.543583][ T5956] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 641.554734][ T5956] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.591185][ T5956] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.627724][ T5956] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 641.736331][ T5956] usb 2-1: New USB device found, idVendor=056a, idProduct=0131, bcdDevice= 0.00 [ 641.772709][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.792751][ T5956] usb 2-1: config 0 descriptor?? [ 642.225461][T16119] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2577'. [ 642.268798][ T5193] Dev loop3: unable to read RDB block 7 [ 642.274550][ T5193] loop3: unable to read partition table [ 642.289285][ T5193] loop3: partition table beyond EOD, truncated [ 642.416409][ T9] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 642.526698][ T8678] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 642.581100][ T9] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 642.590689][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.611950][ T9] usb 6-1: config 0 descriptor?? [ 642.624652][ T9] cp210x 6-1:0.0: cp210x converter detected [ 642.689612][ T8678] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.713437][ T8678] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 642.728460][ T8678] usb 1-1: config 0 interface 0 has no altsetting 0 [ 642.739572][ T8678] usb 1-1: New USB device found, idVendor=0463, idProduct=1215, bcdDevice= 0.00 [ 642.755337][ T8678] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.820837][ T8678] usb 1-1: config 0 descriptor?? [ 643.039047][ T9] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 643.239183][ T5193] Dev loop3: unable to read RDB block 7 [ 643.244961][ T5193] loop3: unable to read partition table [ 643.251733][ T5193] loop3: partition table beyond EOD, truncated [ 643.311037][ T9] usb 6-1: cp210x converter now attached to ttyUSB0 [ 643.315047][ T8678] hid-generic 0003:0463:1215.0032: hidraw0: USB HID v0.04 Device [HID 0463:1215] on usb-dummy_hcd.0-1/input0 [ 643.339795][T16155] ÿ: renamed from bond_slave_0 (while UP) [ 643.477596][ T8678] usb 6-1: USB disconnect, device number 79 [ 643.507323][T16159] vivid-006: disconnect [ 643.521849][T16159] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 643.561125][ T9] usb 1-1: USB disconnect, device number 8 [ 643.561869][ T8678] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 643.590605][ T8678] cp210x 6-1:0.0: device disconnected [ 643.918254][ T5956] usbhid 2-1:0.0: can't add hid device: -71 [ 643.924419][ T5956] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 643.956777][ T5956] usb 2-1: USB disconnect, device number 13 [ 644.113678][T16141] vivid-006: reconnect [ 644.188782][T16201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2584'. [ 644.189566][T16202] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2583'. [ 644.304850][ T5193] Dev loop3: unable to read RDB block 7 [ 644.310564][ T5193] loop3: unable to read partition table [ 644.331393][ T5193] loop3: partition table beyond EOD, truncated [ 644.418869][ T8678] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 644.454242][ T5193] Dev loop3: unable to read RDB block 7 [ 644.460075][ T5193] loop3: unable to read partition table [ 644.469137][ T5193] loop3: partition table beyond EOD, truncated [ 644.667975][ T8678] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 644.687390][T16232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2588'. [ 644.703037][ T8678] usb 2-1: config 0 has no interfaces? [ 644.708580][T16232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2588'. [ 644.720404][ T8678] usb 2-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 644.732125][ T8678] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.732561][ T5193] Dev loop3: unable to read RDB block 7 [ 644.788683][ T8678] usb 2-1: config 0 descriptor?? [ 644.825541][T16232] netlink: 'syz.4.2588': attribute type 4 has an invalid length. [ 644.838053][ T5193] loop3: unable to read partition table [ 644.850560][ T5193] loop3: partition table beyond EOD, truncated [ 645.148067][ T5193] Dev loop3: unable to read RDB block 7 [ 645.171553][ T5193] loop3: unable to read partition table [ 645.202504][ T5193] loop3: partition table beyond EOD, truncated [ 645.234645][ T9] usb 2-1: USB disconnect, device number 14 [ 645.345388][T16277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.355744][T16277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.430985][ T5193] Dev loop3: unable to read RDB block 7 [ 645.439095][ T5193] loop3: unable to read partition table [ 645.445005][ T5193] loop3: partition table beyond EOD, truncated [ 645.456694][ T5956] usb 4-1: new low-speed USB device number 116 using dummy_hcd [ 645.894537][T16301] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2597'. [ 646.007113][T16307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.030321][T16307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.041084][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 646.209548][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 646.218407][ T9] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 646.229260][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 646.242258][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 646.260348][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 646.278878][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 646.288212][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 646.296771][ T9] usb 1-1: Product: syz [ 646.300980][ T9] usb 1-1: Manufacturer: syz [ 646.312158][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 646.319139][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 646.331291][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 646.344765][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [ 646.387467][ T5193] Dev loop3: unable to read RDB block 7 [ 646.395244][ T5193] loop3: unable to read partition table [ 646.408511][ T5193] loop3: partition table beyond EOD, truncated [ 646.463418][ T5193] Dev loop3: unable to read RDB block 7 [ 646.472182][ T5193] loop3: unable to read partition table [ 646.481651][ T5193] loop3: partition table beyond EOD, truncated [ 646.618503][ T9] usb 1-1: USB disconnect, device number 9 [ 646.736528][ T5956] usb 4-1: new full-speed USB device number 117 using dummy_hcd [ 647.294954][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 647.310188][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 647.323350][ T5956] usb 4-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00 [ 647.332807][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.397720][ T5956] usb 4-1: config 0 descriptor?? [ 647.553985][T16352] loop2: detected capacity change from 0 to 7 [ 647.564434][T16352] Dev loop2: unable to read RDB block 7 [ 647.586150][T16352] loop2: AHDI p1 p2 p3 [ 647.603395][T16352] loop2: partition table partially beyond EOD, truncated [ 647.632614][T16352] loop2: p1 start 1818582900 is beyond EOD, truncated [ 647.743872][T16352] loop2: p3 start 335544320 is beyond EOD, truncated [ 648.015662][ T5956] wacom 0003:056A:5012.0033: unknown main item tag 0x0 [ 648.024368][ T5956] wacom 0003:056A:5012.0033: unknown main item tag 0x0 [ 648.032083][ T5956] wacom 0003:056A:5012.0033: unknown main item tag 0x0 [ 648.072741][ T5956] wacom 0003:056A:5012.0033: unknown main item tag 0x0 [ 648.081559][ T5956] wacom 0003:056A:5012.0033: unknown main item tag 0x0 [ 648.089966][ T5956] wacom 0003:056A:5012.0033: unknown main item tag 0x0 [ 648.115298][ T5956] wacom 0003:056A:5012.0033: unknown main item tag 0x0 [ 648.127804][ T5956] wacom 0003:056A:5012.0033: unknown main item tag 0x0 [ 648.143796][ T5956] wacom 0003:056A:5012.0033: unknown main item tag 0x0 [ 648.164719][ T5956] wacom 0003:056A:5012.0033: unknown main item tag 0x0 [ 648.195155][ T5956] wacom 0003:056A:5012.0033: reserved main item tag 0xd [ 648.264667][ T5956] wacom 0003:056A:5012.0033: Unknown device_type for 'HID 056a:5012'. Ignoring. [ 648.306575][ T5956] usb 4-1: USB disconnect, device number 117 [ 648.306810][ T24] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 648.466348][ T24] usb 6-1: device descriptor read/64, error -71 [ 648.706299][ T24] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 648.749654][ T5193] Dev loop3: unable to read RDB block 7 [ 648.763567][ T5193] loop3: unable to read partition table [ 648.783864][ T5193] loop3: partition table beyond EOD, truncated [ 648.831451][T16394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.842355][T16394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.850626][ T24] usb 6-1: device descriptor read/64, error -71 [ 648.862152][T16394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.872467][T16394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.884415][T16394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.895128][T16394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.907431][T16394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.919881][T16394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.933021][T16394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.943297][T16394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.956127][T16394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.966587][T16394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.014511][ T24] usb usb6-port1: attempt power cycle [ 649.076672][ T5956] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 649.227330][ T5956] usb 4-1: Using ep0 maxpacket: 16 [ 649.233169][ T5956] usb 4-1: too many configurations: 221, using maximum allowed: 8 [ 649.243078][ T5956] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 649.253019][ T5956] usb 4-1: can't read configurations, error -61 [ 649.377767][ T24] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 649.396887][ T24] usb 6-1: device descriptor read/8, error -71 [ 649.398044][ T5956] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 649.436334][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 649.566623][ T5956] usb 4-1: Using ep0 maxpacket: 16 [ 649.576762][ T9] usb 2-1: device descriptor read/64, error -71 [ 649.583182][ T5956] usb 4-1: too many configurations: 221, using maximum allowed: 8 [ 649.601200][ T5956] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 649.613258][ T5956] usb 4-1: can't read configurations, error -61 [ 649.631103][ T5956] usb usb4-port1: attempt power cycle [ 649.656344][ T24] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 649.677205][ T24] usb 6-1: device descriptor read/8, error -71 [ 649.786835][ T24] usb usb6-port1: unable to enumerate USB device [ 649.816508][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 649.946356][ T9] usb 2-1: device descriptor read/64, error -71 [ 649.976460][ T5956] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 649.997058][ T5956] usb 4-1: Using ep0 maxpacket: 16 [ 650.003188][ T5956] usb 4-1: too many configurations: 221, using maximum allowed: 8 [ 650.012995][ T5956] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 650.020885][ T5956] usb 4-1: can't read configurations, error -61 [ 650.056749][ T9] usb usb2-port1: attempt power cycle [ 650.156463][ T5956] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 650.177033][ T5956] usb 4-1: Using ep0 maxpacket: 16 [ 650.182866][ T5956] usb 4-1: too many configurations: 221, using maximum allowed: 8 [ 650.192736][ T5956] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 650.200623][ T5956] usb 4-1: can't read configurations, error -61 [ 650.207799][ T5956] usb usb4-port1: unable to enumerate USB device [ 650.397823][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 650.416987][ T9] usb 2-1: device descriptor read/8, error -71 [ 650.656436][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 650.687248][ T9] usb 2-1: device descriptor read/8, error -71 [ 650.807074][ T9] usb usb2-port1: unable to enumerate USB device [ 651.416826][T16465] bond3: entered allmulticast mode [ 651.439923][T16465] netlink: 'syz.0.2626': attribute type 1 has an invalid length. [ 651.460491][T16460] bond3: left allmulticast mode [ 651.469497][T16468] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 651.548536][T16472] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2628'. [ 651.558346][T16472] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2628'. [ 651.570982][T16472] bond0 (unregistering): left promiscuous mode [ 651.578658][T16472] bond_slave_0: left promiscuous mode [ 651.584373][T16472] bond_slave_1: left promiscuous mode [ 651.592071][T16472] veth0_to_hsr: left promiscuous mode [ 651.625486][T16472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 651.636877][T16472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 651.648109][T16472] bond0 (unregistering): (slave veth0_to_hsr): Releasing backup interface [ 651.661474][T16472] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 651.677789][T16472] bond0 (unregistering): Released all slaves [ 651.815801][ T5193] Dev loop3: unable to read RDB block 7 [ 651.828412][ T5193] loop3: unable to read partition table [ 651.838343][ T5193] loop3: partition table beyond EOD, truncated [ 651.880519][ T5193] Dev loop3: unable to read RDB block 7 [ 651.889460][ T5193] loop3: unable to read partition table [ 651.899479][ T5193] loop3: partition table beyond EOD, truncated [ 652.053006][ T5193] Dev loop3: unable to read RDB block 7 [ 652.061856][ T5193] loop3: unable to read partition table [ 652.069853][ T5193] loop3: partition table beyond EOD, truncated [ 652.116303][ T5956] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 652.346786][ T5956] usb 1-1: device descriptor read/64, error -71 [ 652.480828][T16522] FAULT_INJECTION: forcing a failure. [ 652.480828][T16522] name failslab, interval 1, probability 0, space 0, times 0 [ 652.587562][ T5956] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 652.658315][T16522] CPU: 0 UID: 0 PID: 16522 Comm: syz.1.2635 Tainted: G L syzkaller #0 PREEMPT(full) [ 652.658348][T16522] Tainted: [L]=SOFTLOCKUP [ 652.658355][T16522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 652.658366][T16522] Call Trace: [ 652.658373][T16522] [ 652.658378][T16522] dump_stack_lvl+0xe8/0x150 [ 652.658399][T16522] should_fail_ex+0x412/0x560 [ 652.658419][T16522] should_failslab+0xa8/0x100 [ 652.658435][T16522] __kmalloc_cache_noprof+0x88/0x660 [ 652.658447][T16522] ? trace_contention_end+0x3d/0x150 [ 652.658465][T16522] ? __vb2_init_fileio+0x1e8/0xff0 [ 652.658478][T16522] __vb2_init_fileio+0x1e8/0xff0 [ 652.658490][T16522] ? __lock_acquire+0x6b5/0x2cf0 [ 652.658504][T16522] ? vb2_fop_read+0x101/0x360 [ 652.658524][T16522] __vb2_perform_fileio+0x282/0x1620 [ 652.658540][T16522] ? __asan_memset+0x22/0x50 [ 652.658552][T16522] vb2_fop_read+0x273/0x360 [ 652.658571][T16522] v4l2_read+0x19c/0x2c0 [ 652.658591][T16522] vfs_readv+0x587/0x840 [ 652.658607][T16522] ? __pfx_v4l2_read+0x10/0x10 [ 652.658625][T16522] ? __pfx_vfs_readv+0x10/0x10 [ 652.658646][T16522] ? __fget_files+0x2a/0x420 [ 652.658658][T16522] ? __fget_files+0x3a0/0x420 [ 652.658667][T16522] ? __fget_files+0x2a/0x420 [ 652.658680][T16522] __x64_sys_preadv+0x19f/0x2a0 [ 652.658696][T16522] ? __pfx___x64_sys_preadv+0x10/0x10 [ 652.658720][T16522] do_syscall_64+0x14d/0xf80 [ 652.658735][T16522] ? trace_irq_disable+0x3b/0x150 [ 652.658744][T16522] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.658755][T16522] ? clear_bhb_loop+0x40/0x90 [ 652.658768][T16522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.658779][T16522] RIP: 0033:0x7f8da619c819 [ 652.658795][T16522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 652.658811][T16522] RSP: 002b:00007f8da7059028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 652.658831][T16522] RAX: ffffffffffffffda RBX: 00007f8da6415fa0 RCX: 00007f8da619c819 [ 652.658844][T16522] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 652.658856][T16522] RBP: 00007f8da7059090 R08: 0000000000000007 R09: 0000000000000000 [ 652.658867][T16522] R10: 0000000000010001 R11: 0000000000000246 R12: 0000000000000001 [ 652.658879][T16522] R13: 00007f8da6416038 R14: 00007f8da6415fa0 R15: 00007f8da653fa48 [ 652.658899][T16522] [ 652.957525][T16526] loop2: detected capacity change from 0 to 7 [ 652.962366][T16530] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 652.976118][ T5819] Dev loop2: unable to read RDB block 7 [ 652.976356][ T5956] usb 1-1: device descriptor read/64, error -71 [ 652.989599][ T5819] loop2: AHDI p1 p2 p3 [ 653.005639][ T5819] loop2: partition table partially beyond EOD, truncated [ 653.029391][ T5819] loop2: p1 start 1818582900 is beyond EOD, truncated [ 653.051489][ T5819] loop2: p3 start 335544320 is beyond EOD, truncated [ 653.064959][T16526] Dev loop2: unable to read RDB block 7 [ 653.076823][T16526] loop2: AHDI p1 p2 p3 [ 653.081013][T16526] loop2: partition table partially beyond EOD, truncated [ 653.098196][ T5956] usb usb1-port1: attempt power cycle [ 653.189859][T16526] loop2: p1 start 1818582900 is beyond EOD, truncated [ 653.216734][T16526] loop2: p3 start 335544320 is beyond EOD, truncated [ 653.416390][ T5876] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 653.436571][ T5956] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 653.456940][ T5956] usb 1-1: device descriptor read/8, error -71 [ 653.566477][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 653.573913][ T5876] usb 2-1: config 0 has no interfaces? [ 653.582272][ T5876] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 653.591935][ T5876] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 653.600327][ T5876] usb 2-1: Manufacturer: syz [ 653.606295][ T24] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 653.608341][ T5876] usb 2-1: config 0 descriptor?? [ 653.696297][ T5956] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 653.717006][ T5956] usb 1-1: device descriptor read/8, error -71 [ 653.762539][T16575] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2643'. [ 653.771609][T16575] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2643'. [ 653.780765][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 653.808696][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 653.820236][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 653.827763][ T5956] usb usb1-port1: unable to enumerate USB device [ 653.840752][ T24] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 653.869300][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.879381][ T24] usb 4-1: Product: syz [ 653.883597][ T24] usb 4-1: Manufacturer: syz [ 653.895645][ T24] usb 4-1: SerialNumber: syz [ 653.927789][ T24] usb 4-1: config 0 descriptor?? [ 653.956415][T16583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2645'. [ 654.050084][ T8672] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 654.191544][ C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 654.213899][ T24] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input75 [ 654.227120][T16625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.243133][T16625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.258011][ T8672] usb 6-1: Using ep0 maxpacket: 32 [ 654.264793][ T8672] usb 6-1: config index 0 descriptor too short (expected 8192, got 36) [ 654.273631][ T8672] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 654.288476][ T24] imon:send_packet: packet tx failed (-71) [ 654.294565][ T8672] usb 6-1: config 0 has no interfaces? [ 654.300495][ T8672] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 654.311693][ T8672] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.320062][ T24] imon 4-1:0.0: panel buttons/knobs setup failed [ 654.328575][ T8672] usb 6-1: config 0 descriptor?? [ 654.396330][ T24] rc_core: IR keymap rc-imon-pad not found [ 654.402463][ T24] Registered IR keymap rc-empty [ 654.412995][ T24] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 654.423854][ T24] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 654.434193][ T24] imon:send_packet: packet tx failed (-71) [ 654.456349][ T24] imon 4-1:0.0: remote input dev register failed [ 654.462947][ T24] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 654.483002][ T24] imon 4-1:0.0: unable to initialize intf0, err 0 [ 654.490336][ T24] imon:imon_probe: failed to initialize context! [ 654.496804][ T24] imon 4-1:0.0: unable to register, err -19 [ 654.505683][ T24] usb 4-1: USB disconnect, device number 122 [ 654.544277][T16575] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0002:7d01 with DS=0x1 [ 654.560989][ T8672] usb 6-1: string descriptor 0 read error: -71 [ 654.570407][ T8672] usb 6-1: USB disconnect, device number 84 [ 654.831595][ T24] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 654.908495][T16663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2648'. [ 654.958744][T16663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.977930][T16699] macsec1: entered promiscuous mode [ 654.983324][T16699] bond0: entered promiscuous mode [ 654.990028][T16699] bond0: left promiscuous mode [ 654.996888][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 655.011603][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 655.027220][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 655.036001][ T24] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 655.045469][ T5924] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 655.077858][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.092201][T16707] FAULT_INJECTION: forcing a failure. [ 655.092201][T16707] name failslab, interval 1, probability 0, space 0, times 0 [ 655.092513][ T24] usb 4-1: Product: syz [ 655.109945][T16707] CPU: 0 UID: 0 PID: 16707 Comm: syz.0.2649 Tainted: G L syzkaller #0 PREEMPT(full) [ 655.109975][T16707] Tainted: [L]=SOFTLOCKUP [ 655.109982][T16707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 655.109993][T16707] Call Trace: [ 655.110004][T16707] [ 655.110013][T16707] dump_stack_lvl+0xe8/0x150 [ 655.110046][T16707] should_fail_ex+0x412/0x560 [ 655.110075][T16707] should_failslab+0xa8/0x100 [ 655.110096][T16707] __kmalloc_noprof+0xe8/0x760 [ 655.110118][T16707] ? vb2_core_reqbufs+0x8fa/0x1410 [ 655.110147][T16707] vb2_core_reqbufs+0x8fa/0x1410 [ 655.110186][T16707] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 655.110214][T16707] ? __kasan_kmalloc+0x93/0xb0 [ 655.110238][T16707] ? __kmalloc_cache_noprof+0x31c/0x660 [ 655.110260][T16707] ? __kmalloc_cache_noprof+0x15b/0x660 [ 655.110286][T16707] __vb2_init_fileio+0x318/0xff0 [ 655.110308][T16707] ? __lock_acquire+0x6b5/0x2cf0 [ 655.110332][T16707] ? vb2_fop_read+0x101/0x360 [ 655.110367][T16707] __vb2_perform_fileio+0x282/0x1620 [ 655.110396][T16707] ? __asan_memset+0x22/0x50 [ 655.110418][T16707] vb2_fop_read+0x273/0x360 [ 655.110450][T16707] v4l2_read+0x19c/0x2c0 [ 655.110480][T16707] vfs_readv+0x587/0x840 [ 655.110510][T16707] ? __pfx_v4l2_read+0x10/0x10 [ 655.110541][T16707] ? __pfx_vfs_readv+0x10/0x10 [ 655.110582][T16707] ? __fget_files+0x2a/0x420 [ 655.110605][T16707] ? __fget_files+0x3a0/0x420 [ 655.110622][T16707] ? __fget_files+0x2a/0x420 [ 655.110647][T16707] __x64_sys_preadv+0x19f/0x2a0 [ 655.110673][T16707] ? __pfx___x64_sys_preadv+0x10/0x10 [ 655.110726][T16707] do_syscall_64+0x14d/0xf80 [ 655.110749][T16707] ? trace_irq_disable+0x3b/0x150 [ 655.110765][T16707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.110784][T16707] ? clear_bhb_loop+0x40/0x90 [ 655.110804][T16707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.110820][T16707] RIP: 0033:0x7f5c89d9c819 [ 655.110837][T16707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.110855][T16707] RSP: 002b:00007f5c8ad29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 655.110875][T16707] RAX: ffffffffffffffda RBX: 00007f5c8a015fa0 RCX: 00007f5c89d9c819 [ 655.110888][T16707] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 655.110900][T16707] RBP: 00007f5c8ad29090 R08: 0000000000000007 R09: 0000000000000000 [ 655.110912][T16707] R10: 0000000000010001 R11: 0000000000000246 R12: 0000000000000001 [ 655.110924][T16707] R13: 00007f5c8a016038 R14: 00007f5c8a015fa0 R15: 00007f5c8a13fa48 [ 655.110954][T16707] [ 655.114455][ T24] usb 4-1: Manufacturer: syz [ 655.389717][ T24] usb 4-1: SerialNumber: syz [ 655.399441][ T24] usb 4-1: config 0 descriptor?? [ 655.413372][T16709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2650'. [ 655.431015][T16709] macvtap1: entered promiscuous mode [ 655.437064][T16709] gretap0: entered promiscuous mode [ 655.442626][T16709] macvtap1: entered allmulticast mode [ 655.449187][T16709] gretap0: entered allmulticast mode [ 655.465041][T16709] macvtap1: left promiscuous mode [ 655.470465][T16709] gretap0: left promiscuous mode [ 655.475773][T16709] macvtap1: left allmulticast mode [ 655.476294][ T5924] usb 6-1: Using ep0 maxpacket: 8 [ 655.482276][T16709] gretap0: left allmulticast mode [ 655.488056][ T5924] usb 6-1: config index 0 descriptor too short (expected 45, got 27) [ 655.506524][ T5924] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 655.522239][ T5924] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=20.d4 [ 655.531368][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 655.539615][ T5924] usb 6-1: SerialNumber: syz [ 655.655128][ T24] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input77 [ 655.793395][ T5924] usb 6-1: USB disconnect, device number 85 [ 655.957627][ T24] rc_core: IR keymap rc-imon-pad not found [ 655.969923][ T24] Registered IR keymap rc-empty [ 655.984812][ T24] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 656.012215][ T24] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 656.083585][ T5876] usb 2-1: USB disconnect, device number 19 [ 656.087219][ T24] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 656.190415][ T24] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input78 [ 656.193587][T16746] loop2: detected capacity change from 0 to 7 [ 656.213866][T16746] Dev loop2: unable to read RDB block 7 [ 656.225695][T16746] loop2: AHDI p1 p2 p3 [ 656.237984][T16746] loop2: partition table partially beyond EOD, truncated [ 656.247169][ T24] imon 4-1:0.0: iMON device (15c2:0041, intf0) on usb<4:123> initialized [ 656.275956][T16746] loop2: p1 start 1818582900 is beyond EOD, truncated [ 656.308639][T16746] loop2: p3 start 335544320 is beyond EOD, truncated [ 656.318528][T16753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2653'. [ 656.390250][T16756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2653'. [ 656.409046][T16753] 8021q: adding VLAN 0 to HW filter on device bond3 [ 656.455413][T16756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2653'. [ 656.512629][T16568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.522920][T16762] netlink: 'syz.4.2653': attribute type 4 has an invalid length. [ 656.570465][T16762] .`: renamed from bond0 [ 656.581154][T16568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.625807][ C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 656.626284][ T5876] usb 4-1: USB disconnect, device number 123 [ 656.740616][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 656.740633][ T29] audit: type=1326 audit(1776105852.824:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16778 comm="syz.1.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da619c819 code=0x7ffc0000 [ 656.909431][T16785] __nla_validate_parse: 1 callbacks suppressed [ 656.909449][T16785] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2656'. [ 656.961194][ T29] audit: type=1326 audit(1776105852.824:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16778 comm="syz.1.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8da619c819 code=0x7ffc0000 [ 657.007808][T16779] netlink: 'syz.1.2658': attribute type 1 has an invalid length. [ 657.061151][ T29] audit: type=1326 audit(1776105852.824:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16778 comm="syz.1.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da619c819 code=0x7ffc0000 [ 657.089286][T16791] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2658'. [ 657.091757][T16792] FAULT_INJECTION: forcing a failure. [ 657.091757][T16792] name failslab, interval 1, probability 0, space 0, times 0 [ 657.117904][T16792] CPU: 1 UID: 0 PID: 16792 Comm: syz.4.2660 Tainted: G L syzkaller #0 PREEMPT(full) [ 657.117934][T16792] Tainted: [L]=SOFTLOCKUP [ 657.117941][T16792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 657.117952][T16792] Call Trace: [ 657.117961][T16792] [ 657.117969][T16792] dump_stack_lvl+0xe8/0x150 [ 657.118000][T16792] should_fail_ex+0x412/0x560 [ 657.118033][T16792] should_failslab+0xa8/0x100 [ 657.118059][T16792] __kmalloc_noprof+0xe8/0x760 [ 657.118081][T16792] ? vb2_core_reqbufs+0x971/0x1410 [ 657.118106][T16792] ? __kmalloc_noprof+0x1b8/0x760 [ 657.118131][T16792] vb2_core_reqbufs+0x971/0x1410 [ 657.118174][T16792] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 657.118201][T16792] ? __kasan_kmalloc+0x93/0xb0 [ 657.118224][T16792] ? __kmalloc_cache_noprof+0x31c/0x660 [ 657.118247][T16792] ? __kmalloc_cache_noprof+0x15b/0x660 [ 657.118273][T16792] __vb2_init_fileio+0x318/0xff0 [ 657.118295][T16792] ? __lock_acquire+0x6b5/0x2cf0 [ 657.118319][T16792] ? vb2_fop_read+0x101/0x360 [ 657.118390][T16792] __vb2_perform_fileio+0x282/0x1620 [ 657.118419][T16792] ? __asan_memset+0x22/0x50 [ 657.118441][T16792] vb2_fop_read+0x273/0x360 [ 657.118474][T16792] v4l2_read+0x19c/0x2c0 [ 657.118507][T16792] vfs_readv+0x587/0x840 [ 657.118534][T16792] ? __pfx_v4l2_read+0x10/0x10 [ 657.118564][T16792] ? __pfx_vfs_readv+0x10/0x10 [ 657.118602][T16792] ? __fget_files+0x2a/0x420 [ 657.118624][T16792] ? __fget_files+0x3a0/0x420 [ 657.118638][T16792] ? __fget_files+0x2a/0x420 [ 657.118662][T16792] __x64_sys_preadv+0x19f/0x2a0 [ 657.118687][T16792] ? __pfx___x64_sys_preadv+0x10/0x10 [ 657.118720][T16792] do_syscall_64+0x14d/0xf80 [ 657.118743][T16792] ? trace_irq_disable+0x3b/0x150 [ 657.118758][T16792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.118777][T16792] ? clear_bhb_loop+0x40/0x90 [ 657.118800][T16792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.118819][T16792] RIP: 0033:0x7fc0a1d9c819 [ 657.118837][T16792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 657.118853][T16792] RSP: 002b:00007fc0a2cec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 657.118874][T16792] RAX: ffffffffffffffda RBX: 00007fc0a2015fa0 RCX: 00007fc0a1d9c819 [ 657.118888][T16792] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 657.118901][T16792] RBP: 00007fc0a2cec090 R08: 0000000000000007 R09: 0000000000000000 [ 657.118913][T16792] R10: 0000000000010001 R11: 0000000000000246 R12: 0000000000000001 [ 657.118924][T16792] R13: 00007fc0a2016038 R14: 00007fc0a2015fa0 R15: 00007fc0a213fa48 [ 657.118954][T16792] [ 657.426307][ T29] audit: type=1326 audit(1776105852.824:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16778 comm="syz.1.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8da619c819 code=0x7ffc0000 [ 657.720353][ T29] audit: type=1326 audit(1776105852.824:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16778 comm="syz.1.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da619c819 code=0x7ffc0000 [ 657.818648][T16798] loop2: detected capacity change from 0 to 7 [ 657.826844][T16798] Dev loop2: unable to read RDB block 7 [ 657.832441][T16798] loop2: AHDI p1 p2 p3 [ 657.836371][ T29] audit: type=1326 audit(1776105852.824:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16778 comm="syz.1.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8da619c819 code=0x7ffc0000 [ 657.837747][T16798] loop2: partition table partially beyond EOD, truncated [ 657.868615][T16798] loop2: p1 start 1818582900 is beyond EOD, truncated [ 657.875721][T16798] loop2: p3 start 335544320 is beyond EOD, truncated [ 657.923782][ T29] audit: type=1326 audit(1776105852.824:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16778 comm="syz.1.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da619c819 code=0x7ffc0000 [ 658.042514][T16808] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2662'. [ 658.052574][ T29] audit: type=1326 audit(1776105852.824:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16778 comm="syz.1.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f8da619c819 code=0x7ffc0000 [ 658.093693][ T29] audit: type=1326 audit(1776105852.824:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16778 comm="syz.1.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da619c819 code=0x7ffc0000 [ 658.170566][ T29] audit: type=1326 audit(1776105852.934:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16778 comm="syz.1.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da619c819 code=0x7ffc0000 [ 658.287660][T16828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.296854][T16828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.465240][T16845] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2667'. [ 659.191754][T16880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2670'. [ 659.219574][T16880] 8021q: adding VLAN 0 to HW filter on device bond4 [ 659.293419][T16855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2670'. [ 659.308523][T16855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2670'. [ 659.336958][T16855] netlink: 'syz.0.2670': attribute type 4 has an invalid length. [ 659.347923][T16855] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2670'. [ 659.357521][ T5876] usb 6-1: new low-speed USB device number 86 using dummy_hcd [ 659.560720][T16897] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 659.702566][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 659.871459][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 73, setting to 8 [ 659.883754][ T5876] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 659.893825][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.967093][ T5876] usb 6-1: config 0 descriptor?? [ 659.980219][T16849] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 660.211567][ T5876] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 660.437747][T16849] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 660.534936][ T24] usb 6-1: USB disconnect, device number 86 [ 660.933119][T16927] FAULT_INJECTION: forcing a failure. [ 660.933119][T16927] name failslab, interval 1, probability 0, space 0, times 0 [ 660.948370][T16927] CPU: 1 UID: 0 PID: 16927 Comm: syz.0.2675 Tainted: G L syzkaller #0 PREEMPT(full) [ 660.948401][T16927] Tainted: [L]=SOFTLOCKUP [ 660.948409][T16927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 660.948421][T16927] Call Trace: [ 660.948429][T16927] [ 660.948438][T16927] dump_stack_lvl+0xe8/0x150 [ 660.948469][T16927] should_fail_ex+0x412/0x560 [ 660.948503][T16927] should_failslab+0xa8/0x100 [ 660.948530][T16927] __kmalloc_noprof+0xe8/0x760 [ 660.948553][T16927] ? __vb2_queue_alloc+0x29d/0x15a0 [ 660.948585][T16927] __vb2_queue_alloc+0x29d/0x15a0 [ 660.948611][T16927] ? vid_cap_queue_setup+0x1400/0x1580 [ 660.948657][T16927] vb2_core_reqbufs+0xc1f/0x1410 [ 660.948699][T16927] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 660.948727][T16927] ? __kasan_kmalloc+0x93/0xb0 [ 660.948751][T16927] ? __kmalloc_cache_noprof+0x31c/0x660 [ 660.948774][T16927] ? __kmalloc_cache_noprof+0x15b/0x660 [ 660.948800][T16927] __vb2_init_fileio+0x318/0xff0 [ 660.948822][T16927] ? __lock_acquire+0x6b5/0x2cf0 [ 660.948842][T16927] ? vb2_fop_read+0x101/0x360 [ 660.948874][T16927] __vb2_perform_fileio+0x282/0x1620 [ 660.948904][T16927] ? __asan_memset+0x22/0x50 [ 660.948926][T16927] vb2_fop_read+0x273/0x360 [ 660.948960][T16927] v4l2_read+0x19c/0x2c0 [ 660.948993][T16927] vfs_readv+0x587/0x840 [ 660.949021][T16927] ? __pfx_v4l2_read+0x10/0x10 [ 660.949052][T16927] ? __pfx_vfs_readv+0x10/0x10 [ 660.949098][T16927] ? __fget_files+0x2a/0x420 [ 660.949120][T16927] ? __fget_files+0x3a0/0x420 [ 660.949137][T16927] ? __fget_files+0x2a/0x420 [ 660.949162][T16927] __x64_sys_preadv+0x19f/0x2a0 [ 660.949189][T16927] ? __pfx___x64_sys_preadv+0x10/0x10 [ 660.949220][T16927] do_syscall_64+0x14d/0xf80 [ 660.949243][T16927] ? trace_irq_disable+0x3b/0x150 [ 660.949258][T16927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.949276][T16927] ? clear_bhb_loop+0x40/0x90 [ 660.949298][T16927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.949316][T16927] RIP: 0033:0x7f5c89d9c819 [ 660.949332][T16927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.949349][T16927] RSP: 002b:00007f5c8ad29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 660.949370][T16927] RAX: ffffffffffffffda RBX: 00007f5c8a015fa0 RCX: 00007f5c89d9c819 [ 660.949381][T16927] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 660.949393][T16927] RBP: 00007f5c8ad29090 R08: 0000000000000007 R09: 0000000000000000 [ 660.949405][T16927] R10: 0000000000010001 R11: 0000000000000246 R12: 0000000000000001 [ 660.949416][T16927] R13: 00007f5c8a016038 R14: 00007f5c8a015fa0 R15: 00007f5c8a13fa48 [ 660.949444][T16927] [ 660.952848][T16929] netlink: 'syz.3.2676': attribute type 2 has an invalid length. [ 660.996499][T16928] netlink: 'syz.3.2676': attribute type 2 has an invalid length. [ 661.026585][T16929] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2676'. [ 661.265661][T16928] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2676'. [ 661.506067][T16957] syzkaller0: entered promiscuous mode [ 661.512654][T16957] syzkaller0: entered allmulticast mode [ 661.767899][ T9] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 661.782442][T16988] loop2: detected capacity change from 0 to 7 [ 661.791193][T16988] Dev loop2: unable to read RDB block 7 [ 661.796911][T16988] loop2: AHDI p1 p2 p3 [ 661.801187][T16988] loop2: partition table partially beyond EOD, truncated [ 661.809872][T16988] loop2: p1 start 1818582900 is beyond EOD, truncated [ 661.817149][T16988] loop2: p3 start 335544320 is beyond EOD, truncated [ 661.927999][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 661.946606][ T5876] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 661.955467][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.970707][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.982531][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 661.992206][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.004319][ T9] usb 6-1: config 0 descriptor?? [ 662.097688][T17009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.119619][T17009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.145080][ T5876] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 662.174718][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.197021][ T5876] usb 1-1: Product: syz [ 662.201263][ T5876] usb 1-1: Manufacturer: syz [ 662.202803][T17028] FAULT_INJECTION: forcing a failure. [ 662.202803][T17028] name failslab, interval 1, probability 0, space 0, times 0 [ 662.211302][ T5876] usb 1-1: SerialNumber: syz [ 662.219590][T17028] CPU: 1 UID: 0 PID: 17028 Comm: syz.1.2693 Tainted: G L syzkaller #0 PREEMPT(full) [ 662.219619][T17028] Tainted: [L]=SOFTLOCKUP [ 662.219626][T17028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 662.219637][T17028] Call Trace: [ 662.219645][T17028] [ 662.219653][T17028] dump_stack_lvl+0xe8/0x150 [ 662.219684][T17028] should_fail_ex+0x412/0x560 [ 662.219716][T17028] should_failslab+0xa8/0x100 [ 662.219741][T17028] __kmalloc_noprof+0xe8/0x760 [ 662.219763][T17028] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 662.219789][T17028] tomoyo_realpath_from_path+0xe3/0x5d0 [ 662.219818][T17028] ? tomoyo_path_number_perm+0x219/0x630 [ 662.219843][T17028] tomoyo_path_number_perm+0x246/0x630 [ 662.219870][T17028] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 662.219898][T17028] ? __lock_acquire+0x6b5/0x2cf0 [ 662.219931][T17028] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 662.219974][T17028] ? __fget_files+0x2a/0x420 [ 662.219993][T17028] ? __fget_files+0x2a/0x420 [ 662.220009][T17028] ? __fget_files+0x3a0/0x420 [ 662.220032][T17028] ? __fget_files+0x2a/0x420 [ 662.220053][T17028] security_file_ioctl+0xc3/0x2a0 [ 662.220078][T17028] __se_sys_ioctl+0x47/0x170 [ 662.220102][T17028] do_syscall_64+0x14d/0xf80 [ 662.220126][T17028] ? trace_irq_disable+0x3b/0x150 [ 662.220142][T17028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.220160][T17028] ? clear_bhb_loop+0x40/0x90 [ 662.220182][T17028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.220199][T17028] RIP: 0033:0x7f8da619c819 [ 662.220217][T17028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 662.220232][T17028] RSP: 002b:00007f8da7059028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 662.220251][T17028] RAX: ffffffffffffffda RBX: 00007f8da6415fa0 RCX: 00007f8da619c819 [ 662.220264][T17028] RDX: 00002000000003c0 RSI: 00000000000089f3 RDI: 0000000000000003 [ 662.220275][T17028] RBP: 00007f8da7059090 R08: 0000000000000000 R09: 0000000000000000 [ 662.220286][T17028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 662.220297][T17028] R13: 00007f8da6416038 R14: 00007f8da6415fa0 R15: 00007f8da653fa48 [ 662.220325][T17028] [ 662.220333][T17028] ERROR: Out of memory at tomoyo_realpath_from_path. [ 662.241515][T16965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.464147][ T5876] usb 1-1: config 0 descriptor?? [ 662.474622][ T5876] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 662.483512][T16965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.517727][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 662.523792][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 662.571546][ T9] usb 6-1: USB disconnect, device number 87 [ 662.647706][T17051] __nla_validate_parse: 1 callbacks suppressed [ 662.647725][T17051] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2697'. [ 662.986290][ T5956] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 663.213181][ T5956] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 663.225420][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 663.300798][ T5956] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 663.326472][ T5808] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 663.338863][T17080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.349468][T17080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.444964][ T5956] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 663.454590][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.463791][ T5956] usb 4-1: Product: syz [ 663.468349][ T5956] usb 4-1: Manufacturer: syz [ 663.473633][ T5956] usb 4-1: SerialNumber: syz [ 663.516522][ T5956] usb 4-1: config 0 descriptor?? [ 663.523043][T17056] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 663.578348][ T5808] usb 6-1: config 0 has an invalid interface number: 101 but max is 0 [ 663.586862][ T5808] usb 6-1: config 0 has no interface number 0 [ 663.593107][ T5808] usb 6-1: config 0 interface 101 has no altsetting 0 [ 663.600370][ T5808] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 663.609590][ T5808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.624421][ T5808] usb 6-1: config 0 descriptor?? [ 663.634957][ T5808] cp210x 6-1:0.101: cp210x converter detected [ 663.741683][T17056] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 663.834558][ T5808] cp210x 6-1:0.101: failed to get vendor val 0x370b size 1: -121 [ 663.843175][ T5808] cp210x 6-1:0.101: querying part number failed [ 663.852879][ T5808] usb 6-1: cp210x converter now attached to ttyUSB0 [ 664.266272][ T8678] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 664.440729][ T8678] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 664.452212][ T8678] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.479149][ T8678] usb 2-1: Product: syz [ 664.483673][ T8678] usb 2-1: Manufacturer: syz [ 664.488951][ T8678] usb 2-1: SerialNumber: syz [ 664.504096][ T8678] usb 2-1: config 0 descriptor?? [ 664.523919][ T8678] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 020 [ 664.725953][ T24] usb 1-1: USB disconnect, device number 14 [ 664.820791][T17138] FAULT_INJECTION: forcing a failure. [ 664.820791][T17138] name failslab, interval 1, probability 0, space 0, times 0 [ 664.834395][T17138] CPU: 1 UID: 0 PID: 17138 Comm: syz.0.2704 Tainted: G L syzkaller #0 PREEMPT(full) [ 664.834416][T17138] Tainted: [L]=SOFTLOCKUP [ 664.834421][T17138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 664.834427][T17138] Call Trace: [ 664.834432][T17138] [ 664.834439][T17138] dump_stack_lvl+0xe8/0x150 [ 664.834460][T17138] should_fail_ex+0x412/0x560 [ 664.834480][T17138] should_failslab+0xa8/0x100 [ 664.834495][T17138] __kmalloc_noprof+0xe8/0x760 [ 664.834508][T17138] ? tomoyo_encode+0x28b/0x550 [ 664.834522][T17138] tomoyo_encode+0x28b/0x550 [ 664.834539][T17138] tomoyo_realpath_from_path+0x58d/0x5d0 [ 664.834561][T17138] ? tomoyo_path_number_perm+0x219/0x630 [ 664.834587][T17138] tomoyo_path_number_perm+0x246/0x630 [ 664.834612][T17138] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 664.834640][T17138] ? __lock_acquire+0x6b5/0x2cf0 [ 664.834660][T17138] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 664.834686][T17138] ? __fget_files+0x2a/0x420 [ 664.834698][T17138] ? __fget_files+0x2a/0x420 [ 664.834707][T17138] ? __fget_files+0x3a0/0x420 [ 664.834715][T17138] ? __fget_files+0x2a/0x420 [ 664.834726][T17138] security_file_ioctl+0xc3/0x2a0 [ 664.834748][T17138] __se_sys_ioctl+0x47/0x170 [ 664.834763][T17138] do_syscall_64+0x14d/0xf80 [ 664.834779][T17138] ? trace_irq_disable+0x3b/0x150 [ 664.834789][T17138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.834800][T17138] ? clear_bhb_loop+0x40/0x90 [ 664.834813][T17138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.834824][T17138] RIP: 0033:0x7f5c89d9c819 [ 664.834835][T17138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.834844][T17138] RSP: 002b:00007f5c8ad29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 664.834856][T17138] RAX: ffffffffffffffda RBX: 00007f5c8a015fa0 RCX: 00007f5c89d9c819 [ 664.834864][T17138] RDX: 00002000000003c0 RSI: 00000000000089f3 RDI: 0000000000000003 [ 664.834871][T17138] RBP: 00007f5c8ad29090 R08: 0000000000000000 R09: 0000000000000000 [ 664.834877][T17138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 664.834883][T17138] R13: 00007f5c8a016038 R14: 00007f5c8a015fa0 R15: 00007f5c8a13fa48 [ 664.834899][T17138] [ 664.834927][T17138] ERROR: Out of memory at tomoyo_realpath_from_path. [ 664.975327][T17118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.097849][T17118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.113964][T17118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.125932][T17118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.213369][T17146] hub 9-0:1.0: USB hub found [ 665.219818][T17146] hub 9-0:1.0: 1 port detected [ 665.342423][ T8678] i2c i2c-2: failure reading functionality [ 665.355631][ T8678] i2c i2c-2: connected i2c-tiny-usb device [ 665.367421][ T8678] usb 2-1: USB disconnect, device number 20 [ 665.603139][ T8678] usb 4-1: USB disconnect, device number 124 [ 665.662968][T17174] loop2: detected capacity change from 0 to 7 [ 665.670914][T17174] Dev loop2: unable to read RDB block 7 [ 665.676835][T17174] loop2: AHDI p1 p2 p3 [ 665.681185][T17174] loop2: partition table partially beyond EOD, truncated [ 665.689945][T17174] loop2: p1 start 1818582900 is beyond EOD, truncated [ 665.698373][T17174] loop2: p3 start 335544320 is beyond EOD, truncated [ 666.245452][ T5808] usb 6-1: USB disconnect, device number 88 [ 666.359277][ T5808] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 666.396266][ T24] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 666.431152][ T5808] cp210x 6-1:0.101: device disconnected [ 666.534177][T17223] bridge5: entered promiscuous mode [ 666.557270][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 666.588224][ T24] usb 2-1: config 0 has no interfaces? [ 666.595051][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 666.604611][T17223] bridge5: entered allmulticast mode [ 666.610813][ T24] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 666.626312][ T24] usb 2-1: Manufacturer: syz [ 666.662495][ T24] usb 2-1: config 0 descriptor?? [ 666.756466][ T5956] usb 4-1: new full-speed USB device number 125 using dummy_hcd [ 666.936339][ T5956] usb 4-1: device descriptor read/64, error -71 [ 667.217104][ T5956] usb 4-1: new full-speed USB device number 126 using dummy_hcd [ 667.595138][ T5956] usb 4-1: device descriptor read/64, error -71 [ 667.630301][T17250] syz.0.2714 (17250): drop_caches: 1 [ 667.816770][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 667.833765][T17250] syz.0.2714 (17250): drop_caches: 1 [ 667.846708][ T5956] usb usb4-port1: attempt power cycle [ 668.137720][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 668.226347][ T5956] usb 4-1: new full-speed USB device number 127 using dummy_hcd [ 668.272219][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 668.278590][ T5956] usb 4-1: device descriptor read/8, error -71 [ 668.300723][ T24] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 668.359603][ T24] usb 1-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 668.440909][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 225, changing to 11 [ 668.484257][ T24] usb 1-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 668.535254][ T24] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 668.557239][ T5956] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 668.577522][ T5956] usb 4-1: device descriptor read/8, error -71 [ 668.608779][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.635668][ T24] usb 1-1: Product: syz [ 668.655651][ T24] usb 1-1: Manufacturer: syz [ 668.676368][ T8672] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 668.687617][ T5956] usb usb4-port1: unable to enumerate USB device [ 668.694034][ T24] usb 1-1: SerialNumber: syz [ 668.856921][ T8672] usb 6-1: Using ep0 maxpacket: 16 [ 668.881910][ T8672] usb 6-1: config 0 has no interfaces? [ 668.894975][ T8672] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 668.904769][ T8672] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 668.917620][ T8672] usb 6-1: Manufacturer: syz [ 668.932675][ T8672] usb 6-1: config 0 descriptor?? [ 669.028200][ T5956] usb 2-1: USB disconnect, device number 21 [ 669.649570][ T8678] usb 6-1: USB disconnect, device number 89 [ 669.746517][ T5808] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 669.793311][T17346] bond3: option mode: unable to set because the bond device is up [ 669.900028][T17346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2721'. [ 669.911293][T17346] bond3: option mode: unable to set because the bond device is up [ 669.924334][T17346] netlink: 'syz.4.2721': attribute type 4 has an invalid length. [ 669.948270][T17346] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2721'. [ 669.986631][ T5808] usb 2-1: Using ep0 maxpacket: 16 [ 670.015519][ T5808] usb 2-1: config 0 has no interfaces? [ 670.269528][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 670.293801][ T24] usb 1-1: MIDIStreaming interface descriptor not found [ 670.294064][ T5808] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 670.342884][ T5808] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 670.464953][ T5808] usb 2-1: Manufacturer: syz [ 670.497871][ T5808] usb 2-1: config 0 descriptor?? [ 670.771727][ T24] usb 1-1: USB disconnect, device number 15 [ 670.911383][T17389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2728'. [ 670.964862][T17385] bridge2: entered promiscuous mode [ 670.970237][T17385] bridge2: entered allmulticast mode [ 671.303991][T17418] usb usb7: usbfs: process 17418 (syz.4.2730) did not claim interface 0 before use [ 671.346311][ T24] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 671.585067][ T24] usb 1-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 671.594338][ T24] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 671.614563][ T24] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 671.634957][ T24] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 671.654370][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.684829][T17355] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 671.899532][T17355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.918129][T17355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.929439][T17355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.976353][T17437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.976781][T17355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.005247][T17437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.018195][ T24] usb 1-1: string descriptor 0 read error: -71 [ 672.099205][ T24] usb 1-1: USB disconnect, device number 16 [ 672.128813][ T9] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 672.178956][ T8678] usb 2-1: USB disconnect, device number 22 [ 672.231690][T17469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 672.366265][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 672.428639][ T9] usb 6-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 672.449290][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.478988][ T9] usb 6-1: Product: syz [ 672.498453][ T9] usb 6-1: Manufacturer: syz [ 672.503113][ T9] usb 6-1: SerialNumber: syz [ 672.528549][ T9] usb 6-1: config 0 descriptor?? [ 672.560847][T17480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2737'. [ 672.701579][T17477] netlink: 'syz.1.2736': attribute type 16 has an invalid length. [ 672.709678][T17477] netlink: 'syz.1.2736': attribute type 17 has an invalid length. [ 672.720457][ T5924] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 672.911668][ T5924] usb 4-1: Using ep0 maxpacket: 8 [ 672.951111][ T5924] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 672.989068][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.052100][ T5924] usb 4-1: Product: syz [ 673.061258][ T5924] usb 4-1: Manufacturer: syz [ 673.097359][ T5924] usb 4-1: SerialNumber: syz [ 673.141686][T17431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.158383][T17431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.250502][ T9] usb-storage 6-1:0.0: USB Mass Storage device detected [ 673.278989][ T5924] usb 4-1: config 0 descriptor?? [ 673.330910][ T5924] gspca_main: 2770:9120 too many config [ 673.360797][ T9] usb-storage 6-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 673.421518][ T9] usb-storage 6-1:0.0: This device (054c,002e,0500 S 04 P 5c) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 673.421518][ T9] Please send a copy of this message to and [ 673.495141][T17516] fuse: Bad value for 'fd' [ 673.614917][T17469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2734'. [ 673.798933][T17469] bridge0: entered promiscuous mode [ 673.820268][T17469] bridge0: left promiscuous mode [ 673.947292][ T9] usb 6-1: USB disconnect, device number 90 [ 674.276277][ T9] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 674.434915][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 674.445464][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 674.456026][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 674.467417][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 674.478044][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 674.501527][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 674.515013][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.773114][ T9] usb 6-1: GET_CAPABILITIES returned 0 [ 674.779214][ T9] usbtmc 6-1:16.0: can't read capabilities [ 674.864007][T17549] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 674.871511][T17549] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 674.878161][T17549] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 674.884481][T17549] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 674.892651][T17549] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 674.906625][T17556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.934098][T17556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.967043][T17556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.989190][ T24] usb 6-1: USB disconnect, device number 91 [ 675.007731][T17556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.040120][T17587] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2746'. [ 675.136742][ T5956] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 675.165515][T17606] bridge_slave_0: invalid flags given to default FDB implementation [ 675.298516][ T5808] usb 4-1: USB disconnect, device number 3 [ 675.416299][ T9] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 675.578113][ T9] usb 6-1: config 0 has no interfaces? [ 675.591663][ T9] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 675.612907][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.630828][ T9] usb 6-1: Product: syz [ 675.640471][ T9] usb 6-1: Manufacturer: syz [ 675.650447][ T9] usb 6-1: SerialNumber: syz [ 675.660124][ T9] usb 6-1: config 0 descriptor?? [ 675.967286][T17595] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2748'. [ 676.025682][T17662] lo: Caught tx_queue_len zero misconfig [ 676.049035][ T9] usb 6-1: USB disconnect, device number 92 [ 676.129480][T17672] netlink: 'syz.4.2757': attribute type 10 has an invalid length. [ 676.140842][T17672] batman_adv: batadv0: Adding interface: netdevsim0 [ 676.151098][T17672] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 676.246262][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 676.556376][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 676.668080][T17692] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 676.707971][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 676.707987][ T29] audit: type=1326 audit(1776105872.794:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17691 comm="syz.3.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc225f9c819 code=0x7ffc0000 [ 676.739214][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 676.756772][ T9] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 676.767978][ T9] usb 2-1: config 0 has no interface number 0 [ 676.774136][ T9] usb 2-1: config 0 interface 184 has no altsetting 0 [ 676.781124][ T29] audit: type=1326 audit(1776105872.794:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17691 comm="syz.3.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc225f9c819 code=0x7ffc0000 [ 676.805259][ T29] audit: type=1326 audit(1776105872.824:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17691 comm="syz.3.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc225f9c819 code=0x7ffc0000 [ 676.836948][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 676.846496][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.854638][ T9] usb 2-1: Product: syz [ 676.871419][ T9] usb 2-1: Manufacturer: syz [ 676.876407][ T9] usb 2-1: SerialNumber: syz [ 676.892329][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 676.898386][ T9] usb 2-1: config 0 descriptor?? [ 676.900751][T11247] Bluetooth: hci4: command 0x0c1a tx timeout [ 676.904034][T15081] Bluetooth: hci1: command 0x0c1a tx timeout [ 676.917244][ T29] audit: type=1326 audit(1776105872.824:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17691 comm="syz.3.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc225f9c819 code=0x7ffc0000 [ 676.966314][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 676.986958][T17698] netlink: 1744 bytes leftover after parsing attributes in process `syz.5.2764'. [ 677.000573][ T29] audit: type=1326 audit(1776105872.824:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17691 comm="syz.3.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc225f9c819 code=0x7ffc0000 [ 677.074862][ T29] audit: type=1326 audit(1776105872.914:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17691 comm="syz.3.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc225f9c4ab code=0x7ffc0000 [ 677.110662][ T29] audit: type=1326 audit(1776105872.914:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17691 comm="syz.3.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc225f9c4ab code=0x7ffc0000 [ 677.138764][ T29] audit: type=1326 audit(1776105872.914:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17691 comm="syz.3.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc225f9c4ab code=0x7ffc0000 [ 677.162191][ T29] audit: type=1326 audit(1776105872.914:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17691 comm="syz.3.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc225f9c4ab code=0x7ffc0000 [ 677.186931][ T29] audit: type=1326 audit(1776105872.914:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17691 comm="syz.3.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc225f9c4ab code=0x7ffc0000 [ 677.457930][T17716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2767'. [ 677.500355][T17716] bond2: entered allmulticast mode [ 677.506084][T17716] 8021q: adding VLAN 0 to HW filter on device bond2 [ 677.538342][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 677.549572][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 677.578738][T17716] fuse: Unknown parameter 'obj_user' [ 677.640869][T17753] syzkaller0: entered promiscuous mode [ 677.653146][T17753] syzkaller0: entered allmulticast mode [ 677.662803][T17753] tc action pedit offset must be on 32 bit boundaries [ 677.670135][T17753] tc action pedit offset must be on 32 bit boundaries [ 677.676987][T17753] tc action pedit offset must be on 32 bit boundaries [ 677.683777][T17753] tc action pedit offset must be on 32 bit boundaries [ 677.690586][T17753] tc action pedit offset must be on 32 bit boundaries [ 677.697406][T17753] tc action pedit offset must be on 32 bit boundaries [ 677.704239][T17753] tc action pedit offset must be on 32 bit boundaries [ 677.711033][T17753] tc action pedit offset must be on 32 bit boundaries [ 677.717818][T17753] tc action pedit offset must be on 32 bit boundaries [ 677.724565][T17753] tc action pedit offset must be on 32 bit boundaries [ 677.731366][T17753] TC_ACT_REPEAT abuse ? [ 677.772829][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 677.784188][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 677.795156][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 677.805539][ T9] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 677.976530][ T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 677.995528][T17766] loop2: detected capacity change from 0 to 7 [ 678.004555][T17766] Dev loop2: unable to read RDB block 7 [ 678.012429][T17766] loop2: AHDI p1 p2 p3 [ 678.016787][T17766] loop2: partition table partially beyond EOD, truncated [ 678.024300][T17766] loop2: p1 start 1818582900 is beyond EOD, truncated [ 678.031585][T17766] loop2: p3 start 335544320 is beyond EOD, truncated [ 678.138113][ T24] usb 1-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 678.151438][ T24] usb 1-1: config 1 interface 0 has no altsetting 0 [ 678.161610][ T24] usb 1-1: string descriptor 0 read error: -22 [ 678.168169][ T24] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 678.177362][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.599611][ T24] hid_parser_main: 443 callbacks suppressed [ 678.599629][ T24] lenovo 0003:17EF:6047.0034: unknown main item tag 0x0 [ 678.630423][ T24] lenovo 0003:17EF:6047.0034: unknown main item tag 0x0 [ 678.643398][ T24] lenovo 0003:17EF:6047.0034: unknown main item tag 0x0 [ 678.658691][ T24] lenovo 0003:17EF:6047.0034: unknown main item tag 0x0 [ 678.670478][ T24] lenovo 0003:17EF:6047.0034: unknown main item tag 0x0 [ 678.754888][T17782] bridge3: entered promiscuous mode [ 678.760223][T17782] bridge3: entered allmulticast mode [ 678.923938][ T24] lenovo 0003:17EF:6047.0034: unknown main item tag 0x0 [ 678.952785][ T24] lenovo 0003:17EF:6047.0034: unknown main item tag 0x0 [ 678.974536][ T24] lenovo 0003:17EF:6047.0034: unknown main item tag 0x0 [ 678.985560][ T24] lenovo 0003:17EF:6047.0034: unknown main item tag 0x0 [ 678.992662][ T24] lenovo 0003:17EF:6047.0034: unknown main item tag 0x0 [ 679.077504][ T24] lenovo 0003:17EF:6047.0034: hidraw0: USB HID v0.01 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 679.197137][ T24] lenovo 0003:17EF:6047.0034: Failed to switch F7/9/11 mode: -71 [ 679.207268][ T24] lenovo 0003:17EF:6047.0034: Failed to switch middle button: -71 [ 679.222372][ T24] lenovo 0003:17EF:6047.0034: Fn-lock setting failed: -71 [ 679.235281][ T24] lenovo 0003:17EF:6047.0034: Sensitivity setting failed: -71 [ 679.384039][ T9] usb 2-1: USB disconnect, device number 23 [ 679.416619][ T24] usb 1-1: USB disconnect, device number 18 [ 679.717243][T17813] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2774'. [ 679.942933][T17842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2780'. [ 679.996310][ T8672] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 680.006748][ T30] INFO: task kworker/0:11:8671 blocked for more than 143 seconds. [ 680.014600][ T30] Tainted: G L syzkaller #0 [ 680.025294][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 680.039782][ T30] task:kworker/0:11 state:D stack:20840 pid:8671 tgid:8671 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 680.060189][ T30] Workqueue: usb_hub_wq hub_event [ 680.065391][ T30] Call Trace: [ 680.069253][ T30] [ 680.072266][ T30] __schedule+0x15dd/0x52d0 [ 680.077394][ T30] ? usb_new_device+0xa08/0x16f0 [ 680.082435][ T30] ? hub_event+0x2a1c/0x4f30 [ 680.087588][ T30] ? process_scheduled_works+0xb6e/0x18c0 [ 680.093367][ T30] ? worker_thread+0xa53/0xfc0 [ 680.098798][ T30] ? __pfx___schedule+0x10/0x10 [ 680.103692][ T30] ? schedule+0x90/0x360 [ 680.108292][ T30] schedule+0x164/0x360 [ 680.112559][ T30] schedule_timeout+0xc3/0x2c0 [ 680.117426][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 680.122673][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 680.130411][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 680.135524][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 680.140840][ T30] ? wait_for_completion+0x274/0x5e0 [ 680.146325][ T8672] usb 6-1: Using ep0 maxpacket: 32 [ 680.146421][ T30] wait_for_completion+0x2cc/0x5e0 [ 680.153765][ T8672] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 680.156907][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 680.165449][ T8672] usb 6-1: config 0 has no interface number 0 [ 680.170671][ T30] i2c_del_adapter+0x5c0/0x790 [ 680.170713][ T30] ? __pfx_i2c_del_adapter+0x10/0x10 [ 680.170736][ T30] ? kfree+0x4d/0x630 [ 680.170764][ T30] dvb_usb_i2c_exit+0x64/0xb0 [ 680.170792][ T30] dvb_usb_device_exit+0x1cb/0x360 [ 680.170818][ T30] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 680.170854][ T30] cxusb_probe+0x60f/0x710 [ 680.211838][ T30] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 680.214239][ T8672] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 680.218194][ T30] ? __pfx_cxusb_probe+0x10/0x10 [ 680.232219][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 680.238752][ T8672] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.248566][ T8672] usb 6-1: Product: syz [ 680.252950][ T30] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 680.252991][ T8672] usb 6-1: Manufacturer: syz [ 680.258866][ T30] usb_probe_interface+0x668/0xc90 [ 680.268931][ T8672] usb 6-1: SerialNumber: syz [ 680.268997][ T30] ? __pfx_usb_probe_interface+0x10/0x10 [ 680.279609][ T30] really_probe+0x267/0xaf0 [ 680.284511][ T30] __driver_probe_device+0x18c/0x320 [ 680.290342][ T30] driver_probe_device+0x4f/0x240 [ 680.292584][ T8672] usb 6-1: config 0 descriptor?? [ 680.296099][ T30] __device_attach_driver+0x279/0x430 [ 680.307116][ T30] bus_for_each_drv+0x258/0x2f0 [ 680.313180][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 680.314236][ T8672] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 680.319334][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 680.328601][ T8672] usb 6-1: selecting invalid altsetting 1 [ 680.339788][ T8672] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 680.340248][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 680.352789][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 680.361254][ T30] __device_attach+0x2c5/0x450 [ 680.366747][ T30] ? __pfx___device_attach+0x10/0x10 [ 680.372267][ T30] ? _raw_spin_unlock+0x28/0x50 [ 680.372827][ T8672] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 680.378099][ T30] device_initial_probe+0xa1/0xd0 [ 680.392890][ T30] bus_probe_device+0x12a/0x220 [ 680.398318][ T30] ? device_add+0x726/0xb70 [ 680.398802][ T8672] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 680.403008][ T30] device_add+0x7b6/0xb70 [ 680.416038][ T30] usb_set_configuration+0x1a87/0x2110 [ 680.416059][ T8672] usb 6-1: media controller created [ 680.427590][ T30] usb_generic_driver_probe+0x8d/0x150 [ 680.433175][ T30] usb_probe_device+0x1c4/0x3b0 [ 680.438616][ T30] ? __pfx_usb_probe_device+0x10/0x10 [ 680.439372][ T8672] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 680.444096][ T30] really_probe+0x267/0xaf0 [ 680.490490][ T30] __driver_probe_device+0x18c/0x320 [ 680.497875][ T30] driver_probe_device+0x4f/0x240 [ 680.502970][ T30] __device_attach_driver+0x279/0x430 [ 680.508528][ T30] bus_for_each_drv+0x258/0x2f0 [ 680.515698][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 680.525983][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 680.526287][ T8672] usb 6-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)... [ 680.531594][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 680.545655][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 680.548170][ T8672] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 680.552064][ T30] __device_attach+0x2c5/0x450 [ 680.566935][ T30] ? __pfx___device_attach+0x10/0x10 [ 680.572553][ T30] ? _raw_spin_unlock+0x28/0x50 [ 680.580505][ T30] device_initial_probe+0xa1/0xd0 [ 680.585586][ T30] bus_probe_device+0x12a/0x220 [ 680.591062][ T30] ? device_add+0x726/0xb70 [ 680.595616][ T30] device_add+0x7b6/0xb70 [ 680.600780][ T30] usb_new_device+0xa08/0x16f0 [ 680.605596][ T30] ? __pfx_usb_new_device+0x10/0x10 [ 680.611388][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 680.616928][ T8672] DVB: Unable to find symbol mxl5005s_attach() [ 680.617490][ T30] hub_event+0x2a1c/0x4f30 [ 680.652266][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 680.657879][ T30] ? __pfx_hub_event+0x10/0x10 [ 680.662699][ T30] ? process_scheduled_works+0xa8d/0x18c0 [ 680.668922][ T30] ? process_scheduled_works+0xa8d/0x18c0 [ 680.674662][ T30] process_scheduled_works+0xb6e/0x18c0 [ 680.680360][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 680.688398][ T30] ? assign_work+0x3d5/0x5e0 [ 680.693015][ T30] worker_thread+0xa53/0xfc0 [ 680.698124][ T30] kthread+0x388/0x470 [ 680.702231][ T30] ? __pfx_worker_thread+0x10/0x10 [ 680.707492][ T30] ? __pfx_kthread+0x10/0x10 [ 680.712251][ T30] ret_from_fork+0x51e/0xb90 [ 680.717012][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 680.722281][ T30] ? __switch_to+0xc7d/0x1450 [ 680.729890][ T30] ? __pfx_kthread+0x10/0x10 [ 680.734551][ T30] ret_from_fork_asm+0x1a/0x30 [ 680.739482][ T30] [ 680.742806][ T30] [ 680.742806][ T30] Showing all locks held in the system: [ 680.750959][ T30] 1 lock held by khungtaskd/30: [ 680.751937][ T8672] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 680.755825][ T30] #0: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 680.775103][ T30] 1 lock held by udevd/5193: [ 680.779977][ T30] 2 locks held by getty/5579: [ 680.784862][ T30] #0: ffff888036d520a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 680.795167][ T30] #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 680.808169][ T30] 2 locks held by kworker/u8:12/7736: [ 680.813650][ T30] #0: ffff88813fe54148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 680.826478][ T30] #1: ffffffff9a2c6508 (&____s->seqcount#2){----}-{0:0}, at: ktime_get_real_ts64+0xa9/0x3c0 [ 680.837511][ T30] 4 locks held by udevd/8212: [ 680.838101][ T8672] usb 6-1: USB disconnect, device number 93 [ 680.842775][ T30] #0: ffff888076dc8d58 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 680.857909][ T30] #1: ffff888059ac9488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 680.872740][ T30] #2: ffff88806ccc51e8 (kn->active#26){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 680.882946][ T30] #3: ffff888059a931e0 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 680.892628][ T30] 5 locks held by kworker/0:11/8671: [ 680.898070][ T30] #0: ffff8880202ead48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 680.909883][ T30] #1: ffffc90004a2fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 680.922142][ T30] #2: ffff88802a0691e0 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 680.931355][ T30] #3: ffff888059a931e0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 680.941061][ T30] #4: ffff88802cc921a8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 680.950428][ T30] 3 locks held by kworker/1:9/8672: [ 680.955741][ T30] #0: ffff8880202ead48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 680.967889][ T30] #1: ffffc90003417c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 680.980149][ T30] #2: ffff88802a0991e0 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 680.989355][ T30] 2 locks held by syz.0.2779/17835: [ 680.994640][ T30] #0: ffff888077fd2488 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 681.005454][ T30] #1: ffffffff8e7648f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 681.016573][ T30] [ 681.018961][ T30] ============================================= [ 681.018961][ T30] [ 681.040743][ T30] NMI backtrace for cpu 0 [ 681.040767][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 681.040792][ T30] Tainted: [L]=SOFTLOCKUP [ 681.040798][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 681.040809][ T30] Call Trace: [ 681.040816][ T30] [ 681.040823][ T30] dump_stack_lvl+0xe8/0x150 [ 681.040854][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 681.040875][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 681.040900][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 681.040922][ T30] sys_info+0x135/0x170 [ 681.040938][ T30] watchdog+0xfd9/0x1030 [ 681.040960][ T30] ? watchdog+0x21a/0x1030 [ 681.040983][ T30] kthread+0x388/0x470 [ 681.041002][ T30] ? __pfx_watchdog+0x10/0x10 [ 681.041018][ T30] ? __pfx_kthread+0x10/0x10 [ 681.041037][ T30] ret_from_fork+0x51e/0xb90 [ 681.041061][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 681.041084][ T30] ? __switch_to+0xc7d/0x1450 [ 681.041107][ T30] ? __pfx_kthread+0x10/0x10 [ 681.041123][ T30] ret_from_fork_asm+0x1a/0x30 [ 681.041155][ T30] [ 681.041161][ T30] Sending NMI from CPU 0 to CPUs 1: [ 681.158345][ C1] NMI backtrace for cpu 1 [ 681.158364][ C1] CPU: 1 UID: 101 PID: 5487 Comm: dhcpcd Tainted: G L syzkaller #0 PREEMPT(full) [ 681.158388][ C1] Tainted: [L]=SOFTLOCKUP [ 681.158395][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 681.158406][ C1] RIP: 0010:lockdep_hardirqs_off+0x71/0xd0 [ 681.158439][ C1] Code: db 6c 07 48 c7 c7 a9 be ef 8d e8 8a 19 00 00 65 c7 05 f7 1d 6d 07 00 00 00 00 49 89 9e 00 0b 00 00 41 8b 86 f0 0a 00 00 ff c0 <41> 89 86 f0 0a 00 00 41 89 86 0c 0b 00 00 eb 17 48 c7 c7 54 04 f6 [ 681.158455][ C1] RSP: 0018:ffffc9000213f380 EFLAGS: 00000006 [ 681.158470][ C1] RAX: 000000000001dce4 RBX: ffffffff8bb27e5a RCX: 0000000000000046 [ 681.158482][ C1] RDX: ffff88802a95a200 RSI: ffffffff8defbea9 RDI: ffffffff8c27d580 [ 681.158495][ C1] RBP: ffffc9000213f450 R08: 0000000000000001 R09: ffffffff8230383c [ 681.158508][ C1] R10: dffffc0000000000 R11: fffffbfff2023b77 R12: ffff88813fea5240 [ 681.158520][ C1] R13: ffff88813fea63c0 R14: ffff888030de9e80 R15: 0000000000000000 [ 681.158532][ C1] FS: 00007f89d03c7780(0000) GS:ffff888125554000(0000) knlGS:0000000000000000 [ 681.158548][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 681.158560][ C1] CR2: 000000110c409d70 CR3: 0000000034dc2000 CR4: 00000000003526f0 [ 681.158575][ C1] Call Trace: [ 681.158580][ C1] [ 681.158587][ C1] ? _raw_spin_lock_irqsave+0x1a/0x60 [ 681.158608][ C1] trace_hardirqs_off+0x12/0x40 [ 681.158625][ C1] _raw_spin_lock_irqsave+0x1a/0x60 [ 681.158645][ C1] __slab_free+0xb6/0x2b0 [ 681.158668][ C1] ? qlist_free_all+0x8c/0x100 [ 681.158687][ C1] qlist_free_all+0x97/0x100 [ 681.158706][ C1] kasan_quarantine_reduce+0x148/0x160 [ 681.158725][ C1] __kasan_slab_alloc+0x22/0x80 [ 681.158746][ C1] kmem_cache_alloc_node_noprof+0x384/0x690 [ 681.158765][ C1] ? __alloc_skb+0x1d0/0x7d0 [ 681.158783][ C1] ? kmem_cache_alloc_node_noprof+0x23e/0x690 [ 681.158803][ C1] __alloc_skb+0x1d0/0x7d0 [ 681.158830][ C1] alloc_skb_with_frags+0xca/0x890 [ 681.158855][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 681.158881][ C1] sock_alloc_send_pskb+0x878/0x990 [ 681.158912][ C1] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 681.158935][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 681.158953][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 681.158974][ C1] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 681.158997][ C1] unix_dgram_sendmsg+0x460/0x18e0 [ 681.159020][ C1] ? stack_trace_save+0xa9/0x100 [ 681.159041][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 681.159057][ C1] ? kasan_save_free_info+0x46/0x50 [ 681.159086][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 681.159103][ C1] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 681.159126][ C1] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 681.159146][ C1] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 681.159164][ C1] sock_write_iter+0x49b/0x4f0 [ 681.159189][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 681.159222][ C1] do_iter_readv_writev+0x619/0x8c0 [ 681.159244][ C1] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 681.159266][ C1] ? bpf_lsm_file_permission+0x9/0x20 [ 681.159287][ C1] ? security_file_permission+0x75/0x260 [ 681.159309][ C1] ? rw_verify_area+0x255/0x4d0 [ 681.159328][ C1] vfs_writev+0x33c/0x990 [ 681.159355][ C1] ? __pfx_vfs_writev+0x10/0x10 [ 681.159392][ C1] do_writev+0x154/0x2e0 [ 681.159415][ C1] ? __pfx_do_writev+0x10/0x10 [ 681.159440][ C1] ? __secure_computing+0xe1/0x2a0 [ 681.159460][ C1] do_syscall_64+0x14d/0xf80 [ 681.159482][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.159500][ C1] ? clear_bhb_loop+0x40/0x90 [ 681.159519][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.159536][ C1] RIP: 0033:0x7f89d0451407 [ 681.159550][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 681.159565][ C1] RSP: 002b:00007ffdc7e65bf0 EFLAGS: 00000202 ORIG_RAX: 0000000000000014 [ 681.159595][ C1] RAX: ffffffffffffffda RBX: 00007f89d03c7780 RCX: 00007f89d0451407 [ 681.159608][ C1] RDX: 0000000000000005 RSI: 00007ffdc7e65c50 RDI: 000000000000000a [ 681.159619][ C1] RBP: 00005642b086bb20 R08: 0000000000000000 R09: 0000000000000000 [ 681.159630][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00005642b086bb20 [ 681.159642][ C1] R13: 000000000000012c R14: 00000000ffffffff R15: 0000000000000000 [ 681.159660][ C1] [ 681.594674][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 681.601521][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 681.612224][ T30] Tainted: [L]=SOFTLOCKUP [ 681.616541][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 681.626617][ T30] Call Trace: [ 681.629893][ T30] [ 681.632837][ T30] vpanic+0x56c/0xa60 [ 681.636834][ T30] ? __pfx___schedule+0x10/0x10 [ 681.641674][ T30] ? __pfx_vpanic+0x10/0x10 [ 681.646175][ T30] ? __pfx_console_unlock+0x10/0x10 [ 681.651422][ T30] panic+0xc5/0xd0 [ 681.655172][ T30] ? __pfx_panic+0x10/0x10 [ 681.659609][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 681.664996][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 681.671157][ T30] watchdog+0x1023/0x1030 [ 681.675577][ T30] ? watchdog+0x21a/0x1030 [ 681.680013][ T30] kthread+0x388/0x470 [ 681.684104][ T30] ? __pfx_watchdog+0x10/0x10 [ 681.688782][ T30] ? __pfx_kthread+0x10/0x10 [ 681.693375][ T30] ret_from_fork+0x51e/0xb90 [ 681.698009][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 681.703128][ T30] ? __switch_to+0xc7d/0x1450 [ 681.707810][ T30] ? __pfx_kthread+0x10/0x10 [ 681.712402][ T30] ret_from_fork_asm+0x1a/0x30 [ 681.717219][ T30] [ 681.720567][ T30] Kernel Offset: disabled [ 681.724876][ T30] Rebooting in 86400 seconds..