last executing test programs: 11m58.447094068s ago: executing program 1 (id=66): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x6) prctl$PR_SET_SECUREBITS(0x1c, 0x4) acct(&(0x7f0000000040)='./file0\x00') fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @remote}, {0x1}, 0xc, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x891b, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(0x0, 0x200, 0xd9) 11m55.433415326s ago: executing program 1 (id=70): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x400, &(0x7f0000000280), 0x2, 0x786, &(0x7f0000000f80)="$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") r0 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$XFS_IOC_AG_GEOMETRY(r0, 0xc080583d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) fanotify_init(0x3f, 0x0) pipe(&(0x7f0000000380)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000000380)="170000000200010000ffbe8c5ee17688a20033000301fcff000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf93150334769e106e7db76849d3c98bf79ac2dfc060115003901000000000000ea000000000000000062068f", 0x82) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x10}}, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x8da6) 11m53.593261927s ago: executing program 1 (id=75): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x400, &(0x7f0000000280), 0x2, 0x786, &(0x7f0000000f80)="$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") r0 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$XFS_IOC_AG_GEOMETRY(r0, 0xc080583d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) fanotify_init(0x3f, 0x0) pipe(&(0x7f0000000380)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) 11m50.04081354s ago: executing program 1 (id=81): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndseq(0xffffff9c, 0x0, 0x101100) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r2 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='tmpfs\x00', 0xa14dc7, 0x0) read$FUSE(r2, &(0x7f00000047c0)={0x2020}, 0x2020) 11m46.218490411s ago: executing program 1 (id=90): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f0000000000)={0xffb, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r3, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r3, 0x6f29) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x600202, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f00000003c0)={0x77ef, {{0x2, 0x4e21, @broadcast}}, 0x1, 0x3, [{{0x2, 0x4e20, @private=0xa010100}}, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x9, @multicast1}}]}, 0x210) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x48) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(0xffffffffffffffff, 0x80184151, &(0x7f0000000340)={0x0, &(0x7f0000000280)="8dfc4011231994e23a02b17b84f3a0652e1bd74eb9473b4da41af5225e45083edfaf7518de9434", 0x27}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 11m44.476636479s ago: executing program 1 (id=91): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndseq(0xffffff9c, 0x0, 0x101100) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r2 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='tmpfs\x00', 0xa14dc7, 0x0) read$FUSE(r2, &(0x7f00000047c0)={0x2020}, 0x2020) 11m27.642236662s ago: executing program 32 (id=91): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndseq(0xffffff9c, 0x0, 0x101100) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r2 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='tmpfs\x00', 0xa14dc7, 0x0) read$FUSE(r2, &(0x7f00000047c0)={0x2020}, 0x2020) 9m5.207041767s ago: executing program 4 (id=383): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x2900, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xff, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r4, &(0x7f0000000140), 0x12) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) 9m3.42353764s ago: executing program 4 (id=385): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x40480c0) sendmmsg(r0, &(0x7f0000009200), 0x0, 0x40) 9m2.061134595s ago: executing program 4 (id=388): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x5, &(0x7f0000000140)=[{0x800, 0x4, 0xff, 0x9}, {0x7, 0x6, 0x6, 0x5}, {0x7, 0xb, 0x40, 0x2}, {0xfffb, 0x2, 0xff, 0x4}, {0x4, 0xde, 0x0, 0x3ff}]}) close_range(r0, 0xffffffffffffffff, 0x0) lsm_set_self_attr(0x69, &(0x7f0000000e40)=ANY=[@ANYBLOB="6800000000006d57a8fe60f628885b0d11000008000000000000002000000000"], 0x20, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1802000080000000000000000000000085000000"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x13) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'bridge0\x00', 0x1}, 0x18) gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 8m56.570882037s ago: executing program 4 (id=396): socket$alg(0x26, 0x5, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a00), 0x0, 0xa0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3ae, 0x4, 0x69b0, 0x9, 0xffffffff, 0xbb31}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56441, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xfff, 0x7, 0x7, 0x5, 0xfffffdff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0xfffd, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2400c045}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8m51.783384959s ago: executing program 4 (id=407): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) 8m50.147854494s ago: executing program 4 (id=412): socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000280)='binder\x00', 0x0) fsmount(r3, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0xfffffffd, @local}, {0xa, 0x4e22, 0x800, @empty, 0x3d95}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x60) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="02000000010003000000000004000100000000002000"], 0x1c, 0x2) 8m34.716122675s ago: executing program 33 (id=412): socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000280)='binder\x00', 0x0) fsmount(r3, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0xfffffffd, @local}, {0xa, 0x4e22, 0x800, @empty, 0x3d95}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x60) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="02000000010003000000000004000100000000002000"], 0x1c, 0x2) 8m12.920116421s ago: executing program 2 (id=455): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x80000004, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x20000400) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0x8000, 0x10000}, 0x28) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) r2 = syz_usb_connect$hid(0x1, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0x8, 0x81, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f00000004c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x1000002, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0xfffff788}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x2, {0x0, 0xffff}}}}}}}}, 0x0) syz_usb_control_io(r2, &(0x7f0000000040)={0x18, &(0x7f00000005c0)={0x20, 0x2, 0x28, {0x28, 0x23, "83efb930f0187ff0478fa22a61a54607950000e442359c479c37f525cde38bef0d15f9366b48"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fddbdf256c00000008000300", @ANYRES32=r5], 0x5c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 8m3.765442798s ago: executing program 2 (id=459): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xa0}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, 0x0, 0x1, 0x0, 0x0) 8m2.40164739s ago: executing program 2 (id=463): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndseq(0xffffff9c, 0x0, 0x101100) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r2 = syz_open_procfs(0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='tmpfs\x00', 0xa14dc7, 0x0) read$FUSE(r2, &(0x7f00000047c0)={0x2020}, 0x2020) 8m0.548059244s ago: executing program 2 (id=465): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndseq(0xffffff9c, 0x0, 0x101100) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r2 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0xa14dc7, 0x0) read$FUSE(r2, &(0x7f00000047c0)={0x2020}, 0x2020) 7m58.856009715s ago: executing program 2 (id=466): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x3}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008814) connect$unix(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x2c}) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x460400, 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f000000c140)={&(0x7f000000bf80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x100000001}, [{0x8000000000000000, 0x4}, {0x9, 0x8000000000000001}, {0xb7, 0x6}, {0xffffffff, 0x3}, {0x2f4, 0x40}, {0x1000, 0x98e}, {0x1, 0x6}, {0x2, 0x2}, {0x7}, {0xc, 0xffffffff80000000}, {0x800000000000, 0x1c}, {0xffffffffffffffff, 0x4}, {0x9, 0x9}, {0xe8b0, 0x3aac00000000000}, {0x69b7, 0x5f}, {0x0, 0x5}, {0xa, 0x2}, {0x7fff}, {0x7, 0x4}, {0x7ff, 0xffffffffffffffff}, {0x1ff, 0x100000001}, {0xa2e, 0xe}, {0x30fe, 0x1}, {0x8, 0x4}, {0xff, 0x2}, {0xfb9, 0x1}, {0x6, 0x8}, {0x1, 0xfffffffffffffffc}, {0x7, 0x5}, {0x2, 0xffffffffffff7fff}, {0x9, 0x8}, {0x59f, 0x5ff5}, {0x7fff, 0x7}, {0x8, 0x3}, {0xc1d, 0x4077d962}, {0x139b, 0x1089}, {0x5, 0x81}, {0x0, 0x3}, {0x8, 0xb}, {0x5, 0x1}, {0x4a82, 0xb}, {0x200, 0x405}, {0x1c508f61, 0x1a5b5e17}, {0xc, 0x7fffffff}, {0xff, 0x7d71}, {0x8000000000000001}, {0x10, 0x6}, {0x7, 0x8}, {0x5, 0x200}, {0xfffffffffffffffb, 0x5}, {0x7f, 0x6}, {0x80000001, 0x1}, {0x70, 0x9}, {0x1, 0x1}, {0x3, 0x2}, {0x81, 0x5}, {0x5, 0x9}, {0x8, 0x101}, {0x3, 0x7}, {0x9, 0x3}, {0x180, 0x59f}, {0xffff, 0x2}, {0x5}, {0x7, 0x80000000}, {0x10, 0x7fffffff}, {0x9, 0x9}, {0x1, 0x6}, {0x76, 0xfffffffffffffffc}, {0x40, 0x6}, {0x100000000, 0x200}, {0x4, 0x8}, {0x0, 0xf}, {0xd9, 0x63da50e0}, {0x2, 0xa987}, {0xf, 0xf800000000000000}, {0x8, 0xf405}, {0x2, 0x4}, {0x0, 0x80000001}, {0x2, 0x9}, {0x0, 0x2}, {0x5, 0x4}, {0x5, 0x7}, {0x2, 0x80000000}, {0x400000000000, 0xdb6}, {0x34c0}, {0x94, 0xfffffffffffffffa}, {0x0, 0xead5}, {0x7ff, 0x8001}, {0x5, 0x2}, {0xffffffffffff7fff}, {0xa, 0x1}, {0x0, 0x99}, {0xb9, 0x8001}, {0x7, 0x6de}, {0x2}, {0xfffffffffffffff7, 0x99b1}, {0x6, 0x4}, {0xda, 0x5}, {0x2, 0x8}, {0xd8, 0x4}, {0x8, 0xb6ea}, {0x4, 0xc27}, {0x2, 0x8000000000000000}, {0x3, 0x1}, {0x4, 0x6}, {0x2125, 0xffffffffffffff14}, {0x0, 0x7}, {0x0, 0x80}, {0x2, 0xfffffc0000000000}, {0x4e9a, 0x7}, {0x10001, 0x8}, {0x7fff, 0x200}, {0x5, 0x3}, {0x7, 0x3}, {0x100, 0x3}, {0x8, 0x5}, {0x3, 0x8000000000000000}, {0x4, 0x200}, {0x5, 0x5}, {0x2, 0x6}, {0x9, 0x9}, {0xa, 0x5}, {0x7, 0xd97}, {0xff, 0x5173}, {0x2}, {0x1, 0x81}, {0x6, 0x1ff}, {0x0, 0x6}, {0x9, 0x140000000000}, {0x26, 0x7}, {0x4, 0x6}, {0x0, 0xa}, {0x3}, {0xb, 0x5}, {0x9, 0x7}, {0x7, 0x1}, {0x1, 0x1}, {0x1e12, 0x5}, {0x5, 0x4}, {0x3, 0x6}, {0x5, 0x3}, {0x4003, 0xffffffff}, {0x1, 0x5}, {0x100000000, 0x3}, {0x90a6, 0x9}, {0x9, 0x107}, {0xf, 0x80000000}, {0x9, 0x101}, {0x9, 0x7fff}, {0x0, 0x1}, {0x6, 0x40}, {0x2, 0x10001}, {0x7, 0x6}, {0x200}, {0x3, 0xffff}, {0x5, 0x793}, {0x6, 0x100000000}, {0x3, 0xda}, {0xb0, 0xffffffff}, {0x6, 0x2}, {0x6, 0x2}, {0x4, 0x1}, {0x6, 0xa}, {0x5d, 0x8001}, {0x38, 0x5f0}, {0x4, 0x7}, {0xffffffff, 0x5a2}, {0x1, 0x2}, {0x8, 0x1}, {0xe9, 0xfffffffffffff7b6}, {0x8e, 0x7fff}, {0x80000000, 0x8000000000000001}, {0xffffffff, 0xfda9}, {0xe5, 0xffffffffffffff41}, {0x24, 0x8}, {0x5, 0x4}, {0x187, 0xa2}, {0xd6, 0xffffffffffffffa3}, {0x1, 0xa807}, {0x3723, 0x6}, {0xfffffffffffff801, 0xa9}, {}, {0x2, 0xfffffffffffffffa}, {0x10001, 0x8000000000}, {0xfffffffffffff000, 0x3}, {0x3, 0xf9e}, {0x2321, 0x8}, {0x7ff}, {0x10001, 0xffffffff}, {0x5, 0x3}, {0x7ff, 0x9}, {0x4, 0x3e}, {0x3bd14045, 0x8001}, {0xff, 0x7}, {0x8, 0xffff}, {0x575, 0x2}, {0x3, 0x2}, {0x1, 0xe}, {0x5, 0xe}, {0x7, 0x9c}, {0x3ff, 0x8001}, {0x8, 0xffffffffffff0001}, {0x0, 0x7}, {0x3, 0x1}, {0xfffffffffffffffb, 0x4}, {0x7, 0x9}, {0x7, 0x1649}, {0x3ff, 0x7}, {0xf, 0xe6a}, {0x8, 0x1}, {0x10000, 0x5}, {0x7, 0x6}, {0x1, 0xb5}, {0x7, 0xdd1}, {0xffff, 0x66e}, {0x0, 0x4}, {0x3, 0x30580c97}, {0x8001, 0xf6}, {0x6, 0x800}, {0xcaa, 0x5}, {0x9, 0xb}, {0x0, 0xb12}, {0x7, 0x8}, {0xfaa, 0x6}, {0x8, 0x5}, {0xfffffffffffff801, 0x951}, {0x7, 0x101}, {0x7, 0x910000}, {0x2, 0x5b}, {0xa8, 0x8}, {0x619, 0x1}, {0x8, 0xfffffffffffff775}, {0x3, 0x3}, {0x1ff, 0x8}, {0x2000000000000, 0x80000000}, {0xfff, 0x1}, {0x2, 0x868}, {0x2ef, 0x2}, {0x0, 0x8000000000000000}, {0x3, 0xfffffffffffffffc}, {0x1, 0x1}, {0x7, 0x7}, {0x57, 0x7}, {0x401, 0x6}, {0x5, 0x73}, {0x80000001, 0xc91}, {0x800, 0x7ff}, {0x777b, 0x9}, {0xb3, 0x8}, {0x4, 0x1}, {0x7, 0x6}, {0xd5}, {0x3, 0x401}, {0x1, 0x2}, {0x2, 0xfffffffffffff27a}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d40)=ANY=[], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) 7m57.570039856s ago: executing program 2 (id=477): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000240), 0x0) pipe(&(0x7f0000002680)) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) 7m40.95909694s ago: executing program 34 (id=477): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000240), 0x0) pipe(&(0x7f0000002680)) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) 16.967130585s ago: executing program 0 (id=1990): mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x200c01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000004) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="0503222ed3fc14f9fd004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 16.201186285s ago: executing program 0 (id=1994): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000500)={0x2020}, 0x2020) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) fcntl$dupfd(r4, 0x0, r4) 14.947790061s ago: executing program 7 (id=1997): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008804}, 0xc810) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) 14.283631712s ago: executing program 0 (id=1998): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x2000, 0x40) getdents64(r2, &(0x7f0000001f00)=""/4093, 0xffd) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x1014009, &(0x7f0000000280)=ANY=[@ANYRESOCT=r1, @ANYRES8=r0, @ANYRESHEX, @ANYRES16=r2, @ANYRES64=r2], 0x0, 0x151e, &(0x7f0000001680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x6}, 0x52) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0xfdff) 14.055230531s ago: executing program 5 (id=2000): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 12.679457798s ago: executing program 0 (id=2002): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) write$cgroup_pid(r2, &(0x7f00000003c0), 0xffffffa0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, 0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0) 12.361379424s ago: executing program 5 (id=2004): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000001f200)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_EMATCHES={0x18, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "fe"}}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) 11.896766756s ago: executing program 5 (id=2007): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x606000, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x31}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000400)="58e3", 0x2}], 0x1}, 0x4) 9.966793724s ago: executing program 6 (id=2009): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000500)={0x2020}, 0x2020) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x2}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000", @ANYRES16=0x0, @ANYBLOB="00042ebd7200fddb0c000000914e46ca"], 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x1) 9.835960923s ago: executing program 0 (id=2010): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r2, 0x0, 0x4) 9.818482443s ago: executing program 8 (id=2011): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000500)={0x2020}, 0x2020) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000", @ANYRES16=0x0, @ANYBLOB="00042ebd7200fddb0c000000914e46ca"], 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x1) 9.780385935s ago: executing program 7 (id=2012): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x3}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008814) connect$unix(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x2c}) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x460400, 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f000000c140)={&(0x7f000000bf80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x100000001}, [{0x8000000000000000, 0x4}, {0x9, 0x8000000000000001}, {0xb7, 0x6}, {0xffffffff, 0x3}, {0x2f4, 0x40}, {0x1000, 0x98e}, {0x1, 0x6}, {0x2, 0x2}, {0x7}, {0xc, 0xffffffff80000000}, {0x800000000000, 0x1c}, {0xffffffffffffffff, 0x4}, {0x9, 0x9}, {0xe8b0, 0x3aac00000000000}, {0x69b7, 0x5f}, {0x0, 0x5}, {0xa, 0x2}, {0x7fff}, {0x7, 0x4}, {0x7ff, 0xffffffffffffffff}, {0x1ff, 0x100000001}, {0xa2e, 0xe}, {0x30fe, 0x1}, {0x8, 0x4}, {0xff, 0x2}, {0xfb9, 0x1}, {0x6, 0x8}, {0x1, 0xfffffffffffffffc}, {0x7, 0x5}, {0x2, 0xffffffffffff7fff}, {0x9, 0x8}, {0x59f, 0x5ff5}, {0x7fff, 0x7}, {0x8, 0x3}, {0xc1d, 0x4077d962}, {0x139b, 0x1089}, {0x5, 0x81}, {0x0, 0x3}, {0x8, 0xb}, {0x5, 0x1}, {0x4a82, 0xb}, {0x200, 0x405}, {0x1c508f61, 0x1a5b5e17}, {0xc, 0x7fffffff}, {0xff, 0x7d71}, {0x8000000000000001}, {0x10, 0x6}, {0x7, 0x8}, {0x5, 0x200}, {0xfffffffffffffffb, 0x5}, {0x7f, 0x6}, {0x80000001, 0x1}, {0x70, 0x9}, {0x1, 0x1}, {0x3, 0x2}, {0x81, 0x5}, {0x5, 0x9}, {0x8, 0x101}, {0x3, 0x7}, {0x9, 0x3}, {0x180, 0x59f}, {0xffff, 0x2}, {0x5}, {0x7, 0x80000000}, {0x10, 0x7fffffff}, {0x9, 0x9}, {0x1, 0x6}, {0x76, 0xfffffffffffffffc}, {0x40, 0x6}, {0x100000000, 0x200}, {0x4, 0x8}, {0x0, 0xf}, {0xd9, 0x63da50e0}, {0x2, 0xa987}, {0xf, 0xf800000000000000}, {0x8, 0xf405}, {0x2, 0x4}, {0x0, 0x80000001}, {0x2, 0x9}, {0x0, 0x2}, {0x5, 0x4}, {0x5, 0x7}, {0x2, 0x80000000}, {0x400000000000, 0xdb6}, {0x34c0}, {0x94, 0xfffffffffffffffa}, {0x0, 0xead5}, {0x7ff, 0x8001}, {0x5, 0x2}, {0xffffffffffff7fff}, {0xa, 0x1}, {0x0, 0x99}, {0xb9, 0x8001}, {0x7, 0x6de}, {0x2}, {0xfffffffffffffff7, 0x99b1}, {0x6, 0x4}, {0xda, 0x5}, {0x2, 0x8}, {0xd8, 0x4}, {0x8, 0xb6ea}, {0x4, 0xc27}, {0x2, 0x8000000000000000}, {0x3, 0x1}, {0x4, 0x6}, {0x2125, 0xffffffffffffff14}, {0x0, 0x7}, {0x0, 0x80}, {0x2, 0xfffffc0000000000}, {0x4e9a, 0x7}, {0x10001, 0x8}, {0x7fff, 0x200}, {0x5, 0x3}, {0x7, 0x3}, {0x100, 0x3}, {0x8, 0x5}, {0x3, 0x8000000000000000}, {0x4, 0x200}, {0x5, 0x5}, {0x2, 0x6}, {0x9, 0x9}, {0xa, 0x5}, {0x7, 0xd97}, {0xff, 0x5173}, {0x2}, {0x1, 0x81}, {0x6, 0x1ff}, {0x0, 0x6}, {0x9, 0x140000000000}, {0x26, 0x7}, {0x4, 0x6}, {0x0, 0xa}, {0x3}, {0xb, 0x5}, {0x9, 0x7}, {0x7, 0x1}, {0x1, 0x1}, {0x1e12, 0x5}, {0x5, 0x4}, {0x3, 0x6}, {0x5, 0x3}, {0x4003, 0xffffffff}, {0x1, 0x5}, {0x100000000, 0x3}, {0x90a6, 0x9}, {0x9, 0x107}, {0xf, 0x80000000}, {0x9, 0x101}, {0x9, 0x7fff}, {0x0, 0x1}, {0x6, 0x40}, {0x2, 0x10001}, {0x7, 0x6}, {0x200}, {0x3, 0xffff}, {0x5, 0x793}, {0x6, 0x100000000}, {0x3, 0xda}, {0xb0, 0xffffffff}, {0x6, 0x2}, {0x6, 0x2}, {0x4, 0x1}, {0x6, 0xa}, {0x5d, 0x8001}, {0x38, 0x5f0}, {0x4, 0x7}, {0xffffffff, 0x5a2}, {0x1, 0x2}, {0x8, 0x1}, {0xe9, 0xfffffffffffff7b6}, {0x8e, 0x7fff}, {0x80000000, 0x8000000000000001}, {0xffffffff, 0xfda9}, {0xe5, 0xffffffffffffff41}, {0x24, 0x8}, {0x5, 0x4}, {0x187, 0xa2}, {0xd6, 0xffffffffffffffa3}, {0x1, 0xa807}, {0x3723, 0x6}, {0xfffffffffffff801, 0xa9}, {}, {0x2, 0xfffffffffffffffa}, {0x10001, 0x8000000000}, {0xfffffffffffff000, 0x3}, {0x3, 0xf9e}, {0x2321, 0x8}, {0x7ff}, {0x10001, 0xffffffff}, {0x5, 0x3}, {0x7ff, 0x9}, {0x4, 0x3e}, {0x3bd14045, 0x8001}, {0xff, 0x7}, {0x8, 0xffff}, {0x575, 0x2}, {0x3, 0x2}, {0x1, 0xe}, {0x5, 0xe}, {0x7, 0x9c}, {0x3ff, 0x8001}, {0x8, 0xffffffffffff0001}, {0x0, 0x7}, {0x3, 0x1}, {0xfffffffffffffffb, 0x4}, {0x7, 0x9}, {0x7, 0x1649}, {0x3ff, 0x7}, {0xf, 0xe6a}, {0x8, 0x1}, {0x10000, 0x5}, {0x7, 0x6}, {0x1, 0xb5}, {0x7, 0xdd1}, {0xffff, 0x66e}, {0x0, 0x4}, {0x3, 0x30580c97}, {0x8001, 0xf6}, {0x6, 0x800}, {0xcaa, 0x5}, {0x9, 0xb}, {0x0, 0xb12}, {0x7, 0x8}, {0xfaa, 0x6}, {0x8, 0x5}, {0xfffffffffffff801, 0x951}, {0x7, 0x101}, {0x7, 0x910000}, {0x2, 0x5b}, {0xa8, 0x8}, {0x619, 0x1}, {0x8, 0xfffffffffffff775}, {0x3, 0x3}, {0x1ff, 0x8}, {0x2000000000000, 0x80000000}, {0xfff, 0x1}, {0x2, 0x868}, {0x2ef, 0x2}, {0x0, 0x8000000000000000}, {0x3, 0xfffffffffffffffc}, {0x1, 0x1}, {0x7, 0x7}, {0x57, 0x7}, {0x401, 0x6}, {0x5, 0x73}, {0x80000001, 0xc91}, {0x800, 0x7ff}, {0x777b, 0x9}, {0xb3, 0x8}, {0x4, 0x1}, {0x7, 0x6}, {0xd5}, {0x3, 0x401}, {0x1, 0x2}, {0x2, 0xfffffffffffff27a}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d40)=ANY=[], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) 8.164797235s ago: executing program 8 (id=2013): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8.096244457s ago: executing program 6 (id=2014): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) syz_open_dev$usbfs(&(0x7f0000000280), 0xf15, 0x422000) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'ip6_vti0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1a, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8=r3], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @tracing=0x1a}, 0x94) syz_clone3(0x0, 0x0) setresgid(0x0, 0xee01, 0x0) io_submit(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r7}, &(0x7f0000000280), &(0x7f0000000240)=r5}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, 0x0, 0x0) 7.729670015s ago: executing program 3 (id=2015): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000180)={r1, r1, 0x7, 0x0, 0x0, 0x7, 0x4, 0x7, 0x9, 0x3, 0x3, 0x2, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}) 7.699019924s ago: executing program 7 (id=2016): bpf$MAP_CREATE(0x0, 0x0, 0x48) setitimer(0x1, &(0x7f0000000000)={{0x77359400}, {0x20000000000000}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000004680), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) getitimer(0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/protocols\x00') lseek(r3, 0x2004, 0x0) 7.673535521s ago: executing program 5 (id=2017): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x606000, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x31}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000400)="58e3", 0x2}], 0x1}, 0x4) 6.701448469s ago: executing program 6 (id=2018): mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="120100020000004025057a12000101020001090220000101008032090400000200000000070581024000000705"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x802, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 6.680591081s ago: executing program 8 (id=2019): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc2082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd22, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20000010) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee", 0x1d}], 0x1}, 0x0) 6.477552356s ago: executing program 3 (id=2020): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000230001000900000001"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x3}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008814) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x2c}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x1}) 5.631720022s ago: executing program 7 (id=2021): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000230001000900000001"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x8000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008814) connect$unix(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x2c}) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x460400, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x1}) 5.568339566s ago: executing program 5 (id=2022): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='0x17b3', 0x6) close(r1) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f00000001c0)='0x0004\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f0000000280), 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='ACMESynth\n', 0xa) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000680)='dummy_udc.0\n\x00', 0xc) 5.181364421s ago: executing program 3 (id=2023): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x8, 0x0, &(0x7f0000000500)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101802, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x59}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r7, @ANYBLOB="0000000002000000b705000008000000850000001900000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000080), &(0x7f0000000240)=r9}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076804268c989e14f088a8", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 4.463438756s ago: executing program 7 (id=2024): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) write$cgroup_pid(r2, &(0x7f00000003c0), 0xffffffa0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80), 0x0, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0) 4.23969798s ago: executing program 0 (id=2025): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008804}, 0xc810) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) 3.306650896s ago: executing program 3 (id=2026): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-3 +4\n', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='nfsd 127.0.0.1 2000000000 domain', 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) connect$inet(0xffffffffffffffff, 0x0, 0x0) write(r2, &(0x7f0000000500)='4294967295 2000000000 0\n', 0x18) 3.265683885s ago: executing program 6 (id=2027): openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi5\x00', 0x8000, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) syz_io_uring_setup(0xefd, &(0x7f00000002c0)={0x0, 0xfffffffe, 0x2d1528cfe5a31ee9, 0x3, 0x255}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000280)) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000780)=0x1, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000001ac0), r2) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100080200000018000066000000080003", @ANYRES32=r5, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r6, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="0600cd00000000006c00330080200900080211000001080211000000505050505050"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) sendmsg$netlink(r0, 0x0, 0x0) 3.214744355s ago: executing program 8 (id=2028): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x3}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008814) connect$unix(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x2c}) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x460400, 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f000000c140)={&(0x7f000000bf80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x100000001}, [{0x8000000000000000, 0x4}, {0x9, 0x8000000000000001}, {0xb7, 0x6}, {0xffffffff, 0x3}, {0x2f4, 0x40}, {0x1000, 0x98e}, {0x1, 0x6}, {0x2, 0x2}, {0x7}, {0xc, 0xffffffff80000000}, {0x800000000000, 0x1c}, {0xffffffffffffffff, 0x4}, {0x9, 0x9}, {0xe8b0, 0x3aac00000000000}, {0x69b7, 0x5f}, {0x0, 0x5}, {0xa, 0x2}, {0x7fff}, {0x7, 0x4}, {0x7ff, 0xffffffffffffffff}, {0x1ff, 0x100000001}, {0xa2e, 0xe}, {0x30fe, 0x1}, {0x8, 0x4}, {0xff, 0x2}, {0xfb9, 0x1}, {0x6, 0x8}, {0x1, 0xfffffffffffffffc}, {0x7, 0x5}, {0x2, 0xffffffffffff7fff}, {0x9, 0x8}, {0x59f, 0x5ff5}, {0x7fff, 0x7}, {0x8, 0x3}, {0xc1d, 0x4077d962}, {0x139b, 0x1089}, {0x5, 0x81}, {0x0, 0x3}, {0x8, 0xb}, {0x5, 0x1}, {0x4a82, 0xb}, {0x200, 0x405}, {0x1c508f61, 0x1a5b5e17}, {0xc, 0x7fffffff}, {0xff, 0x7d71}, {0x8000000000000001}, {0x10, 0x6}, {0x7, 0x8}, {0x5, 0x200}, {0xfffffffffffffffb, 0x5}, {0x7f, 0x6}, {0x80000001, 0x1}, {0x70, 0x9}, {0x1, 0x1}, {0x3, 0x2}, {0x81, 0x5}, {0x5, 0x9}, {0x8, 0x101}, {0x3, 0x7}, {0x9, 0x3}, {0x180, 0x59f}, {0xffff, 0x2}, {0x5}, {0x7, 0x80000000}, {0x10, 0x7fffffff}, {0x9, 0x9}, {0x1, 0x6}, {0x76, 0xfffffffffffffffc}, {0x40, 0x6}, {0x100000000, 0x200}, {0x4, 0x8}, {0x0, 0xf}, {0xd9, 0x63da50e0}, {0x2, 0xa987}, {0xf, 0xf800000000000000}, {0x8, 0xf405}, {0x2, 0x4}, {0x0, 0x80000001}, {0x2, 0x9}, {0x0, 0x2}, {0x5, 0x4}, {0x5, 0x7}, {0x2, 0x80000000}, {0x400000000000, 0xdb6}, {0x34c0}, {0x94, 0xfffffffffffffffa}, {0x0, 0xead5}, {0x7ff, 0x8001}, {0x5, 0x2}, {0xffffffffffff7fff}, {0xa, 0x1}, {0x0, 0x99}, {0xb9, 0x8001}, {0x7, 0x6de}, {0x2}, {0xfffffffffffffff7, 0x99b1}, {0x6, 0x4}, {0xda, 0x5}, {0x2, 0x8}, {0xd8, 0x4}, {0x8, 0xb6ea}, {0x4, 0xc27}, {0x2, 0x8000000000000000}, {0x3, 0x1}, {0x4, 0x6}, {0x2125, 0xffffffffffffff14}, {0x0, 0x7}, {0x0, 0x80}, {0x2, 0xfffffc0000000000}, {0x4e9a, 0x7}, {0x10001, 0x8}, {0x7fff, 0x200}, {0x5, 0x3}, {0x7, 0x3}, {0x100, 0x3}, {0x8, 0x5}, {0x3, 0x8000000000000000}, {0x4, 0x200}, {0x5, 0x5}, {0x2, 0x6}, {0x9, 0x9}, {0xa, 0x5}, {0x7, 0xd97}, {0xff, 0x5173}, {0x2}, {0x1, 0x81}, {0x6, 0x1ff}, {0x0, 0x6}, {0x9, 0x140000000000}, {0x26, 0x7}, {0x4, 0x6}, {0x0, 0xa}, {0x3}, {0xb, 0x5}, {0x9, 0x7}, {0x7, 0x1}, {0x1, 0x1}, {0x1e12, 0x5}, {0x5, 0x4}, {0x3, 0x6}, {0x5, 0x3}, {0x4003, 0xffffffff}, {0x1, 0x5}, {0x100000000, 0x3}, {0x90a6, 0x9}, {0x9, 0x107}, {0xf, 0x80000000}, {0x9, 0x101}, {0x9, 0x7fff}, {0x0, 0x1}, {0x6, 0x40}, {0x2, 0x10001}, {0x7, 0x6}, {0x200}, {0x3, 0xffff}, {0x5, 0x793}, {0x6, 0x100000000}, {0x3, 0xda}, {0xb0, 0xffffffff}, {0x6, 0x2}, {0x6, 0x2}, {0x4, 0x1}, {0x6, 0xa}, {0x5d, 0x8001}, {0x38, 0x5f0}, {0x4, 0x7}, {0xffffffff, 0x5a2}, {0x1, 0x2}, {0x8, 0x1}, {0xe9, 0xfffffffffffff7b6}, {0x8e, 0x7fff}, {0x80000000, 0x8000000000000001}, {0xffffffff, 0xfda9}, {0xe5, 0xffffffffffffff41}, {0x24, 0x8}, {0x5, 0x4}, {0x187, 0xa2}, {0xd6, 0xffffffffffffffa3}, {0x1, 0xa807}, {0x3723, 0x6}, {0xfffffffffffff801, 0xa9}, {}, {0x2, 0xfffffffffffffffa}, {0x10001, 0x8000000000}, {0xfffffffffffff000, 0x3}, {0x3, 0xf9e}, {0x2321, 0x8}, {0x7ff}, {0x10001, 0xffffffff}, {0x5, 0x3}, {0x7ff, 0x9}, {0x4, 0x3e}, {0x3bd14045, 0x8001}, {0xff, 0x7}, {0x8, 0xffff}, {0x575, 0x2}, {0x3, 0x2}, {0x1, 0xe}, {0x5, 0xe}, {0x7, 0x9c}, {0x3ff, 0x8001}, {0x8, 0xffffffffffff0001}, {0x0, 0x7}, {0x3, 0x1}, {0xfffffffffffffffb, 0x4}, {0x7, 0x9}, {0x7, 0x1649}, {0x3ff, 0x7}, {0xf, 0xe6a}, {0x8, 0x1}, {0x10000, 0x5}, {0x7, 0x6}, {0x1, 0xb5}, {0x7, 0xdd1}, {0xffff, 0x66e}, {0x0, 0x4}, {0x3, 0x30580c97}, {0x8001, 0xf6}, {0x6, 0x800}, {0xcaa, 0x5}, {0x9, 0xb}, {0x0, 0xb12}, {0x7, 0x8}, {0xfaa, 0x6}, {0x8, 0x5}, {0xfffffffffffff801, 0x951}, {0x7, 0x101}, {0x7, 0x910000}, {0x2, 0x5b}, {0xa8, 0x8}, {0x619, 0x1}, {0x8, 0xfffffffffffff775}, {0x3, 0x3}, {0x1ff, 0x8}, {0x2000000000000, 0x80000000}, {0xfff, 0x1}, {0x2, 0x868}, {0x2ef, 0x2}, {0x0, 0x8000000000000000}, {0x3, 0xfffffffffffffffc}, {0x1, 0x1}, {0x7, 0x7}, {0x57, 0x7}, {0x401, 0x6}, {0x5, 0x73}, {0x80000001, 0xc91}, {0x800, 0x7ff}, {0x777b, 0x9}, {0xb3, 0x8}, {0x4, 0x1}, {0x7, 0x6}, {0xd5}, {0x3, 0x401}, {0x1, 0x2}, {0x2, 0xfffffffffffff27a}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d40)=ANY=[], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) 2.907406599s ago: executing program 3 (id=2029): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x2000, 0x40) getdents64(r2, &(0x7f0000001f00)=""/4093, 0xffd) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x1014009, &(0x7f0000000280)=ANY=[@ANYRESOCT=r1, @ANYRES8=r0, @ANYRESHEX, @ANYRES16=r2, @ANYRES64=r2], 0x0, 0x151e, &(0x7f0000001680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x6}, 0x52) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0xfdff) 2.143689537s ago: executing program 7 (id=2030): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x606000, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x31}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000400)="58e3", 0x2}], 0x1}, 0x4) 1.965751226s ago: executing program 6 (id=2031): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.900680746s ago: executing program 8 (id=2032): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) syz_open_dev$usbfs(&(0x7f0000000280), 0xf15, 0x422000) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'ip6_vti0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1a, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8=r3], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @tracing=0x1a}, 0x94) syz_clone3(0x0, 0x0) setresgid(0x0, 0xee01, 0x0) io_submit(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r7}, &(0x7f0000000280), &(0x7f0000000240)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, 0x0, 0x0) 830.250598ms ago: executing program 5 (id=2033): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfffd, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r12, &(0x7f0000000640)="000a18000000604000eb55000000", 0xe, 0x4000000, &(0x7f0000000380)={0x11, 0xe56930649afa540, r11, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) 160.46449ms ago: executing program 3 (id=2034): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, 0x0}, 0x4) 122.105352ms ago: executing program 6 (id=2035): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000230001000900000001"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x3}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008814) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x2c}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x1}) 0s ago: executing program 8 (id=2036): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000230001000900000001"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x8000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008814) connect$unix(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x2c}) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x460400, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x1}) kernel console output (not intermixed with test programs): 28, SerialNumber=2 [ 703.123137][ T991] usb 9-1: Product: syz [ 703.130631][ T991] usb 9-1: Manufacturer: syz [ 703.137861][ T991] usb 9-1: SerialNumber: syz [ 703.152163][ T991] usb 9-1: config 0 descriptor?? [ 703.164699][T12074] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 703.187376][ T991] usb 9-1: selecting invalid altsetting 0 [ 703.373588][ T9263] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 703.644697][ T9263] usb 6-1: not running at top speed; connect to a high speed hub [ 703.874983][ T9263] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 703.895362][T12074] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 704.225128][T12074] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 704.259492][ T9263] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 704.263699][ T991] usb 9-1: USB disconnect, device number 16 [ 704.288754][T12074] usb 9-1: cannot submit urb 0, error -19: no device [ 704.331758][ T9263] usb 6-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 704.341495][T12074] usb 9-1: cannot submit urb 0, error -19: no device [ 704.348593][ T9263] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.359301][ T9263] usb 6-1: Product: syz [ 704.363722][ T9263] usb 6-1: Manufacturer: syz [ 704.368353][ T9263] usb 6-1: SerialNumber: syz [ 704.430684][ T9263] oti6858 6-1:1.0: oti6858 converter detected [ 704.495552][ T9263] usb 6-1: oti6858 converter now attached to ttyUSB0 [ 704.762757][T12091] oti6858 ttyUSB0: oti6858_open(): usb_submit_urb() failed with error -90 [ 705.119694][ T991] usb 6-1: USB disconnect, device number 26 [ 705.665664][ T991] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 705.737417][ T991] oti6858 6-1:1.0: device disconnected [ 706.860715][T12121] bond0: entered promiscuous mode [ 706.878610][T12121] bond_slave_0: entered promiscuous mode [ 706.896771][T12121] bond_slave_1: entered promiscuous mode [ 706.919227][T12124] netlink: 'syz.8.1437': attribute type 10 has an invalid length. [ 707.014464][T12121] batadv0: entered promiscuous mode [ 707.172210][T12121] debugfs: 'hsr1' already exists in 'hsr' [ 707.230948][T12121] Cannot create hsr debugfs directory [ 707.460498][T12134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1442'. [ 707.706165][T12140] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1444'. [ 707.717583][T12140] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1444'. [ 708.148198][T12142] syzkaller0: entered promiscuous mode [ 708.184928][T12142] syzkaller0: entered allmulticast mode [ 708.311139][ T10] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 708.705675][ T10] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0 [ 709.410570][ T5627] usb 8-1: new full-speed USB device number 23 using dummy_hcd [ 709.429573][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 709.444345][ T10] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 709.473551][ T10] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 709.493164][ T10] usb 9-1: Product: syz [ 709.516579][ T10] usb 9-1: Manufacturer: syz [ 709.523707][ T10] usb 9-1: SerialNumber: syz [ 709.548081][ T10] usb 9-1: config 0 descriptor?? [ 709.579969][ T10] usb 9-1: selecting invalid altsetting 0 [ 709.622950][ T5627] usb 8-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 709.666520][ T5627] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 46011, setting to 64 [ 709.692904][ T5627] usb 8-1: config 0 interface 0 has no altsetting 0 [ 709.716519][ T5627] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 709.770377][ T5627] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 709.875279][ T5627] usb 8-1: Product: syz [ 709.931939][ T5627] usb 8-1: Manufacturer: syz [ 710.029971][ T5627] usb 8-1: SerialNumber: syz [ 710.425548][ T5627] usb 8-1: config 0 descriptor?? [ 710.580480][T12159] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 710.615121][ T5627] usb 8-1: selecting invalid altsetting 0 [ 710.698656][ T9263] usb 9-1: USB disconnect, device number 17 [ 710.804195][T12173] syzkaller0: entered promiscuous mode [ 710.832260][T12173] syzkaller0: entered allmulticast mode [ 710.927564][ T5627] usb 8-1: USB disconnect, device number 23 [ 710.954335][T12184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1457'. [ 711.062559][ T8714] udevd[8714]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 711.386848][T12188] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 711.398431][T12187] IPVS: stopping master sync thread 12188 ... [ 712.479024][T12207] syzkaller0: entered promiscuous mode [ 712.505935][T12207] syzkaller0: entered allmulticast mode [ 716.621955][ T10] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 716.789354][ T10] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0 [ 716.819137][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 716.852687][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 716.881113][ T10] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 716.900281][ T10] usb 4-1: Product: syz [ 716.905815][ T10] usb 4-1: Manufacturer: syz [ 716.913129][ T10] usb 4-1: SerialNumber: syz [ 716.934019][ T10] usb 4-1: config 0 descriptor?? [ 717.512271][ T10] usb 4-1: selecting invalid altsetting 0 [ 717.719359][ T10] usb 4-1: USB disconnect, device number 30 [ 717.929976][ T8714] udevd[8714]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 718.666196][ T10] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 718.852525][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 718.873595][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 718.895278][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 718.921467][ T10] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 718.940908][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.966607][ T10] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 718.982569][ T10] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 719.003564][ T10] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 719.207817][ T10] usb 4-1: USB disconnect, device number 31 [ 719.236780][ T10] garmin_gps 4-1:1.0: device disconnected [ 720.550657][T12283] syzkaller0: entered promiscuous mode [ 720.573538][T12283] syzkaller0: entered allmulticast mode [ 720.602604][T12266] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.801360][T12266] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.061458][T12266] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.252973][T12266] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.403011][ C0] Unknown status report in ack skb [ 721.434040][T12309] syzkaller0: entered promiscuous mode [ 721.447257][T12309] syzkaller0: entered allmulticast mode [ 721.701761][T12316] netlink: 'syz.6.1494': attribute type 10 has an invalid length. [ 722.341038][ T12] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.482183][ T8813] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.572958][ T12] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.602046][T12323] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1495'. [ 722.642957][T12322] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1496'. [ 722.671223][ T8813] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.564020][ T3103] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 723.702098][T12349] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.738512][ T3103] usb 9-1: Using ep0 maxpacket: 32 [ 723.751134][ T3103] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 723.776409][ T3103] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 723.804616][ T3103] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 723.816948][T12349] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.834252][ T3103] usb 9-1: Product: syz [ 723.853361][ T3103] usb 9-1: Manufacturer: syz [ 723.862482][ T3103] usb 9-1: SerialNumber: syz [ 723.889084][ T3103] usb 9-1: config 0 descriptor?? [ 723.903820][T12347] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 723.957187][ T3103] hub 9-1:0.0: bad descriptor, ignoring hub [ 723.974965][ T3103] hub 9-1:0.0: probe with driver hub failed with error -5 [ 724.250475][T12357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1509'. [ 724.283557][T12349] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.324055][T12349] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.404939][ T9170] usb 9-1: USB disconnect, device number 18 [ 725.595770][ T8009] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.666325][ T3318] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.720452][ T3318] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.775442][ T9170] usb 8-1: new full-speed USB device number 24 using dummy_hcd [ 725.836876][ T3318] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.965571][ T9170] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 46011, setting to 64 [ 725.984259][ T9170] usb 8-1: config 0 interface 0 has no altsetting 0 [ 725.994222][ T9170] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 726.009764][ T9170] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 726.028648][ T9170] usb 8-1: Product: syz [ 726.039936][ T9170] usb 8-1: Manufacturer: syz [ 726.057023][ T9170] usb 8-1: SerialNumber: syz [ 726.088411][ T9170] usb 8-1: config 0 descriptor?? [ 726.102971][T12371] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 726.130634][ T9170] usb 8-1: selecting invalid altsetting 0 [ 726.183791][ T802] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 726.306677][T12383] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 726.320363][T12382] IPVS: stopping master sync thread 12383 ... [ 726.366459][ T991] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 726.484330][ T802] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 726.533909][ T991] usb 9-1: Using ep0 maxpacket: 8 [ 726.558614][ T802] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 726.603448][ T991] usb 9-1: config index 0 descriptor too short (expected 5924, got 36) [ 726.649934][ T802] usb 1-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 726.671125][ T991] usb 9-1: config 250 has an invalid interface number: 228 but max is -1 [ 726.734416][ T802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 726.748529][ T9170] usb 8-1: USB disconnect, device number 24 [ 726.761509][ T991] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 726.777323][T12371] usb 8-1: cannot submit urb 0, error -19: no device [ 726.814982][ T802] usb 1-1: Product: syz [ 726.834311][ T991] usb 9-1: config 250 has no interface number 0 [ 726.847481][ T802] usb 1-1: Manufacturer: syz [ 726.872679][ T991] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 726.931745][T12375] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 726.970721][ T991] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 726.996491][ T802] usb_debug 1-1:1.0: debug converter detected [ 727.029648][ T991] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 30768, setting to 1024 [ 727.060388][ T802] usb 1-1: debug converter now attached to ttyUSB0 [ 727.070137][ T991] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 727.091223][ T991] usb 9-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 727.121268][ T991] usb 9-1: config 250 interface 228 has no altsetting 0 [ 727.139494][ T991] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 727.151563][ T991] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 727.165989][ T991] usb 9-1: Product: syz [ 727.172994][ T991] usb 9-1: SerialNumber: syz [ 727.192537][ T991] hub 9-1:250.228: bad descriptor, ignoring hub [ 727.203829][ T991] hub 9-1:250.228: probe with driver hub failed with error -5 [ 727.328899][ C1] Unknown status report in ack skb [ 727.380327][ T9263] usb 1-1: USB disconnect, device number 32 [ 727.443576][ T991] usblp 9-1:250.228: usblp0: USB Bidirectional printer dev 19 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 727.465223][ T9263] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 727.500995][ T9263] usb_debug 1-1:1.0: device disconnected [ 727.723935][T12397] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.776388][ C1] Unknown status report in ack skb [ 727.871165][T12397] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.884261][ C1] usblp0: nonzero read bulk status received: -71 [ 727.892049][T12403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.924523][T12403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.997407][ T9263] usb 9-1: USB disconnect, device number 19 [ 728.077444][ T9263] usblp0: removed [ 728.655613][T12397] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.015718][T12397] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.144696][ C1] Unknown status report in ack skb [ 729.171993][ T991] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 729.254910][ T3318] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.332009][ T3318] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.351747][ T991] usb 1-1: config 0 interface 0 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 729.379393][ T991] usb 1-1: config 0 interface 0 has no altsetting 0 [ 729.397856][ T991] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 729.416045][ T3318] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.427332][ T991] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 729.435680][ T10] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 729.454544][ T991] usb 1-1: Product: syz [ 729.465736][ T991] usb 1-1: Manufacturer: syz [ 729.473420][ T991] usb 1-1: SerialNumber: syz [ 729.483357][ T57] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.503245][ T991] usb 1-1: config 0 descriptor?? [ 729.620918][ T9263] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 729.625594][ T10] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 46011, setting to 64 [ 729.665759][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 729.682110][ T991] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 729.697465][ T10] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 729.724486][ T10] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 729.740891][ T991] usb 1-1: USB disconnect, device number 33 [ 729.759259][ T10] usb 7-1: Product: syz [ 729.782496][ T10] usb 7-1: Manufacturer: syz [ 729.785863][ T8679] udevd[8679]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 729.806108][ T10] usb 7-1: SerialNumber: syz [ 729.826550][ T10] usb 7-1: config 0 descriptor?? [ 729.829295][ T9263] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 729.839225][T12417] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 729.903040][ T10] usb 7-1: selecting invalid altsetting 0 [ 729.918733][T12423] IPVS: stopping master sync thread 12425 ... [ 729.925331][T12425] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 730.024921][ T9263] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 730.035031][ T9263] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 730.050206][ T9263] usb 8-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 730.059604][ T9263] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 730.068429][ T9263] usb 8-1: Product: syz [ 730.074737][ T9263] usb 8-1: Manufacturer: syz [ 730.363495][ T10] usb 7-1: USB disconnect, device number 19 [ 730.374194][T12417] usb 7-1: cannot submit urb 0, error -19: no device [ 730.416416][T12417] usb 7-1: cannot submit urb 0, error -19: no device [ 730.455803][T12417] usb 7-1: cannot submit urb 0, error -19: no device [ 730.497832][T12417] usb 7-1: cannot submit urb 0, error -19: no device [ 730.544554][T12417] usb 7-1: cannot submit urb 0, error -19: no device [ 730.599776][T12421] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 730.669452][ T9263] usb_debug 8-1:1.0: debug converter detected [ 730.681579][ T9263] usb 8-1: debug converter now attached to ttyUSB0 [ 730.744192][ T8225] udevd[8225]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 730.950356][T12433] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1537'. [ 730.983727][ T9263] usb 8-1: USB disconnect, device number 25 [ 731.029874][ T991] usb 9-1: new full-speed USB device number 20 using dummy_hcd [ 731.032487][ T9263] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 731.036660][ T9263] usb_debug 8-1:1.0: device disconnected [ 731.192940][ T991] usb 9-1: config 0 interface 0 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 731.230171][ T991] usb 9-1: config 0 interface 0 has no altsetting 0 [ 731.248862][ T991] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 731.275740][ T991] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 731.293183][ T991] usb 9-1: Product: syz [ 731.309028][ T991] usb 9-1: Manufacturer: syz [ 731.322924][ T991] usb 9-1: SerialNumber: syz [ 731.353945][ T991] usb 9-1: config 0 descriptor?? [ 731.567859][ T991] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 731.677041][ T991] usb 9-1: USB disconnect, device number 20 [ 731.715073][ T8679] udevd[8679]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 731.759678][ T9263] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 731.999438][ T9263] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 732.049798][ T9263] usb 7-1: can't read configurations, error -71 [ 732.489012][ T5773] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 732.663781][T12462] IPVS: stopping master sync thread 12464 ... [ 732.671233][T12464] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 732.729005][ T5773] usb 6-1: Using ep0 maxpacket: 8 [ 732.744727][ T5773] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 732.776553][ T5773] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 732.831921][ T5773] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 732.916574][ T5773] usb 6-1: config 250 has no interface number 0 [ 732.967825][ T5773] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 733.049645][ T5773] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 733.115200][ T5773] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 733.180995][ T5773] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 733.270857][ T5773] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 733.358367][ T5773] usb 6-1: config 250 interface 228 has no altsetting 0 [ 733.371964][T12470] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1552'. [ 733.406731][ T5773] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 733.442542][ T5773] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 733.487513][ T5773] usb 6-1: Product: syz [ 733.506934][ T5773] usb 6-1: SerialNumber: syz [ 733.555157][ T5773] hub 6-1:250.228: bad descriptor, ignoring hub [ 733.584739][ T5773] hub 6-1:250.228: probe with driver hub failed with error -5 [ 733.687327][T12472] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.784544][ T5773] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 27 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 733.833627][T12472] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.943181][T12472] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.010715][ T9263] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 734.100602][T12472] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.127111][T12487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.168647][T12487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.200352][ T9263] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 734.228859][ T9263] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 734.254398][ T9263] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 734.284629][ T9263] usb 8-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 734.315140][ T9263] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 734.346718][ T9263] usb 8-1: Product: syz [ 734.364139][ T9263] usb 8-1: Manufacturer: syz [ 734.366772][ T5966] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.407082][T12479] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 734.411291][ T5966] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.430382][ T5353] usb 6-1: USB disconnect, device number 27 [ 734.465379][ T9263] usb_debug 8-1:1.0: debug converter detected [ 734.485060][ T5353] usblp0: removed [ 734.510637][ T9263] usb 8-1: debug converter now attached to ttyUSB0 [ 734.512984][ T33] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.610398][ T6398] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.697929][ T9170] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 734.737541][ T802] usb 8-1: USB disconnect, device number 26 [ 734.785732][ T802] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 734.809029][ T802] usb_debug 8-1:1.0: device disconnected [ 734.870871][ T9170] usb 7-1: config 0 interface 0 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 734.909302][ T9170] usb 7-1: config 0 interface 0 has no altsetting 0 [ 734.941468][ T9170] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 735.006783][ T9170] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 735.017477][ T9170] usb 7-1: Product: syz [ 735.021942][ T9170] usb 7-1: Manufacturer: syz [ 735.026583][ T9170] usb 7-1: SerialNumber: syz [ 735.041498][ T9170] usb 7-1: config 0 descriptor?? [ 735.203923][ T9170] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 735.241876][ T8679] udevd[8679]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 735.291604][ T9170] usb 7-1: USB disconnect, device number 22 [ 735.511321][ T29] audit: type=1800 audit(1790441710.975:4): pid=12504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1565" name="file0" dev="overlay" ino=786 res=0 errno=0 [ 735.667472][ T5353] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 735.827353][ T5353] usb 6-1: Using ep0 maxpacket: 32 [ 735.840867][ T5353] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 735.864290][ T5353] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.932811][ T5353] usb 6-1: config 0 descriptor?? [ 735.980451][T12513] IPVS: stopping master sync thread 11910 ... [ 736.042482][ T5353] as10x_usb: device has been detected [ 736.434043][ T5353] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 736.644027][ T5353] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 736.662877][ T5353] as10x_usb: error during firmware upload part1 [ 736.670012][ T5353] Registered device nBox DVB-T Dongle [ 736.673297][ T5353] usb 6-1: USB disconnect, device number 28 [ 736.716394][ T5353] Unregistered device nBox DVB-T Dongle [ 736.729665][ T5353] as10x_usb: device has been disconnected [ 736.773543][T12518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1570'. [ 737.206544][T12532] 9p: Bad value for 'wfdno' [ 737.576484][ T10] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 737.738924][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 737.770312][ T5353] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 737.786853][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 737.815875][ T10] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 737.842556][ T10] usb 6-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 737.869635][ T10] usb 6-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 737.885713][ T10] usb 6-1: config 1 interface 1 has no altsetting 0 [ 737.912334][ T10] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 737.937845][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.956279][ T5353] usb 1-1: Using ep0 maxpacket: 8 [ 737.966488][ T10] usb 6-1: Product: syz [ 737.972615][ T5353] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 737.972834][ T10] usb 6-1: Manufacturer: syz [ 737.999964][ T10] usb 6-1: SerialNumber: syz [ 738.008749][ T5353] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 738.038096][ T5353] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 738.067184][ T9263] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 738.079980][T12549] syzkaller0: entered promiscuous mode [ 738.080255][ T5353] usb 1-1: config 250 has no interface number 0 [ 738.091075][T12549] syzkaller0: entered allmulticast mode [ 738.124748][ T5353] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 738.153864][ T5353] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 738.180890][ T5353] usb 1-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 738.195121][ T5353] usb 1-1: config 250 interface 228 has no altsetting 0 [ 738.205116][ T5353] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 738.228705][ T5353] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 738.250410][ T5353] usb 1-1: Product: syz [ 738.256514][ T5353] usb 1-1: SerialNumber: syz [ 738.271067][ T9263] usb 4-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 738.285931][ T10] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 738.296986][ T9263] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 738.326701][ T5353] hub 1-1:250.228: bad descriptor, ignoring hub [ 738.347466][ T9263] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x8B has invalid wMaxPacketSize 0 [ 738.363976][ T5353] hub 1-1:250.228: probe with driver hub failed with error -5 [ 738.388097][ T9263] usb 4-1: config 0 interface 0 has no altsetting 0 [ 738.412980][ T9263] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 738.433986][ T9263] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 738.452507][ T9263] usb 4-1: Product: syz [ 738.469145][ T9263] usb 4-1: Manufacturer: syz [ 738.479539][ T10] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 738.481260][ T9263] usb 4-1: SerialNumber: syz [ 738.509123][ T9263] usb 4-1: config 0 descriptor?? [ 738.516660][ T10] usb 6-1: USB disconnect, device number 29 [ 738.538295][ T9263] usb 4-1: selecting invalid altsetting 0 [ 738.610852][ T8679] udevd[8679]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 738.650220][T12541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.686164][T12541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.756680][ T5353] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 738.769387][ T9263] usb 4-1: USB disconnect, device number 32 [ 738.936343][ T5353] usb 8-1: Using ep0 maxpacket: 8 [ 738.962530][ T5353] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 738.995735][ T5353] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 739.023626][ T5353] usb 8-1: config 250 has an invalid descriptor of length 102, skipping remainder of the config [ 739.034616][ T3103] usb 1-1: USB disconnect, device number 34 [ 739.067255][ T5353] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 739.107319][ T5353] usb 8-1: config 250 has no interface number 0 [ 739.136334][ T5353] usb 8-1: config 250 interface 228 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 739.169923][ T5353] usb 8-1: config 250 interface 228 has no altsetting 0 [ 739.189552][ T5353] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 739.205627][ T5353] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 739.219852][ T5353] usb 8-1: Product: syz [ 739.224233][ T5353] usb 8-1: SerialNumber: syz [ 739.262196][ T5353] hub 8-1:250.228: bad descriptor, ignoring hub [ 739.421057][T12564] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 739.436783][T12562] IPVS: stopping master sync thread 12564 ... [ 739.486155][ T5353] hub 8-1:250.228: probe with driver hub failed with error -5 [ 740.027647][T12557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.040017][T12557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.346990][ T991] usb 8-1: USB disconnect, device number 27 [ 740.440579][ T3103] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 740.966694][ T991] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 741.170577][ T991] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 46011, setting to 64 [ 741.240594][ T991] usb 1-1: config 0 interface 0 has no altsetting 0 [ 741.293371][ T991] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 741.357578][ T991] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 741.413486][ T991] usb 1-1: Product: syz [ 741.414569][ T3103] usb 7-1: Using ep0 maxpacket: 32 [ 741.446644][ T991] usb 1-1: Manufacturer: syz [ 741.447014][ T3103] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 741.470007][T12595] 9p: Bad value for 'wfdno' [ 741.473501][ T991] usb 1-1: SerialNumber: syz [ 741.485786][ T3103] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 741.521793][ T3103] usb 7-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 741.526816][ T991] usb 1-1: config 0 descriptor?? [ 741.556015][ T3103] usb 7-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 741.579805][T12589] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 741.622070][ T3103] usb 7-1: config 1 interface 1 has no altsetting 0 [ 741.647443][ T3103] usb 7-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 741.676574][ T3103] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.698710][ T991] usb 1-1: selecting invalid altsetting 0 [ 741.710692][ T3103] usb 7-1: Product: syz [ 741.733989][ T3103] usb 7-1: Manufacturer: syz [ 741.757178][ T3103] usb 7-1: SerialNumber: syz [ 741.925652][ T991] usb 1-1: USB disconnect, device number 35 [ 741.936254][T12589] usb 1-1: cannot submit urb 0, error -19: no device [ 742.043267][ T8714] udevd[8714]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 742.088652][ T3103] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 742.099191][ T5773] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 742.268396][ T5773] usb 4-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 742.285581][ T3103] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 742.316561][ T5773] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 742.333665][ T3103] usb 7-1: USB disconnect, device number 23 [ 742.347356][ T5773] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x8B has invalid wMaxPacketSize 0 [ 742.376196][ T5773] usb 4-1: config 0 interface 0 has no altsetting 0 [ 742.393069][ T5773] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 742.412188][ T8679] udevd[8679]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 742.429217][ T5773] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 742.444059][ T5773] usb 4-1: Product: syz [ 742.456129][ T5773] usb 4-1: Manufacturer: syz [ 742.462560][ T5773] usb 4-1: SerialNumber: syz [ 742.479036][ T5773] usb 4-1: config 0 descriptor?? [ 742.500558][ T5773] usb 4-1: selecting invalid altsetting 0 [ 742.563951][ T9263] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 742.724851][ T9263] usb 6-1: Using ep0 maxpacket: 8 [ 742.740684][ T9263] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 742.776580][ T9263] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 742.786139][ T5773] usb 4-1: USB disconnect, device number 33 [ 742.789364][T12606] loop7: detected capacity change from 0 to 256 [ 742.824732][ T9263] usb 6-1: config 250 has an invalid descriptor of length 102, skipping remainder of the config [ 742.871710][T12606] exfat: Unknown parameter '000000000000000000000040xffffffffffffffff' [ 742.873849][ T9263] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 742.919872][ T9263] usb 6-1: config 250 has no interface number 0 [ 742.954105][ T9263] usb 6-1: config 250 interface 228 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 743.007096][ T9263] usb 6-1: config 250 interface 228 has no altsetting 0 [ 743.039310][ T9263] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 743.093720][ T9263] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 743.136419][ T9263] usb 6-1: Product: syz [ 743.172439][ T9263] usb 6-1: SerialNumber: syz [ 743.325858][ T9263] hub 6-1:250.228: bad descriptor, ignoring hub [ 744.108388][ T9263] hub 6-1:250.228: probe with driver hub failed with error -5 [ 744.127583][T12604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.175934][T12604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.425114][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 744.425230][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 744.454509][ T9263] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 744.572011][ T5773] usb 6-1: USB disconnect, device number 30 [ 744.609258][ T9263] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 744.609314][ T9263] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 744.609356][ T9263] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 744.622063][ T9263] usb 7-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 744.622111][ T9263] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 744.622149][ T9263] usb 7-1: Product: syz [ 744.622177][ T9263] usb 7-1: Manufacturer: syz [ 744.680896][T12623] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 744.701952][ T9263] usb_debug 7-1:1.0: debug converter detected [ 744.746393][ T9263] usb 7-1: debug converter now attached to ttyUSB0 [ 744.960448][ T9263] usb 7-1: USB disconnect, device number 24 [ 745.026441][ T9263] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 745.034504][ T9263] usb_debug 7-1:1.0: device disconnected [ 745.775733][ T9263] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 746.269416][ T9263] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 746.417671][ T9263] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 746.432980][ T9263] usb 1-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 746.449772][ T9263] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 746.478243][ T9263] usb 1-1: Product: syz [ 746.490360][ T9263] usb 1-1: Manufacturer: syz [ 746.520915][T12644] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 746.576863][ T9263] usb_debug 1-1:1.0: debug converter detected [ 746.612723][ T9263] usb 1-1: debug converter now attached to ttyUSB0 [ 746.848455][T12659] futex_wake_op: syz.7.1619 tries to shift op by 144; fix this program [ 747.728951][ T802] usb 1-1: USB disconnect, device number 36 [ 747.752214][ T802] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 747.760576][ T802] usb_debug 1-1:1.0: device disconnected [ 748.131200][ T5353] usb 8-1: new full-speed USB device number 28 using dummy_hcd [ 748.238702][T12679] 9p: Bad value for 'wfdno' [ 748.316411][ T5353] usb 8-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 748.408676][ T5353] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 748.473715][ T5353] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x8B has invalid wMaxPacketSize 0 [ 748.548238][ T5353] usb 8-1: config 0 interface 0 has no altsetting 0 [ 748.601144][ T5353] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 748.662105][ T5353] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 748.717113][ T5353] usb 8-1: Product: syz [ 748.755191][ T5353] usb 8-1: Manufacturer: syz [ 748.786586][ T5353] usb 8-1: SerialNumber: syz [ 748.850129][ T5353] usb 8-1: config 0 descriptor?? [ 748.936275][ T5353] usb 8-1: selecting invalid altsetting 0 [ 749.057412][T12686] netlink: 'syz.6.1629': attribute type 10 has an invalid length. [ 749.289646][ T5353] usb 8-1: USB disconnect, device number 28 [ 749.474657][ T8714] udevd[8714]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 749.852170][T12693] syzkaller0: entered promiscuous mode [ 750.080018][T12693] syzkaller0: entered allmulticast mode [ 754.954984][T12755] futex_wake_op: syz.7.1650 tries to shift op by 144; fix this program [ 756.117303][ T5353] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 756.283033][ T9263] usb 8-1: new full-speed USB device number 29 using dummy_hcd [ 756.330875][ T5353] usb 7-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 756.529810][ T9263] usb 8-1: not running at top speed; connect to a high speed hub [ 756.606485][ T5353] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 756.915440][ T9263] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 756.931082][ T5353] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x8B has invalid maxpacket 179, setting to 64 [ 757.087955][ T5353] usb 7-1: config 0 interface 0 has no altsetting 0 [ 757.100473][ T9263] usb 8-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 757.131196][ T5353] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 757.140457][ T9263] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.156985][ T5353] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 757.168182][ T9263] usb 8-1: Product: syz [ 757.179697][ T9263] usb 8-1: Manufacturer: syz [ 757.185876][ T5353] usb 7-1: Product: syz [ 757.199724][ T9263] usb 8-1: SerialNumber: syz [ 757.204409][ T5353] usb 7-1: Manufacturer: syz [ 757.220447][ T5353] usb 7-1: SerialNumber: syz [ 757.232026][ T9263] oti6858 8-1:1.0: oti6858 converter detected [ 757.249076][ T5353] usb 7-1: config 0 descriptor?? [ 757.256160][T12757] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 757.260987][ T9263] usb 8-1: oti6858 converter now attached to ttyUSB0 [ 757.300919][ T5353] usb 7-1: selecting invalid altsetting 0 [ 757.517704][T12757] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 757.529212][T12757] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 757.553250][T12757] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 757.570187][ T5353] usb 7-1: USB disconnect, device number 25 [ 757.591518][T12757] usb 7-1: cannot submit urb 0, error -19: no device [ 757.749186][ T10] usb 8-1: USB disconnect, device number 29 [ 757.792131][ T10] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 757.814423][ T10] oti6858 8-1:1.0: device disconnected [ 759.346144][ T9263] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 759.522007][ T9263] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 759.532007][ T9263] usb 8-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 759.554884][ T9263] usb 8-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 759.569109][ T9263] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 759.587189][ T9263] usb 8-1: Product: syz [ 759.595916][ T9263] usb 8-1: Manufacturer: syz [ 759.638773][T12786] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.660537][T12788] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 759.713144][ T9263] usb_debug 8-1:1.0: debug converter detected [ 759.748402][ T9263] usb 8-1: debug converter now attached to ttyUSB0 [ 759.790336][T12786] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.971365][T12786] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.972236][ T991] usb 8-1: USB disconnect, device number 30 [ 760.056715][ T991] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 760.089797][ T991] usb_debug 8-1:1.0: device disconnected [ 760.125001][T12786] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.369356][T12803] futex_wake_op: syz.8.1666 tries to shift op by 144; fix this program [ 761.732727][ T5966] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.961383][ T6217] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.087601][ T33] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.293665][ T6398] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.596795][T12830] syzkaller0: entered promiscuous mode [ 763.610700][T12830] syzkaller0: entered allmulticast mode [ 766.724069][ T802] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 766.884669][ T802] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 766.919741][ T802] usb 9-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 766.982614][ T802] usb 9-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 767.006656][ T802] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 767.036365][ T802] usb 9-1: Product: syz [ 767.049061][ T802] usb 9-1: Manufacturer: syz [ 767.073543][T12875] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 767.107651][ T802] usb_debug 9-1:1.0: debug converter detected [ 767.139253][ T802] usb 9-1: debug converter now attached to ttyUSB0 [ 767.353970][ T802] usb 9-1: USB disconnect, device number 21 [ 767.395031][ T802] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 767.425814][ T802] usb_debug 9-1:1.0: device disconnected [ 767.697736][T12892] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1690'. [ 767.751961][ T9263] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 767.901261][ T9263] usb 1-1: Using ep0 maxpacket: 8 [ 767.934595][ T9263] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 767.944696][ T9263] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 767.955123][ T9263] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 767.975458][ T9263] usb 1-1: config 250 has no interface number 0 [ 767.989050][ T9263] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 768.017796][ T9263] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 768.056068][ T9263] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 30768, setting to 1024 [ 768.074637][ T9263] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 768.106399][ T9263] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 768.131916][ T9263] usb 1-1: config 250 interface 228 has no altsetting 0 [ 768.161420][ T9263] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 768.178485][ T9263] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 768.195095][ T9263] usb 1-1: Product: syz [ 768.199555][ T9263] usb 1-1: SerialNumber: syz [ 768.253950][T12903] futex_wake_op: syz.8.1693 tries to shift op by 144; fix this program [ 768.813862][ T9263] hub 1-1:250.228: bad descriptor, ignoring hub [ 768.930088][ T9263] hub 1-1:250.228: probe with driver hub failed with error -5 [ 769.089461][ T9263] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 37 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 769.397827][T12904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.411356][T12904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 769.421196][ C0] usblp0: nonzero read bulk status received: -71 [ 769.560807][ T9170] usb 1-1: USB disconnect, device number 37 [ 769.589925][ T9170] usblp0: removed [ 770.318452][T12927] futex_wake_op: syz.0.1698 tries to shift op by 144; fix this program [ 773.368593][ T5773] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 773.508545][ T5773] usb 6-1: device descriptor read/64, error -71 [ 773.751846][ T5773] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 773.888753][ T5773] usb 6-1: device descriptor read/64, error -71 [ 773.898577][T12896] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.009201][ T5773] usb usb6-port1: attempt power cycle [ 774.106855][T12960] futex_wake_op: syz.3.1703 tries to shift op by 144; fix this program [ 774.358535][ T5773] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 774.590182][ T5773] usb 6-1: device descriptor read/8, error -71 [ 774.820952][T12896] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.992806][T12896] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.025563][T12964] syzkaller0: entered promiscuous mode [ 775.049052][T12964] syzkaller0: entered allmulticast mode [ 775.058439][ T5773] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 775.083157][T12896] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.119802][ T5773] usb 6-1: device descriptor read/8, error -71 [ 775.252944][ T5966] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.277255][ T5966] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.354179][ T8813] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.393547][ T8813] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.404830][ T5773] usb usb6-port1: unable to enumerate USB device [ 775.467540][ T5627] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 775.952389][ T5627] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 776.197420][ T5627] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 776.211309][ T5627] usb 1-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 776.260838][ T5627] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 776.299026][ T5627] usb 1-1: Product: syz [ 776.317579][ T5627] usb 1-1: Manufacturer: syz [ 776.390170][T12966] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 776.415698][T12984] futex_wake_op: syz.8.1711 tries to shift op by 144; fix this program [ 776.923513][ T5627] usb_debug 1-1:1.0: debug converter detected [ 777.233444][ T5627] usb 1-1: debug converter now attached to ttyUSB0 [ 777.245024][ T5627] usb 1-1: USB disconnect, device number 38 [ 777.261498][ T5627] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 777.273357][ T5627] usb_debug 1-1:1.0: device disconnected [ 777.397143][T12986] syzkaller0: entered promiscuous mode [ 777.414196][T12986] syzkaller0: entered allmulticast mode [ 777.889175][ T3103] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 778.448299][ T3103] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 778.466499][ T3103] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 778.485213][ T3103] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 778.499825][ T3103] usb 9-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 778.511003][ T3103] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 778.523045][T13000] syzkaller0: entered promiscuous mode [ 778.530740][ T3103] usb 9-1: Product: syz [ 778.538263][T13000] syzkaller0: entered allmulticast mode [ 778.544203][ T3103] usb 9-1: Manufacturer: syz [ 778.567353][T12990] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 778.602835][ T3103] usb_debug 9-1:1.0: debug converter detected [ 778.658111][ T3103] usb 9-1: debug converter now attached to ttyUSB0 [ 778.795313][T13007] syzkaller0: entered promiscuous mode [ 778.820560][T13007] syzkaller0: entered allmulticast mode [ 778.867496][T13014] futex_wake_op: syz.3.1722 tries to shift op by 144; fix this program [ 779.594952][ T9170] usb 9-1: USB disconnect, device number 22 [ 779.638975][ T9170] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 779.694274][ T9170] usb_debug 9-1:1.0: device disconnected [ 779.882848][T13018] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.919541][T13018] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.163790][T13018] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.218491][T13029] syzkaller0: entered promiscuous mode [ 781.234956][T13029] syzkaller0: entered allmulticast mode [ 781.319306][T13018] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.895220][ T8813] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.919569][ T8813] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.939220][ T8813] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.953368][ T8813] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.076934][T13044] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 782.117828][T13044] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 782.151304][T13044] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 782.180617][T13044] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 782.200928][T13044] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 783.340184][ T5645] Bluetooth: hci0: command 0x0406 tx timeout [ 783.570792][T13092] futex_wake_op: syz.5.1742 tries to shift op by 144; fix this program [ 784.077839][ T5645] Bluetooth: hci3: command 0x0406 tx timeout [ 784.157774][ T5645] Bluetooth: hci6: command 0x0c1a tx timeout [ 784.166649][ T5645] Bluetooth: hci1: command 0x0c1a tx timeout [ 784.174713][ T5645] Bluetooth: hci5: command 0x0406 tx timeout [ 784.613965][ T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 784.697282][T13102] syzkaller0: entered promiscuous mode [ 784.717612][T13102] syzkaller0: entered allmulticast mode [ 785.735669][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 785.973182][ T10] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 785.994368][ T10] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 786.004226][ T10] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 786.014004][ T10] usb 4-1: config 250 has no interface number 0 [ 786.020356][ T10] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 786.032680][ T10] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 786.045122][ T10] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 30768, setting to 1024 [ 786.057750][ T10] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 786.184902][ T10] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 786.198644][ T10] usb 4-1: config 250 interface 228 has no altsetting 0 [ 786.209172][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 786.218523][ T10] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 786.227581][ T10] usb 4-1: Product: syz [ 786.231901][ T10] usb 4-1: SerialNumber: syz [ 786.259432][ T10] hub 4-1:250.228: bad descriptor, ignoring hub [ 786.304253][ T10] hub 4-1:250.228: probe with driver hub failed with error -5 [ 786.424025][T13121] futex_wake_op: syz.8.1751 tries to shift op by 144; fix this program [ 787.537932][T13123] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 787.587804][T13117] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.628948][ T10] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 34 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 787.724883][ T10] usb 4-1: USB disconnect, device number 34 [ 787.766636][ T10] usblp0: removed [ 787.893041][T13117] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.976586][T13128] syzkaller0: entered promiscuous mode [ 787.988007][T13128] syzkaller0: entered allmulticast mode [ 788.200501][T13117] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.413939][T13141] syzkaller0: entered promiscuous mode [ 788.469428][T13141] syzkaller0: entered allmulticast mode [ 789.644372][T13117] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.312866][ T8814] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.144638][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.186494][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.211876][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.381317][T13183] IPVS: stopping master sync thread 13184 ... [ 792.389733][T13184] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 792.687411][ T9170] usb 9-1: new full-speed USB device number 23 using dummy_hcd [ 793.165796][T13195] futex_wake_op: syz.3.1773 tries to shift op by 144; fix this program [ 793.947983][ T9170] usb 9-1: not running at top speed; connect to a high speed hub [ 794.012557][ T9170] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 794.071462][ T9170] usb 9-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 794.107839][ T9170] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.213155][ T9170] usb 9-1: Product: syz [ 794.256055][ T802] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 794.307096][ T9170] usb 9-1: Manufacturer: syz [ 794.372327][ T9170] usb 9-1: SerialNumber: syz [ 794.531126][ T802] usb 1-1: device descriptor read/64, error -71 [ 794.908826][ T9170] oti6858 9-1:1.0: oti6858 converter detected [ 794.929273][ T802] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 794.983716][ T9170] usb 9-1: oti6858 converter now attached to ttyUSB0 [ 795.100238][ T802] usb 1-1: device descriptor read/64, error -71 [ 795.133355][T13207] syzkaller0: entered promiscuous mode [ 795.152450][T13207] syzkaller0: entered allmulticast mode [ 795.239254][ T802] usb usb1-port1: attempt power cycle [ 795.544403][T13217] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.585520][ T802] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 795.612663][ T802] usb 1-1: device descriptor read/8, error -71 [ 795.643206][T13217] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.691874][T13217] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.788165][T13223] futex_wake_op: syz.6.1781 tries to shift op by 144; fix this program [ 796.293453][T13217] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.629299][ T802] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 796.640587][ T991] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 796.678578][ T5627] usb 9-1: USB disconnect, device number 23 [ 796.695711][ T802] usb 1-1: device descriptor read/8, error -71 [ 796.724562][ T5627] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 796.759542][ T5627] oti6858 9-1:1.0: device disconnected [ 796.813636][ T802] usb usb1-port1: unable to enumerate USB device [ 796.831975][ T991] usb 6-1: config 0 has an invalid descriptor of length 8, skipping remainder of the config [ 796.836712][ T57] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.879037][ T991] usb 6-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 796.879813][ T57] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.938371][ T991] usb 6-1: config 0 interface 0 has no altsetting 0 [ 796.961707][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.969818][ T991] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 797.000387][ T991] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 797.032579][ T991] usb 6-1: Product: syz [ 797.049088][ T991] usb 6-1: Manufacturer: syz [ 797.071826][ T991] usb 6-1: SerialNumber: syz [ 797.084454][ T57] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.110072][ T991] usb 6-1: config 0 descriptor?? [ 797.152849][T13226] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.469390][ T991] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 797.570502][ T3103] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 797.848040][ T3103] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 797.862869][T13226] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.882617][ T8679] udevd[8679]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 797.903041][ T991] usb 6-1: USB disconnect, device number 35 [ 797.908048][ T3103] usb 8-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 797.964070][ T3103] usb 8-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 798.030595][ T3103] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 798.041522][ T3103] usb 8-1: Product: syz [ 798.055874][ T3103] usb 8-1: Manufacturer: syz [ 798.123617][T13235] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 798.162356][T13242] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 798.194622][T13242] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 798.217597][ T3103] usb_debug 8-1:1.0: debug converter detected [ 798.262050][ T3103] usb 8-1: debug converter now attached to ttyUSB0 [ 798.289921][T13226] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.495886][T13246] syzkaller0: entered promiscuous mode [ 798.521553][ T991] usb 8-1: USB disconnect, device number 31 [ 798.549891][T13246] syzkaller0: entered allmulticast mode [ 798.578077][ T991] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 798.607850][ T991] usb_debug 8-1:1.0: device disconnected [ 798.697925][T13226] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.447572][T13257] syzkaller0: entered promiscuous mode [ 799.479142][T13257] syzkaller0: entered allmulticast mode [ 799.526519][ T6142] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.668454][ T8009] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.754519][T13262] 9p: Bad value for 'wfdno' [ 800.116126][ T8814] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.249060][ T8009] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.411515][ T3103] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 800.570278][ T3103] usb 6-1: device descriptor read/64, error -71 [ 800.633996][T13274] futex_wake_op: syz.0.1801 tries to shift op by 144; fix this program [ 800.886338][ T3103] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 801.548167][ T3103] usb 6-1: device descriptor read/64, error -71 [ 801.667820][ T3103] usb usb6-port1: attempt power cycle [ 801.941147][T13281] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.012355][ T3103] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 802.067519][ T3103] usb 6-1: device descriptor read/8, error -71 [ 802.097006][T13281] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.257478][T13281] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.339421][ T3103] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 802.369156][ T3103] usb 6-1: device descriptor read/8, error -71 [ 802.413409][T13281] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.489920][ T3103] usb usb6-port1: unable to enumerate USB device [ 802.567594][ T5353] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 802.583127][T13294] syzkaller0: entered promiscuous mode [ 802.611374][T13294] syzkaller0: entered allmulticast mode [ 802.727624][ T5353] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 802.754161][ T5353] usb 9-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 802.783321][ T5353] usb 9-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 802.799960][ T5353] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 802.822815][ T5353] usb 9-1: Product: syz [ 802.835459][ T5353] usb 9-1: Manufacturer: syz [ 802.857762][T13292] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 802.889712][ T5353] usb_debug 9-1:1.0: debug converter detected [ 802.916407][ T5353] usb 9-1: debug converter now attached to ttyUSB0 [ 802.957408][ T8814] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.061985][ T6217] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.101730][ T5353] usb 9-1: USB disconnect, device number 24 [ 803.150308][ T5353] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 803.158832][ T6217] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.218255][ T5353] usb_debug 9-1:1.0: device disconnected [ 803.266911][ T6217] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.371776][T13300] syzkaller0: entered promiscuous mode [ 803.402562][T13300] syzkaller0: entered allmulticast mode [ 803.715147][ T5353] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 803.862443][ T5855] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 803.883527][T13311] syzkaller0: entered promiscuous mode [ 803.892377][ T5353] usb 1-1: Using ep0 maxpacket: 8 [ 803.906002][T13311] syzkaller0: entered allmulticast mode [ 803.920509][ T5353] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 803.952615][T13309] syzkaller0: entered promiscuous mode [ 803.961214][ T5353] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 804.020176][T13315] futex_wake_op: syz.3.1816 tries to shift op by 144; fix this program [ 804.199956][ T5353] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 804.413435][T13309] syzkaller0: entered allmulticast mode [ 804.487096][ T5353] usb 1-1: config 250 has no interface number 0 [ 804.668627][ T5353] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 804.804671][ T5855] usb 8-1: Using ep0 maxpacket: 8 [ 804.837439][ T5353] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 804.850006][ T5353] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 30768, setting to 1024 [ 804.861782][ T5353] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 804.878081][ T5353] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 804.891689][ T5855] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 804.891711][ T5353] usb 1-1: config 250 interface 228 has no altsetting 0 [ 804.926320][ T5353] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 804.954373][ T5855] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 804.965811][ T5353] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 804.986969][ T5855] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 804.988517][ T5353] usb 1-1: Product: syz [ 805.025720][ T5855] usb 8-1: config 250 has no interface number 0 [ 805.034295][ T5353] usb 1-1: SerialNumber: syz [ 805.060349][ T5855] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 805.094373][ T5855] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 805.096022][ T5353] hub 1-1:250.228: bad descriptor, ignoring hub [ 805.128601][ T5855] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 30768, setting to 1024 [ 805.148514][ T5353] hub 1-1:250.228: probe with driver hub failed with error -5 [ 805.167121][ T5855] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 805.200716][ T5855] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 805.236128][ T5855] usb 8-1: config 250 interface 228 has no altsetting 0 [ 805.263047][ T5855] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 805.286204][ T5855] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 805.315596][ T5855] usb 8-1: Product: syz [ 805.327549][ T5855] usb 8-1: SerialNumber: syz [ 805.347084][ T5353] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 43 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 805.374201][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 805.385532][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 805.408901][T13302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 805.458657][ T5855] hub 8-1:250.228: bad descriptor, ignoring hub [ 805.467025][ T5855] hub 8-1:250.228: probe with driver hub failed with error -5 [ 805.653558][T13302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 805.864166][ T5855] usblp 8-1:250.228: usblp1: USB Bidirectional printer dev 32 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 806.090400][T13333] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 806.119917][T13333] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 806.132105][ T5353] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 806.301244][ T5353] usb 4-1: Using ep0 maxpacket: 8 [ 806.314811][ T5353] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 806.337654][ T5353] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 806.358573][T13336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.387146][ T5353] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 806.422249][ T5353] usb 4-1: config 250 has no interface number 0 [ 806.434670][T13336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.445799][T13339] loop6: detected capacity change from 0 to 256 [ 806.451550][ T5353] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 806.472036][T13339] exfat: Unknown parameter '000000000000000000000040xffffffffffffffff' [ 806.518449][ T5353] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 806.553941][ T5353] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 30768, setting to 1024 [ 806.616553][ T5353] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 806.683437][ T5353] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 806.822158][ T5353] usb 4-1: config 250 interface 228 has no altsetting 0 [ 806.885264][ T5353] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 806.907860][ T5353] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 806.919295][ T5353] usb 4-1: Product: syz [ 806.923556][ T5353] usb 4-1: SerialNumber: syz [ 806.934489][ T802] usb 8-1: USB disconnect, device number 32 [ 806.945144][ T5353] hub 4-1:250.228: bad descriptor, ignoring hub [ 806.961268][ T5353] hub 4-1:250.228: probe with driver hub failed with error -5 [ 807.428127][T13356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.438517][T13356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 807.490841][ T991] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 807.557642][T13307] usb 1-1: reset high-speed USB device number 43 using dummy_hcd [ 807.599332][ T5627] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 807.662911][ T991] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 807.702651][ T991] usb 9-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 807.734447][ T991] usb 9-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 807.748079][ T991] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 807.767414][ T991] usb 9-1: Product: syz [ 807.776126][ T991] usb 9-1: Manufacturer: syz [ 807.778320][ T5627] usb 6-1: not running at top speed; connect to a high speed hub [ 807.804012][T13351] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 807.829530][ T5627] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 807.843272][ T991] usb_debug 9-1:1.0: debug converter detected [ 807.859583][ T5627] usb 6-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 807.878502][ T5627] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.904995][ T5627] usb 6-1: Product: syz [ 807.925342][ T5627] usb 6-1: Manufacturer: syz [ 807.931857][ T5627] usb 6-1: SerialNumber: syz [ 807.965459][ T991] usb 9-1: debug converter now attached to ttyUSB0 [ 807.977157][ T5627] oti6858 6-1:1.0: oti6858 converter detected [ 808.004342][ T5627] usb 6-1: oti6858 converter now attached to ttyUSB1 [ 808.077473][ T991] usb 9-1: USB disconnect, device number 25 [ 808.104772][ C0] usblp0: nonzero read bulk status received: -71 [ 808.116779][ T802] usblp1: removed [ 808.121627][ T5353] usblp 4-1:250.228: usblp1: USB Bidirectional printer dev 35 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 808.220104][ T991] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 808.221873][ T5353] usb 4-1: USB disconnect, device number 35 [ 808.270878][T13353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.276163][ T991] usb_debug 9-1:1.0: device disconnected [ 808.333072][T13353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.347727][ T5353] usblp1: removed [ 808.602631][ T802] usb 1-1: USB disconnect, device number 43 [ 808.659627][ T802] usblp0: removed [ 808.777337][T13376] syzkaller0: entered promiscuous mode [ 808.813094][T13376] syzkaller0: entered allmulticast mode [ 809.087305][ T802] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 809.287469][ T802] usb 9-1: Using ep0 maxpacket: 8 [ 809.304579][ T802] usb 9-1: config index 0 descriptor too short (expected 5924, got 36) [ 809.334170][ T802] usb 9-1: config 250 has an invalid interface number: 228 but max is -1 [ 809.356457][ T802] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 809.382243][ T802] usb 9-1: config 250 has no interface number 0 [ 809.403847][ T802] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 809.447538][ T802] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 809.486044][ T802] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 30768, setting to 1024 [ 809.508173][ T802] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 809.535788][ T802] usb 9-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 809.577289][ T802] usb 9-1: config 250 interface 228 has no altsetting 0 [ 809.604778][ T802] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 809.626932][ T802] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 809.637082][ T802] usb 9-1: Product: syz [ 809.642980][ T802] usb 9-1: SerialNumber: syz [ 809.659583][ T802] hub 9-1:250.228: bad descriptor, ignoring hub [ 809.671590][ T802] hub 9-1:250.228: probe with driver hub failed with error -5 [ 809.889484][ T802] usblp 9-1:250.228: usblp0: USB Bidirectional printer dev 26 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 810.260513][T13404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.292060][T13401] syzkaller0: entered promiscuous mode [ 810.292189][T13404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.313938][T13401] syzkaller0: entered allmulticast mode [ 810.335343][ C1] usblp0: nonzero read bulk status received: -71 [ 810.392041][T13406] syzkaller0: entered promiscuous mode [ 810.400079][ T5353] usb 9-1: USB disconnect, device number 26 [ 810.407835][T13406] syzkaller0: entered allmulticast mode [ 810.466253][ T5353] usblp0: removed [ 810.496031][ T5855] usb 6-1: USB disconnect, device number 40 [ 810.571362][ T5855] oti6858 ttyUSB1: oti6858 converter now disconnected from ttyUSB1 [ 810.618515][ T5855] oti6858 6-1:1.0: device disconnected [ 810.656945][ T802] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 810.814514][T13415] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.855360][ T802] usb 7-1: Using ep0 maxpacket: 8 [ 810.974302][ T991] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 811.674549][ T802] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 811.683175][ T802] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 811.692954][ T802] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 811.702961][ T802] usb 7-1: config 250 has no interface number 0 [ 811.709304][ T802] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 811.721950][ T802] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 811.732508][ T802] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 30768, setting to 1024 [ 811.749398][ T802] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 811.763056][ T802] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 811.777718][ T802] usb 7-1: config 250 interface 228 has no altsetting 0 [ 811.787562][ T802] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 811.796715][ T802] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 811.807473][ T802] usb 7-1: Product: syz [ 811.811936][ T802] usb 7-1: SerialNumber: syz [ 811.828804][ T991] usb 1-1: Using ep0 maxpacket: 8 [ 811.837163][ T991] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 811.843946][T13415] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.848499][ T802] hub 7-1:250.228: bad descriptor, ignoring hub [ 811.873659][ T991] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 811.893147][ T991] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 811.902388][ T802] hub 7-1:250.228: probe with driver hub failed with error -5 [ 811.924892][ T991] usb 1-1: config 250 has no interface number 0 [ 811.950784][ T991] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 811.976443][ T991] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 811.998579][ T991] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 30768, setting to 1024 [ 812.030852][ T991] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 812.080910][ T991] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 812.126132][ T991] usb 1-1: config 250 interface 228 has no altsetting 0 [ 812.135421][T13409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.145656][ T991] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 812.159936][ T802] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 26 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 812.178694][ T991] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 812.194010][T13415] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.211430][ T991] usb 1-1: Product: syz [ 812.224590][T13409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.228140][ T991] usb 1-1: SerialNumber: syz [ 812.320428][ T991] hub 1-1:250.228: bad descriptor, ignoring hub [ 812.340431][ T991] hub 1-1:250.228: probe with driver hub failed with error -5 [ 812.418933][T13415] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.558680][ T3103] usb 7-1: USB disconnect, device number 26 [ 812.576413][T13414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.578523][ T991] usblp 1-1:250.228: usblp1: USB Bidirectional printer dev 44 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 812.621026][T13414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.632306][ T3103] usblp0: removed [ 812.662176][T13435] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1871'. [ 812.823399][ T48] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.848569][ T48] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.981593][ T48] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.707518][ T5855] usb 1-1: USB disconnect, device number 44 [ 813.758709][ T5966] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.838457][ T5855] usblp1: removed [ 814.606107][ T5855] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 815.112324][ T5855] usb 4-1: Using ep0 maxpacket: 8 [ 815.126097][ T5855] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 815.136506][ T5855] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 815.148650][ T5855] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 815.158366][ T5855] usb 4-1: config 250 has no interface number 0 [ 815.165508][ T5855] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 815.180131][ T5855] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 815.208568][ T5855] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 30768, setting to 1024 [ 815.249256][ T5855] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 815.289036][ T5855] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 815.301577][T13466] syzkaller0: entered promiscuous mode [ 815.332074][T13466] syzkaller0: entered allmulticast mode [ 815.338882][ T5855] usb 4-1: config 250 interface 228 has no altsetting 0 [ 815.361040][T13467] syzkaller0: entered promiscuous mode [ 815.364844][ T5855] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 815.382344][T13467] syzkaller0: entered allmulticast mode [ 815.390087][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 815.413736][T13462] syzkaller0: entered promiscuous mode [ 815.419435][ T5855] usb 4-1: Product: syz [ 815.438659][ T991] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 815.446442][ T5855] usb 4-1: SerialNumber: syz [ 815.474161][T13462] syzkaller0: entered allmulticast mode [ 815.476426][ T5855] hub 4-1:250.228: bad descriptor, ignoring hub [ 815.510481][ T5855] hub 4-1:250.228: probe with driver hub failed with error -5 [ 815.594001][T13474] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.618056][ T991] usb 7-1: Using ep0 maxpacket: 8 [ 815.634240][ T991] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 815.656890][ T991] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 815.688803][ T991] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 815.696622][T13455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.714763][ T5855] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 36 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 815.730366][ T991] usb 7-1: config 250 has no interface number 0 [ 815.734010][T13455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.760755][ T991] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 815.795644][ T991] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 815.835156][ T991] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 30768, setting to 1024 [ 815.879641][ T991] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 815.917732][ T991] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 815.975007][ T991] usb 7-1: config 250 interface 228 has no altsetting 0 [ 815.999109][ T991] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 816.029635][ T991] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 816.038511][ T9263] usb 4-1: USB disconnect, device number 36 [ 816.063075][ T991] usb 7-1: Product: syz [ 816.070048][ T9263] usblp0: removed [ 816.079462][T13474] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.099365][ T991] usb 7-1: SerialNumber: syz [ 816.138419][ T991] hub 7-1:250.228: bad descriptor, ignoring hub [ 816.167501][ T991] hub 7-1:250.228: probe with driver hub failed with error -5 [ 816.268844][T13474] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.388954][T13482] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.423651][T13463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.446607][ T991] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 27 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 816.466686][T13474] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.484807][T13463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 816.562346][T13482] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.630743][T13487] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1875'. [ 816.855126][T13482] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.913030][ T9263] usb 7-1: USB disconnect, device number 27 [ 816.940369][ T9263] usblp0: removed [ 817.106552][ T6142] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.193915][ T5966] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.224387][T13482] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.286735][T13494] syzkaller0: entered promiscuous mode [ 817.305451][T13494] syzkaller0: entered allmulticast mode [ 817.424657][ T8009] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.454134][ T8009] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.684583][T13508] syzkaller0: entered promiscuous mode [ 817.708595][T13508] syzkaller0: entered allmulticast mode [ 817.725028][ T5966] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.747963][T13515] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1884'. [ 817.776939][ T6217] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.988112][ T991] usb 8-1: new full-speed USB device number 33 using dummy_hcd [ 818.063961][ T6217] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.139441][ T8009] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.157861][ T991] usb 8-1: not running at top speed; connect to a high speed hub [ 818.200799][ T991] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 818.258305][ T991] usb 8-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 818.297044][ T991] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.322864][T13523] syzkaller0: entered promiscuous mode [ 818.327863][ T991] usb 8-1: Product: syz [ 818.343723][ T991] usb 8-1: Manufacturer: syz [ 818.352208][T13523] syzkaller0: entered allmulticast mode [ 818.355404][ T991] usb 8-1: SerialNumber: syz [ 819.230189][ T991] oti6858 8-1:1.0: oti6858 converter detected [ 819.240351][ T991] usb 8-1: oti6858 converter now attached to ttyUSB0 [ 819.700964][T13547] futex_wake_op: syz.0.1892 tries to shift op by 144; fix this program [ 819.922172][ T9263] usb 8-1: USB disconnect, device number 33 [ 820.580111][ T9263] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 820.616973][ T9263] oti6858 8-1:1.0: device disconnected [ 820.818416][ T10] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 820.885001][T13557] syzkaller0: entered promiscuous mode [ 820.899767][T13557] syzkaller0: entered allmulticast mode [ 821.023748][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 821.036419][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 821.067168][ T10] usb 4-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 821.084510][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.101561][ T10] usb 4-1: Product: syz [ 821.122583][ T10] usb 4-1: Manufacturer: syz [ 821.136451][ T10] usb 4-1: SerialNumber: syz [ 821.177133][ T10] oti6858 4-1:1.0: oti6858 converter detected [ 821.200703][ T10] usb 4-1: oti6858 converter now attached to ttyUSB0 [ 821.494447][T13572] syzkaller0: entered promiscuous mode [ 821.516649][T13572] syzkaller0: entered allmulticast mode [ 821.623460][ T802] usb 4-1: USB disconnect, device number 37 [ 821.662014][ T802] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 821.695151][ T802] oti6858 4-1:1.0: device disconnected [ 821.732266][ T9263] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 821.752603][ T3103] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 821.913423][ T9263] usb 6-1: not running at top speed; connect to a high speed hub [ 821.944332][ T3103] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 46011, setting to 64 [ 821.958220][ T9263] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 821.981304][ T3103] usb 7-1: config 0 interface 0 has no altsetting 0 [ 821.990740][ T9263] usb 6-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 822.001541][ T9263] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.017050][ T3103] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 822.027422][ T9263] usb 6-1: Product: syz [ 822.040991][ T9263] usb 6-1: Manufacturer: syz [ 822.045703][ T3103] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 822.055817][ T9263] usb 6-1: SerialNumber: syz [ 822.070908][ T3103] usb 7-1: Product: syz [ 822.079089][ T3103] usb 7-1: Manufacturer: syz [ 822.087454][ T9263] oti6858 6-1:1.0: oti6858 converter detected [ 822.094649][ T3103] usb 7-1: SerialNumber: syz [ 822.106610][ T9263] usb 6-1: oti6858 converter now attached to ttyUSB0 [ 822.118550][ T3103] usb 7-1: config 0 descriptor?? [ 822.135593][T13576] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 822.191970][ T3103] usb 7-1: selecting invalid altsetting 0 [ 822.398801][T13584] syzkaller0: entered promiscuous mode [ 822.422014][T13584] syzkaller0: entered allmulticast mode [ 822.492274][ T5855] usb 7-1: USB disconnect, device number 28 [ 822.502504][T13576] usb 7-1: cannot submit urb 0, error -19: no device [ 822.556881][ T9170] usb 6-1: USB disconnect, device number 41 [ 822.752319][ T8714] udevd[8714]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 822.805196][ T9170] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 822.826045][ T9170] oti6858 6-1:1.0: device disconnected [ 824.017284][T13605] loop0: detected capacity change from 0 to 256 [ 824.053590][T13605] exfat: Unknown parameter '000000000000000000000040xffffffffffffffff' [ 824.433320][ T5627] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 824.548273][T13615] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.018791][T13622] futex_wake_op: syz.8.1920 tries to shift op by 144; fix this program [ 825.131326][ T5627] usb 6-1: Using ep0 maxpacket: 32 [ 825.445273][ T9170] usb 8-1: new full-speed USB device number 34 using dummy_hcd [ 825.511744][ T5627] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 825.532971][ T5627] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 825.542053][ T5627] usb 6-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 825.553183][ T5627] usb 6-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 825.566495][ T5627] usb 6-1: config 1 interface 1 has no altsetting 0 [ 825.585782][ T5627] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 825.609597][ T5627] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.637051][ T5627] usb 6-1: Product: syz [ 825.650878][ T5627] usb 6-1: Manufacturer: syz [ 825.657248][ T5627] usb 6-1: SerialNumber: syz [ 825.690923][ T10] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 825.737387][T13615] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.781684][ T9170] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 46011, setting to 64 [ 825.793760][ T9170] usb 8-1: config 0 interface 0 has no altsetting 0 [ 825.803520][ T9170] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 825.814310][ T9170] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 825.820232][T13615] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.823252][ T9170] usb 8-1: Product: syz [ 825.840159][ T9170] usb 8-1: Manufacturer: syz [ 825.845024][ T9170] usb 8-1: SerialNumber: syz [ 825.855453][ T9170] usb 8-1: config 0 descriptor?? [ 825.861161][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 825.873391][ T10] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 825.883286][ T10] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 825.884941][T13610] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 825.895053][ T10] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 825.910298][ T10] usb 7-1: config 250 has no interface number 0 [ 825.916729][ T10] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 825.939210][ T9170] usb 8-1: selecting invalid altsetting 0 [ 825.949798][ T10] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 825.966979][ T10] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 30768, setting to 1024 [ 825.985242][T13615] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.986956][ T10] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 826.012142][ T10] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 826.075754][ T5627] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 826.090315][ T10] usb 7-1: config 250 interface 228 has no altsetting 0 [ 826.100289][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 826.111774][ T10] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 826.128942][ T10] usb 7-1: Product: syz [ 826.133746][ T10] usb 7-1: SerialNumber: syz [ 826.189028][ T10] hub 7-1:250.228: bad descriptor, ignoring hub [ 826.197112][ T10] hub 7-1:250.228: probe with driver hub failed with error -5 [ 826.288505][ T3103] usb 8-1: USB disconnect, device number 34 [ 826.328107][ T5627] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 826.363583][ T5627] usb 6-1: USB disconnect, device number 42 [ 826.456790][ T10] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 29 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 826.476191][ T8247] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.491537][T13618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 826.508025][T13618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 826.509191][ T8679] udevd[8679]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 826.579396][ T8247] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.669382][ T8813] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.745349][ T8247] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.993841][ T5627] usb 7-1: USB disconnect, device number 29 [ 827.056617][ T5627] usblp0: removed [ 827.125154][T13645] loop5: detected capacity change from 0 to 256 [ 827.142776][T13645] exfat: Unknown parameter '000000000000000000000040xffffffffffffffff' [ 828.111981][ T5627] usb 9-1: new full-speed USB device number 27 using dummy_hcd [ 828.597407][ T5627] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0 [ 828.658964][ T5627] usb 9-1: config 0 interface 0 has no altsetting 0 [ 829.358593][ T5627] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 829.480142][ T5627] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 829.545531][ T5627] usb 9-1: Product: syz [ 829.549810][ T5627] usb 9-1: Manufacturer: syz [ 829.555407][ T5627] usb 9-1: SerialNumber: syz [ 829.568281][ T5627] usb 9-1: config 0 descriptor?? [ 829.593505][ T5627] usb 9-1: selecting invalid altsetting 0 [ 829.939106][ T9170] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 831.068870][ T9170] usb 7-1: Using ep0 maxpacket: 32 [ 831.127917][ T9170] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 831.186772][ T9170] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 831.225516][ T9170] usb 7-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 831.286049][ T9170] usb 7-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 831.322459][ T5627] usb 9-1: USB disconnect, device number 27 [ 831.368309][ T9170] usb 7-1: config 1 interface 1 has no altsetting 0 [ 831.415416][ T9170] usb 7-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 831.442379][ T9170] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.468771][T13679] fuse: Unknown parameter '00000000000000000003' [ 831.481270][ T9170] usb 7-1: Product: syz [ 831.499038][ T9170] usb 7-1: Manufacturer: syz [ 831.519080][ T9170] usb 7-1: SerialNumber: syz [ 832.590951][T13675] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 832.604204][ T9170] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 832.753960][T13693] syzkaller0: entered promiscuous mode [ 832.772882][T13675] usb 8-1: Using ep0 maxpacket: 8 [ 832.792837][T13693] syzkaller0: entered allmulticast mode [ 832.795595][T13675] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 832.822021][T13675] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 832.840182][T13675] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 832.856533][ T9170] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 832.867755][ T9] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 832.876362][T13675] usb 8-1: config 250 has no interface number 0 [ 832.889160][ T9170] usb 7-1: USB disconnect, device number 30 [ 832.896774][T13675] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 832.946221][T13675] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 832.960702][T13675] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 30768, setting to 1024 [ 832.964965][ T9405] udevd[9405]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 832.973196][T13675] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 833.010320][T13675] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 833.024842][T13675] usb 8-1: config 250 interface 228 has no altsetting 0 [ 833.035282][T13675] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 833.055135][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 833.074696][ T9] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 833.088851][T13675] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 833.099330][T13675] usb 8-1: Product: syz [ 833.104169][T13675] usb 8-1: SerialNumber: syz [ 833.111578][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 833.124635][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 833.135267][ T9] usb 1-1: Product: syz [ 833.140077][ T9] usb 1-1: Manufacturer: syz [ 833.144070][T13675] hub 8-1:250.228: bad descriptor, ignoring hub [ 833.159706][T13675] hub 8-1:250.228: probe with driver hub failed with error -5 [ 833.176327][T13700] syzkaller0: entered promiscuous mode [ 833.178379][T13692] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 833.205686][ T9] usb_debug 1-1:1.0: debug converter detected [ 833.222752][ T9] usb 1-1: debug converter now attached to ttyUSB0 [ 833.253048][T13700] syzkaller0: entered allmulticast mode [ 833.375511][T13675] usblp 8-1:250.228: usblp0: USB Bidirectional printer dev 35 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 833.405248][T13680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 833.445943][T13680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 833.487700][ T9] usb 1-1: USB disconnect, device number 45 [ 833.548888][ T9] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 833.609257][ T9] usb_debug 1-1:1.0: device disconnected [ 833.657710][T13701] syzkaller0: entered promiscuous mode [ 833.684586][T13701] syzkaller0: entered allmulticast mode [ 833.726590][T13706] syzkaller0: entered promiscuous mode [ 833.749117][T13706] syzkaller0: entered allmulticast mode [ 833.822104][ T9263] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 833.851042][ T802] usb 8-1: USB disconnect, device number 35 [ 833.884262][ T802] usblp0: removed [ 833.984372][ T9263] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 46011, setting to 64 [ 834.003765][ T9263] usb 7-1: config 0 interface 0 has no altsetting 0 [ 834.033141][ T9263] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 834.052611][ T9263] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 834.071970][ T9263] usb 7-1: Product: syz [ 834.086442][ T9263] usb 7-1: Manufacturer: syz [ 834.096547][ T9263] usb 7-1: SerialNumber: syz [ 834.127344][ T9263] usb 7-1: config 0 descriptor?? [ 834.149033][T13709] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 834.180733][ T9263] usb 7-1: selecting invalid altsetting 0 [ 834.191407][ T802] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 834.285951][T13716] syzkaller0: entered promiscuous mode [ 834.309570][T13716] syzkaller0: entered allmulticast mode [ 834.391559][ T802] usb 4-1: not running at top speed; connect to a high speed hub [ 834.425150][ T802] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 834.545524][ T9263] usb 7-1: USB disconnect, device number 31 [ 834.549581][ T802] usb 4-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 834.575407][ T802] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.611541][T13720] loop8: detected capacity change from 0 to 256 [ 834.615771][ T802] usb 4-1: Product: syz [ 834.639159][ T802] usb 4-1: Manufacturer: syz [ 834.662988][ T802] usb 4-1: SerialNumber: syz [ 834.683989][T13720] exfat: Unknown parameter '000000000000000000000040xffffffffffffffff' [ 834.763039][ T802] oti6858 4-1:1.0: oti6858 converter detected [ 834.831627][ T802] usb 4-1: oti6858 converter now attached to ttyUSB0 [ 834.967238][T13726] syzkaller0: entered promiscuous mode [ 834.988694][T13726] syzkaller0: entered allmulticast mode [ 835.088008][T13730] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1959'. [ 835.324070][ T9263] usb 4-1: USB disconnect, device number 38 [ 835.370764][ T9263] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 835.372902][ T9263] oti6858 4-1:1.0: device disconnected [ 835.538912][ T5627] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 835.669378][T13738] syzkaller0: entered promiscuous mode [ 835.688093][T13738] syzkaller0: entered allmulticast mode [ 835.740329][ T5627] usb 7-1: Using ep0 maxpacket: 8 [ 835.767802][T13748] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.776290][ T5627] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 835.805025][ T5627] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 835.823863][ T5627] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 835.845125][ T5627] usb 7-1: config 250 has no interface number 0 [ 835.865582][ T5627] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 835.882390][ T5627] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 835.906570][ T5627] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 30768, setting to 1024 [ 835.939729][ T802] usb 8-1: new low-speed USB device number 36 using dummy_hcd [ 835.951442][ T5627] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 835.992767][ T5627] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 836.020039][ T5627] usb 7-1: config 250 interface 228 has no altsetting 0 [ 836.036479][ T5627] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 836.048472][ T5627] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 836.065092][ T5627] usb 7-1: Product: syz [ 836.074821][ T5627] usb 7-1: SerialNumber: syz [ 836.092975][T13748] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.112352][ T5627] hub 7-1:250.228: bad descriptor, ignoring hub [ 836.132934][ T802] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 836.135320][ T5627] hub 7-1:250.228: probe with driver hub failed with error -5 [ 836.187052][ T802] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 836.224484][ T802] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 836.275199][ T802] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 836.302595][T13748] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.310816][ T802] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.333385][ T5627] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 32 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 836.371232][ T802] usb 8-1: config 0 descriptor?? [ 836.384315][T13750] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 836.495097][T13748] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.576048][ T9] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 836.716342][T13762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 836.729194][T13762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 836.749169][ T9] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 46011, setting to 64 [ 836.784617][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 836.817868][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 836.828881][ T802] corsair 0003:1B1C:1B3E.0009: unknown main item tag 0x2 [ 836.843648][ T802] corsair 0003:1B1C:1B3E.0009: unexpected long global item [ 836.853095][ T9] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 836.868770][ T802] corsair 0003:1B1C:1B3E.0009: parse failed [ 836.876563][ T9] usb 6-1: Product: syz [ 836.883574][ T9] usb 6-1: Manufacturer: syz [ 836.889575][ T802] corsair 0003:1B1C:1B3E.0009: probe with driver corsair failed with error -22 [ 836.902230][ T9] usb 6-1: SerialNumber: syz [ 836.919054][ T9] usb 6-1: config 0 descriptor?? [ 836.929961][T13755] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 836.948775][ T5966] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.971547][ T9] usb 6-1: selecting invalid altsetting 0 [ 836.995993][ T5966] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.024421][T13764] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.038993][ T9263] usb 8-1: USB disconnect, device number 36 [ 837.137493][ T5966] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.165995][T13764] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.265030][ T57] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.266479][ T9] usb 6-1: USB disconnect, device number 43 [ 837.322399][T13764] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.440310][T13764] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.568419][ T10] usb 7-1: USB disconnect, device number 32 [ 837.841847][ T10] usblp0: removed [ 838.480329][ T8816] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.822262][ T48] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.930917][ T8816] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.006860][ T8816] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.065682][T13783] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.111328][T13785] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.175435][T13783] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.201955][ T9] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 839.202896][T13785] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.352701][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 839.360976][T13791] syzkaller0: entered promiscuous mode [ 839.372890][T13791] syzkaller0: entered allmulticast mode [ 839.374594][ T9] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 839.392657][T13783] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.434016][T13785] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.510124][T13793] syzkaller0: entered promiscuous mode [ 839.528598][ T9] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 839.537349][T13793] syzkaller0: entered allmulticast mode [ 839.538780][ T9] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 839.553516][ T9] usb 7-1: config 250 has no interface number 0 [ 839.560270][ T9] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 839.573017][ T9] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 839.583522][ T9] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 839.607344][ T9] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 839.619718][T13783] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.620093][ T9] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 839.646806][ T9] usb 7-1: config 250 interface 228 has no altsetting 0 [ 839.662593][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 839.681449][ T9] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 839.689811][ T9] usb 7-1: Product: syz [ 839.694680][ T9] usb 7-1: SerialNumber: syz [ 839.704158][T13785] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.719289][ T9] hub 7-1:250.228: bad descriptor, ignoring hub [ 839.730986][ T9] hub 7-1:250.228: probe with driver hub failed with error -5 [ 839.771834][ T48] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.793489][ T48] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.815212][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.842986][ T5966] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.886026][ T5966] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.894780][ T5353] usb 8-1: new full-speed USB device number 37 using dummy_hcd [ 839.938099][ T9] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 33 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 839.974837][ T3318] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.023330][ T3318] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.058632][ T3318] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.074279][ T5353] usb 8-1: not running at top speed; connect to a high speed hub [ 840.092618][ T5353] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 840.114188][ T5353] usb 8-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 840.131991][ T5353] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.150356][ T5353] usb 8-1: Product: syz [ 840.159409][ T5353] usb 8-1: Manufacturer: syz [ 840.178592][ T5353] usb 8-1: SerialNumber: syz [ 840.195238][T13800] loop5: detected capacity change from 0 to 256 [ 840.213642][ T5353] oti6858 8-1:1.0: oti6858 converter detected [ 840.225464][T13800] exfat: Unknown parameter '000000000000000000000040xffffffffffffffff' [ 840.253862][ T5353] usb 8-1: oti6858 converter now attached to ttyUSB0 [ 840.346211][T13805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.381333][T13805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.560494][ T9] usb 7-1: USB disconnect, device number 33 [ 840.583804][ T9] usblp0: removed [ 841.324773][ T5353] usb 8-1: USB disconnect, device number 37 [ 841.520002][ T5353] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 841.555309][ T5353] oti6858 8-1:1.0: device disconnected [ 841.737021][T13814] syzkaller0: entered promiscuous mode [ 841.744407][T13814] syzkaller0: entered allmulticast mode [ 841.838370][ T9] usb 6-1: new low-speed USB device number 44 using dummy_hcd [ 841.872665][ T3103] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 841.925328][T13816] syzkaller0: entered promiscuous mode [ 841.941321][T13816] syzkaller0: entered allmulticast mode [ 842.015145][ T9] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 842.029694][ T3103] usb 4-1: Using ep0 maxpacket: 8 [ 842.034822][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 842.046624][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 842.064232][ T3103] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 842.072235][ T9] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 842.093039][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.094785][ T3103] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 842.113023][ T9] usb 6-1: config 0 descriptor?? [ 842.145268][T13810] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 842.209742][ T3103] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 842.239372][ T3103] usb 4-1: config 250 has no interface number 0 [ 842.279775][ T3103] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 842.456296][ T3103] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 842.634012][ T3103] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 30768, setting to 1024 [ 842.814306][ T3103] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 842.923841][ T3103] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 843.254587][ T3103] usb 4-1: config 250 interface 228 has no altsetting 0 [ 843.283012][ T9] corsair 0003:1B1C:1B3E.000A: unknown main item tag 0x2 [ 843.291031][ T9] corsair 0003:1B1C:1B3E.000A: unexpected long global item [ 843.299924][ T9] corsair 0003:1B1C:1B3E.000A: parse failed [ 843.309035][ T9] corsair 0003:1B1C:1B3E.000A: probe with driver corsair failed with error -22 [ 843.325987][ T3103] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 843.327187][ T9] usb 6-1: USB disconnect, device number 44 [ 843.616311][ T3103] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 843.626379][ T3103] usb 4-1: Product: syz [ 843.632852][ T3103] usb 4-1: SerialNumber: syz [ 844.498195][ T3103] hub 4-1:250.228: bad descriptor, ignoring hub [ 844.565829][ T3103] hub 4-1:250.228: probe with driver hub failed with error -5 [ 844.614969][ T9170] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 844.718848][T13836] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.740363][ T3103] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 39 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 844.797083][ T9170] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 844.821660][T13837] loop0: detected capacity change from 0 to 256 [ 844.835745][ T9170] usb 9-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 844.853026][ T3103] usb 4-1: USB disconnect, device number 39 [ 844.865189][T13837] exfat: Unknown parameter '000000000000000000000040xffffffffffffffff' [ 844.887477][ T9170] usb 9-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 844.898664][T13836] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.903105][ T9170] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 844.923363][ T3103] usblp0: removed [ 844.938456][ T9170] usb 9-1: Product: syz [ 844.946996][ T9170] usb 9-1: Manufacturer: syz [ 845.023955][T13842] syzkaller0: entered promiscuous mode [ 845.037485][T13842] syzkaller0: entered allmulticast mode [ 845.082296][T13846] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.186197][T13836] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.239937][T13846] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.258863][T13829] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 846.115550][ T9170] usb_debug 9-1:1.0: debug converter detected [ 846.130993][ T9170] usb 9-1: debug converter now attached to ttyUSB0 [ 846.165247][ T9170] usb 9-1: USB disconnect, device number 28 [ 846.202779][ T9170] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 846.217319][T13836] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.227814][ T9170] usb_debug 9-1:1.0: device disconnected [ 846.400361][T13846] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.459403][T13853] syzkaller0: entered promiscuous mode [ 846.481612][T13853] syzkaller0: entered allmulticast mode [ 846.544377][T13846] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.809855][ T13] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.016158][ T8009] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.047906][ T8009] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.189453][T13869] futex_wake_op: syz.6.2006 tries to shift op by 144; fix this program [ 848.801844][ T6217] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.707576][ T8817] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.766883][ T8817] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.969680][ T8817] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.995185][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.168512][T13899] futex_wake_op: syz.6.2014 tries to shift op by 144; fix this program [ 852.757527][ T802] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 853.278176][ T802] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 853.322192][ T802] usb 7-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 853.368450][ T802] usb 7-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 853.403238][ T802] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 853.440319][ T802] usb 7-1: Product: syz [ 853.533193][ T802] usb 7-1: Manufacturer: syz [ 854.269578][T13911] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 854.294492][ T802] usb_debug 7-1:1.0: debug converter detected [ 854.322513][ T802] usb 7-1: debug converter now attached to ttyUSB0 [ 854.601995][ T10] usb 7-1: USB disconnect, device number 34 [ 855.501635][ T10] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 855.509985][ T10] usb_debug 7-1:1.0: device disconnected [ 855.733363][T13946] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.387614][T13949] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2027'. [ 856.857339][T13956] loop3: detected capacity change from 0 to 256 [ 856.904009][T13956] exfat: Unknown parameter '000000000000000000000040xffffffffffffffff' [ 856.925492][T13946] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.246707][T13964] futex_wake_op: syz.8.2032 tries to shift op by 144; fix this program [ 858.033369][ T10] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 858.892076][T13946] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.930542][ T10] usb 1-1: Dual-Role OTG device on HNP port [ 858.948821][ T10] usb 1-1: New USB device found, idVendor=17b3, idProduct=0000, bcdDevice= 7.02 [ 858.980368][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.164287][ C0] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] SMP KASAN NOPTI [ 859.176417][ C0] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737] [ 859.184846][ C0] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 859.194068][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 859.204122][ C0] Workqueue: usb_hub_wq hub_event [ 859.209187][ C0] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 859.215089][ C0] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 859.234721][ C0] RSP: 0018:ffffc900000079e8 EFLAGS: 00010012 [ 859.240789][ C0] RAX: dffffc0000000000 RBX: ffff888049d68000 RCX: ffffffff87e64869 [ 859.248763][ C0] RDX: 00000000000000e6 RSI: ffffffff87e646a6 RDI: ffff888049d68128 [ 859.256754][ C0] RBP: ffff888049d68128 R08: 0000000000000004 R09: 0000000000000020 [ 859.264732][ C0] R10: 0000000000000020 R11: 000000000000756b R12: ffff888049d680f0 [ 859.272715][ C0] R13: ffff888049d68128 R14: ffff888049d68740 R15: 0000000000000001 [ 859.280685][ C0] FS: 0000000000000000(0000) GS:ffff888123dde000(0000) knlGS:0000000000000000 [ 859.289613][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 859.296197][ C0] CR2: 00007f26d326ddc8 CR3: 0000000055d5a000 CR4: 0000000000350ef0 [ 859.304165][ C0] Call Trace: [ 859.307433][ C0] [ 859.310272][ C0] f_midi2_set_alt+0x444/0x5f0 [ 859.315045][ C0] composite_setup+0x16f8/0x9290 [ 859.320002][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 859.325641][ C0] ? __lock_acquire+0x49f/0x1a40 [ 859.330593][ C0] ? __pfx_composite_setup+0x10/0x10 [ 859.335898][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 859.341283][ C0] ? do_raw_spin_lock+0x128/0x260 [ 859.346316][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 859.351699][ C0] ? configfs_composite_setup+0xfb/0x130 [ 859.357346][ C0] configfs_composite_setup+0xfb/0x130 [ 859.362835][ C0] dummy_timer+0x2045/0x36f0 [ 859.367431][ C0] ? do_raw_spin_lock+0x128/0x260 [ 859.372464][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 859.378102][ C0] ? find_held_lock+0x2b/0x80 [ 859.382795][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 859.388443][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 859.394117][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 859.399931][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 859.405571][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 859.411219][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 859.417234][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 859.422172][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 859.427812][ C0] ? mark_held_locks+0x40/0x70 [ 859.432583][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 859.438427][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 859.443367][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 859.448588][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 859.453721][ C0] handle_softirqs+0x1ea/0x9b0 [ 859.458496][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 859.463789][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 859.469431][ C0] ? _raw_spin_unlock+0x28/0x50 [ 859.474304][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 859.479944][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 859.485607][ C0] __irq_exit_rcu+0x162/0x210 [ 859.490311][ C0] irq_exit_rcu+0x9/0x30 [ 859.494558][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 859.500199][ C0] [ 859.503124][ C0] [ 859.506045][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 859.512028][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 859.518447][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 56 30 29 f6 48 89 df e8 de 7f 29 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 a5 8f 18 f6 65 8b 05 ee 78 a7 08 85 c0 74 16 5b [ 859.538061][ C0] RSP: 0018:ffffc900000f6928 EFLAGS: 00000246 [ 859.544130][ C0] RAX: 0000000000000006 RBX: ffff88802a524000 RCX: 0000000000000040 [ 859.552100][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a9f82 RDI: ffffffff8c400980 [ 859.560091][ C0] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 859.568056][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000080000000 [ 859.576024][ C0] R13: ffff88802a511478 R14: 0000000000000000 R15: ffff88802a511400 [ 859.584006][ C0] dummy_urb_enqueue+0x56c/0x880 [ 859.588947][ C0] ? bus_for_each_drv+0xb1/0x1e0 [ 859.593890][ C0] usb_hcd_submit_urb+0x268/0x2150 [ 859.599024][ C0] ? __device_attach+0x1e4/0x4d0 [ 859.603972][ C0] ? device_initial_probe+0xaf/0xd0 [ 859.609183][ C0] ? bus_probe_device+0x64/0x160 [ 859.614128][ C0] ? device_add+0x121d/0x1970 [ 859.618821][ C0] ? usb_new_device.cold+0x685/0x115c [ 859.624199][ C0] ? hub_event+0x30a3/0x4a60 [ 859.628798][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 859.634442][ C0] usb_submit_urb+0x827/0x19b0 [ 859.639213][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 859.644852][ C0] ? __init_swait_queue_head+0xca/0x150 [ 859.650411][ C0] usb_start_wait_urb+0x10e/0x580 [ 859.655454][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 859.661102][ C0] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 859.666653][ C0] ? trace_kmalloc+0xeb/0x110 [ 859.671340][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 859.676981][ C0] ? __asan_memset+0x23/0x50 [ 859.681585][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 859.687232][ C0] usb_control_msg+0x328/0x4b0 [ 859.692003][ C0] ? __pfx_usb_control_msg+0x10/0x10 [ 859.697297][ C0] usb_control_msg_send+0xca/0x130 [ 859.702418][ C0] usb_set_interface+0x9b6/0xe20 [ 859.707381][ C0] snd_usb_midi_v2_create+0x629/0x4070 [ 859.712867][ C0] ? __entry_text_end+0x1020b6/0x1020b9 [ 859.718420][ C0] ? irqentry_exit+0x24d/0xa00 [ 859.723196][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 859.728833][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 859.734044][ C0] ? __pfx_snd_usb_midi_v2_create+0x10/0x10 [ 859.739973][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 859.745633][ C0] ? usb_ifnum_to_if+0x16f/0x1d0 [ 859.750596][ C0] snd_usb_create_stream.isra.0+0x386/0x4d0 [ 859.756516][ C0] usb_audio_probe+0xf05/0x3b10 [ 859.761389][ C0] ? __pfx_usb_audio_probe+0x10/0x10 [ 859.766702][ C0] ? do_raw_spin_lock+0x128/0x260 [ 859.771740][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 859.777127][ C0] ? mark_held_locks+0x40/0x70 [ 859.781907][ C0] ? _raw_spin_lock_irqsave+0x52/0x60 [ 859.787283][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 859.792947][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 859.798586][ C0] ? mark_held_locks+0x40/0x70 [ 859.803356][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 859.809201][ C0] usb_probe_interface+0x303/0x8f0 [ 859.814336][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 859.819996][ C0] really_probe+0x241/0xa60 [ 859.824516][ C0] __driver_probe_device+0x20e/0x450 [ 859.829812][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 859.835452][ C0] driver_probe_device+0x4a/0x140 [ 859.840491][ C0] __device_attach_driver+0x1df/0x320 [ 859.845880][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 859.851785][ C0] bus_for_each_drv+0x159/0x1e0 [ 859.856650][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 859.862029][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 859.867670][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 859.872876][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 859.878519][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 859.884358][ C0] __device_attach+0x1e4/0x4d0 [ 859.889142][ C0] ? __pfx___device_attach+0x10/0x10 [ 859.894442][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 859.900082][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 859.905292][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 859.910949][ C0] device_initial_probe+0xaf/0xd0 [ 859.915989][ C0] bus_probe_device+0x64/0x160 [ 859.920761][ C0] device_add+0x121d/0x1970 [ 859.925283][ C0] ? __pfx_device_add+0x10/0x10 [ 859.930161][ C0] ? usb_cache_string+0x60/0x100 [ 859.935102][ C0] ? usb_cache_string+0xd6/0x100 [ 859.940044][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 859.945685][ C0] ? kfree+0x22b/0x6c0 [ 859.949764][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 859.955414][ C0] usb_set_configuration+0xd97/0x1c60 [ 859.960853][ C0] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 859.966945][ C0] usb_generic_driver_probe+0xa1/0xe0 [ 859.972334][ C0] usb_probe_device+0xef/0x400 [ 859.977114][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 859.982502][ C0] really_probe+0x241/0xa60 [ 859.987020][ C0] __driver_probe_device+0x20e/0x450 [ 859.992342][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 859.998010][ C0] driver_probe_device+0x4a/0x140 [ 860.003067][ C0] __device_attach_driver+0x1df/0x320 [ 860.008457][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 860.014385][ C0] bus_for_each_drv+0x159/0x1e0 [ 860.019245][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 860.024629][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 860.030278][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 860.035518][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 860.041162][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 860.047001][ C0] __device_attach+0x1e4/0x4d0 [ 860.051782][ C0] ? __pfx___device_attach+0x10/0x10 [ 860.057101][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 860.062766][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 860.067981][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 860.073658][ C0] device_initial_probe+0xaf/0xd0 [ 860.078727][ C0] bus_probe_device+0x64/0x160 [ 860.083506][ C0] device_add+0x121d/0x1970 [ 860.088079][ C0] ? __pfx_device_add+0x10/0x10 [ 860.092967][ C0] ? usb_detect_static_quirks+0x335/0x3e0 [ 860.098695][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 860.104354][ C0] ? kfree+0x22b/0x6c0 [ 860.108432][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 860.114078][ C0] usb_new_device.cold+0x685/0x115c [ 860.119287][ C0] ? _mutex_trylock_nest_lock+0x2e1/0x310 [ 860.125025][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 860.130237][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 860.135888][ C0] ? mark_held_locks+0x40/0x70 [ 860.140662][ C0] hub_event+0x30a3/0x4a60 [ 860.145108][ C0] ? __pfx_hub_event+0x10/0x10 [ 860.149893][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 860.155543][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 860.161186][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 860.166848][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 860.172487][ C0] ? rcu_is_watching+0x12/0xc0 [ 860.177267][ C0] process_one_work+0xa23/0x1940 [ 860.182240][ C0] ? __pfx_process_one_work+0x10/0x10 [ 860.187611][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 860.193262][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 860.198915][ C0] worker_thread+0x5ef/0xe50 [ 860.203511][ C0] ? __pfx_worker_thread+0x10/0x10 [ 860.208623][ C0] ? kthread+0x13a/0x450 [ 860.212885][ C0] ? __pfx_worker_thread+0x10/0x10 [ 860.217994][ C0] kthread+0x370/0x450 [ 860.222100][ C0] ? __pfx_kthread+0x10/0x10 [ 860.226715][ C0] ret_from_fork+0x72b/0xd50 [ 860.231315][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 860.236435][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 860.242075][ C0] ? __switch_to+0x800/0x10f0 [ 860.246778][ C0] ? __switch_to_asm+0x39/0x70 [ 860.251552][ C0] ? __pfx_kthread+0x10/0x10 [ 860.256173][ C0] ret_from_fork_asm+0x1a/0x30 [ 860.260960][ C0] [ 860.263968][ C0] Modules linked in: [ 860.267855][ C0] ---[ end trace 0000000000000000 ]--- [ 860.273296][ C0] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 860.279194][ C0] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 860.298826][ C0] RSP: 0018:ffffc900000079e8 EFLAGS: 00010012 [ 860.304896][ C0] RAX: dffffc0000000000 RBX: ffff888049d68000 RCX: ffffffff87e64869 [ 860.312868][ C0] RDX: 00000000000000e6 RSI: ffffffff87e646a6 RDI: ffff888049d68128 [ 860.320835][ C0] RBP: ffff888049d68128 R08: 0000000000000004 R09: 0000000000000020 [ 860.328998][ C0] R10: 0000000000000020 R11: 000000000000756b R12: ffff888049d680f0 [ 860.336978][ C0] R13: ffff888049d68128 R14: ffff888049d68740 R15: 0000000000000001 [ 860.344980][ C0] FS: 0000000000000000(0000) GS:ffff888123dde000(0000) knlGS:0000000000000000 [ 860.353944][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 860.360532][ C0] CR2: 00007f26d326ddc8 CR3: 0000000055d5a000 CR4: 0000000000350ef0 [ 860.368504][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 860.375918][ C0] Kernel Offset: disabled [ 860.380237][ C0] Rebooting in 86400 seconds..