last executing test programs: 11m0.056964998s ago: executing program 1 (id=59): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x288002, 0x0) ioctl$PTP_CLOCK_GETCAPS(r0, 0x40043d14, &(0x7f00000003c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(r3, 0x0, 0x22) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x206, 0x2b4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) dup(r7) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r9, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) listen(r8, 0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) 10m58.191719192s ago: executing program 1 (id=64): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8008}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x1}]}}}]}, 0x44}}, 0x8000) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x1) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$getown(r2, 0x9) syz_clone3(&(0x7f00000005c0)={0x1000000, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000200), {0x2b}, &(0x7f0000000400)=""/24, 0x18, &(0x7f0000000480)=""/238, &(0x7f0000000580)=[r5], 0x1}, 0x58) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000780)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f9313244fc7196b8d45ce8e0759f8135edd6500217062c77a4847f216c769f9480df0fbe510602f0c52e318830d56b160f465de1eda5cda1f99959806db7f4299e7cddc6e442788c5ae82c0b6ea7294b82d2f62c3e10e36e1a52aef7bd7acc8e18c87728473436d9423f68073b6531797b7d114df489ffce71d2db9b78f9ad5dcf4650f9", 0xba}], 0x1) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x32}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x82000, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 10m56.474912822s ago: executing program 1 (id=71): socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)='\\', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) 10m55.157913834s ago: executing program 1 (id=75): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac0000000000000000000000005244534b00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 10m53.970967522s ago: executing program 1 (id=80): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r0, r0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070d0000002a940183"], 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg$unix(r2, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f00000012c0)={r6, 0x8002, 0x7fff, 0x0, 0x0, [0x0], [0x2], [0x0, 0x4, 0xfffffffe, 0x5e8], [0x0, 0x0, 0x8000000]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r8}) 10m49.874275397s ago: executing program 1 (id=86): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0cc5640, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@gettaction={0x7c, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x478000}}]}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xffffffffffffff0e, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'skbedit\x00'}}, {0xc, 0x25, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0x7c}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x22001) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000040)={0x2, 0x12, 0x100, 0x109, 0x0, 0xfffffff8, 0x0}) listen(0xffffffffffffffff, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r7 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x6a, 0x6, 0x0, 0x0) r8 = getpgid(0xffffffffffffffff) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r8, 0x6, 0x4002) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r9, 0x0, 0x40000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x3, r10, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000e7ffffffce0000"], &(0x7f0000000040)='GPL\x00'}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 10m34.503658253s ago: executing program 32 (id=86): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0cc5640, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@gettaction={0x7c, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x478000}}]}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xffffffffffffff0e, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'skbedit\x00'}}, {0xc, 0x25, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0x7c}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x22001) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000040)={0x2, 0x12, 0x100, 0x109, 0x0, 0xfffffff8, 0x0}) listen(0xffffffffffffffff, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r7 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x6a, 0x6, 0x0, 0x0) r8 = getpgid(0xffffffffffffffff) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r8, 0x6, 0x4002) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r9, 0x0, 0x40000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x3, r10, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000e7ffffffce0000"], &(0x7f0000000040)='GPL\x00'}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 9m51.146445273s ago: executing program 4 (id=255): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="6736660f28f8660f5cd60f011e0080f3a70fc7b20030bad104ec660f383c4e070fd20f6565653e0f01d4ba2100b80000ef", 0x31}], 0x1, 0x72, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x3ff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9m50.196225431s ago: executing program 4 (id=259): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x7, 0x240, 0x9b99}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0x9, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x8, 0xc66, 0xa8a9, 0x73, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x9, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0xffb, 0xfffff811, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x9, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x0, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x7f, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0xffffffff, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x40000003, 0x9d86, 0xd, 0xfffffff7, 0xc, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) (async, rerun: 64) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1, 0x0, 0x7, 0x8000060000000001}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000002fc0)=@ethtool_wolinfo={0x3, 0x8, 0xfffffffd, "050000009582"}}) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) (async) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x7, 0x0, 0x300}, [@generic="3f6c9361bf67d6215b"]}, 0x20}, 0x1, 0x0, 0x0, 0xc002}, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async, rerun: 32) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) (async, rerun: 64) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r9, 0xae80, 0x0) 9m49.557375238s ago: executing program 4 (id=261): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, 0x4, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfffffff9}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x95}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22eb}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x78}}, 0x24008000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, 0x5, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x8000) ioctl$CEC_ADAP_G_LOG_ADDRS(0xffffffffffffffff, 0x805c6103, &(0x7f0000000280)) r1 = fanotify_init(0x0, 0x80000) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000300)={0x8, r0, 0x80000}) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000340)=0x9, 0x4) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x4, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8}, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000480)={0xca4, 0x7, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000013400)={0x2, [0x1, 0x6]}) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000013500)={&(0x7f0000013440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000134c0)={&(0x7f0000013480)={0x24, 0xf, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000013540), 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000013bc0)={0x108, 0x0, &(0x7f0000013a40)=[@exit_looper, @request_death={0x400c630e, 0x2}, @decrefs, @acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000013680)={@fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x1, 0x0, 0x2d}, @ptr={0x70742a85, 0x1, &(0x7f0000013580)=""/197, 0xc5, 0x2, 0x2e}}, &(0x7f0000013700)={0x0, 0x18, 0x38}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000013840)={@fda={0x66646185, 0x5, 0x1, 0x2e}, @flat=@weak_binder={0x77622a85, 0x10b, 0x8000000000000001}, @ptr={0x70742a85, 0x1, &(0x7f0000013740)=""/202, 0xca, 0x1, 0x31}}, &(0x7f00000138c0)={0x0, 0x20, 0x38}}, 0xc0}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000013980)={@ptr={0x70742a85, 0x0, &(0x7f0000013900)=""/99, 0x63, 0x2, 0x3d}, @fda={0x66646185, 0x7, 0x0, 0x6}, @fda={0x66646185, 0x4, 0x1, 0x14}}, &(0x7f0000013a00)={0x0, 0x28, 0x48}}, 0x40}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f0000013b80)="642da271a072d3182e00a85acb2e374c2afb0ecb638fe5696ec3c75dbf2480"}) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000013c00)=0x7, 0x4) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000013c40)=@vmx={0x8, 0x0, 0x2080, {0x6000, 0xffff1000}, {"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", "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"}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000015d00), r2) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f0000015dc0)={&(0x7f0000015cc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000015d80)={&(0x7f0000015d40)={0x14, r4, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000015ec0)={&(0x7f0000015e00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000015e80)={&(0x7f0000015e40)={0x30, 0x3, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000) fcntl$setlease(r1, 0x400, 0x1) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000015f00)={0xbd4d, 0x55b5, 0x4, 0x1e24}, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000015f80), r2) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000016040)={&(0x7f0000015f40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000016000)={&(0x7f0000015fc0)={0x20, r5, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x400c004) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f0000016300)={&(0x7f0000016080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000162c0)={&(0x7f00000160c0)={0x1cc, 0x0, 0xa26, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xa}, {0xc, 0x90, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0xa9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x401}, {0xc, 0x90, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc}, {0xc, 0x90, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0xfffffffffffffff7}, {0xc, 0x90, 0xa}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4040805}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000016400)={&(0x7f0000016340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000163c0)={&(0x7f0000016380)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000811}, 0x8028000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000016480), r6) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000016540)={&(0x7f0000016440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000016500)={&(0x7f00000164c0)={0x2c, r7, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}}, 0x20000000) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000016580)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000165c0)=[@in6={0xa, 0x4e22, 0x0, @loopback, 0x401}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x10001, @loopback, 0x7}, @in={0x2, 0x4e24, @multicast1}], 0x58) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000016640)=0x2, 0x4) 9m48.972654768s ago: executing program 4 (id=262): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000040)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) close(r1) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x3b5c00, 0x0) socket$rds(0x15, 0x5, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x8a}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9, 0x0, r0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x400841, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, 0x0, 0x0, 0x4) io_uring_enter(r8, 0x47f6, 0x0, 0x2, 0x0, 0x300) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r10, 0x4068aea3, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$sndseq(0xffffffffffffff9c, 0x0, 0x8000) 9m47.956088127s ago: executing program 4 (id=267): syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f) (async) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/3\x00') (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/3\x00') r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x47b, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x2d, 0x20040040) close(0x4) (async) close(0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x4f8, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0x9, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4cc, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x0, 0x40, 0xd, 0xff01, 0x9}, {0x48, 0x0, 0x8, 0xa, 0xa, 0x1}, 0x7, 0x3, 0xde4}}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x3, 0x4, 0x2, 0xb6}, {0x1, 0x2, 0xf92c, 0x8, 0x5, 0x401}, 0x2, 0x1ff, 0x134f}}, @TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_BURST={0x8, 0x6, 0x4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x1, 0x200, 0xfffd, 0x9, 0x3}, {0x9, 0x2, 0x2, 0xf713, 0x9, 0x1000}, 0x1, 0x401, 0x756}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe26cb648b8a15d5}, @TCA_TBF_PTAB={0x404, 0x3, [0xb, 0x8, 0x8, 0x3, 0x3a1ccfe7, 0x7, 0xa, 0x1, 0x8, 0x10001, 0x4, 0x3, 0x5, 0x1, 0x8f53, 0x8000, 0x7f, 0x5, 0xe26c, 0x66, 0xdec, 0x3, 0x4, 0xffff8001, 0x7, 0xfffffe01, 0x2, 0x5, 0x2, 0x9, 0xf61, 0x7, 0xfffffff9, 0x1, 0x1, 0x81, 0x7, 0xfffffff6, 0x4b, 0xffffffff, 0x1, 0x0, 0x1, 0x3, 0x585e5062, 0x3e6, 0x800, 0x433, 0x5, 0x8, 0x1, 0x8, 0x401, 0x8, 0x555, 0xffffffff, 0x5, 0x6e3, 0x80000000, 0x3, 0x4, 0x7, 0x9, 0x5, 0x2, 0x5, 0x9, 0x10001, 0xfffffffa, 0x101, 0x4, 0x7, 0x4, 0x8b8, 0x80000001, 0x7fffffff, 0x4, 0x1, 0xc3cc, 0x401, 0x2, 0x3, 0x2, 0x3, 0x2, 0x5, 0x9, 0x7ff, 0x4e0000, 0xd, 0xe, 0x7, 0x3, 0x8, 0x0, 0x2, 0x9, 0x7, 0xc, 0x7fffffff, 0x800, 0x3, 0xb, 0x4, 0x1, 0x7, 0x1, 0x44c, 0xe, 0x6, 0x9, 0x4, 0x5b, 0x7, 0x7, 0x0, 0xa, 0x4, 0x2, 0x3, 0x6, 0x7, 0x66, 0x0, 0x0, 0xfffffff8, 0x7, 0x5, 0x1ff, 0xb, 0x5, 0x4, 0x10, 0x1, 0x8, 0x1, 0x10000, 0x7, 0x2c, 0x2, 0x4, 0x2, 0x5, 0x0, 0xffff7fff, 0x4, 0x5, 0x0, 0x8, 0x7fff, 0x1, 0xfffffffa, 0x8, 0x2, 0x6, 0x9, 0x0, 0x7f, 0x7ff, 0x2, 0x9, 0x7, 0x7, 0x1000, 0x6, 0x4, 0x6, 0x8001, 0x7fff, 0xfffffffe, 0x5, 0x6, 0x4, 0xffff7fff, 0xfffffff7, 0x3c, 0x1, 0x2, 0x1, 0x38f, 0x6, 0x6, 0xffffff81, 0x3, 0x1, 0x6, 0xffffffff, 0x6ef, 0xfffffffa, 0xa4d, 0x5, 0x1bfc, 0x7, 0x3, 0x40, 0x4, 0xc, 0x3ff, 0x4, 0x80000001, 0xd87, 0x2, 0x1ff, 0x9, 0xf, 0xd, 0x80, 0xc3c, 0x0, 0x0, 0x2, 0x800, 0x868, 0x10000, 0x3, 0x2, 0x2, 0x6c3, 0xfffffff8, 0x6, 0xb, 0xbce, 0x80000001, 0x123, 0x0, 0x5, 0x7, 0x0, 0xfffffffa, 0x9, 0x8, 0xd, 0x5, 0x7, 0x8001, 0x4, 0x2, 0x800, 0x0, 0x67, 0x9, 0x1, 0x7, 0x0, 0x3b, 0x6, 0x10000, 0xfffffff8, 0x8c, 0x1ff, 0xffffffff, 0x0, 0x6, 0xffffffff, 0x4000000, 0xffff]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x98, 0x0, 0x5, 0x1000, 0x401, 0x2}, {0x8, 0x2, 0x5, 0x23, 0x9, 0x7}, 0x6, 0x0, 0x1787}}, @TCA_TBF_BURST={0x8, 0x6, 0x1}]}}]}, 0x4f8}}, 0x20000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r9, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x1, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfbd, 0x64, 0x0, 0xb, 0x88, 0x0, @private=0xa0100fe, @dev={0xac, 0x14, 0x14, 0x1a}}, "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"}}, 0xfcb) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40004) recvmmsg(r8, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000080)=""/41, 0x29}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f0000001480)=""/81, 0x51}, {&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f0000001500)=""/114, 0x72}, {&(0x7f0000001580)=""/83, 0x53}, {&(0x7f0000001600)=""/199, 0xc7}], 0x7}, 0x6}], 0x1, 0x10022, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000000000858045301000000000001090224000100000000080400000103000000092100000001220500090581030000000000"], 0x0) (async) r11 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000000000858045301000000000001090224000100000000080400000103000000092100000001220500090581030000000000"], 0x0) syz_usb_disconnect(r11) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000001010902240001000000000904000002ffffff000905ef"], 0x0) 9m47.635087006s ago: executing program 4 (id=269): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x1100000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x2245, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x8040480) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) fstat(0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x4b) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343e", 0xc4}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x80000020, 0x0, 0x40000000}, 0x10) 9m47.207520232s ago: executing program 33 (id=269): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x1100000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x2245, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x8040480) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) fstat(0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x4b) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343e", 0xc4}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x80000020, 0x0, 0x40000000}, 0x10) 4m57.063983958s ago: executing program 5 (id=1316): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r2 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x84, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x48, 0x16, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x3ff, 0x6fb, 0xffffffff, 0x88a8}}, {0x14, 0x1, {0xe39, 0x3f, 0xd, 0x8100}}, {0x14, 0x1, {0x6, 0x6af, 0x7, 0x88a8}}]}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x6}]}, 0x84}, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) r6 = msgget$private(0x0, 0x4a0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c0002800600010000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgctl$IPC_STAT(r6, 0x2, 0x0) msgsnd(r6, 0x0, 0xe3, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0xfffffffffffffff9, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4m55.95015188s ago: executing program 5 (id=1317): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_io_uring_setup(0x895, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0xfffffffe, 0xbfdffddc}, &(0x7f00000001c0), &(0x7f00000000c0)) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x1ff, 0x2, 0x2, 0x9, 0x4, 0x0}) fcntl$lock(r2, 0x24, &(0x7f0000000340)={0x2, 0x0, 0xfffffffffffffe01, 0x1, r3}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000040)={0x5, {"4e068be8035430cf8aa115d0d8d0f21c", "af86a7d62fdce0b68c2a7502b5b00c9f", "faef725a066e767106fa1a96391039d1"}, 0xe, 0x5}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 4m54.946529326s ago: executing program 5 (id=1321): prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) (async) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) (async) r0 = gettid() tkill(r0, 0x12) (async) r1 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x465f, 0x8, 0x3, 0x389}, &(0x7f00000004c0)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) tkill(r0, 0x14) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xd231c4f959ad4808) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000844) (async) socket$unix(0x1, 0x1, 0x0) (async) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000300)={0x1, 0x489, 0x0, 'queue0\x00', 0x10000}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000009c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f00000005c0)={0x0, 0x8, 0x7fffffffffffffff}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000000f00)={{r4}, r6, 0x10, @inherit={0x0, 0x0}, @devid=r7}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) (async) fchdir(0xffffffffffffffff) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r8, 0x0, 0x0) 4m54.712570239s ago: executing program 5 (id=1323): syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x1, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={0x0, @l2={0x1f, 0x271, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x1}, @phonet={0x23, 0x5b, 0x7, 0x3}, @llc={0x1a, 0x0, 0xff, 0x3, 0x7, 0x9, @local}, 0x4, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)='batadv_slave_1\x00', 0xd, 0x4, 0x81}) 4m51.519161128s ago: executing program 5 (id=1335): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x4, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000340)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000480)=@multiplanar_overlay={0xfffffbff, 0x3, 0x4, 0x1000, 0x7, {0x0, 0x2710}, {0x5, 0x2, 0x40, 0x4, 0x8, 0x73, "aa769add"}, 0x4, 0x3, {&(0x7f0000000400)=[{0x8, 0x5, {0x8001}, 0x800}, {0x101, 0x2, {0x45e}, 0x6}]}, 0x2, 0x0, r3}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') accept4$inet6(r4, 0x0, &(0x7f00000001c0), 0x100000) openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x4843, 0x1ef) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r5) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, 0x0) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x60, 0x2, 0x8, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x33}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x80000000}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf9}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004e826d4094225a4241d10102030109022b00010400000009040000026964c200090504060000000000070556"], 0x0) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r7 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r7, &(0x7f0000000000)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r7, &(0x7f00000000c0)={0x0, 0xfc}, 0x2) close(r7) openat$dir(0xffffff9c, &(0x7f00000003c0)='./file1\x00', 0x305341, 0x106) sendmsg$NFT_BATCH(r6, 0x0, 0x4040080) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x1, 0x17c1, 0x8}}}}}, 0x0) 4m51.187067412s ago: executing program 5 (id=1336): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) (async) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x19) r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x28, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xfc}}, 0x0) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x50, r0, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x5, 0x5a}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x4000004) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100dff1174a9bb9ae5f0100b50207c1b90cd3380001000000000015cc1c00b8318616bb2a75f7a63bb7fbf834ad58cbe1f7f009dab70a8d8a1e0397"], 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00110400000018b67fc1727b1bd1a57e897424f06164da060a789f46c7e47e7d2c88fb91e320a02c48e8c350ce82659d14a4024a15240cc12a2bc55ca0f95fea1f522ca4ffc35af52bb5c2fd71df681cc6bacc4995f09f39dba992e2f07cc33252c48ba02342d84d8173d0ef2fa173a2a2fb8146904705f5e4c6dcc2009669246eda9d3bb2bbf1e5dbfdaa95829dd0f389aefa948b087d17681360c27116838a9a5c204e9d8fa7ac5457ea6b3d53b39b7b7801b0648f8d33806f3be0ff2da78063d95b3028211191e9656ac11bc02cd7097f983be724a48a73efd630ec12b84c9a259aa7050534fc1f712a0115ef313e9d7f2c04189e74ab8c41a965e3b57500f09511797ccc9dc65e6d1055ae64743c124e39e5cb613a4ccf0ebaf6c380a6ee3ca13f6e0f95543b7c308e5a255f31772b62b88b806e1302cd18b39981911419157b2a623b7370f7cc957a569a8cd717924a"], 0x0, 0x0, 0x0, 0x0}) (async) socket$alg(0x26, 0x5, 0x0) 4m50.782332913s ago: executing program 34 (id=1336): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) (async) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x19) r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x28, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xfc}}, 0x0) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x50, r0, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x5, 0x5a}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x4000004) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100dff1174a9bb9ae5f0100b50207c1b90cd3380001000000000015cc1c00b8318616bb2a75f7a63bb7fbf834ad58cbe1f7f009dab70a8d8a1e0397"], 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00110400000018b67fc1727b1bd1a57e897424f06164da060a789f46c7e47e7d2c88fb91e320a02c48e8c350ce82659d14a4024a15240cc12a2bc55ca0f95fea1f522ca4ffc35af52bb5c2fd71df681cc6bacc4995f09f39dba992e2f07cc33252c48ba02342d84d8173d0ef2fa173a2a2fb8146904705f5e4c6dcc2009669246eda9d3bb2bbf1e5dbfdaa95829dd0f389aefa948b087d17681360c27116838a9a5c204e9d8fa7ac5457ea6b3d53b39b7b7801b0648f8d33806f3be0ff2da78063d95b3028211191e9656ac11bc02cd7097f983be724a48a73efd630ec12b84c9a259aa7050534fc1f712a0115ef313e9d7f2c04189e74ab8c41a965e3b57500f09511797ccc9dc65e6d1055ae64743c124e39e5cb613a4ccf0ebaf6c380a6ee3ca13f6e0f95543b7c308e5a255f31772b62b88b806e1302cd18b39981911419157b2a623b7370f7cc957a569a8cd717924a"], 0x0, 0x0, 0x0, 0x0}) (async) socket$alg(0x26, 0x5, 0x0) 2m43.56726929s ago: executing program 6 (id=1808): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_int(r0, 0x0, 0x16, 0x0, &(0x7f00000001c0)=0x3) (async) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x200048c5) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000040)) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0x8c88}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x5, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0x54}}, 0x0) 2m43.351373895s ago: executing program 6 (id=1810): socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2}, {0xa, 0x0, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800086}, r4}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @mcast1, 0x5}, {0xa, 0x0, 0x6, @private2}, r4}}, 0x48) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r5, 0x3b65, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r6 = syz_io_uring_setup(0x563b, &(0x7f0000000300)={0x0, 0x20f5, 0x140, 0x1, 0x2be, 0x0, r2}, &(0x7f0000000280), &(0x7f0000000400)) r7 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0xb5ac, 0x400, 0x1, 0x4003, 0x0, r6}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, 0x0, 0x0, 0x4) syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x350}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x6000, @fd_index=0x5, 0x73, 0x0, 0x0, 0x1e, 0x1, {0x3}}) syz_io_uring_submit(r8, r11, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd=r1, 0x3, 0x0, 0xc, 0x0, 0x1}) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_FADVISE={0x18, 0x73, 0x0, @fd=r5, 0x5, 0x0, 0x2d, 0x1, 0x1}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r2, 0x80, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x2, 0xfffffffe}}) io_uring_enter(0xffffffffffffffff, 0x3514, 0x9141, 0x69, 0x0, 0x0) 2m42.034208849s ago: executing program 6 (id=1812): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff00000000000000000000000000004000040000000000000200000000000000000200"/111], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="c4000000190001000000000000004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a000000870000000b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="01000000000000ffffff80000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00"/74], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) 2m41.879554583s ago: executing program 6 (id=1813): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_open_dev$loop(0x0, 0xffffffff7ffffffd, 0x160862) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r0, r0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070d0000002a940183"], 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg$unix(r2, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000001380)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f00000012c0)={r7, 0x8002, 0x7fff, 0x0, 0x0, [0x0], [0x2], [0x0, 0x4, 0xfffffffe, 0x5e8], [0x0, 0x0, 0x8000000]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) 2m38.469902205s ago: executing program 6 (id=1823): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff00000000000000000000000000004000040000000000000200000000000000000200"/111], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="c4000000190001000000000000004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a000000870000000b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000080ffffff000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00"/74], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) 2m38.25538963s ago: executing program 6 (id=1825): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[@nested_amd_vmload={0x182, 0x18, 0x3}, @uexit={0x0, 0x18, 0x8001}, @wr_drn={0x68, 0x20, {0x3, 0xc4}}, @nested_amd_invlpga={0x17d, 0x20, {0x0, 0xdaae}}, @out_dx={0x6a, 0x28, {0x1581, 0x0, 0x1}}, @code={0xa, 0x56, {"f20f108100680000470f0966b808018ed80f2043410f01d166ba400066ed66baa100b000eec744240051000000c74424020d000000ff1c242ef30fc7b680ffffff410f01f8"}}, @nested_create_vm={0x12d, 0x18, 0x8}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x457, 0x10, 0xffff, 0x2}}, @uexit={0x0, 0x18, 0x2}, @enable_nested={0x12c, 0x18}, @code={0xa, 0x52, {"66ba4300b800980000efc461fe70fedeb9800000c00f32f30f09410fc79cd2fb00000066b889000f00d066bad104ed66450f6949bb65430f01d1c4e30d184ac58f"}}], 0x1c0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYRES16, @ANYRESDEC=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) r4 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$USBDEVFS_REAPURB(r6, 0x4008550c, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r4, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m22.763806653s ago: executing program 35 (id=1825): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[@nested_amd_vmload={0x182, 0x18, 0x3}, @uexit={0x0, 0x18, 0x8001}, @wr_drn={0x68, 0x20, {0x3, 0xc4}}, @nested_amd_invlpga={0x17d, 0x20, {0x0, 0xdaae}}, @out_dx={0x6a, 0x28, {0x1581, 0x0, 0x1}}, @code={0xa, 0x56, {"f20f108100680000470f0966b808018ed80f2043410f01d166ba400066ed66baa100b000eec744240051000000c74424020d000000ff1c242ef30fc7b680ffffff410f01f8"}}, @nested_create_vm={0x12d, 0x18, 0x8}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x457, 0x10, 0xffff, 0x2}}, @uexit={0x0, 0x18, 0x2}, @enable_nested={0x12c, 0x18}, @code={0xa, 0x52, {"66ba4300b800980000efc461fe70fedeb9800000c00f32f30f09410fc79cd2fb00000066b889000f00d066bad104ed66450f6949bb65430f01d1c4e30d184ac58f"}}], 0x1c0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYRES16, @ANYRESDEC=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) r4 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$USBDEVFS_REAPURB(r6, 0x4008550c, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r4, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m22.419200243s ago: executing program 2 (id=2077): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) r2 = gettid() mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0x5, &(0x7f0000000400)={0x2, 0xffffffff, 0x201}) rt_tgsigqueueinfo(r3, r2, 0xe, &(0x7f0000001000)={0x21, 0x8, 0xb}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001980)={0xb, {"a2e3ad214fc752f9192909094bf70e0dd038e7ff7fc6e5539b324c078b089b3b353b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d074c0936cd3b78130daa6bd8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aa090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080578386522449df466c632b3570243f989cce3803f465e41e610c2021d653a552f9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341adbe50861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357ca8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795eff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee532592897cd12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ffca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160eca6b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4cf8d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb17167fbeac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb5cebff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa03c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea9400004facfd4c735a20307c737afae5136651b1b9bc522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abbd02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d96dfda3c4f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a935908001cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1f1d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488ef5d989d385cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd41d95af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f480f6f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fdedda7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c218b0868cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000021d71f00000000000000000000000000000000000600", 0x1000}}, 0x1006) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="7bfd61680702d6cbe498113eff7465ab8727a2f57bc8944d658fd14bb39c73c36faf190d5a80ccd976b40559c9b966dddaedd5fdc80aabc6d21f52cbb55d9829b1a9cf9ac73775", 0x47) listen(r1, 0x5) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000012000101000000000000000000000000224e00000000000004000000000000000000000000000000000000000000200000cb0800", @ANYRES32=0x0, @ANYBLOB="00000000000000000004"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) unshare(0x6a040000) r7 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x4000006, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90a, 0x78, '\x00', @string=&(0x7f0000000040)=0xfa}}) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x17) r9 = eventfd(0x7) r10 = eventfd2(0x3ff, 0x80001) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000000)={r9, 0x2, 0x2, r10}) 1m22.204308533s ago: executing program 2 (id=2078): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x6, 0x121001) ioctl$SNDRV_PCM_IOCTL_PAUSE(r1, 0x40044145, &(0x7f0000000080)=0x100) ioctl$CEC_TRANSMIT(r0, 0xc0386105, 0x0) 1m22.140386857s ago: executing program 2 (id=2079): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000400)='net/llc/socket\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x1882, 0x100) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x5ebf40, 0x5) sendfile(r3, r2, &(0x7f00000001c0), 0x8) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0022150000000773e2e6ae18e126774428b6609338eb010300000000000000ace05c2c25c25dbdf133be13fc8be4a724a64fffc37042850700000000000000bffc109e02c4bd4b43e37a48694fa873ac9577c9eb23c17802d7c7fbc9dbca46e7c24e3f2d4c779d18e176831c08733b44a8cb7ff4914ed9ee1db281f249f045336960c9fd10ab436ab14d6451ab3a5a000000000000000000d5946e82dc732e5d214cd06925f925fd7ced62375cde3d72aa1848f0f0e75da7f8c2dbeb77bf178dce17bcdd5660b592fd3bc4cfe4"], 0x0}, 0x0) 1m19.024459342s ago: executing program 2 (id=2087): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x101042) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000200)="9b9f2580764ab62b64845f1df4a13d75853182b38b3617d3ecfff74e9370e5a4703f5d39d6795572a148689d4361ae0a2954423863d4a5e26e067b09a5b29eba75f216158507bedf197c96685a6f335d6b7b82aa1c86dd10d2b8128a0e99616cbf480535a16225db50c47cb65cc5478a20c8c63aacc9ff26ccdf4a1258a275b7acb41a0bebd12e9aea47985af79ca22566f74e49a4e9", 0x96}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$SNDCTL_DSP_STEREO(r6, 0xc0045003, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c80)=ANY=[@ANYBLOB="bf16000000000000b70700001f0000005070000000000000200000000000c00095000000000000002ba728041598d6fbd30cb599e83d24a3aa81d36bb3010100bd2321afb56fa54f26fb0b71afe6adfefcf1d8f7faf75e0f226bd99eea7960717142fa9ea4318123741c4a0e168c1886d0d4d94f2f4e345c652fbc16ee988e6e0dc8cedf3ce99fbfbf9b0a49ef23d410f6296b32a834388107200759cda9036b4e369a9e152ddcc7b1b85f3c4744aeac698890c864d59887a59905f1e07f40b1cd3641f8c192c368590f894cd4e1110bec4e9027a0c8055bbfc3a96d2e8910c2c3b35967dec6e802f5ab3eea57b09a2ed4048d3b867ddd58211d6ececb0cd2b6d357b85a0218ce740068f4025c0bf1aad90738725837079e468ee207d2f73902fbcfcf49822775985bf31b715f5888b24efa000000000000ffffff010100000000000000000000000000020000000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9736bdeab29ea3323aa9fdfb52faf449c3bfd09000000b91ab219efdebb7b3de8f67581cfe36bc120e3b39a6e5a796a1d4223b9ff7ffcad3f6c962b9f292324b7ab7f7da31cf41ab11e0a494034127dd1c6592df1a6c64d8f20a67745409e011f1264d43e153b3d34899f40159e800ea2474b544035a30b23bcee46762c2093bcc9eae5ee3e980026c96f80ee1a74e04bde74fa4ffa4d9aaa705989b8e6731e2401b6a560e3296e52d337c56abf112874ec309bae5fa4c81e5c9f42d9383e41d277b10392a96286744f839c3f128f8f92ef992239eafce5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637598f37ad380a447483cac394c7b06000e3b1c39b2e00916de48a4e70f03cc4146a77af02c1d4cef5379da860aed8477dfa8ceefb405005c6977c78cdbf37704ec737555393c61a008280b064bda144910fe050038ec9e47de89298b7bf4d769ccc18eede00e8ca5457870eb30d211e23ccc8e06cd58b61799257ab55ff413c86ba9affb12ec757c7234c270246c87a901160e6c07bf6cf03b5ed04465746ff8809c3a0d46ff7f000000000000ad1e1f493354b2822b9837421134c0167d78e6c24ed0a2768e827172ea3b774a1467c89fa0f82e8440105051e5510a33dc5a5e143fbfff161c12ca389cbe4c51b3fa00055cc1b66c5fd9c26a54d43fa050645bd6109b113be7664e08add7115c61afcb718cf3c4680b2f6c7a84a4e378a9b15bc20f49e298727340e97cdefb40e56e9cfad973347d0de7ba4754ff231a1b033d8f841ba3442b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf46306f2ef79e184f5e93ba5c8c2a4c0443fb652b8d4c2ff030000000000000007b82e6044f643068cd47ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c99220002af8c5e13d52c83ac3fa7c3a3ee6c08384865b66d2b4dcb5dd9cba16b64ebbbf8702ae12c77e6e34991a225c120a3c950942fe0bc9f2a1a7506d35e5b439edeb5288aeda890cf8a4a6f31ba6d9b8cb098f935bdcbb29fd0f1a342c9eed00000000ab6640a9dea0b6c91996d65da6c24a8f2a86c814459f3cdaaf99000000000000000000bf2130d1b32c826563c508d0ad23bc83ba3f3757210afcf2a64783057e177615c068bd7d74233da1a3b56d4e04a7ec4792b1c4cffddbbdcfdd13ab52f5aaab812201d1aba3d70471fcd9b466569f3ef72f39d87fcccab514fc02b70be8629c9b73ce7bc4be7f8be71cb7b2d0a4acff8f6abe7dbad64d7cfa6396a6ab8487c383e24d4a8051f80e1811e387723a25dda119f64b35e71c5400000000000000000000000000000034c751ebdf3f20a95b817ea3df3d6c0002a41783499d4411ccbbeed215b745058e56c70afe8016b3dd359e785b36e609f173cc6b893ecd138289709839af6c95fbed6c33e401ec747820d6a6283b3452c57a5d44cacd363589845637071320921d22c1663964ed0700000062f3d90f0eb634ae331385d502fc7cc33158bc306d8c3bdae8108a2380000000000000008832ec0906aaec43659c79c8adfdeb1fd291c6fc6737b0f961f3beaa3e02f7762c5dd633d13b5e487e996597b2ab42c81eb7dd8390e13b395aacce4683e55bcfe8c17615257364365fd48bd77da79e52ce9edfe6dca9c43907f3a85cf655ccd9d624e8c6f7932c4d719347f39ef006c2df747e27a2d16304fa000008ffffffffffffff003049ca923d059c0ab5d886a491adacb7e4b43b1b57776e5fe25cf105fa57f000756755b7230e2c0c1fed5487271c4f2981cf8f4351ef5d08641dacaed0000800b805fbd1b474c9ed0dc19ad6e99b66ee0f8c9d697655ebdf5ef30d1b92bd283df88c1096d4bd3686e18ab07f9b580afbd4bd4d8979686422849b04024f609a7b76e902d35343793d99fe395ae73166187c64a501c1f4bb736fcf1dfde7da6bea1945a14f1c578093e6cfb4702a95fb4f653064244950ae227f2a22678e2ff4699bfcba3b7d5656d9be441d07cc3ba51f5b9e825fbec6aee7f9e1b04cdabf99bd760036f74dec91d341c885e785c8517cc50138be2447fa04b77acd2fd078f1da244051e44b5a881197733ba420c9d6b02fd01fa9369f8d3310be2ff1ad5952e025ce59c2dc8327d26fc4facd5915007d22dfccf67dfb53ae2f72a0812ad121fc7de5aba071b83ebf271a5140c6a0b115bd05d7fff46fe144d9fac4ee0a7a2f7242737fd622dc74ca2d79585d4c821d2294b779eebbaac7d81cdaa5ac506ab269be6ff4f7dd9d5ce2e0b1eef2"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x7, 0x22, 0x0, &(0x7f0000000200)="24c2afc3a2e0527bea330054165096fe838bfab80e83d34f30beffcc4de894b90e95", 0x0, 0xffaf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$audion(0x0, 0x3, 0x1) connect$unix(r4, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbdf2501000000000000000941000000140018020000007564158c28b5703a73797a3200"], 0x30}, 0x1, 0x0, 0x0, 0x4880}, 0x40090) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231a0500400012800e0001006970366772657461700000002c000280140006000000000000000000000000000000000114000700fe"], 0x60}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000014) 1m17.218061044s ago: executing program 2 (id=2094): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000c80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x24, r1, 0x501, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x34}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000800}, 0x40000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xfff9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2d}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_BITWISE_DREG={0x8}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000c80)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x24, r1, 0x501, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x34}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000800}, 0x40000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xfff9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2d}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_BITWISE_DREG={0x8}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) (async) 1m17.003074045s ago: executing program 2 (id=2095): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xc3) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x6, 0x1, 0x6e360b59, 0x1, 0xe, 0x1d, 0x1}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000040)=[0x0], 0x1, 0x1}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r4) r5 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe64, 0x1ff, @empty, 0x2}, 0x1c) r6 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) r7 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe64, 0x3, @empty, 0x2}, 0x1c) connect$unix(r7, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000004e00010026bd700000020000a38200"], 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000080) close(r4) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r9, &(0x7f0000000000)='./file0\x00', 0x5) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0xc0109207, 0x0) 1m1.906992002s ago: executing program 36 (id=2095): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xc3) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x6, 0x1, 0x6e360b59, 0x1, 0xe, 0x1d, 0x1}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000040)=[0x0], 0x1, 0x1}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r4) r5 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe64, 0x1ff, @empty, 0x2}, 0x1c) r6 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) r7 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe64, 0x3, @empty, 0x2}, 0x1c) connect$unix(r7, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000004e00010026bd700000020000a38200"], 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000080) close(r4) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r9, &(0x7f0000000000)='./file0\x00', 0x5) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0xc0109207, 0x0) 9.383924544s ago: executing program 7 (id=2332): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000002c0)={0x6, 0x0, [{0x292, 0x0, 0x7}, {0xbb8, 0x0, 0x9}, {0x0, 0x0, 0x2}, {0x690, 0x0, 0x8}, {0x242, 0x0, 0x1}, {0xb26, 0x0, 0xf}]}) 9.343357829s ago: executing program 7 (id=2334): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0xd, 0x56, 0x0, 0x2, 0x0, 0x70bd29, 0x25dfdbfd}, 0x10}}, 0x20000000) (async) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0xd, 0x56, 0x0, 0x2, 0x0, 0x70bd29, 0x25dfdbfd}, 0x10}}, 0x20000000) recvmmsg(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x40, 0x0) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8101, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = eventfd(0x5) r5 = dup(r2) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000040)={r4, 0xc, 0x2, r5}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000001980)) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000040)=@x86={0x79, 0xd, 0xf, 0x0, 0xb8e, 0x1, 0x5, 0x26, 0x3, 0xea, 0x26, 0x2, 0x0, 0x9, 0x9, 0x2, 0x3, 0x1, 0x9, '\x00', 0x0, 0x7}) landlock_restrict_self(r1, 0x0) r7 = syz_usb_connect(0x1, 0x24, &(0x7f0000000080)=ANY=[@ANYRES64, @ANYRES8=r0, @ANYRES32=0x0, @ANYRESHEX=r1], 0x0) fdatasync(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x565c}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x565c}}, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r10, 0x4068aea3, &(0x7f0000000680)) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r10, 0x4068aea3, &(0x7f0000000680)) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x13, r11, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000002}, 0x801) (async) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000002}, 0x801) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, 0x0, 0xfffffffffffffffd], 0x0, 0x8340}) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="20000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.779478655s ago: executing program 7 (id=2337): syz_usb_connect(0x0, 0x3d7, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c50301000000000904"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x3d7, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c50301000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)={0x40}, 0x0, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x53aa, &(0x7f00000002c0)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x53aa, &(0x7f00000002c0)) r1 = socket$unix(0x1, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x8b, 0x100000500) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_tcp_int(r8, 0x6, 0x2c, &(0x7f0000000280)=0xfffffff8, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b7060000000000012e400300000000006506020001cd000071189c0000000000c3640000f10000006b0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e6191a12bebf9f9804ea033388cd15b65877ad4b200000000000000000beca090f32050e436fe275daf51efd601b6bf01c8e8b1abe4fef3bef7074815ae98743d1ace4c46631256dd19aed0d600c0b6199fe3ff3128e599b0eaebbdbd7359a48f5b0afc3996792043a6787bac46aa7aa400000000000069669622208266f896ba2c9e73c2efeec2dc565fbafb2cb63f5fef9ab79ff8abaa8a08f54a062107e9bb3e980fff675c8d3e91df6648a7a6aebcb63e0867b75690152af27711f0cbb9c06018d21bf3f87b8eb65323b4267a526d53442db8e48dbc5ce47d67d07441a7975d5e41b14fd0154a8246249952a8b61633ce068220defe09d3b1136af6d03e9cf996c13d1bfcdc54567a9ca80dec2e943fe4ae7c617cc071f7add70cfbd48f8f6b50fe6a8297d88efa73e7e601040000b4a685969f28902bdecf66ef39755de79ed2c711477febc96231a53984d00877301d0ec62427a8e38618fdd1ce9aaed569ebc5f2e58d6028e66139a737cc7146a131d47dcebb32ed67021d76e983223c998aec22242ae54e87f438d26982876b58f9134366952f7399a733f07138a736924f3709000000e97f0c117ec439c6b7b965752bbc06eced08d97a32ae4b1ad4d11c5b6f68ee841975233e4cea13f3ef04b2cab9cc256d4539dbafd888c7097c1169e0bebcc81ca3da40bf34b6c9c1da2d6ed8acaf2a8091820ff4cf6be74ddca8bf2eed0e11b2139e8c3ec95436af5269d5792decda7d8b5dcf8640b504ba23c6d0a7f67cdfd27328100ebf9319a56f0f9cee17deecf747f3493f1dc39551f4c9a40b3e93fa80b8234ccbf39a9ef09bd97321f0dc20956f44ba2c5ec2e7569b05cf4690ddc189f174046a8b214acf23f42fb51ed4819e6b4cb5a8bf2b559d0c198fe0315483b8beb9801d06c58b22dd713fe3b7ef18e21081aacfd091b754125a488cea18255f79bebcb3051f622f8a1d9af1908e88a58774a24f35a4ccdbedea6212286c23dd89c2b4b90647f17231472af8dda7f3ab20f093aad3ce875f7458039ee6d0a50deb7bc8eb393f056a5e7725531c5485278e0362338e2e2710fe00465e0d182a322091022cf5b814eeb9b3cab21196581e4d92d0b6fe5525285eea359274f1f21d69233bbe94941f10ba292100000000000000000000000000000000c18e93a0c5231779f2ee201e9fe7e63e84b57b5f05ecd278919bad330ffcb594b8255b3085b352ca9533d6c31c1a30158c30352f8a126a65cb6582e58aa641007418611df53a601c3a8fb8d2286e86abf98136f345446730f68f5d6d1817a9e1b09e5650d2599fbe719a45337d29eb3fef5f7f565457660dec6fe903a1c2ea4f40a8ea1c179892afa219fc69a44163f0d731de418e9fd82a8c4661caea674b19242d1840d047882f640ea248457288c5ffb63e857da03ff5c0475c3cfff41c4806f1dc750eb1c45ec3a2a0b064834010604d6f88a29e8e9bda2bc9c18d1b53a08f25d62ccaa46bc0235c830a7b3fe64bc6031b431bcad6b698a1ba6027870ea9e55fafbbf140c5f82a33ee4ac793b989c12a5827a7957f4d8136cf918b7cbf5bc5fc64c8001992536584586edded6f65bdd371ac84fd5cc60ab79b84e9e85a1c54d5666a5d133e95eff121621dff14b9de7a188b8c5387f9da63c2cce405bc44079e34e2db2b275bfbb54841d647338cad74be91144b780cf381a6860f641446ef73bd11d45f5e4df8f3c6440d8425fd7382225cf8c2cada01bf3cd5cbc6a403173e0c89a491c75efc3c21b7825a521c6011945eef94abc3000000000000000000000000000000d71b794e9b4c145caf050429937eef4364d9e1cbe9150bccd9b2e73757f1f5e8ac50736cd3cbc029ede2869642841371bb4b9c1aaa8826889a909e6716b60e4b568b6761f8ccc7d35b0e66357746b10fc481b47e67f1e14408c1ef3e018a5e647e3f607654f3bf82bcfb42be038a272d82f8362944f608b3810000000019fda0b1b607f1ab34194ed954973f7a5accc0938d3364ab07574d0b32fc30f3ab73d012b63ee905e98ab6989ec2c840cd216eb18fedfb3b204e94e170bae930660368d3799c9b1bf7556ac57164966791626f06ad2e332341965f72141ec140b80efd7720ccdaa890b79bc4523386bd66553121543c9a35b7adcf2f6b257fefef1d6e1da2ee94d3f822bf45aad21e5b5a3788ab584090664065af39b0f43968dcd7c5f8e5a8dc6298691423fbf7e8e012260bc62f9422434a547ef7ca37953d435098d9b71edd1a03e46d0ade465d0c0db0a51f9e29cac05e5a04f94e"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x11, 0x3, 0x0) (async) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x7fff, 0x7, 0x80, 0x9, 0xad11}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r13, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x1}], 0x1}, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r14, {0x0, 0x7}, {0xffe6}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048080) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r14, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000640)="270302", 0x3}], 0x1}, 0x4) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 8.668914194s ago: executing program 8 (id=2339): socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008340)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0xfa, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r5, r6, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r7, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000180)="ad56cac7be42df7bb09c0fc81da911006da104dd074d99b4", 0x18) ioctl$KVM_SET_BOOT_CPU_ID(r9, 0xae78, &(0x7f0000000000)=0x1) ioctl$KVM_SET_SREGS(r10, 0x4138ae84, &(0x7f00000004c0)={{0x80a0000, 0x10000, 0xc, 0x1, 0x81, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4}, {0x10000, 0x2000, 0xa, 0xfc, 0x0, 0x4, 0x0, 0x0, 0xe, 0x0, 0x4, 0xfc}, {0x3000, 0x8089000, 0x0, 0x1f, 0x0, 0x9, 0x0, 0x0, 0x80, 0x1, 0x43}, {0x80a0000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x0, 0x7, 0x5, 0x8}, {0xfec43000, 0xffff1000, 0x3, 0x2, 0xfe, 0x10, 0x3, 0xc, 0x58, 0xb, 0x4}, {0x6000, 0x5000, 0xe, 0x0, 0x5, 0xfc, 0xfc, 0x0, 0x0, 0xb9, 0xc0}, {0x2, 0x8000000, 0x10, 0x8, 0x7, 0xfb, 0x0, 0xb, 0x1a, 0x2, 0x8, 0x2}, {0x0, 0x0, 0x10, 0x2, 0x2, 0x7f, 0x7, 0xfd, 0x0, 0x9, 0x7, 0x5}, {0x2000, 0x1}, {}, 0x9df9ffdf, 0x0, 0x0, 0x20, 0x8, 0x8000, 0x2000, [0x4, 0x0, 0x800000000000006]}) ioctl$KVM_TRANSLATE(r10, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x1c, 0x50}) dup2(r7, r3) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) close_range(r2, 0xffffffffffffffff, 0x2) 8.571932089s ago: executing program 0 (id=2340): syz_open_dev$evdev(&(0x7f0000000000), 0xa, 0x50580) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000040)={@cgroup, 0xe, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000040)={@cgroup, 0xe, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x2941c1, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000001c0)=[{{0x4, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{0x1, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x0, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{0x2, 0x1, 0x1}, {0x3, 0x1}}, {{0x4, 0x1}, {0x3, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}], 0x38) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000000000020711e112000000000000109022400010000c00c090400030103000100092101010001220500090581031000078000"], 0x0) (async) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000000000020711e112000000000000109022400010000c00c090400030103000100092101010001220500090581031000078000"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000003000000003800000700000011000000", @ANYRES32, @ANYBLOB="000000000000001c00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000003000000003800000700000011000000", @ANYRES32, @ANYBLOB="000000000000001c00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x80, r2}, 0x38) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x4, 0x80000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4) (async) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x20, 0x22, 0x5, {0x5, 0x22, "c07aca"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x20, 0x22, 0x5, {0x5, 0x22, "c07aca"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 8.437868435s ago: executing program 7 (id=2341): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x288002, 0x0) ioctl$PTP_CLOCK_GETCAPS(r0, 0x40043d14, &(0x7f00000003c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(r3, 0x0, 0x22) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x206, 0x2b4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) dup(r7) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r9, 0x0, 0x0, 0x0) close(r10) listen(r8, 0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r11, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) 6.800323712s ago: executing program 7 (id=2343): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e23, @multicast2}], 0x20) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000580)={@remote, @loopback, @empty, 0x2000000, 0x0, 0x7d, 0x0, 0xfffffffffffffffd, 0x930311}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, 0x6, 0x0, 0x6, 0x500, 0x4000000000000009, 0x710202}) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xffffffff, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000380)="98", 0x1}], 0x1}}], 0x1, 0x4000040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010000d0429bd7000fcffff1f00000000", @ANYRES32=0x0, @ANYBLOB="460009000100626f6e64000000001c0002800500010004000000050006000100000008001c003b0100"/52], 0x4c}, 0x1, 0x0, 0x0, 0x40040}, 0x804) 6.582308306s ago: executing program 7 (id=2345): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x54, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x54}}, 0x0) write$uinput_user_dev(r4, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff2, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x1, 0x5, 0x9, 0xf, 0xb, 0x10, 0x80000000, 0x9, 0xb50, 0x0, 0x800, 0x3, 0xffffffff, 0x7, 0xfffffffe, 0x5, 0x8, 0x24, 0x7fff, 0x8, 0x1, 0x200, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x4b1a3e4b, 0xfffffff9, 0x4, 0x3, 0x8e, 0x7, 0x13e, 0x9, 0x4, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x5, 0x40, 0x7ff, 0x7ff, 0x5, 0x7, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0xfffffff7, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x6, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x80, 0x6, 0xb, 0x4, 0x9, 0x1, 0x8d1, 0x8fd, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xade, 0x7f, 0x9], [0x8396, 0x7, 0x6, 0x9, 0x8000, 0x1, 0x9, 0xe88, 0x8, 0x6, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x7, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x2, 0xc, 0x5, 0xb0f, 0x1e, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xfffffff7, 0x4, 0xe, 0x6, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x4, 0x40, 0x3, 0x0, 0x7, 0x9, 0x1, 0x3], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xc, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000400, 0xffffffff, 0xfffffffb, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x1, 0x0, 0x7, 0x8ac1, 0x3, 0x4, 0x80000002, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffffffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0xd, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[], 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000201c1b091c000000000001090224000100006000090400800203000000092108040001220500090581032000090807"], 0x0) r7 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000008c0), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000900)={r7, 0xe4, 0x4, 0x73}) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r8, 0x0, 0x607a9e0a432a4785) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000002c0)={0x0, 0x9}, &(0x7f0000000800)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000840)={0x7, 0x8, 0x5, 0xa3, 0xfffffff8, 0xe, 0x0, 0x0, r9}, &(0x7f0000000880)=0x20) r10 = syz_open_dev$evdev(&(0x7f0000000080), 0x7, 0x5c7201) ioctl$EVIOCGABS2F(r10, 0x8018456f, &(0x7f0000000180)=""/212) r11 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r11, &(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x3, {0x8bb1ac157c14a85c, 0x0, 0x4}}, 0x10) 5.560935131s ago: executing program 8 (id=2348): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0131010000000000440012800e00010069703665727370716e000000300002801400160000000000000000000000ffff7f00000108001500fca70e000500170001000000050016000100000029a5b7e47050bea0916b7023e916fe1d1019671452bc5b688f762192ef59012c4c3fadbac5246f07b089d06b76f1"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00') (async) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000580)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3f, 0x100000001, 0x730, 0xffffffff}, 0x0) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x6}}, 0x20) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) unshare(0xe060400) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') (async) r6 = memfd_create(&(0x7f0000000080)='%\x00', 0x3) fsetxattr$system_posix_acl(r6, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000001000200000000000400000000000000040000000000000020"], 0x24, 0x3) (async) ioctl$IOCTL_STATUS_ACCEL_DEV(r5, 0x40046103, &(0x7f0000000300)={0x5, 0x40006, 0x0, 0xd, 0x45, 0x1, 0x4, 0x7f, 0x3, 0x1, 0x1, "f7e7d17d2736ac32754d2dd1cb1f6c41e100"}) r7 = gettid() clock_nanosleep(0xfffffff2, 0x0, 0x0, &(0x7f0000000040)) (async) rt_sigqueueinfo(r7, 0xd, &(0x7f0000000340)={0x0, 0x200, 0xffffffff}) (async) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000100)={0x40000000, 0x100, "2712db36f3c964c0cdd68849d8e85f0130b1fb723f0eb00fc8a12fd500025269", 0x0, 0xffffeffffffffffb, 0x4a10875b, 0x0, 0x0, 0xf, 0xd, 0x5, [0x0, 0x9, 0x7, 0x9ae]}) 5.485731935s ago: executing program 0 (id=2349): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x100) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet(0xa, 0x5, 0x0) listen(r3, 0x1) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='/dev/audio\x00') r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x400008) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) 5.266955442s ago: executing program 0 (id=2351): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) (async) capset(&(0x7f0000000b00)={0x20080522}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0xe4e9d491f1d177a3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)}], 0x1) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x20004, r5, 0x80000}) (async) syz_open_procfs(0xffffffffffffffff, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) (async) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x84000, 0x40) r7 = fanotify_init(0x200, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) dup(0xffffffffffffffff) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000cc0)=0xffffffffffffffff, 0x4) r9 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) readv(r9, &(0x7f0000000100)=[{&(0x7f0000000080)=""/80, 0x50}], 0x1) (async) syz_open_dev$admmidi(&(0x7f0000000300), 0x20, 0x0) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r10, 0x40085112, &(0x7f0000000100)=@e={0xff, 0xa, 0x2, 0x4, @generic=0x5, 0xa0, 0xb9, 0x2}) (async) fanotify_mark(r7, 0x459, 0x10, r6, 0x0) 5.01472936s ago: executing program 8 (id=2354): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f0000000040)={0x70, 0x0, 0x3, 0x8, 0x8001, 0x10, 0x8}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f00000000c0)) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x4d2442) read$FUSE(r2, &(0x7f0000000140)={0x2020}, 0x2020) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000002180)=0x80) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x27) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000022c0)={@fallback=r0, 0x10, 0x1, 0xc5d, &(0x7f00000021c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000002200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002280)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002300)={@fallback=r0, r2, 0x21, 0x2002, r2, @value=r3, @void, @void, @void, r5}, 0x20) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002340), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002380)={0x2020}, 0x2020) ioctl$XFS_IOC_AG_GEOMETRY(r6, 0xc080583d, &(0x7f00000043c0)={0x0, 0xaf49, 0x1, 0x2, 0x60f2827d, 0x1, 0x8, 0xa}) r7 = inotify_init1(0x0) inotify_rm_watch(r7, 0x0) getsockopt$inet_mreq(r4, 0x0, 0x20, &(0x7f0000004440)={@local, @local}, &(0x7f0000004480)=0x8) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f00000044c0)) write(r6, &(0x7f0000004500)="e2c8aee144b0eaeba5d1516fd029d0c74c7645834f67a67c6288b729e8b98849ded6da6f4375314541de5a37806c7d481bbe260d4cf9226d1e46b31403f2cf40ca32743c78e4cd7c17cdb5fe0ef4fa7747ee0cff8b1d40a7329546102ebaa9363c7c9f42b9e35408b076d9278b43a637eb830758c5b9eb81e50fb38cb798db2dcee2d772423dbab9f4bc903a6f27e67be2d065da4da1e94256fd6c29d371d8d753b8bcf8042277a04936b629e690ad6e7708c83523aa9bc3db10f1a23a2df4038d891ecaa9fae4f401472ed0855f9ca3550c98c6bc0775fea071790b985b8f61ed", 0xe1) syz_open_dev$dri(&(0x7f0000004600), 0x9, 0x109102) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, &(0x7f0000004640)={'ip_vti0\x00', {0x2, 0x0, @loopback}}) r8 = syz_usb_connect$cdc_ncm(0x1, 0x7a, &(0x7f0000004680)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x2, 0x1, 0x29, 0x60, 0xd3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "975558f697"}, {0x5, 0x24, 0x0, 0xc56b}, {0xd, 0x24, 0xf, 0x1, 0xfd, 0xb4, 0x1b5f, 0x1}, {0x6, 0x24, 0x1a, 0x7, 0x30}, [@dmm={0x7, 0x24, 0x14, 0x6, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x6, 0x4, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x6, 0x6, 0x9}}}}}}}]}}, &(0x7f0000004900)={0xa, &(0x7f0000004700)={0xa, 0x6, 0x250, 0x1e, 0xa9, 0xc, 0x8, 0xf8}, 0x12d, &(0x7f0000004740)={0x5, 0xf, 0x12d, 0x6, [@generic={0xe1, 0x10, 0xa, "0ba039207261b895892ee297e03259e258ac9649c71191b8b570b1f35eea8ce248a0887c22ebfcb5c717533092ab27c00506f52337889e596af6667b0e19a71a1dda81f002de684c4639a91a4ecb793720a4783e9f2f49133e463717dbd889947ee28b89b36f0be30e98cd3e55185c5e15a748bc3ce349139a9508c195c7df4a371b63b82a08bea316fe81a6d93cd50755f1ec157f34278ea1ee6862a32751aec523198b23086a62d9cf76aee1440d3953a4e00ba4cd83775acaa551610a17f149458cd8f9a4faedf3d258b8d314777ea0043237c0dfeb56c45c11511c49"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "5f696dc2e06db30dc43f6913c6793bf8"}, @ssp_cap={0x1c, 0x10, 0xa, 0xe0, 0x4, 0x7f, 0xf00, 0x8bb, [0xf, 0x0, 0x30, 0xff00c0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xb, 0x99, 0x1}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x7, 0x86, 0x7}]}, 0x2, [{0x4, &(0x7f0000004880)=@lang_id={0x4, 0x3, 0x3c}}, {0x4, &(0x7f00000048c0)=@lang_id={0x4, 0x3, 0x1407}}]}) syz_usb_control_io(r8, &(0x7f0000004b40)={0x2c, &(0x7f0000004940)={0x0, 0x5, 0x77, {0x77, 0x1, "062f6b07c16183da12cc6b920f7589bd489bf3efe990830c47b57772287e74455b96bac54d1037f32d3d9f9ae237b324c0180b3e2b83205bab4749c6500954e8d0ece97b44b0e3c8ddbbd43ff401dc1dfb5e03c4718cfcfcf1fb5a38a6e0428d2766b2af07ecb083af44ac91157d5f2291bfac602f"}}, &(0x7f00000049c0)={0x0, 0x3, 0xb7, @string={0xb7, 0x3, "289b6f64ac66e8c372b0363a9ea249ae2236e760ff591d37d90f326b15b87da94299f43464f0d3d2a1d4320357889f7c5a53bf7ff37c22892f3830ec91b76e69718f0a88dac4607d5bd67c5f63a7b14b8175c65e70fe341d8dca935fd74fc41b97edf9a78c23f63f19d2673d99e7426b3b65aafb94ddfcef107cc1b766b570188c8060bd00e1638d007c49af80aed14287235226879de4d46dc11f1ec098815b88a77659882352515d89b7c8dabb27ab6da27ae721"}}, &(0x7f0000004a80)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0xfb, 0x8, 0xfc5b}]}}, &(0x7f0000004ac0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xd, 0x80, 0x9, 0xe, "a0ce365f", "c37e6a51"}}, &(0x7f0000004b00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xbf, 0x1, 0x4, 0x8, 0x6, 0x3, 0xb}}}, &(0x7f0000005040)={0x84, &(0x7f0000004b80)={0x20, 0x14, 0xdd, "6190c8674a90dec689f2a5b20b5f75ab153ad03321f026b5069c80a8e1bcc3cc1aba04f4dbc7aac4c8da9cb167a7ae13f145fde1b900b3fff99378649a654bfd63a7dbb6cc1ebc63e43bdc2124c902c39df03b7553eda32a217a39dd371083a16fadcb49db1ed3fda9c042b3241de9df894251fb1cbca5d86adce60c37cc92d92e5961c1169ff4098130c5068a7700ea11a9678171d27bc297eeb7dac54bc70c72261b3db399a19b966ce9e3eea7ed115e05725d234d5d2c432cfc03d750d7ee9535c1d2dc9199f45394c6fabaeffdd151e529cc19456c97fb72988e27"}, &(0x7f0000004c80)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000004cc0)={0x0, 0x8, 0x1, 0xad}, &(0x7f0000004d00)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000004d40)={0x20, 0x0, 0x4, {0x200, 0x4}}, &(0x7f0000004d80)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000004dc0)={0x40, 0x9, 0x1, 0xed}, &(0x7f0000004e00)={0x40, 0xb, 0x2, "e95e"}, &(0x7f0000004e40)={0x40, 0xf, 0x2, 0x7064}, &(0x7f0000004e80)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000004ec0)={0x40, 0x17, 0x6, @random="2b277881a2c8"}, &(0x7f0000004f00)={0x40, 0x19, 0x2, 'ck'}, &(0x7f0000004f40)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000004f80)={0x40, 0x1c, 0x1, 0x53}, &(0x7f0000004fc0)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000005000)={0x40, 0x21, 0x1, 0x2}}) r9 = open$dir(&(0x7f0000005100)='./file0\x00', 0x8000, 0x1) r10 = openat(r9, &(0x7f0000005140)='./file0\x00', 0x8803, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000005180)={0x0, 0x9, 0x4f}) ioctl$BTRFS_IOC_DEV_INFO(r11, 0xd000941e, &(0x7f0000005580)={r12, "cf0fbc72685c69e4f3dd280609ad478f"}) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r10, 0x84, 0x8, &(0x7f0000006580), &(0x7f00000065c0)=0x4) 4.937927891s ago: executing program 0 (id=2355): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x1, {{{@in=@private=0xa010100, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xaa}}, 0x0, 0x33}, @in=@broadcast, {0x20, 0x0, 0x0, 0x5, 0x452c4868, 0xfffffffffffffff1, 0x3}, {0x4000000000000000, 0x0, 0x40000000000001, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1a0b1}, [@offload={0xc, 0x1c, {0x0, 0x1}}]}, 0x104}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x8, 0x200000) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f00000001c0)=0x2) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x100, 0x9, @local, 0x7}, @in={0x2, 0x0, @rand_addr=0x640100fe}, @in={0x2, 0x4e24, @private=0xa010101}], 0x3c) recvmmsg(r4, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001580)=[{0x0}, {&(0x7f0000001640)=""/206, 0xce}, {&(0x7f0000001340)=""/240, 0xf0}, {0x0}, {&(0x7f00000014c0)=""/140, 0x8c}], 0x5, &(0x7f00000000c0)=""/46, 0x2e, 0xe88}, 0x8}], 0x1, 0x10122, 0x0) rmdir(&(0x7f0000000140)='./file0\x00') r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r2) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6], 0x20}, 0x1, 0x0, 0x0, 0x10805}, 0x44049) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r6, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1ff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xb14c}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000080}, 0x800) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaafd81004500080045000024000700000032907847c314bb00000000f2dfbc81cfe0ca1b360883fff0380bc5"], 0x0) 4.799989559s ago: executing program 0 (id=2357): unshare(0x3a000000) r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x440e0}, 0x4890) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000140)="3987286175db072c707046e98da97766", 0x10) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r10, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) setsockopt(r10, 0x9, 0x3, &(0x7f0000000040)="cee612fc9b0fac9d2056465d5525d53a3ca403aecb6338b4d9ad2d15c4e2d4649014665e8168c357bebbc0774f5384b633b975952c4b05ac2367ff8dbf20704c4760c52d655ed4fadcecc1bb53c443cc1f50c8235d2fcfc5ee529f351248e1c0a31ee33d7f0a95ff7c665b13433023ea522784189062d9fc3a9cbb96292b9e3b2a95b8cad274e962be51e30197964556e90f4c5ecf499ffa0bdda5dd4a0bc5051755fe51cafc0cc610e52d97abedfe38158fa3ad5a8a023c8b696b886b39c8978a20073f6f6758e092388293ec07", 0xce) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2000009d4e7200000a01030000000000000000020000070900010800000000000000000200000920000000000a01010000000000009a423b9c00030900010073797a31000000002c000000180a010100000000000000000200000909fc000073797a31000000000900020073797a32000000001400000011000100000000000000000007ff6e12a39b3a6c67f63c2137691381480fb73ba262d66172078c72f16f474f334da07f3f3c38a74ee9d24f2aaef1a61826aee9e4d5f3a57ece68a0a6c491ed9156ea6a6e45"], 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x4880) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r13, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xda0}]}) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c9a83410861246206ec60102030109022400010200000009048e0002ff0401000905ea01100000fa0009058202"], 0x0) 3.667030267s ago: executing program 9 (id=2363): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setxattr$incfs_id(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0, 0x1) setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000140), &(0x7f0000000240)=0x4) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000080)=@random={'user.', 'usernincfs.metadata\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair(0x5, 0x80000, 0x2, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048040) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) setxattr$incfs_id(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0, 0x1) (async) setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000140), &(0x7f0000000240)=0x4) (async) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000080)=@random={'user.', 'usernincfs.metadata\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) socketpair(0x5, 0x80000, 0x2, &(0x7f00000000c0)) (async) 3.499028016s ago: executing program 9 (id=2365): setitimer(0x0, &(0x7f0000000040)={{0x6, 0x9}, {0x1ff, 0x32e3}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0xfe}]}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0xc0000100, 0x0, 0x83}]}) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0) (async) alarm(0x38) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) 3.047218459s ago: executing program 9 (id=2369): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000140)={{0x2}, 'port1\x00', 0x80, 0x10000, 0x7fffffff, 0x5, 0x2, 0x400, 0x6, 0x0, 0x4, 0x40}) accept4(r2, &(0x7f0000000040)=@nfc_llcp, &(0x7f0000000100)=0x80, 0x100000) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x6c}}, 0x0) 3.03141957s ago: executing program 9 (id=2370): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f00000002c0)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) (async) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x1, r1, &(0x7f0000000040), 0x8000000000000001) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x9, r1}) (async) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x9, r1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000010240)={0x0, 0x0, &(0x7f0000010200)={&(0x7f00000001c0)={0x10020, 0x3f7, 0x0, 0x0, 0x0, {0xffff, 0x7, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0'}}, 0x10020}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) add_key$fscrypt_provisioning(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000280)={0x34, &(0x7f0000000a40)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000280)={0x34, &(0x7f0000000a40)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="48450568892f"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="48450568892f"], 0x0, 0x0, 0x0, 0x0, 0x0}) 1.940434092s ago: executing program 3 (id=2375): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r4 = eventfd(0x0) io_submit(r3, 0x2, &(0x7f0000000880)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, r4, &(0x7f0000000280)="b970cb2b79989428", 0x8, 0x1000, 0x0, 0xbd4c3b8bc89fc43d, r4}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x0, r4, 0x0, 0x0, 0x5, 0x0, 0x2, r4}]) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, r6, 0x1, 0x0, 0x0, {0x54}, [@nsim={{0x1f}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) r7 = fsopen(&(0x7f0000000540)='iso9660\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) syz_clone(0xe200, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="740000001c00010c27bd7000fddbdf250a000000", @ANYRES32=r2, @ANYBLOB="1000400408000b000900000008000100ac1414aa05000c000000000008000f000100000008000b00050000000a000100aaaaaaaaaaaa000008000d0007000000140001"], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x8000) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4) 1.847631877s ago: executing program 8 (id=2376): syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@out_dx={0x6a, 0x28, {0x6769, 0x4, 0x2000000}}], 0x28}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x36900, 0x0) (async, rerun: 32) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, r1}}, 0x20) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async, rerun: 64) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xfc}, 0x1, 0x0, 0x0, 0x1010}, 0x800) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r6, 0x0, {}, 0xfd}, 0x18) (async) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18) (async) sendmsg$can_j1939(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) (async) sendmsg$can_j1939(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000081}, 0x480c4) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) (async) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x50, &(0x7f00000006c0)={0x0, 0x0}, 0x10) (async, rerun: 32) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async, rerun: 32) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x9, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0xa], 0x10000, 0x202}) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) 1.793261716s ago: executing program 8 (id=2377): ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000000)={0xfe61, [[0x8, 0xc, 0x7, 0x7ff, 0x7fff, 0x1ff, 0x10001, 0x7], [0x129, 0x26e, 0x9, 0x8001, 0x3, 0x9, 0x80000000, 0x5e1], [0x3, 0xe0b6, 0x4, 0x1, 0x1, 0x0, 0x6, 0x2a6]], '\x00', [{0x4, 0x6, 0x0, 0x1, 0x0, 0x1}, {0x5, 0x8, 0x1, 0x0, 0x1}, {0x5, 0x8, 0x0, 0x1, 0x1, 0x1}, {0x9, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x1ffc000, 0x5, 0x1}, {0x1ff, 0xfffffff6, 0x1, 0x0, 0x0, 0x1}, {0x9, 0x2, 0x0, 0x0, 0x1, 0x1}, {0xd7, 0x5, 0x1, 0x0, 0x1, 0x1}, {0x1c, 0x3ff, 0x0, 0x0, 0x0, 0x1}, {0xfffffffa, 0x128d, 0x1, 0x0, 0x1, 0x1}, {0x4, 0x5, 0x0, 0x1, 0x1, 0x1}, {0x26, 0x3, 0x1, 0x1, 0x0, 0x1}], '\x00', 0xffffffff}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') getdents64(r2, &(0x7f00000010c0)=""/4067, 0xfe3) sendmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000000)='Q', 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x804a841) write$cgroup_pid(r0, &(0x7f0000000400), 0x12) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1}, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2002) syz_usb_connect(0x5, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x7, 0x7a, 0xaa, 0x40, 0x1ba6, 0x1, 0x106b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x2, 0x0, 0x8, [{{0x9, 0x4, 0x54, 0x5, 0x0, 0xb3, 0x49, 0x24, 0x2}}]}}]}}, 0x0) 1.552737914s ago: executing program 3 (id=2378): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) syz_emit_ethernet(0x1162, &(0x7f0000000740)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "01011f", 0x112c, 0x2c, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[@hopopts={0x2c, 0x209, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @local}, @generic={0x8, 0xf90, "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"}, @generic={0x28, 0x9e, "01f5014e876cce69b4ee7431bb2cf11c7ed4ccfc53fa5db986c07633a9c6c7faf6d9d2f9042d48e63867088a35458750ca2e12dc2041712f3da244b330e108aca1e4b64a2ee43f73a386a7b64f4b6a06b37a2b3f09e949e2fcff5bc01d1b00b67d586dacf008f5d311b7f85baaa2daf83e6c533948c89bbd919241d13c969f04a1296b4c078e7925971004f60cee2f4a79c49963e67c66f556612c6901c3"}, @pad1]}, @dstopts={0x2f}, @fragment={0x5e, 0x0, 0xa4, 0x0, 0x0, 0x5, 0x65}, @dstopts={0x87, 0xa, '\x00', [@ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @private2}, @ra={0x5, 0x2, 0xd95b}, @hao={0xc9, 0x10, @mcast2}, @hao={0xc9, 0x10, @remote}, @enc_lim={0x4, 0x1, 0x2}, @generic={0x7}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @srh={0x2, 0x2, 0x4, 0x1, 0xcf, 0x8, 0x6, [@ipv4={'\x00', '\xff\xff', @private=0xa010100}]}, @dstopts={0x87, 0x5, '\x00', [@ra={0x5, 0x2, 0x6}, @jumbo={0xc2, 0x4, 0xfffffffe}, @hao={0xc9, 0x10, @private0}, @ra={0x5, 0x2, 0x4}, @jumbo={0xc2, 0x4, 0x18}, @jumbo={0xc2, 0x4, 0x5}]}], {{0x2c00, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8}}}}}}}, 0x0) 1.491765207s ago: executing program 0 (id=2379): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x1006, 0x0, 0x0, 0x7fff0006}]}) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) r4 = syz_usb_connect(0x0, 0x3e, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x95, 0x5a, 0x4f, 0x40, 0xcf3, 0xe019, 0xfb4f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x80, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x94, 0x9, 0x2, 0x74, 0x83, 0x31, 0x80, [], [{{0x9, 0x5, 0x7, 0x0, 0x0, 0x6, 0x8, 0x0, [@generic={0x8, 0x11, "62b367e12306"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x10, 0x81, 0x5, 0x9}}]}}]}}]}}, 0x0) syz_usb_disconnect(r4) syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x24, &(0x7f00000001c0)={0x40, 0x10, 0x6d, {0x6d, 0x2, "dcfd49cbf0cf6fe1b912703b03a85f749a24bb3952b6dc727d61903f59a801ada392674af22901aad54f8aab48be4d87eeadc19261213066c005af147c875a328e45b1d93e8c595767cdbd8e03007cb2d693c4a958c3237255c8c35a341282ee684619b24e39e41f2e9c70"}}, &(0x7f0000000400)={0x0, 0x3, 0xc2, @string={0xc2, 0x3, "1fbdb487170275ae610829d9881901595540c241a8ab9695c864fdb8298fa75fca1cdcbc8d391fd26ef8f17eb695bacb6a29e4e31eb07870342af61063c289bd69b3f271f3eed7c7e8e0e63befcb3d043d43d00bea711a3123bc0fb16f1058b581b6c0261ea3760b7f47358e5d8ef919792158a7f6d24996dd6e150aa9f75e52791973525bde22832f59276e1428b5d54abe020e042c9ce47b950c52cf240deffc2edb7436714239edc4d92980581444cf52fa619fbde5d1fb4973bbf3be0623"}}, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_012={0x1, 0x1, 0xb, "c9"}, @global=@item_012={0x0, 0x1, 0x3}, @local=@item_012={0x1, 0x2, 0x7, 'K'}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x6, 0x1, {0x22, 0x391}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000300)={0x40, 0x31, 0x5c, "25a5bea4230bbd48f574288a6d519a1c48a2c1dfc0abd1ab8aec138b5569695a6c8cbd8ef4af696729d634b07e8f1b8e8ed6c6bb482c741a09571af219abc46de86d4d98d5491199adfed2da9655c63eca9f592a1b7c667cd36b4d52"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x14}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000000680)={0x20, 0x1, 0xf8, "238bbaeb19be3188ff3f8d56d5fcc934e38a6b82505e41e08d8617ce4af4090aa80ad0628ad54c9397264981d2a3d3d691d250c21f1c654e29768a2e7dce1d5835de2f9ab444ba92cdd409ce08fc607630cd7689441aa0d60f02094f7ab7201dbe30ca63f7b9657086bd507172363814e3e5cf4eec4b56d7b15079152fc7c361fe1eabd05dbc9b14b4007ab062e084947d62c93a2f99750094a25860d8ffeb0f79275094f4aeb6050742fc17382ee3fb3d780881e46fc04d32e41ea2d10742a8e7c5e4255bb13d6d67a6890b4443397452b1491c830b87a92d8b468239335e12a6cc8d7c35462b5fd5a8a8f1974bdcdd41404ebb334555ef"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0x7}}) fanotify_mark(r3, 0x459, 0x10, r2, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/zoneinfo\x00', 0x0, 0x0) lseek(r7, 0x4000000007, 0x1) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000000)) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, &(0x7f0000000380)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x4}) 1.490822813s ago: executing program 3 (id=2380): r0 = epoll_create(0x80) r1 = syz_io_uring_setup(0x239, &(0x7f0000001080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x400) (async) mount_setattr(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0) (async) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001714"], 0x38}}, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) (async) io_uring_enter(r1, 0x2def, 0x1a38, 0x0, 0x0, 0x0) (async) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, 0x0, 0x0) (async) r6 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r6, &(0x7f0000000080)) 1.444928199s ago: executing program 3 (id=2381): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) mmap$snddsp(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0xa]}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000000c0)) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000580)={0x0, 0xbf, 0x80, 0x20203843, 0x2, [0x2], [0x80ffde], [], [0x3ffffffffffffff, 0x0, 0x1]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a3000000000e4000000090a01040000000000000000070000000900020073797a31000000000900010073797a3000000000080005400000001c08000a4000000000080003400000004008000f4000000006980009800800014000000004540002802400018008000140000000060800014000000000080001400000000008000140000000092c000180080001400000000308000140000000000800014000000000080001400000021e080001400000000108000140000002eb280002"], 0x174}}, 0x4000000) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c0001800600060088a80000100004002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r4 = io_uring_setup(0x71a3, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x112}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000040)=0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000000c0)={[0x10001, 0x3, 0x100000008, 0x7c, 0x1, 0x0, 0x2, 0xfffffffffffff804, 0x0, 0x9, 0x0, 0x2000000000000, 0x7, 0x2, 0x1, 0x8], 0x50000, 0x4fb40}) ioctl$KVM_RUN(r7, 0xae80, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) close(r2) 1.258292264s ago: executing program 9 (id=2382): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)) (async) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)) (async) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000040)=0xc) (async) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000580)=0x10) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) (async) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0xfffffffd, 0x38b}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) (async) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, 0x0) (async) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r7, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r10, r8, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$stdev(r7, 0x3b80, &(0x7f0000000400)={0x8, r9}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, r8}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r8}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd_index=0x9, 0x22, 0x0, 0x0, 0x6, 0x1}) (async) io_uring_enter(r4, 0x627, 0x4c1, 0x63, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.119734114s ago: executing program 3 (id=2383): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000840)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) symlink(0x0, 0x0) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f0000000800)={0x6, &(0x7f0000000740)=[{0x5dd3, 0xd3, &(0x7f00000002c0)="8b30ee34c14af9cd9d19019901a2a888852841471bf05f3f111a91e7b9124920ed8b4c179fe2b3266915c96fc1d8ed1e6b609360e4e9b9c46802a6a7cb9131bfd7c2617b8218c8ab92fe72c57764df650491fcbaeafe4b4bbc785302687d94eb1356800298ffdfbf71ecb90147ef92fcb0fa71c4957a45999a4373e8ad70702ab09d63a2b046d904e50a4c1d1469ba59f82dbb31cd4d7da3a814fa2d87d488104eced45c6dbf8059f42ab0bd87b8d416bd2ab490f38e3e0f8993f174467bd28a8c118cdf0ee8223e81ded76fd48f14156143ea", 0x1, 0x1}, {0xb2f, 0xfd, &(0x7f0000000400)="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", 0x1}, {0x8, 0xc, &(0x7f0000000500)="37fa3407aaca912570918b5b", 0x0, 0x429ff30238647c0a}, {0x0, 0x1000, &(0x7f0000001e40)="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", 0x1, 0x1}, {0x16c27145, 0xd6, &(0x7f0000000540)="c9bfe80d35976ed8f383e5bc03a074a0f2387bf7e6a415021757acfd18501575bc0efb66bfb0c10afee11e595309de1e650d4c4f75fa7de712c3aa5b17cce482b4ef807a3d46c5ff7b6640c654471c554f535cb892c585a946e29aeca59ee765610c4100fd84d4b8fc10bf2312dc022033e6224b94ecd73fc0ffc6af4f1c4a64ca7f4b989f0fce952090b2da5850729c8afe11e37026dd1a80dc79a15c9b18e1b013f04a0f66553de56b41d91a8415f928f46c8f9b195a8009da72dce038268c306e7331f47b61b0c1aaea1fa2e64119aa5c3fab77c9", 0x1}, {0x8, 0xc6, &(0x7f0000000640)="3dae7c9a6bd80e7694d41cc728f884bdeb3a5c9e6b859709659fd8d485be42818d60d483bf80661787726470a4fc2065eab6f12d3b014e66da9829e5e0fa75674cfce3e2329137967bff085b97c551fed002ea1c6fe39a90959a2af7b4b4c67be87ff904f6eb5917b4c6341674c369b876828dfa9c540363fa13297c904ca560883753e5e6e7129171976b0ff5969fa1c70e54ee4c5e8108b0000fe1695ebf3607051fbd87ee01e1aa9c2b993e63a8929fb96fc4a95af99a5402ed8181445ce85b7fc34dbc85"}]}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x1a9a00) ioctl$VIDIOC_SUBDEV_S_FMT(r8, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x7fffffff, 0x5, 0x1013, 0x7, 0xa, 0x6, 0x2, 0x310}}) (async) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r10, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0x287}]}) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x14, r4}) (async) close(0x3) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x13, '\x00', @buffer={"d9f317f52f3eda99a0a7c2f68ce232388a27a87cf08ffe3d11977c20476aea06", 0x20}, 0x7ff}, {0x1a, '\x00', @buffer={"49550cd318b48bd96b3e455d3900a9722418402bef3cb4f76b9d6e13341a07ef", 0x20}, 0x5}, {0x5, '\x00', @buffer={"f335f2a95f2639f01c13ff07000000000000c361de6d8357c7b5b0bc0dc4a01f", 0x20}, 0x7a7ce1c2}]}) (async) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000280)={0x28, 0x2, r5, r11, 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000e40)="87e3b424427bd98fd194c7caef65b53014e7a40c1a70b0cefe54fee12e46f8089d3cb926ecd1907eea6f6698fbed356ad75c42bd63b278891991a259c327d11ae3685d5e4a6f74911f1ea806af79392405b21b094b0f4241e70fd47611bf02b3db2fe48e3852556f4fbf3fb62acfdeaaa85d6b313a17217acb3fc64a1059ba98948c7258eb7363963edfac90aceb17e4b92cf12d8b37e0dd7ec667cf346caf88855a53ca262aee064ed71bd9312e2897cf53f72cdba231137fadc3b8c80a309c4054f3570f83daec5c5b90782d109a3ed8f2f1fc0d8cd08c132dc8220d29c926a95be8892da89348ee95e9d2db52327ea97a52525704debe21ef1adb75700a9a40081eb0dc3288f02935e5ff87f0fdbab3ce8c53cebed69f14fb5a57759b0bb5f98472ed2fd874a03341ae751fdec1c2f9cd82f99aaad8e5e308617beb1a4219f2505c12bb5af32e014ee89d67ce68944a7cbe2e41fdb3215c96cbe8ab9d8f6c4117f9e006f15a03666b6860ffbb9afb7360662caafc299818b36aa8f0a7335d2e63c59f8388481d26a66fdc547d298c4c67cf0a6d50ed17ee63a4fa0aad494ea6d008b1fecce75da5eee947af50f0b0e36896a77f744c10eaebd2760437f46322e2daaaeee7b8881439b8f7d24a97b1e12a3b80c0fafe5fd8fc03cf65e4b29a4a3d3064c55d05f850263e4b94761663a0a5d11bb29d1da8e00f6b6952bd3afb8e4691b3ed97f84410f1370c9efce3ef3b1313f30df906ca4f4f728761e58f99e5da94d4ad2dc1328bbb16532214a93cc9f68791978f9eb3d49c284240e6fc66db98cf7f2d10b7d271b6d8250f66b4287e44e4ad96bf070b389e016aa9cb47ef77ffa101aa1a8c85b52460ba4e61cda453e6241351b7bf5858654d96a7f8c437382d8653fd3b7a13077e4b659625120bba71202951fc1162aec8ff330425970cf4aac51a7ae2e10c369769547344d24e00c1d953c1410dce6c7965fa06b204cce0c8f7cffad4e39cd02aa2fc46e2e19cc08e1414c10f6283c8da83c9508de32b3e538226f323913c3e858dafbb7cc96bc73b6bbc9ba63a84beb7f673b743fe9cbdf36ff745a0a36b80fbe99c987a54094e86726d561eaa77f1d4a9ff16cf9923442f6a2376e8e56326dfc79f98fc24688bd6d7a2607db9d56053dd247deb3b5397b180b53a2ad88c48be6f03947265a6e12eeb26830bced9c28c924d961900f5309df5c0df1eb030411d9e885ba785fbbd04526fc080b9a0800f7cd6555916c629c6d353ecc657f29a07da6d7568babe05ba2621fed5205e1c68fa3780d93f045b1783db83442a13b0966667026cb9e289b3d806172e033ea3017f15f103b01366f9a2df441b45743ad4da65b6a0ae772c47f4a1cb246cfb4f3ad392a47a4010ff852d989c0a2d892938b7d8467a1930930d5ef077e03b809fe37f975d04ca6f3bcfed6a888303e072a7fea6c3a8f4e204549bee6c92b18e575272eed48cdd77ec283160540ea7bfb1aacb7c4aae807a4e7fb02a1e7447bd6029af2c844b966ea5bb3a9d0066750afb9f9f729a934edbf869cc325357d3b89cb327c1c1ce6df3ec72e1d9bd7c50dfcaf998314a7a093c08439002b9e6e9ff7fb4a5ff6dea406bd652d8ff9d82b3455c97639eebff96dfbdb0586ae38a792c8fc2491a5471cf9656d43a5431b6a89115f58e099d3501be4840c4199a8a4f63b1b1010f32495b31e12ab58220a4b3b96304bccd76bea804f98a0df39603749dda886b815d7bd8e6a4b39bf2dc4538747a9ba069b8b685fb811faf7e95ae6cdb52296cbbfdde870eda5828d9d259ed71170937f3dc2f53ca311522aeab9651705ad7a20458c774d4aafb2395c34f2e81b8f94fb8d0b6289d05013df370b692709a34741c092ddabeced1a6a34eafb18642edd96ba94db65eaa1178d6433bea34c1f11256b5992f0ccf686112d2f7c254b48550bf3c16d8bb7a5ee038f868f442b374f8af00e39d4e6c726707ea9f4910df46543dfc9253cb41adf5397d575714993abbe08926532e903d669295bb17c2eafec6de8cb918b0c442fbbe60008f6b1da74324239d2a325b3d00a4384abb91804f3a5cb6b845183534997503da4434c8e0da11278d85d1cbcdddfab9eef50ea5b4f5e0ea1839dda1cbd599c8fda454dc74d22043f8bae11304fb33c2bfc11d72b8916e27b7c010c2b25f4007d6989073971f29f68c43b9c4d3f466c9f10b8c45343c58a5063fa11c9f9deeb92f4b7ebc8b8cf33211c62823339adafd9d40bca9510cba96235e6dcc2dc11d848a2f5069c285367073bdf22d977b0059471b5cdbc098d5ffa97b34606a57cda584851aa62773244b1a8dc4e4abbe34469f27a5ed7ff0425e815eebcd1c9d857c325ca9398f73d8889200f9877c4af59ff36152b338ac5673d8024b985d6fb9e96874b37611bf88adfaad0523a61cb93bb0df5a64b6d88d9e2dda3276ec40b98a214a3a45264fa847f6231b6a0e3437f7b720a1cb2b7ec611be6c42812337c085321a84d0eecf4a52baae90b2db1f064f708eb9496b7e6f5644b70321d81d95bd122273cf74c7c3b882e8a13a773580e4bb8ffb952f6596e89e903d43d1c68b693d8fe514b0b69ad37dede355b7917a34f1a4c5195cf545a9b80d4747d3b12f886a7892e5150c0a981d3138c6f506947772fb475aa1b56166c33eee074f452797abb775347dc5f09d747e253083ff1a1dd4053e14f5df44db74b893c5229e2eebd910c1da619cfa7038402cbd74c0eb342db89f9713fb1c263ff1aa0aff538e3089282344c58f61efa3e4d1b4fa7042b0acbc2839c6d1fb9e85b5276303de14212ff393ce5d66d9703c7b46a5ddf32b58d4312a819a644b3a9ac265c95f47b28e4ecbb9db870c08ed65ecfd80e7b5cd7c9cf4048297cc5c036a6a73d2ae9a8007dedcac608c8fa10d80771241217c55e079a4a3c209d07e7cfd9b1ed5d4ec395b29ef58db6f418d236d705c0a21cc7f7a5e4b349a0a90a0b20d5b8eae2a505977d846803aec7d383e6399204c420674ee4a87eb4a778433c2582df4eb25350e6a0f026fdf79caacedaa7c02c1fcb50e18a238fdaa71d66af7dc159ac5cd72b94a6852c2c9a1e91256a19cdbc65ffc9ccc2b95b912e71c321dcea60d5a7e924575637e22611c4a6b90e4321e4185ffadd54be603e4dc9b8f0b6ad8453c0cc715c635c6634fadeb1d152b4a9ad3223825b448d5e012bea0c55acf28496342626f5db57e6bb9f472ecde3a9349e11455e6a5efa17ef287dd80e0efb1845bf0a19f35f0506b16421f7a56b06f8e19ee67d531e6384063391a2ecfe8b2edff81db07772bb3eac912b118759f19062c090be4f07bcabb835a36534b8fb0f27f42e251b294e31c226954e35a619d0d6ace31a0ca05928fecb85bd37df567baf869d8c48711bd565f123a3cb6abfa686c21a51acafa0b989e440fb24b7ee7c0d487881f4ca7884cad600baae8e4c06a525647a6abee2e6c1ebfe792ca64e9e4af788f850645bd7bce1ef1b4504f076c02611309b771abd8c3177db02ecfd2396d86ac97588dc11b81a9cd38038a9008c93c26e5e9cc73db592ff1c691cdbf10bc715124fec40aaf42aeb911fe9afbe5bd242e969d1655157eb411992ccfe49e4834a28570cd13e64382e8cd23c5c1657ecb32514bf2198a31e73ebdff0cd8d392f70389052479079ec9128a6b4a2f58caf2ad34dca95634842d5eebb33704e26674bb9932bb35a543906223b8388d31d9350f5eeea79965b3efc6574dc5d46fbb054e387ea6b2f31c7c5a6954f408a8dc75bfb93d2cb480603090b73a51c9cf3c595a0143ba52e707e0d23320bbdaf2e1a007027e98db22573e01bdb743736e95a3b0be7ff16f68589cf725f664843527b5ed7dcf8d3008f25251b30d7e43f29238707d18bae18a518ec36b5babd194362395c53a918a6b8c5814c515182455d53bf5714d3c8e3d7d424248682ea98570b80e1d50937d1c965ee1d6e0a4a755644f69a3fa1b39b731c820a27e5eee262448e178d157d1f7c3de11f438fb0afd7146e0f986125669371d0454e94aa6abf5ca1cb7d2da058cc53e8e6d599493929a2c620bea5a151029f71a3d264780e6f7bb5a6189d439272d2110431269bde8217bd4454f3f12afa7d3691c08bd54ed5e23db7f1fb7e7152c36aa2a5107e1072ab77d37e4f0167e93114905565457f6d9473d4a7c0e76d6413d331ec2d1ad5a35c3f2ba9761b4fe8bab215c1f5550de3dc7437ac411815b21b46f741a5d1e7d9fff79758f8de48f1a2d8f075e08e6af1337523a78245280cf61410fea436ba61cbe43e16cc2dd38cc9703fca9d58377ac1de2a15f7ba8adfc64d40dac511259feff3e14620e0e4c3b88133226e710aab777582015a5f3fdceaf794f7150985cacd0df3a05937253a19017147ec804d339982ccac6faedaf9829e49622a85a631d47ef1a7bdc8a473b7e508c08557951b6c8c3ff213f6f93c53a90470c0be5c91b9941ca2f9dba7daa16ee3408d3cf3cb353cc1f3868c94496e5906928e090e6e462ace0a499be85de3fc11674805fabfad7ec59e13b259aacf1fdfc3d5b37bd6a95e17006b1b4b966a460ec564f02878f4422e06130c668ed51036f21f3c50ce38b00c22176049ed77c1dc3682206fbf35eb9b7a1430d44c0aae4ca5928d823096e3896f4ca0b5a60a19461cac5354d4623c1c17948e43576cd55bb3f1d44191a5cdb6192cfe40149f389ca7131863a0eeb7d0da29216009f8d3c21b069d9a2e227f571daf62f458b921ad5fa42e4ce8041961acb90fefeacb5552c2da31ed90e2f09790654386af2db724cc4cb2eca1b2b643faef9f820a51d553031b0abdea01f6cbe1b5bf7a15ce5dd0ea5fb310a11fd12132200947d5bbc0a262f12d04082944d52318ed101629b397ab3cf8b86b101197ebba92684c46dac1baa0813f9d75de3d6b3f64b4e91c72e2344bd422e79c5f66a4440d9e1da76e77355133823026389711f74df6e3b576e0b2c76e12330be0b2079088c31d582a66eca4a2a30b370969ea7b7c2a15509b03a1eb01fb16b46b9b5a46aa04c9794bf5732781f6a1139dd58222e4670e09829751090fb82e05dd7a072142b05b5b968a32890ae253988600c9a8622302d2e959a299719edda34616d952c76fea7cca1051866e8008cc32302dca9c8cb96afb1ff02b11acbf6f0d069f5af0134cec7e81e9ed7252cca5a3fc74dbc4534a9b84f7b17415a6256f94082630e58c651d6344e5f3e57dedbf13817a69454360e73d189ef34e60ad9ae5e134d1f3e6a2a46315b220e32a8cea01c955b45f0610315fab5712459cac29b5c0516238a1089220e3b2f2a865dc8ba902607febd84f8c9aaef47244feb77ce83c2d9e9b87654ccc197ebbd5cc686dc9fafb9388e6a7096991bef29f524089fc977d9cd516f925306ed96556e89474cb6bf67592406f0f88016a734ffaeaf33193f88e99734c1e3074b68d59dde0de11ff81677b20382d27cd1c62e8ba184f33f0150a8cae3db11f8eec301bb225c13ca5638a086d7a03c2e6cca4eb32f244d849d4ac1de3f98ec6af11c46ca3427d2526339d9b04b2858925a4f251134174767e15a63bde5c1e5d900e5f1e43c8a4b6b1a789354e3586bab2f91440cd720710b03a7a59300eb639ffe2c0e0df439e2286567858a30459d93f62751d84ed432dfca8e5466957f58452b651d03fae92e5978600ec5e7f56631b4366034985adacdb2279c7c194002efda021865d27fc421b450aaea1a118e46746677440e"}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015"], 0x4c}}, 0x0) 927.35703ms ago: executing program 3 (id=2384): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x3}]}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) syz_io_uring_submit(0x0, 0x0, 0x0) close(0xffffffffffffffff) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x5, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r2, &(0x7f0000000000)={0x0, 0x8, 0x2, 0xff}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r3 = syz_usb_connect(0x6, 0x24, &(0x7f00000025c0)={{0x12, 0x1, 0x300, 0x8d, 0xe7, 0xd2, 0x20, 0x83a, 0xc522, 0xa53c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x0, 0x40, 0x8, [{{0x9, 0x4, 0x9e, 0x4, 0x0, 0x49, 0x9c, 0xed, 0xff}}]}}]}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, &(0x7f0000000300)={0x20, 0xc, 0xf6, {0xf6, 0x21, "654c72901401cb2af93ce172b08959fe07a2dad66ef223671a4f48f5355daa25d36123d9733c66cc53a4a5fdbcc03bad8ba9c27044b76a7b21c19fd7e91235d57003653d6162ecf28e9f10653f036ded4ba7a985bbebe9f12a9afbfea8982070e4cb7bc54b66dcc67a47b91d27e5a24245851635dfd2d68543d242e68d4a01af1823bb173415620471c7f54b4b4d7d92e13edc0486b08a8e258ac37fac65822b304847b69a7dfbc956765bb9bd08f4ddcd59a0e16d58786e40d898079a426e111337bc1e5359fabc8493d81346a37f4df8f3218bfa337c9dc11c826dd55d3f8812c5f8ca3331b730721309a70eb997b11259945d"}}, &(0x7f0000000480)={0x0, 0x3, 0xd8, @string={0xd8, 0x3, "36ad579cbdf3743eb002b8f6be39e6f05105687a9bdb8395ef3eb8ab450dc293043f5e6ec82f9f2d112bcf0fe6fdb3490876fb24e1ece99c60ed7483f74d4c217d8d7519cc9bd3f215573b1d5b5a8c8b991d5b8f3bfba078a35145bbe4446c3b6cf0f490a1242c03f8fec83878154f18ef0a40a9211860d0389ac4292a4dd87c063eb711d6e8c56a7fe2bba09a56fd826c7cec5370224afe4b3af74d8023f61fa3096c8aa4ebf9cca0ab1bc6a1a4a70cab3cb72a17c937cd64e3fcd12c314abe33d269c843a5db62137508039ad5d26217eb8fed89d2"}}, &(0x7f0000000100)={0x0, 0x22, 0x10, {[@local=@item_012={0x2, 0x2, 0x9, "07f6"}, @local=@item_4={0x3, 0x2, 0x5, "f81233ed"}, @global=@item_012={0x2, 0x1, 0xb, "0883"}, @local=@item_4={0x3, 0x2, 0x9, "3cbbc92f"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x64, 0xd, 0x1, {0x22, 0x656}}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000400)={0x40, 0xa, 0x33, "55429133d5e55cba2e199e0cce94e73c10eb2c654308e359f37dd4d20cfa7f3b9649d0025fc21b4071fa142362703a8309a596"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000600)={0x20, 0x1, 0x22, "0f3ea91cdea17eea9f2ccfddce6dba5bdf2f9f61e43f9d5346ebc1f3120d018ff6a1"}, &(0x7f0000000640)={0x20, 0x3, 0x1}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x10d6, &(0x7f0000000280)={0x0, 0x80003734, 0x100, 0xfffffffa, 0x280}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r4, 0x47bc, 0x0, 0x4000000000000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) 72.204963ms ago: executing program 9 (id=2385): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x2, 0x3e5, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) r5 = socket$inet6(0xa, 0x1, 0x84) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) close(r5) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000180)=[{&(0x7f0000000080)="a1", 0x1}], 0x1, 0x8) 0s ago: executing program 8 (id=2386): r0 = inotify_init1(0x0) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000100)=[0x0], 0x1}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000040)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) r3 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x400) r4 = dup(r0) read$FUSE(r4, 0x0, 0x0) read$FUSE(r4, &(0x7f0000004980)={0x2020}, 0x2020) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x854) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r6, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e260e227f000020925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e65720000004800028008000240000000840800034000000007080004400000000f080001400000000024000580090001006d657461000000001400028089fe02400000001a08000140000000090900010073797a30000000000900020073797a32"], 0xb0}}, 0x0) inotify_rm_watch(r4, r3) kernel console output (not intermixed with test programs): gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 643.798025][ T8194] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 643.813593][T13012] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 643.959921][ T8202] usb 4-1: device descriptor read/64, error -71 [ 643.989900][T13012] usb 8-1: Using ep0 maxpacket: 8 [ 643.996656][T13888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.011165][T13012] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 644.022831][T13888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.035339][T13012] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 644.049499][T13012] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 644.061564][T13012] usb 8-1: config 250 has no interface number 0 [ 644.068026][T13012] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 644.087004][T13012] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 644.098408][T13012] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 644.109231][T13012] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 644.120553][T13012] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 644.135878][T13012] usb 8-1: config 250 interface 228 has no altsetting 0 [ 644.146604][T13012] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 644.158669][T13012] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 644.167412][T13012] usb 8-1: Product: syz [ 644.172338][T13012] usb 8-1: SerialNumber: syz [ 644.188763][T13012] hub 8-1:250.228: bad descriptor, ignoring hub [ 644.195655][T13012] hub 8-1:250.228: probe with driver hub failed with error -5 [ 644.209905][T13877] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 644.217791][ T8202] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 644.352787][T13889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.369229][T13889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.370015][ T8202] usb 4-1: device descriptor read/64, error -71 [ 644.405840][T13012] usblp 8-1:250.228: usblp0: USB Bidirectional printer dev 25 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 644.420062][T13877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.435111][T13877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 644.454979][T13877] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 644.468442][T13877] usb 3-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 644.482198][T13877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.499281][ T5825] usb 9-1: USB disconnect, device number 2 [ 644.505820][T13877] usb 3-1: config 0 descriptor?? [ 644.512150][ T8202] usb usb4-port1: attempt power cycle [ 644.665476][T13012] usb 8-1: reset high-speed USB device number 25 using dummy_hcd [ 644.830012][T13012] usb 8-1: device descriptor read/64, error -71 [ 644.880321][ T8202] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 644.904504][ T8202] usb 4-1: device descriptor read/8, error -71 [ 645.088005][T13877] hid-multitouch 0003:0EEF:72D0.002B: unbalanced collection at end of report description [ 645.103838][T13877] hid-multitouch 0003:0EEF:72D0.002B: probe with driver hid-multitouch failed with error -22 [ 645.120360][T13012] usb 8-1: reset high-speed USB device number 25 using dummy_hcd [ 645.200647][ T8202] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 645.231087][ T8202] usb 4-1: device descriptor read/8, error -71 [ 645.287758][ T5825] usb 3-1: USB disconnect, device number 5 [ 645.300117][T13012] usb 8-1: device descriptor read/64, error -71 [ 645.442245][ T8202] usb usb4-port1: unable to enumerate USB device [ 645.489835][ T8193] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 645.613757][T13925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1904'. [ 645.630595][ T8193] usb 9-1: device descriptor read/64, error -71 [ 645.710137][T13012] usb 8-1: reset high-speed USB device number 25 using dummy_hcd [ 645.731176][T13012] usb 8-1: device descriptor read/8, error -71 [ 645.871844][ T8193] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 645.970331][T13012] usb 8-1: reset high-speed USB device number 25 using dummy_hcd [ 646.009906][ T8193] usb 9-1: device descriptor read/64, error -71 [ 646.018869][T13012] usb 8-1: device descriptor read/8, error -71 [ 646.128723][ T8193] usb usb9-port1: attempt power cycle [ 646.151256][T13012] usb 8-1: USB disconnect, device number 25 [ 646.159689][T13012] usblp0: removed [ 646.213047][T13942] netlink: 'syz.3.1907': attribute type 4 has an invalid length. [ 646.529895][ T8193] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 646.552799][ T8193] usb 9-1: device descriptor read/8, error -71 [ 646.559918][T13012] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 646.610294][ T5825] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 646.689654][T13947] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 646.839917][ T8193] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 646.860821][ T8193] usb 9-1: device descriptor read/8, error -71 [ 646.873443][ T5825] usb 3-1: unable to get BOS descriptor or descriptor too short [ 646.882773][ T5825] usb 3-1: config 5 has an invalid interface number: 173 but max is 0 [ 646.891687][ T5825] usb 3-1: config 5 has no interface number 0 [ 646.897801][ T5825] usb 3-1: config 5 interface 173 has no altsetting 0 [ 646.931962][ T5825] usb 3-1: string descriptor 0 read error: -22 [ 646.938331][ T5825] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice= 7.b9 [ 646.968143][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.976839][ T8193] usb usb9-port1: unable to enumerate USB device [ 646.995559][ T5825] legousbtower 3-1:5.173: interrupt endpoints not found [ 647.269886][T13012] usb 8-1: device descriptor read/64, error -71 [ 647.362655][T13959] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1913'. [ 647.431058][T13959] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1913'. [ 647.440624][T13959] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1913'. [ 647.449697][T13959] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1913'. [ 647.519919][T13012] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 647.672545][T13012] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 647.689228][T13012] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 647.801824][T13012] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 647.834194][T13012] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 647.849169][T13012] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 647.857791][T13012] usb 8-1: Product: syz [ 647.862648][T13012] usb 8-1: Manufacturer: syz [ 647.868530][T13012] usb 8-1: SerialNumber: syz [ 648.084318][T13012] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 648.353859][T13949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.362659][T13949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.045445][T13967] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 13967 comm: syz.8.1915) [ 649.090967][ T29] audit: type=1800 audit(1771840446.564:5737): pid=13967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1915" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=51627 res=0 errno=0 [ 649.333193][T13012] usb 3-1: USB disconnect, device number 6 [ 649.707385][ T8193] usb 8-1: USB disconnect, device number 27 [ 649.740651][ T8193] usblp0: removed [ 650.119833][ T8202] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 650.359863][ T8202] usb 9-1: device descriptor read/64, error -71 [ 650.499936][T13877] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 650.609937][ T8202] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 650.655607][T13877] usb 8-1: Using ep0 maxpacket: 16 [ 650.677111][T13877] usb 8-1: unable to get BOS descriptor or descriptor too short [ 650.712672][T13877] usb 8-1: config 15 has an invalid interface number: 64 but max is 0 [ 650.726988][T13877] usb 8-1: config 15 has no interface number 0 [ 650.794290][ T8202] usb 9-1: device descriptor read/64, error -71 [ 650.845005][T13877] usb 8-1: config 15 interface 64 altsetting 180 bulk endpoint 0xE has invalid maxpacket 16 [ 650.898186][T13877] usb 8-1: config 15 interface 64 has no altsetting 0 [ 650.920455][T13877] usb 8-1: New USB device found, idVendor=0f11, idProduct=1042, bcdDevice=b4.93 [ 650.934058][T13877] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.950464][ T8202] usb usb9-port1: attempt power cycle [ 650.956328][T13877] usb 8-1: Product: ࠠ [ 650.968604][T13877] usb 8-1: Manufacturer: ᇓ柰晆娗濾⠒㖪艛ꈕ惺㔁挥 [ 650.988337][T13877] usb 8-1: SerialNumber: 봰ⴀ畇쇈㽺웗塚Ɨᒬ뾽㈨䎽姿쳡༼敕≤唷㠟넣ᣈ잔䥽㹅亻▊徾଑㱏ꕊ⟧殫섉奋옡㘸߰滇˜ᇒ䉽焇肽팹꺛≈鸫㤏໳퇚뜽륬锇獕唔ඓ튓া떃땳゚囕ऄ░왪뗬딜룙춐࣫Ἔ∡⻬ [ 651.108313][T13984] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 651.299890][ T8202] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 651.325876][ T8202] usb 9-1: device descriptor read/8, error -71 [ 651.545757][T13984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.580417][T13984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.588471][ T8202] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 651.670290][ T8202] usb 9-1: device descriptor read/8, error -71 [ 651.746961][T13877] ldusb 8-1:15.64: Interrupt in endpoint not found [ 651.800980][ T8202] usb usb9-port1: unable to enumerate USB device [ 652.000539][ T8202] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 652.019566][ T8193] usb 8-1: USB disconnect, device number 28 [ 652.165883][ T8202] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 652.180273][T13012] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 652.194933][ T8202] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 652.206835][ T8202] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 652.222916][ T8202] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 652.239168][ T8202] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.248133][ T8202] usb 4-1: Product: syz [ 652.253382][ T8202] usb 4-1: Manufacturer: syz [ 652.258021][ T8202] usb 4-1: SerialNumber: syz [ 652.282435][ T8202] usb 4-1: config 0 descriptor?? [ 652.301509][ T8202] uvcvideo 4-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 652.309196][ T8202] uvcvideo 4-1:0.0: No valid video chain found. [ 652.320412][T13012] usb 3-1: device descriptor read/64, error -71 [ 652.503577][ T8202] usb 4-1: USB disconnect, device number 24 [ 652.561007][T13012] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 652.713555][T13012] usb 3-1: device descriptor read/64, error -71 [ 652.830265][T13012] usb usb3-port1: attempt power cycle [ 653.190045][T13012] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 653.220793][T13012] usb 3-1: device descriptor read/8, error -71 [ 653.229987][ T8193] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 653.314280][T14024] netlink: 'syz.3.1929': attribute type 1 has an invalid length. [ 653.452151][ T8193] usb 9-1: config 0 has an invalid interface number: 251 but max is 0 [ 653.469902][T13012] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 653.490772][T13012] usb 3-1: device descriptor read/8, error -71 [ 653.519608][ T8193] usb 9-1: config 0 has no interface number 0 [ 653.535755][ T8193] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=77.f4 [ 653.572357][T14026] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address [ 653.592001][T14026] bond5: (slave vxcan5): Error -95 calling set_mac_address [ 653.592530][ T8193] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.610596][T13012] usb usb3-port1: unable to enumerate USB device [ 653.657507][ T8193] usb 9-1: Product: syz [ 653.721415][ T8193] usb 9-1: Manufacturer: syz [ 653.736058][ T8193] usb 9-1: SerialNumber: syz [ 654.078308][ T8193] usb 9-1: config 0 descriptor?? [ 654.087375][T14014] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 654.371109][T14034] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1927'. [ 655.402131][ T8193] asix 9-1:0.251: probe with driver asix failed with error -71 [ 655.433968][ T8193] usb 9-1: USB disconnect, device number 11 [ 655.529868][ T5825] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 655.705722][ T5825] usb 3-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 655.727415][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.763618][ T5825] usb 3-1: config 0 descriptor?? [ 655.814737][ T5825] usb 3-1: selecting invalid altsetting 1 [ 655.821567][ T5825] flexcop_usb: set interface failed. [ 655.836240][ T5825] b2c2_flexcop_usb 3-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 656.128196][T14044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.142412][T14044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.229932][ T8202] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 656.279901][T13877] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 656.359258][T14044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.368399][ T8202] usb 8-1: device descriptor read/64, error -71 [ 656.376772][T14044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.441561][T13877] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.451810][T13877] usb 9-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 656.463186][T13877] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.484472][T13877] usb 9-1: config 0 descriptor?? [ 656.619900][ T8202] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 656.749888][ T8202] usb 8-1: device descriptor read/64, error -71 [ 656.864491][ T8202] usb usb8-port1: attempt power cycle [ 657.209860][ T8202] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 657.230545][ T8202] usb 8-1: device descriptor read/8, error -71 [ 657.408995][T13877] hid (null): bogus close delimiter [ 657.432603][T13877] lg-g15 0003:046D:C222.002C: bogus close delimiter [ 657.445539][T13877] lg-g15 0003:046D:C222.002C: item 0 1 2 10 parsing failed [ 657.455743][T13877] lg-g15 0003:046D:C222.002C: probe with driver lg-g15 failed with error -22 [ 657.500058][ T8202] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 657.521168][ T8202] usb 8-1: device descriptor read/8, error -71 [ 657.618902][ T5825] usb 9-1: USB disconnect, device number 12 [ 657.630230][ T8202] usb usb8-port1: unable to enumerate USB device [ 658.196257][ T8202] usb 3-1: USB disconnect, device number 11 [ 658.294649][T14059] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1937'. [ 659.168524][T14078] binder: BINDER_SET_CONTEXT_MGR already set [ 659.176087][T14078] binder: 14077:14078 ioctl 4018620d 200000000040 returned -16 [ 659.190665][T14078] binder: 14077:14078 ioctl c0306201 200000000240 returned -11 [ 659.449939][ T5825] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 659.609896][ T8193] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 659.618040][ T5825] usb 8-1: Using ep0 maxpacket: 8 [ 659.630950][ T5825] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.642625][ T5825] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.652717][ T5825] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 659.755569][ T5825] usb 8-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 659.785065][ T5825] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.794596][ T8193] usb 9-1: Using ep0 maxpacket: 32 [ 659.800974][T14084] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 659.801127][ T8193] usb 9-1: too many configurations: 200, using maximum allowed: 8 [ 659.847566][ T5825] usb 8-1: config 0 descriptor?? [ 659.876156][ T8193] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 659.885784][ T8193] usb 9-1: can't read configurations, error -61 [ 660.019920][ T8193] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 660.179936][ T8193] usb 9-1: Using ep0 maxpacket: 32 [ 660.186631][ T8193] usb 9-1: too many configurations: 200, using maximum allowed: 8 [ 660.198065][ T8193] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 660.208500][ T8193] usb 9-1: can't read configurations, error -61 [ 660.217581][ T8193] usb usb9-port1: attempt power cycle [ 660.286696][ T5825] apple 0003:05AC:027A.002D: hidraw0: USB HID v0.07 Device [HID 05ac:027a] on usb-dummy_hcd.7-1/input0 [ 660.337755][T14096] netlink: 'syz.3.1946': attribute type 1 has an invalid length. [ 660.496857][T13012] usb 8-1: USB disconnect, device number 33 [ 660.534896][T14098] fido_id[14098]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 660.542298][T14099] bond6: (slave vxcan5): The slave device specified does not support setting the MAC address [ 660.567057][T14099] bond6: (slave vxcan5): Error -95 calling set_mac_address [ 660.574467][ T8193] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 660.604495][ T8193] usb 9-1: Using ep0 maxpacket: 32 [ 660.610493][ T8193] usb 9-1: too many configurations: 200, using maximum allowed: 8 [ 660.639262][ T8193] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 660.715674][ T8193] usb 9-1: can't read configurations, error -61 [ 660.949883][ T8193] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 660.976071][ T8193] usb 9-1: Using ep0 maxpacket: 32 [ 660.981912][ T8193] usb 9-1: too many configurations: 200, using maximum allowed: 8 [ 661.000899][T14107] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 661.100536][ T8193] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 661.108189][ T8193] usb 9-1: can't read configurations, error -61 [ 661.117451][ T8193] usb usb9-port1: unable to enumerate USB device [ 661.879807][ T8202] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 662.060027][ T8202] usb 8-1: Using ep0 maxpacket: 8 [ 662.070987][ T8202] usb 8-1: config 0 has an invalid interface number: 122 but max is 0 [ 662.079385][ T8202] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 662.091064][ T8202] usb 8-1: config 0 has no interface number 0 [ 662.098439][ T8202] usb 8-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 662.127746][ T8202] usb 8-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 662.158103][ T8202] usb 8-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023 [ 662.185481][ T8202] usb 8-1: config 0 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 662.220050][ T8202] usb 8-1: config 0 interface 122 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 662.261000][ T8202] usb 8-1: config 0 interface 122 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 662.312406][ T8202] usb 8-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 662.325205][ T8202] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.333741][ T8202] usb 8-1: Product: syz [ 662.340507][ T8202] usb 8-1: Manufacturer: syz [ 662.394606][ T8202] usb 8-1: SerialNumber: syz [ 662.608963][ T8202] usb 8-1: config 0 descriptor?? [ 662.624196][T14112] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 662.636580][T14112] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 662.838196][ T8193] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 662.887544][T14112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.900363][T14112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.999875][ T8193] usb 3-1: Using ep0 maxpacket: 16 [ 663.098834][T14124] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1952'. [ 663.140331][ T8193] usb 3-1: config 0 has no interfaces? [ 663.162291][ T8193] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 663.183721][ T8193] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 663.206608][ T8193] usb 3-1: Manufacturer: syz [ 663.226646][ T8193] usb 3-1: config 0 descriptor?? [ 663.432087][ T8202] usb 8-1: NFC: intf ffff88802580d000 id ffffffff8f1d0c40 [ 663.685120][ T8202] nfcmrvl 8-1:0.122: NFC: registered with nci successfully [ 663.695278][T14136] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1953'. [ 663.705467][ T8202] usb 8-1: USB disconnect, device number 34 [ 663.730988][ T8202] usb 8-1: NFC: intf ffff88802580d000 [ 663.782659][T14117] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 663.844884][T14117] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 664.936878][T14152] netlink: 'syz.0.1957': attribute type 23 has an invalid length. [ 665.528840][ T8193] usb 3-1: USB disconnect, device number 12 [ 665.719882][T13012] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 665.913553][T13012] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 665.943422][T13012] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 665.967510][T13012] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 665.979342][T13012] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.991798][T14166] netlink: 'syz.2.1960': attribute type 4 has an invalid length. [ 666.046922][T13012] usb 9-1: Product: syz [ 666.051656][T13012] usb 9-1: Manufacturer: syz [ 666.056945][T13012] usb 9-1: SerialNumber: syz [ 666.184259][T14170] netlink: 'syz.7.1961': attribute type 4 has an invalid length. [ 666.207122][T14170] xt_CT: You must specify a L4 protocol and not use inversions on it [ 666.502698][T13012] usb 9-1: 0:2 : does not exist [ 666.919264][ T8202] usb 9-1: USB disconnect, device number 17 [ 667.330415][T13012] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 667.340521][ T29] audit: type=1326 audit(1771840464.844:5738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14175 comm="syz.3.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563e99c629 code=0x7ffc0000 [ 667.390010][ T29] audit: type=1326 audit(1771840464.844:5739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14175 comm="syz.3.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563e99c629 code=0x7ffc0000 [ 667.422550][ T29] audit: type=1326 audit(1771840464.874:5740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14175 comm="syz.3.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f563e99c629 code=0x7ffc0000 [ 667.476949][ T29] audit: type=1326 audit(1771840464.874:5741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14175 comm="syz.3.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563e99c629 code=0x7ffc0000 [ 667.500575][T13012] usb 3-1: device descriptor read/64, error -71 [ 667.507433][ T29] audit: type=1326 audit(1771840464.874:5742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14175 comm="syz.3.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563e99c629 code=0x7ffc0000 [ 667.534597][ T29] audit: type=1326 audit(1771840464.874:5743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14175 comm="syz.3.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f563e99c629 code=0x7ffc0000 [ 667.558229][ T29] audit: type=1326 audit(1771840464.874:5744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14175 comm="syz.3.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563e99c629 code=0x7ffc0000 [ 667.597656][ T29] audit: type=1326 audit(1771840464.874:5745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14175 comm="syz.3.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563e99c629 code=0x7ffc0000 [ 667.762893][T13012] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 667.859970][ T5915] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 667.915707][T14193] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1969'. [ 667.945136][T14193] bridge0: port 3(hsr0) entered blocking state [ 667.955075][T14193] bridge0: port 3(hsr0) entered disabled state [ 667.961939][T13012] usb 3-1: device descriptor read/64, error -71 [ 667.968648][T14193] hsr0: entered allmulticast mode [ 667.985049][T14193] hsr_slave_0: entered allmulticast mode [ 668.019956][T14193] hsr_slave_1: entered allmulticast mode [ 668.059810][T14193] hsr0: entered promiscuous mode [ 668.090632][T13012] usb usb3-port1: attempt power cycle [ 668.096358][T14193] bridge0: port 3(hsr0) entered blocking state [ 668.102712][T14193] bridge0: port 3(hsr0) entered forwarding state [ 668.310588][ T8202] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 668.528148][T13012] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 668.595169][T13012] usb 3-1: device descriptor read/8, error -71 [ 668.637852][ T8202] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 668.650808][ T8202] usb 4-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 668.663319][ T8202] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.704531][ T8202] usb 4-1: config 0 descriptor?? [ 668.839983][T13012] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 668.860750][T13012] usb 3-1: device descriptor read/8, error -71 [ 668.980135][T13012] usb usb3-port1: unable to enumerate USB device [ 669.169858][T13012] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 669.333639][T13012] usb 8-1: Using ep0 maxpacket: 8 [ 669.341749][T13012] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 669.369075][T13012] usb 8-1: config 0 has no interface number 0 [ 669.393881][T13012] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 669.422365][T13012] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 669.455961][T14203] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1972'. [ 669.478739][T13012] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 669.498389][T13012] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 669.513530][T13012] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 669.526702][T13012] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.575349][T13012] usb 8-1: config 0 descriptor?? [ 669.666687][T13012] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 669.872390][ T8193] usb 8-1: USB disconnect, device number 35 [ 669.892078][ T8193] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 671.019863][ T8193] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 671.088601][ T8202] usbhid 4-1:0.0: can't add hid device: -71 [ 671.094982][ T8202] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 671.229852][ T8193] usb 9-1: Using ep0 maxpacket: 16 [ 671.262746][ T8193] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 671.274979][ T8193] usb 9-1: config 0 has no interface number 0 [ 671.293026][ T8193] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 671.305698][ T8202] usb 4-1: USB disconnect, device number 25 [ 671.318583][ T8193] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 671.340885][ T8193] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 671.350378][ T8193] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 671.390352][ T8193] usb 9-1: Product: syz [ 671.394859][ T8193] usb 9-1: SerialNumber: syz [ 671.411147][ T8193] usb 9-1: config 0 descriptor?? [ 671.425968][ T8193] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 671.443087][ T8193] input: CM109 USB driver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.8/input/input47 [ 671.672092][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 671.673159][ T8202] usb 9-1: USB disconnect, device number 19 [ 671.679975][ C0] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 671.750724][ T8202] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 672.378107][T14228] tipc: Enabling of bearer rejected, failed to enable media [ 672.649909][ T8202] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 673.069243][ T8202] usb 3-1: config 195 has an invalid interface number: 1 but max is 0 [ 673.095176][ T8202] usb 3-1: config 195 has no interface number 0 [ 673.110569][T14235] i2c i2c-0: Invalid block read size 255 [ 673.116548][ T8202] usb 3-1: config 195 interface 1 has no altsetting 0 [ 673.163489][ T8202] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=60.f9 [ 673.216035][ T8202] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.397498][ T8202] usb 3-1: Product: syz [ 673.408689][ T8202] usb 3-1: Manufacturer: syz [ 673.418835][ T8202] usb 3-1: SerialNumber: syz [ 673.556160][T14237] loop2: detected capacity change from 0 to 7 [ 673.613165][T14237] Dev loop2: unable to read RDB block 7 [ 673.640015][T14237] loop2: unable to read partition table [ 673.649447][T14237] loop2: partition table beyond EOD, truncated [ 673.664889][ T8202] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 673.699994][T14237] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 673.915094][ T8202] snd-usb-audio 3-1:195.1: probe with driver snd-usb-audio failed with error -2 [ 673.947114][ T8202] usb 3-1: USB disconnect, device number 17 [ 673.993728][ T5922] udevd[5922]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:195.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 674.334564][T14263] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.1990'. [ 674.510047][ T5917] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 674.558584][T14269] syzkaller0: entered promiscuous mode [ 674.568739][T14269] syzkaller0: entered allmulticast mode [ 674.669946][ T5917] usb 3-1: Using ep0 maxpacket: 16 [ 674.677883][ T5917] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.691549][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 674.710771][T14269] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1991'. [ 674.725149][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 674.736330][ T5917] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 674.748336][ T5917] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 674.789688][ T5917] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 674.804179][ T5917] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 674.813079][ T5917] usb 3-1: Manufacturer: syz [ 674.836349][ T5917] usb 3-1: config 0 descriptor?? [ 675.191864][ T5917] rc_core: IR keymap rc-hauppauge not found [ 675.215986][ T5917] Registered IR keymap rc-empty [ 675.266471][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 675.311415][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 675.361412][ T5917] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 675.430506][ T5917] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input48 [ 675.478433][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 675.520316][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 675.550266][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 675.603320][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 675.639981][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 675.699912][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 675.730055][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 675.770054][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 675.801079][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 675.841175][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 675.865550][ T5917] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 675.886493][ T5917] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 675.935901][ T5917] usb 3-1: USB disconnect, device number 18 [ 676.449960][ T8193] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 676.831912][ T8193] usb 8-1: unable to get BOS descriptor or descriptor too short [ 676.843105][ T8193] usb 8-1: config 255 has an invalid interface number: 119 but max is 0 [ 676.871049][ T8193] usb 8-1: config 255 has no interface number 0 [ 676.927378][ T8193] usb 8-1: config 255 interface 119 has no altsetting 0 [ 676.968479][ T8193] usb 8-1: New USB device found, idVendor=0421, idProduct=048e, bcdDevice=d4.8c [ 676.978959][ T8193] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.987315][ T8193] usb 8-1: Product: syz [ 676.991842][ T8193] usb 8-1: Manufacturer: syz [ 676.996711][ T8193] usb 8-1: SerialNumber: syz [ 677.259230][ T8193] rndis_host 8-1:255.119: invalid descriptor buffer length [ 677.295377][ T8193] usb 8-1: bad CDC descriptors [ 677.313841][ T8193] cdc_acm 8-1:255.119: invalid descriptor buffer length [ 677.378730][ T8193] usb 8-1: USB disconnect, device number 36 [ 677.713142][ T5915] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 677.728801][T14317] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2005'. [ 678.131234][ T5915] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 678.177362][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 678.209783][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 678.247072][ T5915] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 678.265147][ T5915] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 678.276379][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.289973][ T5915] usb 4-1: config 0 descriptor?? [ 678.479969][ T5917] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 678.675360][ T5917] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 678.709353][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 678.721484][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 678.780373][ T5917] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 678.814804][ T5915] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 678.829281][ T5917] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 678.841850][ T5917] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 678.870059][ T5917] usb 3-1: Manufacturer: syz [ 678.888334][ T5917] usb 3-1: config 0 descriptor?? [ 678.928326][ T5915] usb 4-1: USB disconnect, device number 26 [ 679.051134][T14335] fido_id[14335]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 679.199891][ T5917] rc_core: IR keymap rc-hauppauge not found [ 679.206287][ T5917] Registered IR keymap rc-empty [ 679.215663][ T5917] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 679.242198][ T5917] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 679.261280][ T5917] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 679.277568][ T5917] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input50 [ 679.290706][ T5915] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 679.305951][ T5917] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 679.341545][ T5917] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 679.349875][ T8193] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 679.361850][ T5917] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 679.390247][ T5917] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 679.410254][ T5917] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 679.441236][ T5917] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 679.460268][ T5917] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 679.461549][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 679.474756][ T5915] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 679.484037][ T5915] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 679.490201][ T5917] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 679.494960][ T5915] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 679.511770][ T8193] usb 8-1: Using ep0 maxpacket: 16 [ 679.519462][ T8193] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 679.532997][ T8194] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 679.540181][ T5917] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 679.544019][ T8193] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 679.560373][ T5917] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 679.561566][ T5915] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 679.570677][T14317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.581043][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.588566][T14317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.594273][ T5915] usb 4-1: Product: syz [ 679.603668][ T5917] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 679.608544][ T5915] usb 4-1: Manufacturer: syz [ 679.616574][ T5917] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 679.619126][ T5915] usb 4-1: SerialNumber: syz [ 679.633430][ T8193] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 679.644197][ T8193] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.659051][ T8193] usb 8-1: Product: syz [ 679.667085][ T8193] usb 8-1: Manufacturer: syz [ 679.673161][ T8193] usb 8-1: SerialNumber: syz [ 679.700197][ T8193] usb 8-1: config 0 descriptor?? [ 679.712512][ T8193] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 679.722002][ T8193] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 679.735128][ T8194] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 679.757732][ T8194] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 679.791386][ T8194] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.815008][ T8194] usb 9-1: config 0 descriptor?? [ 679.925742][ T5915] usb 4-1: 0:2 : does not exist [ 679.996525][ T5915] usb 4-1: USB disconnect, device number 27 [ 680.258796][ T8194] keytouch 0003:0926:3333.002F: fixing up Keytouch IEC report descriptor [ 680.272886][ T8194] input: HID 0926:3333 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0926:3333.002F/input/input51 [ 680.315637][ T8193] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 680.327007][ T8193] em28xx 8-1:0.0: Config register raw data: 0x36 [ 680.334054][ T8193] em28xx 8-1:0.0: I2S Audio (3 sample rate(s)) [ 680.343948][ T8193] em28xx 8-1:0.0: No AC97 audio processor [ 680.375653][ T8194] keytouch 0003:0926:3333.002F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.8-1/input0 [ 680.737016][ T8193] usb 8-1: USB disconnect, device number 37 [ 680.743360][T14353] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2013'. [ 680.823416][T14341] 8021q: VLANs not supported on ip_vti0 [ 680.843293][T13877] usb 9-1: USB disconnect, device number 20 [ 680.869851][T14353] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 680.876455][T14353] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 680.910553][T14353] vhci_hcd vhci_hcd.0: Device attached [ 680.943563][T14354] vhci_hcd: connection closed [ 680.944199][ T58] vhci_hcd vhci_hcd.0: stop threads [ 680.952002][ T8193] usb 3-1: USB disconnect, device number 19 [ 680.989344][ T58] vhci_hcd vhci_hcd.0: release socket [ 681.006349][ T58] vhci_hcd vhci_hcd.0: disconnect device [ 681.746406][T14369] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2017'. [ 681.770767][T14369] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2017'. [ 681.966730][T14367] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2014'. [ 681.994262][T14367] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2014'. [ 682.111239][T14376] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2018'. [ 683.831795][ T8202] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 684.019868][ T8202] usb 4-1: device descriptor read/64, error -71 [ 684.266518][ T8202] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 684.401974][ T8202] usb 4-1: device descriptor read/64, error -71 [ 684.510236][ T8202] usb usb4-port1: attempt power cycle [ 684.586464][ T5917] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 684.640261][T14430] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2034'. [ 684.649589][T14430] netlink: 43 bytes leftover after parsing attributes in process `syz.7.2034'. [ 684.665187][T14430] netlink: 'syz.7.2034': attribute type 5 has an invalid length. [ 684.674522][T14430] netlink: 43 bytes leftover after parsing attributes in process `syz.7.2034'. [ 684.751007][ T5917] usb 9-1: not running at top speed; connect to a high speed hub [ 684.765246][ T5917] usb 9-1: config 95 has an invalid interface number: 1 but max is 0 [ 684.786955][ T5917] usb 9-1: config 95 has no interface number 0 [ 684.794946][ T5917] usb 9-1: config 95 interface 1 has no altsetting 0 [ 684.805269][ T5917] usb 9-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 684.816585][ T5917] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.869859][ T8202] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 684.886727][ T5917] usb 9-1: Product: syz [ 684.891373][ T5917] usb 9-1: Manufacturer: syz [ 684.911666][ T5917] usb 9-1: SerialNumber: syz [ 684.926482][ T8202] usb 4-1: device descriptor read/8, error -71 [ 684.930071][ T8194] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 685.070026][ T8194] usb 8-1: device descriptor read/64, error -71 [ 685.180089][ T8202] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 685.310316][ T8194] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 685.352684][ T8202] usb 4-1: device descriptor read/8, error -71 [ 685.460038][ T8194] usb 8-1: device descriptor read/64, error -71 [ 685.470359][ T8202] usb usb4-port1: unable to enumerate USB device [ 685.570295][ T8194] usb usb8-port1: attempt power cycle [ 685.749434][ T5917] usb 9-1: USB disconnect, device number 21 [ 685.846553][ T5922] udevd[5922]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 685.919921][ T8194] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 685.940299][ T8194] usb 8-1: device descriptor read/8, error -71 [ 686.012642][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.021724][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.179943][ T8194] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 686.200717][ T8194] usb 8-1: device descriptor read/8, error -71 [ 686.220071][T13877] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 686.310392][ T8194] usb usb8-port1: unable to enumerate USB device [ 686.380324][T13877] usb 3-1: Using ep0 maxpacket: 8 [ 686.405558][T13877] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 686.439996][T13877] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 686.459660][T13877] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 686.473285][T13877] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 686.487041][T13877] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 686.497038][T13877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.713555][T13877] usb 3-1: GET_CAPABILITIES returned 0 [ 686.720275][T13877] usbtmc 3-1:16.0: can't read capabilities [ 686.975341][T14443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2038'. [ 687.517013][T14479] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2047'. [ 687.543609][T14479] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2047'. [ 687.558211][T14480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2048'. [ 687.577556][T14480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2048'. [ 687.588375][T14480] ucma_write: process 1425 (syz.0.2048) changed security contexts after opening file descriptor, this is not allowed. [ 688.439812][ T5825] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 688.599902][ T5825] usb 8-1: Using ep0 maxpacket: 32 [ 688.608066][ T5825] usb 8-1: config 0 has an invalid interface number: 202 but max is 1 [ 688.617270][ T5825] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 688.628306][ T5825] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 688.640691][ T5825] usb 8-1: config 0 has no interface number 0 [ 688.647122][ T5825] usb 8-1: too many endpoints for config 0 interface 202 altsetting 87: 182, using maximum allowed: 30 [ 688.662988][ T5825] usb 8-1: config 0 interface 202 altsetting 87 endpoint 0x2 has invalid maxpacket 64767, setting to 64 [ 688.684619][ T5825] usb 8-1: config 0 interface 202 altsetting 87 has 1 endpoint descriptor, different from the interface descriptor's value: 182 [ 688.718450][ T5825] usb 8-1: config 0 interface 202 has no altsetting 0 [ 688.738138][ T5825] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b [ 688.748861][ T5825] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.765455][ T5825] usb 8-1: Product: syz [ 688.778651][ T5825] usb 8-1: Manufacturer: syz [ 688.795001][ T5825] usb 8-1: SerialNumber: syz [ 688.826128][ T5825] usb 8-1: config 0 descriptor?? [ 688.853302][ T5825] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 688.915640][T14504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2054'. [ 688.982444][ T5917] usb 3-1: USB disconnect, device number 20 [ 689.037557][T14514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2056'. [ 689.048656][T14495] fuse: Bad value for 'fd' [ 689.069203][T14514] loop2: detected capacity change from 0 to 7 [ 689.108946][T14514] Dev loop2: unable to read RDB block 7 [ 689.135245][T14514] loop2: AHDI p2 p3 [ 689.163552][ T8064] usb 8-1: Failed to submit usb control message: -71 [ 689.164956][ T5825] usb 8-1: USB disconnect, device number 42 [ 689.178052][ T8064] usb 8-1: unable to send the bmi data to the device: -71 [ 689.190883][T14514] loop2: partition table partially beyond EOD, truncated [ 689.205277][ T8064] usb 8-1: unable to get target info from device [ 689.226388][T14514] loop2: p3 start 335544320 is beyond EOD, truncated [ 689.247673][ T8064] usb 8-1: could not get target info (-71) [ 689.282779][ T8064] usb 8-1: could not probe fw (-71) [ 689.585590][T14525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2059'. [ 689.622476][T14525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2059'. [ 690.389845][ T5825] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 690.522953][ T5825] usb 3-1: device descriptor read/64, error -71 [ 690.808410][ T5825] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 690.960113][ T5825] usb 3-1: device descriptor read/64, error -71 [ 690.986627][T14535] macsec1: entered promiscuous mode [ 690.995928][T14535] macsec1: entered allmulticast mode [ 691.003728][T14540] loop5: detected capacity change from 0 to 7 [ 691.027830][T14540] Dev loop5: unable to read RDB block 7 [ 691.045356][T14540] loop5: unable to read partition table [ 691.063589][T14540] loop5: partition table beyond EOD, truncated [ 691.081968][ T5825] usb usb3-port1: attempt power cycle [ 691.087463][T14540] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 691.440210][ T5825] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 691.560037][ T5825] usb 3-1: device descriptor read/8, error -71 [ 691.829887][ T8194] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 691.838334][ T5825] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 691.861111][ T5825] usb 3-1: device descriptor read/8, error -71 [ 691.981386][ T5825] usb usb3-port1: unable to enumerate USB device [ 692.019901][ T8194] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 692.028735][ T8194] usb 4-1: config 0 has no interface number 0 [ 692.065560][ T8194] usb 4-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 692.088464][ T8194] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x88 has invalid wMaxPacketSize 0 [ 692.101630][ T8194] usb 4-1: config 0 interface 200 has no altsetting 0 [ 692.111803][ T8194] usb 4-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 692.122914][ T8194] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.134463][ T8194] usb 4-1: Product: syz [ 692.138671][ T8194] usb 4-1: Manufacturer: syz [ 692.150115][ T8194] usb 4-1: SerialNumber: syz [ 692.162858][ T8194] usb 4-1: config 0 descriptor?? [ 692.320336][ T5917] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 692.376953][T14548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.385750][T14548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.402817][ T8194] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.200/input/input53 [ 692.439502][ T8194] usb 4-1: USB disconnect, device number 32 [ 692.479901][ T5917] usb 9-1: Using ep0 maxpacket: 32 [ 692.487100][ T5917] usb 9-1: config 0 has an invalid interface number: 188 but max is 0 [ 692.496023][ T5917] usb 9-1: config 0 has no interface number 0 [ 692.505830][ T5917] usb 9-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 692.520332][ T5917] usb 9-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 692.529853][ T5917] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.540079][ T5917] usb 9-1: Product: syz [ 692.550227][ T5917] usb 9-1: Manufacturer: syz [ 692.555014][ T5917] usb 9-1: SerialNumber: syz [ 692.578084][ T5917] usb 9-1: config 0 descriptor?? [ 692.598573][T14558] raw-gadget.4 gadget.8: fail, usb_ep_enable returned -22 [ 692.819317][T14558] raw-gadget.4 gadget.8: fail, usb_ep_enable returned -22 [ 692.937928][ T5917] asix 9-1:0.188: probe with driver asix failed with error -71 [ 692.995067][ T5917] usb 9-1: USB disconnect, device number 22 [ 693.244157][ T5825] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 693.409829][ T5825] usb 8-1: Using ep0 maxpacket: 32 [ 693.429478][ T5825] usb 8-1: config 0 has an invalid interface number: 188 but max is 0 [ 693.439036][ T5825] usb 8-1: config 0 has no interface number 0 [ 693.446975][ T5825] usb 8-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 693.464046][ T5825] usb 8-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 693.473515][ T5825] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.487572][ T5825] usb 8-1: Product: syz [ 693.495714][ T5825] usb 8-1: Manufacturer: syz [ 693.503676][ T5825] usb 8-1: SerialNumber: syz [ 693.511375][ T5917] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 693.529259][ T5825] usb 8-1: config 0 descriptor?? [ 693.554773][T14569] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 693.650364][ T5917] usb 9-1: device descriptor read/64, error -71 [ 693.764142][T14570] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 693.776120][ T5825] asix 8-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 693.810358][T13877] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 693.825859][ T5825] asix 8-1:0.188: probe with driver asix failed with error -32 [ 693.900024][ T5917] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 693.976142][T13877] usb 4-1: unable to get BOS descriptor or descriptor too short [ 693.995111][T13877] usb 4-1: not running at top speed; connect to a high speed hub [ 694.011997][T13877] usb 4-1: config 1 has an invalid interface descriptor of length 5, skipping [ 694.032317][ T5917] usb 9-1: device descriptor read/64, error -71 [ 694.039814][T13877] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 694.059829][T13877] usb 4-1: config 1 has 3 interfaces, different from the descriptor's value: 19 [ 694.071243][T13877] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 59, changing to 4 [ 694.082666][T13877] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 694.106693][T13877] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 694.120030][T13877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.129984][T13877] usb 4-1: Product: syz [ 694.134300][T13877] usb 4-1: Manufacturer: syz [ 694.146260][ T5917] usb usb9-port1: attempt power cycle [ 694.155236][T13877] usb 4-1: SerialNumber: syz [ 694.403247][T13877] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 694.458332][T13877] usb 4-1: USB disconnect, device number 33 [ 694.500305][ T5917] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 694.530625][ T5917] usb 9-1: device descriptor read/8, error -71 [ 694.711390][T13877] usb 8-1: USB disconnect, device number 43 [ 694.769861][ T5917] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 694.821025][ T5917] usb 9-1: device descriptor read/8, error -71 [ 694.933445][ T5917] usb usb9-port1: unable to enumerate USB device [ 695.007510][T14610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.020362][T14610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.040062][ T5825] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 695.180147][ T5825] usb 3-1: device descriptor read/64, error -71 [ 695.239892][ T5917] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 695.369960][ T5917] usb 8-1: device descriptor read/64, error -71 [ 695.419908][ T5825] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 695.549985][ T5825] usb 3-1: device descriptor read/64, error -71 [ 695.609976][ T5917] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 695.660250][ T5825] usb usb3-port1: attempt power cycle [ 695.742133][ T5917] usb 8-1: device descriptor read/64, error -71 [ 695.850484][ T5917] usb usb8-port1: attempt power cycle [ 696.000554][ T5825] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 696.020691][ T5825] usb 3-1: device descriptor read/8, error -71 [ 696.200062][ T5917] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 696.220664][ T5917] usb 8-1: device descriptor read/8, error -71 [ 696.262016][ T5825] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 696.295642][ T5825] usb 3-1: device descriptor read/8, error -71 [ 696.459862][ T5917] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 696.480618][ T5917] usb 8-1: device descriptor read/8, error -71 [ 696.500573][ T5825] usb usb3-port1: unable to enumerate USB device [ 696.590109][ T5917] usb usb8-port1: unable to enumerate USB device [ 698.086664][T14610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.097836][T14610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.318685][T14639] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2089'. [ 698.376020][T14643] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2089'. [ 698.511539][T14647] netlink: 'syz.7.2088': attribute type 1 has an invalid length. [ 698.540931][T14639] 8021q: adding VLAN 0 to HW filter on device bond1 [ 698.571407][T14648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2090'. [ 698.750627][T14648] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2090'. [ 698.841881][T14650] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 698.942920][T14650] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 699.373634][T14660] netlink: 'syz.8.2092': attribute type 275 has an invalid length. [ 700.380017][ T5917] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 700.521800][T14678] netlink: 'syz.8.2097': attribute type 10 has an invalid length. [ 700.545364][T14678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.563637][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 700.592921][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 700.609088][T14678] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 700.638242][ T5917] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 700.656863][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.681792][ T5917] usb 4-1: config 0 descriptor?? [ 700.959914][ T5825] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 701.099042][ T5917] hid_parser_main: 12 callbacks suppressed [ 701.099061][ T5917] hid-steam 0003:28DE:1142.0030: unknown main item tag 0x0 [ 701.116696][ T5917] hid-steam 0003:28DE:1142.0030: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 701.119842][ T5825] usb 9-1: Using ep0 maxpacket: 16 [ 701.136259][ T5825] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 701.146765][ T5825] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 701.159262][ T5825] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 701.169560][ T5825] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.177664][ T5825] usb 9-1: Product: syz [ 701.182635][ T5825] usb 9-1: Manufacturer: syz [ 701.182636][ T5917] hid-steam 0003:28DE:1142.0030: Steam wireless receiver connected [ 701.183008][ T5917] hid-steam 0003:28DE:1142.0030: No HID_FEATURE_REPORT submitted - nothing to read [ 701.187256][ T5825] usb 9-1: SerialNumber: syz [ 701.230577][ T5917] hid-steam 0003:28DE:1142.0031: unknown main item tag 0x0 [ 701.249477][ T5917] hid-steam 0003:28DE:1142.0031: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 701.394843][T14678] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2097'. [ 701.418340][T14678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 701.433493][T14678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 701.460185][T14678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 701.477316][T14678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 701.507185][T14678] bond0: (slave batadv0): Releasing backup interface [ 701.583536][T13877] usb 4-1: USB disconnect, device number 34 [ 701.630048][ T5825] usb 9-1: 0:2 : does not exist [ 701.652080][T13877] hid-steam 0003:28DE:1142.0030: Steam wireless receiver disconnected [ 701.652950][ T5825] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 701.780128][ T5825] usb 9-1: USB disconnect, device number 27 [ 702.170052][T13877] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 702.342272][T13877] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 702.363544][T13877] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 702.404248][T13877] usb 4-1: config 0 interface 0 has no altsetting 0 [ 702.467033][T13877] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 702.494548][T13877] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 702.506191][T13877] usb 4-1: Product: syz [ 702.516184][T13877] usb 4-1: Manufacturer: syz [ 702.523447][T13877] usb 4-1: SerialNumber: syz [ 702.542206][T13877] usb 4-1: config 0 descriptor?? [ 702.568335][T13877] usb 4-1: selecting invalid altsetting 0 [ 702.779880][ T5825] usb 9-1: new full-speed USB device number 28 using dummy_hcd [ 702.934280][ T5825] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 702.951774][ T5825] usb 9-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 702.976779][ T5825] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.995354][ T5825] usb 9-1: config 0 descriptor?? [ 703.414895][T14699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.423927][T14699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.429807][ T8194] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 703.443827][ T5825] usbhid 9-1:0.0: can't add hid device: -71 [ 703.452958][ T5825] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 703.464648][ T5825] usb 9-1: USB disconnect, device number 28 [ 703.622014][ T8194] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 703.629674][ T8194] usb 8-1: can't read configurations, error -61 [ 703.760279][ T8194] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 703.913869][ T8194] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 703.921809][ T8194] usb 8-1: can't read configurations, error -61 [ 703.928471][ T8194] usb usb8-port1: attempt power cycle [ 704.269811][ T8194] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 704.303589][ T8194] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 704.318263][ T8194] usb 8-1: can't read configurations, error -61 [ 704.459940][ T8194] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 704.483454][ T8194] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 704.491560][ T8194] usb 8-1: can't read configurations, error -61 [ 704.498548][ T8194] usb usb8-port1: unable to enumerate USB device [ 704.514921][T14710] binder: 14707:14710 ioctl 400c620e 200000000100 returned -22 [ 704.538822][T14710] batadv_slave_1: entered promiscuous mode [ 704.772260][ T8194] usb 4-1: USB disconnect, device number 35 [ 705.383579][T14717] pim6reg1: entered allmulticast mode [ 705.741512][ T8194] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 705.901723][ T8194] usb 4-1: config 0 interface 0 has no altsetting 0 [ 705.908606][ T8194] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 705.925021][ T8194] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.941909][ T8194] usb 4-1: config 0 descriptor?? [ 706.152181][T14729] loop5: detected capacity change from 0 to 7 [ 706.161992][T14724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.170918][T14724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.182144][T14729] loop5: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 706.385310][T14729] loop5: p1 start 771753728 is beyond EOD, truncated [ 706.519810][T14729] loop5: p2 start 1818846767 is beyond EOD, truncated [ 706.526657][T14729] loop5: p3 start 1764718181 is beyond EOD, truncated [ 706.612759][T14729] loop5: p4 size 2863267840 extends beyond EOD, truncated [ 706.672301][T14729] loop5: p5 start 1009845767 is beyond EOD, truncated [ 706.679147][T14729] loop5: p6 start 3875569436 is beyond EOD, truncated [ 706.809373][ T8194] video4linux radio48: keene_cmd_main failed (-71) [ 706.818659][ T8194] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 706.831198][ T8194] usb 4-1: USB disconnect, device number 36 [ 707.260067][ T8194] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 707.420081][ T8194] usb 9-1: Using ep0 maxpacket: 8 [ 707.441586][ T8194] usb 9-1: unable to get BOS descriptor or descriptor too short [ 707.536660][ T8194] usb 9-1: config 8 has an invalid interface number: 158 but max is 0 [ 707.550595][ T8194] usb 9-1: config 8 has an invalid interface number: 158 but max is 0 [ 707.562526][ T8194] usb 9-1: config 8 has no interface number 0 [ 707.577556][ T8194] usb 9-1: config 8 interface 158 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 707.669826][ T8193] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 707.685185][ T8194] usb 9-1: New USB device found, idVendor=1199, idProduct=685a, bcdDevice=56.af [ 707.703323][ T8194] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.742846][ T8194] usb 9-1: Product: syz [ 707.755153][ T8194] usb 9-1: Manufacturer: syz [ 707.763065][ T8194] usb 9-1: SerialNumber: syz [ 707.913597][ T8193] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 707.949190][ T8193] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 707.970955][ T8193] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 708.007167][ T8193] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 708.017464][ T8193] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 708.031985][ T8193] usb 8-1: Product: syz [ 708.036247][ T8193] usb 8-1: Manufacturer: syz [ 708.042473][ T8193] usb 8-1: SerialNumber: syz [ 708.056179][T14745] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2113'. [ 708.081495][T14745] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2113'. [ 708.101328][ T8194] sierra 9-1:8.158: Sierra USB modem converter detected [ 708.137226][ T8194] usb 9-1: Sierra USB modem converter now attached to ttyUSB0 [ 708.152826][ T8194] usb 9-1: USB disconnect, device number 29 [ 708.187979][ T8194] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 708.282208][ T8194] sierra 9-1:8.158: device disconnected [ 708.341548][T14765] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 708.374560][ T8193] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 52 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 708.376973][T14765] kvm: pic: non byte read [ 708.396122][T14765] kvm: pic: level sensitive irq not supported [ 708.396274][T14765] kvm: pic: non byte read [ 708.427151][T14765] kvm: pic: level sensitive irq not supported [ 708.427305][T14765] kvm: pic: non byte read [ 710.598933][ T8194] usb 8-1: USB disconnect, device number 52 [ 710.613044][ T8194] usblp0: removed [ 711.184497][T14819] netlink: 'syz.8.2128': attribute type 1 has an invalid length. [ 711.530390][T13877] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 711.713372][T13877] usb 8-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 711.728901][T13877] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.774549][ T5902] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 711.789051][T13877] usb 8-1: Product: syz [ 711.796168][T13877] usb 8-1: Manufacturer: syz [ 711.804667][T13877] usb 8-1: SerialNumber: syz [ 711.864360][T13877] usb 8-1: config 0 descriptor?? [ 711.886622][T13877] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 711.916491][T13877] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 711.937098][ T5902] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 711.949918][T13877] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 711.969188][ T5902] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 711.981153][T13877] usb 8-1: media controller created [ 711.999080][ T5902] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 712.025831][T13877] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 712.035241][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.051971][T14836] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 712.075920][ T5902] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 712.257266][T13877] DVB: Unable to find symbol mt352_attach() [ 712.388533][ T5915] usb 4-1: USB disconnect, device number 37 [ 712.492831][T13877] DVB: Unable to find symbol nxt6000_attach() [ 712.500944][T13877] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 712.530331][T13877] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input54 [ 712.549071][T13877] dvb-usb: schedule remote query interval to 1000 msecs. [ 712.557187][T13877] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 712.573311][T13877] dvb-usb: bulk message failed: -22 (7/0) [ 712.581648][T13877] dvb-usb: bulk message failed: -22 (7/0) [ 712.594990][T13877] usb 8-1: USB disconnect, device number 53 [ 712.710905][T13877] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 714.449909][T13877] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 714.609842][T13877] usb 8-1: Using ep0 maxpacket: 8 [ 714.618482][T13877] usb 8-1: unable to get BOS descriptor or descriptor too short [ 714.627335][T14869] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 714.631251][T13877] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 714.654828][T14870] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 714.671990][T13877] usb 8-1: config 1 has an invalid interface number: 255 but max is 2 [ 714.680211][T13877] usb 8-1: config 1 has an invalid descriptor of length 199, skipping remainder of the config [ 714.690747][T13877] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 714.702861][T13877] usb 8-1: config 1 has no interface number 1 [ 714.709964][T13877] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 714.726428][T13877] usb 8-1: too many endpoints for config 1 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 714.737799][T13877] usb 8-1: config 1 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 714.751441][T13877] usb 8-1: config 1 interface 255 has no altsetting 0 [ 714.760701][T13877] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 714.770099][T13877] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.778124][T13877] usb 8-1: Product: syz [ 714.782372][T13877] usb 8-1: Manufacturer: syz [ 714.786994][T13877] usb 8-1: SerialNumber: syz [ 715.020589][T13877] usb 8-1: 0:2 : does not exist [ 715.028535][T14874] capability: warning: `syz.3.2142' uses 32-bit capabilities (legacy support in use) [ 715.121871][ T5831] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 715.126843][T13877] usb 8-1: USB disconnect, device number 54 [ 715.132908][ T5831] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 715.144082][ T5831] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 715.155745][ T5831] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 715.170801][ T5831] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 715.329529][ T5922] udevd[5922]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 716.118705][ T8194] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 716.131215][T14876] chnl_net:caif_netlink_parms(): no params data found [ 716.328248][ T8194] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 716.339914][ T8194] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 716.354529][ T8194] usb 8-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00 [ 716.386747][ T8194] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.413124][ T8194] usb 8-1: config 0 descriptor?? [ 716.431366][T14876] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.449982][T14876] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.477122][T14876] bridge_slave_0: entered allmulticast mode [ 716.496987][T14876] bridge_slave_0: entered promiscuous mode [ 716.512482][T14876] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.632205][T14876] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.639498][T14876] bridge_slave_1: entered allmulticast mode [ 716.734389][T14876] bridge_slave_1: entered promiscuous mode [ 716.802259][T14876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 716.826797][T14876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 716.919816][T14876] team0: Port device team_slave_0 added [ 716.933356][ T8194] itetech 0003:06CB:2968.0032: unknown main item tag 0x1 [ 716.952260][T14876] team0: Port device team_slave_1 added [ 716.990857][ T8194] itetech 0003:06CB:2968.0032: unbalanced delimiter at end of report description [ 717.002045][ T8194] itetech 0003:06CB:2968.0032: probe with driver itetech failed with error -22 [ 717.077559][T14876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.096719][T14876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.149148][ T5915] usb 8-1: USB disconnect, device number 55 [ 717.173526][T14876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 717.215903][T14876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 717.247691][T14876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.288294][ T5831] Bluetooth: hci6: command tx timeout [ 717.288626][T14876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 717.434177][T14906] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2149'. [ 717.467942][T14906] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2149'. [ 717.481696][T14906] openvswitch: netlink: Flow key attr not present in new flow. [ 717.630948][T14876] hsr_slave_0: entered promiscuous mode [ 717.642471][T14908] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2149'. [ 717.653603][T14876] hsr_slave_1: entered promiscuous mode [ 717.669120][T14876] debugfs: 'hsr0' already exists in 'hsr' [ 717.689088][T14876] Cannot create hsr debugfs directory [ 718.142796][T14912] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 718.252421][T14918] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2151'. [ 718.544383][T14876] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 718.558881][T14876] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 718.607200][T14876] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 718.619162][T14876] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 718.691126][T14926] netlink: 'syz.8.2152': attribute type 1 has an invalid length. [ 719.360479][ T5831] Bluetooth: hci6: command tx timeout [ 719.414782][T14947] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2154'. [ 719.471882][T14951] netlink: 190972 bytes leftover after parsing attributes in process `syz.7.2154'. [ 719.648998][T14876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.679664][T14876] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.698902][ T1334] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.706167][ T1334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.730128][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.737332][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.913552][T14876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.016963][T14876] veth0_vlan: entered promiscuous mode [ 720.049474][T14876] veth1_vlan: entered promiscuous mode [ 720.143881][T14876] veth0_macvtap: entered promiscuous mode [ 720.169027][T14876] veth1_macvtap: entered promiscuous mode [ 720.235542][T14876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 720.260152][T14876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 720.293227][ T1334] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.303639][ T1334] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.329318][ T1334] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.371434][ T1334] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.670082][ T5917] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 720.699355][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.729292][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.796224][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.821956][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.849016][ T5917] usb 8-1: config 0 has no interfaces? [ 720.865262][ T5917] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 720.885427][ T5917] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.906003][ T5917] usb 8-1: Product: syz [ 720.920827][ T5917] usb 8-1: Manufacturer: syz [ 720.934498][ T5917] usb 8-1: SerialNumber: syz [ 720.955266][ T5917] usb 8-1: config 0 descriptor?? [ 721.340049][ T5831] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 721.341729][T14955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.394132][T14955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.440305][ T5831] Bluetooth: hci6: command tx timeout [ 721.648306][T14973] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 14973 comm: syz.3.2159) [ 721.689833][ T29] audit: type=1800 audit(1771840519.174:5746): pid=14973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2159" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=58811 res=0 errno=0 [ 721.978237][ T5917] usb 8-1: USB disconnect, device number 56 [ 722.538011][T14985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2162'. [ 722.805466][T14989] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2164'. [ 723.520328][ T5831] Bluetooth: hci6: command tx timeout [ 723.619009][T15001] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 724.096001][T15011] bond1: ARP target 9.0.0.0 is already present [ 724.147909][T15011] bond1: option arp_ip_target: invalid value (9) [ 724.344459][T15011] bond1 (unregistering): Released all slaves [ 724.572249][ T8194] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 724.731539][ T8194] usb 8-1: Using ep0 maxpacket: 32 [ 724.738737][ T8194] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 724.748223][ T8194] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.783892][ T8194] usb 8-1: config 0 descriptor?? [ 725.093638][ T8194] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 725.105317][ T8194] usb 8-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 725.121260][ T8194] usb 8-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 725.884175][ T29] audit: type=1326 audit(1771840523.384:5747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15046 comm="syz.8.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56fd9c629 code=0x7ffc0000 [ 725.912006][ T29] audit: type=1326 audit(1771840523.394:5748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15046 comm="syz.8.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7fd56fd9c629 code=0x7ffc0000 [ 725.970442][ T29] audit: type=1326 audit(1771840523.394:5749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15046 comm="syz.8.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56fd9c629 code=0x7ffc0000 [ 726.003903][ T29] audit: type=1326 audit(1771840523.394:5750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15046 comm="syz.8.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56fd9c629 code=0x7ffc0000 [ 726.132986][ T29] audit: type=1326 audit(1771840523.394:5751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15046 comm="syz.8.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd56fd9c629 code=0x7ffc0000 [ 726.147470][T15051] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2182'. [ 726.192276][T15053] macvtap1: entered allmulticast mode [ 726.208436][T15053] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 726.213681][ T29] audit: type=1326 audit(1771840523.394:5752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15046 comm="syz.8.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56fd9c629 code=0x7ffc0000 [ 726.267970][T15053] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 726.272628][ T29] audit: type=1326 audit(1771840523.394:5753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15046 comm="syz.8.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56fd9c629 code=0x7ffc0000 [ 726.300828][ T29] audit: type=1326 audit(1771840523.394:5754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15046 comm="syz.8.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd56fd9c629 code=0x7ffc0000 [ 726.326616][ T29] audit: type=1326 audit(1771840523.394:5755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15046 comm="syz.8.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56fd9c629 code=0x7ffc0000 [ 726.876929][T15069] vlan0: entered allmulticast mode [ 726.882867][T15069] veth0_vlan: entered allmulticast mode [ 726.907518][T15069] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2186'. [ 727.443574][T15069] vlan0 (unregistering): left allmulticast mode [ 727.450967][T15069] veth0_vlan (unregistering): left allmulticast mode [ 728.233870][T15081] netlink: 'syz.3.2188': attribute type 39 has an invalid length. [ 728.551413][T15085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2189'. [ 728.592656][T15085] bridge_slave_1: left allmulticast mode [ 728.634853][T15085] bridge_slave_1: left promiscuous mode [ 728.646319][T15085] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.844942][T15085] bridge_slave_0: left allmulticast mode [ 728.860554][T15085] bridge_slave_0: left promiscuous mode [ 728.891147][T15085] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.995328][T15093] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2191'. [ 729.070097][T15093] ipip0: entered allmulticast mode [ 730.660636][ T5902] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 730.847599][ T5902] usb 9-1: Using ep0 maxpacket: 32 [ 730.908183][ T5902] usb 9-1: config index 0 descriptor too short (expected 6701, got 45) [ 730.951216][ T5902] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 730.998578][ T5902] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.129801][ T5902] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.172164][ T5902] usb 9-1: config 0 interface 0 has no altsetting 0 [ 731.197151][ T5902] usb 9-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.9d [ 731.216300][ T5902] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.258628][ T5902] usb 9-1: config 0 descriptor?? [ 731.697397][ T5902] usbhid 9-1:0.0: can't add hid device: -71 [ 731.716999][ T5902] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 731.773853][T15145] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2203'. [ 731.846792][ T5902] usb 9-1: USB disconnect, device number 30 [ 732.410378][ T8193] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 732.605477][ T8193] usb 4-1: not running at top speed; connect to a high speed hub [ 732.655051][ T8193] usb 4-1: config 95 has an invalid interface number: 1 but max is 0 [ 732.678901][ T8193] usb 4-1: config 95 has no interface number 0 [ 732.718427][ T8193] usb 4-1: config 95 interface 1 has no altsetting 0 [ 732.782058][ T8193] usb 4-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 732.819923][ T8193] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.844948][T15173] binder: BINDER_SET_CONTEXT_MGR already set [ 732.865195][T15173] binder: 15166:15173 ioctl 4018620d 2000000002c0 returned -16 [ 732.879947][ T8193] usb 4-1: Product: syz [ 732.884165][ T8193] usb 4-1: Manufacturer: syz [ 732.888790][ T8193] usb 4-1: SerialNumber: syz [ 733.032478][T15180] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 733.448180][T15182] kvm: kvm [15181]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x224e0000 [ 733.516952][ T8193] usb 4-1: USB disconnect, device number 38 [ 733.523561][T15182] kvm: kvm [15181]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x187) = 0x224e0001 [ 733.560987][T15182] kvm: kvm [15181]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x186) = 0x1 [ 733.679422][ T5922] udevd[5922]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 734.143316][T15198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2215'. [ 734.153095][T15198] netlink: 'syz.3.2215': attribute type 15 has an invalid length. [ 736.498631][T15219] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 737.469820][ T8202] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 737.650067][ T8202] usb 4-1: Using ep0 maxpacket: 16 [ 737.657430][ T8202] usb 4-1: config 0 interface 0 has no altsetting 0 [ 737.689808][ T8202] usb 4-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 737.699031][ T8202] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.714083][ T8202] usb 4-1: config 0 descriptor?? [ 738.124542][T15226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 738.258594][T15236] binder: 15234:15236 ioctl 89e2 200000000180 returned -22 [ 738.273095][T15236] binder: 15234:15236 ioctl 40044591 200000000200 returned -22 [ 738.979920][ T5917] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 739.140522][ T5917] usb 9-1: Using ep0 maxpacket: 32 [ 739.149104][ T5917] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 739.163229][ T5917] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 739.174204][ T5917] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 739.185358][ T5917] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.198057][ T5917] usb 9-1: config 0 descriptor?? [ 739.208674][ T5917] hub 9-1:0.0: USB hub found [ 739.445664][ T5917] hub 9-1:0.0: 1 port detected [ 739.453278][T15245] binder: 15244:15245 ioctl c0306201 2000000001c0 returned -14 [ 739.463207][T15245] binder: 15244:15245 ioctl c0306201 2000000001c0 returned -14 [ 740.108466][T15242] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 15242 comm: syz.9.2228) [ 740.139867][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 740.139887][ T29] audit: type=1800 audit(1771840537.624:5802): pid=15242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2228" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=60755 res=0 errno=0 [ 740.422393][ T8202] usbhid 4-1:0.0: can't add hid device: -71 [ 740.433326][ T5917] usb 9-1: USB disconnect, device number 31 [ 740.470044][ T8202] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 740.552199][ T8202] usb 4-1: USB disconnect, device number 39 [ 741.105364][T15271] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2235'. [ 741.185148][T15276] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2235'. [ 741.629778][ T8202] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 741.789991][ T8202] usb 10-1: device descriptor read/64, error -71 [ 742.030009][ T8202] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 742.139953][T13173] usb 9-1: new full-speed USB device number 32 using dummy_hcd [ 742.170145][ T8202] usb 10-1: device descriptor read/64, error -71 [ 742.280989][ T8202] usb usb10-port1: attempt power cycle [ 742.311791][T13173] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 742.335131][T13173] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 742.362723][T13173] usb 9-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 742.377491][T13173] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.397069][T13173] usb 9-1: config 0 descriptor?? [ 742.499872][ T8193] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 742.639907][ T8202] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 742.662603][ T8193] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 742.690647][ T8202] usb 10-1: device descriptor read/8, error -71 [ 742.735657][ T8193] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 742.758087][ T8193] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 742.782912][ T8193] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 742.813621][ T8193] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 742.823088][ T8193] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.844584][ T8193] usb 4-1: config 0 descriptor?? [ 742.862613][T13173] aureal 0003:0755:2626.0033: unknown main item tag 0x0 [ 742.870024][T13173] aureal 0003:0755:2626.0033: unknown main item tag 0x0 [ 742.878585][T13173] aureal 0003:0755:2626.0033: unknown main item tag 0x0 [ 742.888517][T13173] aureal 0003:0755:2626.0033: unknown main item tag 0x0 [ 742.898660][T13173] aureal 0003:0755:2626.0033: unknown main item tag 0x0 [ 742.906847][T13173] aureal 0003:0755:2626.0033: unknown main item tag 0x0 [ 742.916015][T13173] aureal 0003:0755:2626.0033: unknown main item tag 0x0 [ 742.929391][T13173] aureal 0003:0755:2626.0033: hidraw0: USB HID v1.ff Device [HID 0755:2626] on usb-dummy_hcd.8-1/input0 [ 742.950174][ T8202] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 742.970665][ T8202] usb 10-1: device descriptor read/8, error -71 [ 743.115976][ T8202] usb usb10-port1: unable to enumerate USB device [ 743.149324][T15285] vlan2: entered promiscuous mode [ 743.154557][T15285] bridge0: entered promiscuous mode [ 743.169245][T15285] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2239'. [ 743.179062][T15285] bridge_slave_1: left allmulticast mode [ 743.185110][T15285] bridge_slave_1: left promiscuous mode [ 743.215600][T15285] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.243414][T15285] bridge_slave_0: left allmulticast mode [ 743.258923][ T29] audit: type=1800 audit(1771840540.754:5803): pid=15292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2240" name="bus" dev="ramfs" ino=60086 res=0 errno=0 [ 743.280313][T15285] bridge_slave_0: left promiscuous mode [ 743.286355][T15285] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.511240][ T8193] plantronics 0003:047F:FFFF.0034: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 743.772461][ T29] audit: type=1326 audit(1771840541.274:5804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15304 comm="syz.7.2244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b47d9c629 code=0x7ffc0000 [ 743.799096][ T29] audit: type=1326 audit(1771840541.274:5805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15304 comm="syz.7.2244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b47d9c629 code=0x7ffc0000 [ 743.827514][ T29] audit: type=1326 audit(1771840541.294:5806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15304 comm="syz.7.2244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f8b47d9c629 code=0x7ffc0000 [ 743.851048][ T29] audit: type=1326 audit(1771840541.294:5807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15304 comm="syz.7.2244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b47d9c629 code=0x7ffc0000 [ 743.874406][ T29] audit: type=1326 audit(1771840541.294:5808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15304 comm="syz.7.2244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b47d9c629 code=0x7ffc0000 [ 743.913570][ T29] audit: type=1326 audit(1771840541.294:5809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15304 comm="syz.7.2244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f8b47d9c629 code=0x7ffc0000 [ 743.937075][ T29] audit: type=1326 audit(1771840541.294:5810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15304 comm="syz.7.2244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b47d9c629 code=0x7ffc0000 [ 743.960255][ T29] audit: type=1326 audit(1771840541.294:5811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15304 comm="syz.7.2244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b47d9c629 code=0x7ffc0000 [ 743.979606][T15307] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2245'. [ 744.374781][T15314] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 744.655989][T13012] usb 9-1: USB disconnect, device number 32 [ 745.055282][T15326] loop4: detected capacity change from 0 to 7 [ 745.079107][ T5922] Dev loop4: unable to read RDB block 7 [ 745.089851][ T5922] loop4: unable to read partition table [ 745.097984][ T5922] loop4: partition table beyond EOD, truncated [ 745.141397][T15326] Dev loop4: unable to read RDB block 7 [ 745.178057][T15326] loop4: unable to read partition table [ 745.189923][T15326] loop4: partition table beyond EOD, truncated [ 745.224647][T15326] loop_reread_partitions: partition scan of loop4 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 745.309835][T13173] usb 4-1: reset high-speed USB device number 40 using dummy_hcd [ 745.680525][ T5917] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 746.050079][ T5917] usb 10-1: Using ep0 maxpacket: 8 [ 746.060625][ T5917] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 746.079953][ T5917] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.307590][ T5917] pvrusb2: Hardware description: Terratec Grabster AV400 [ 746.366761][ T5917] pvrusb2: ********** [ 746.403061][ T5917] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 746.440277][ T5917] pvrusb2: Important functionality might not be entirely working. [ 746.489831][ T5917] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 746.519924][ T5917] pvrusb2: ********** [ 746.541532][ T2346] pvrusb2: Invalid write control endpoint [ 746.667322][ T2346] pvrusb2: Invalid write control endpoint [ 746.679049][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 746.699804][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 746.707659][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 746.732015][ T2346] pvrusb2: Device being rendered inoperable [ 746.738127][ T2346] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 746.749996][ T2346] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 746.770669][ T2346] pvrusb2: Attached sub-driver cx25840 [ 746.786509][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 746.797915][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 747.029848][T13173] usb 4-1: device descriptor read/64, error -71 [ 747.154692][T15353] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 747.270033][T13173] usb 4-1: reset high-speed USB device number 40 using dummy_hcd [ 747.285791][T13173] usb 4-1: device reset changed ep0 maxpacket size! [ 747.314638][ T8193] usb 4-1: USB disconnect, device number 40 [ 747.445275][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.456452][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.532342][ T8193] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 747.699874][ T8193] usb 4-1: Using ep0 maxpacket: 16 [ 747.707764][ T8193] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 747.726516][ T8193] usb 4-1: config 0 has no interface number 0 [ 748.419907][ T8193] usb 4-1: config 0 interface 1 has no altsetting 0 [ 748.694312][ T8193] usb 4-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=ff.7e [ 748.703974][ T8193] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.825936][ T8193] usb 4-1: Product: syz [ 748.837260][ T8193] usb 4-1: Manufacturer: syz [ 748.845025][ T8193] usb 4-1: SerialNumber: syz [ 748.862598][ T8193] usb 4-1: config 0 descriptor?? [ 749.096717][T13173] usb 10-1: USB disconnect, device number 6 [ 749.206020][ T8193] i2c-cp2615 4-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 749.740594][T13173] usb 4-1: USB disconnect, device number 41 [ 750.710494][ T5917] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 750.979831][ T5917] usb 4-1: device descriptor read/64, error -71 [ 751.220461][ T5917] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 751.360023][ T5917] usb 4-1: device descriptor read/64, error -71 [ 751.491043][ T5917] usb usb4-port1: attempt power cycle [ 751.630176][T15398] tipc: Enabling of bearer rejected, failed to enable media [ 751.829834][ T5917] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 751.861443][ T5917] usb 4-1: device descriptor read/8, error -71 [ 752.037369][T15416] netlink: 'syz.7.2275': attribute type 1 has an invalid length. [ 752.132407][ T5917] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 752.181817][ T5917] usb 4-1: device descriptor read/8, error -71 [ 752.375842][ T5917] usb usb4-port1: unable to enumerate USB device [ 752.502795][T13012] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 752.689951][T13012] usb 10-1: Using ep0 maxpacket: 8 [ 752.714444][T13012] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 752.723964][T13012] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.884216][T13012] pvrusb2: Hardware description: Terratec Grabster AV400 [ 752.899469][T13012] pvrusb2: ********** [ 752.913920][T13012] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 752.931159][T13012] pvrusb2: Important functionality might not be entirely working. [ 752.943717][T13012] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 752.965293][T13012] pvrusb2: ********** [ 753.146853][T15422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.156276][T15422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.179231][ T2346] pvrusb2: Invalid write control endpoint [ 753.379840][ T2346] pvrusb2: Invalid write control endpoint [ 753.389624][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 753.399490][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 753.408305][T15422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.424756][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 753.427184][T15422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.469302][T13012] usb 10-1: USB disconnect, device number 7 [ 753.479567][ T2346] pvrusb2: Device being rendered inoperable [ 753.503983][ T2346] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 753.537175][ T2346] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 753.565538][ T2346] pvrusb2: Attached sub-driver cx25840 [ 753.579076][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 753.620075][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 753.724011][T15437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.735893][T15437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.875438][ T29] audit: type=1800 audit(1771840551.374:5812): pid=15444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2282" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 753.960076][ T8191] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 754.128479][ T8191] usb 4-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 754.164734][ T8191] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 754.212032][ T8191] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 754.282758][ T8191] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 754.320143][ T8191] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 754.329997][ T8191] usb 4-1: Manufacturer: syz [ 754.335089][ T8191] usb 4-1: SerialNumber: syz [ 754.578474][ T8191] yealink 4-1:36.0: invalid payload size 0, expected 16 [ 754.611716][ T8191] input: Yealink usb-p1k as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:36.0/input/input57 [ 754.697719][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 754.704797][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 754.711871][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 754.718852][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 754.725839][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 754.732919][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 754.740490][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 754.747910][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 754.754715][ C0] yealink 4-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 754.799869][T15453] netdevsim netdevsim8 netdevsim0: IPsec offload requires 128 bit authentication [ 755.054029][ T8191] usb 4-1: USB disconnect, device number 46 [ 755.167847][T15462] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2287'. [ 755.236589][T15464] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2288'. [ 755.569949][T13877] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 755.750012][T13877] usb 10-1: Using ep0 maxpacket: 8 [ 755.777132][T13877] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 755.785417][T13877] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 755.796095][T13877] usb 10-1: config 0 has no interface number 0 [ 755.802568][T13877] usb 10-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 755.812616][T13877] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.837521][T13877] usb 10-1: config 0 descriptor?? [ 755.937026][T15485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.954963][T15485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.966242][T15482] netlink: 'syz.0.2292': attribute type 1 has an invalid length. [ 756.394528][T15490] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2294'. [ 756.889850][ T8202] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 757.050286][ T8202] usb 4-1: Using ep0 maxpacket: 32 [ 757.064685][ T8202] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 757.074213][ T8202] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.082403][ T8202] usb 4-1: Product: syz [ 757.086805][ T8202] usb 4-1: Manufacturer: syz [ 757.091929][ T8202] usb 4-1: SerialNumber: syz [ 757.100751][ T8202] usb 4-1: config 0 descriptor?? [ 757.109639][ T8202] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 757.129820][ T8193] usb 9-1: new full-speed USB device number 33 using dummy_hcd [ 757.282375][ T8193] usb 9-1: unable to get BOS descriptor or descriptor too short [ 757.291284][ T8193] usb 9-1: not running at top speed; connect to a high speed hub [ 757.303481][ T8193] usb 9-1: config 1 has an invalid interface descriptor of length 5, skipping [ 757.312857][ T8193] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 757.323417][ T8193] usb 9-1: config 1 has 3 interfaces, different from the descriptor's value: 19 [ 757.332698][ T8193] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 59, changing to 4 [ 757.344034][ T8193] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 757.357430][ T8193] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 757.367647][ T8193] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.383151][ T8193] usb 9-1: Product: syz [ 757.387378][ T8193] usb 9-1: Manufacturer: syz [ 757.392117][ T8193] usb 9-1: SerialNumber: syz [ 758.328539][ T8202] gspca_ov534_9: reg_w failed -71 [ 758.394907][ T8193] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 758.401474][T13877] usb 10-1: USB disconnect, device number 8 [ 758.511943][ T8193] usb 9-1: USB disconnect, device number 33 [ 758.565192][ T7584] udevd[7584]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 758.669827][ T8202] gspca_ov534_9: Unknown sensor 0000 [ 758.669935][ T8202] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 758.687336][ T8202] usb 4-1: USB disconnect, device number 47 [ 758.809832][T13877] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 758.942495][ T8193] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 758.960229][T13877] usb 10-1: Using ep0 maxpacket: 8 [ 758.971113][T13877] usb 10-1: unable to get BOS descriptor or descriptor too short [ 759.005261][T13877] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 759.014649][T13877] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 759.029200][T13877] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 759.041673][T13877] usb 10-1: config 1 has no interface number 1 [ 759.054207][T13877] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 759.068462][T13877] usb 10-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 759.082092][T13877] usb 10-1: config 1 interface 2 has no altsetting 0 [ 759.091017][T15513] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 759.110958][ T8193] usb 9-1: Using ep0 maxpacket: 32 [ 759.118847][T13877] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 759.124202][ T8193] usb 9-1: unable to get BOS descriptor or descriptor too short [ 759.130036][T13877] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.160558][T15513] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 759.171244][T13877] usb 10-1: Product: syz [ 759.172553][ T8193] usb 9-1: config 7 has an invalid interface number: 187 but max is 0 [ 759.179636][T13877] usb 10-1: Manufacturer: syz [ 759.186263][ T8193] usb 9-1: config 7 has no interface number 0 [ 759.204036][T13877] usb 10-1: SerialNumber: syz [ 759.209142][ T8193] usb 9-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 759.210209][T15513] xt_hashlimit: invalid rate [ 759.259084][ T8193] usb 9-1: config 7 interface 187 has no altsetting 0 [ 759.260725][T15513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 759.285985][ T8193] usb 9-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 759.296381][ T8193] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.318550][ T8193] usb 9-1: Product: syz [ 759.327243][ T8193] usb 9-1: Manufacturer: syz [ 759.346878][ T8193] usb 9-1: SerialNumber: syz [ 759.462107][T15521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.494331][T15504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.505032][T15521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.517875][T15504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.587315][T15504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.610864][T15504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.643287][T13877] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 759.655964][T13877] usb 10-1: MIDIStreaming interface descriptor not found [ 759.762328][ T5838] Bluetooth: hci5: command 0x0406 tx timeout [ 759.918596][T13877] usb 10-1: USB disconnect, device number 9 [ 759.972757][ T8193] usb 9-1: Cannot retrieve CPort count: -110 [ 760.010221][ T8193] usb 9-1: Cannot retrieve CPort count: -110 [ 760.026870][ T8193] es2_ap_driver 9-1:7.187: probe with driver es2_ap_driver failed with error -110 [ 760.406909][ T6902] udevd[6902]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 760.581342][T15527] could not allocate digest TFM handle md5 [ 760.772900][T15538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2307'. [ 761.002321][T15538] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 762.056355][T13877] usb 9-1: USB disconnect, device number 34 [ 762.265374][T15559] netlink: 'syz.7.2311': attribute type 2 has an invalid length. [ 762.301004][T15559] : entered promiscuous mode [ 762.490389][T13877] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 762.670103][T13877] usb 9-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 762.687774][T13877] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.713441][T13877] usb 9-1: Product: syz [ 762.725808][T13877] usb 9-1: Manufacturer: syz [ 762.737130][T13877] usb 9-1: SerialNumber: syz [ 762.765266][T13877] usb 9-1: config 0 descriptor?? [ 763.237491][T13877] mos7840 9-1:0.0: required endpoints missing [ 763.256851][T13877] usb 9-1: USB disconnect, device number 35 [ 763.345850][T15566] batadv_slave_1: entered promiscuous mode [ 763.385863][T15566] batadv_slave_1: left promiscuous mode [ 763.570123][ T5902] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 763.732800][ T5902] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 763.779766][ T5902] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 763.844949][ T5902] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 763.889652][ T5902] usb 10-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 763.909491][ T5902] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.943652][ T5902] usb 10-1: config 0 descriptor?? [ 763.949475][T15565] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 763.987052][T15588] netlink: 2048 bytes leftover after parsing attributes in process `syz.0.2318'. [ 764.029641][T15588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2318'. [ 764.080211][T13173] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 764.216689][T15565] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 764.271017][T13173] usb 4-1: Using ep0 maxpacket: 8 [ 764.291579][T13173] usb 4-1: unable to get BOS descriptor or descriptor too short [ 764.311663][T13173] usb 4-1: config 59 has an invalid interface number: 141 but max is 0 [ 764.325770][T13173] usb 4-1: config 59 has no interface number 0 [ 764.344284][T13173] usb 4-1: config 59 interface 141 altsetting 6 endpoint 0xD has invalid wMaxPacketSize 0 [ 764.379352][T13173] usb 4-1: config 59 interface 141 altsetting 6 endpoint 0xC has an invalid bInterval 160, changing to 11 [ 764.418914][T13173] usb 4-1: config 59 interface 141 has no altsetting 0 [ 764.439946][T13173] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.72 [ 764.442562][ T5902] holtek_mouse 0003:04D9:A070.0035: collection stack underflow [ 764.481186][T13173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.482718][ T5902] holtek_mouse 0003:04D9:A070.0035: item 0 4 0 12 parsing failed [ 764.498031][T13173] usb 4-1: Product: syz [ 764.501430][ T5902] holtek_mouse 0003:04D9:A070.0035: hid parse failed: -22 [ 764.503131][T13173] usb 4-1: Manufacturer: syz [ 764.517491][ T5902] holtek_mouse 0003:04D9:A070.0035: probe with driver holtek_mouse failed with error -22 [ 764.539271][T13173] usb 4-1: SerialNumber: syz [ 764.631542][ T5902] usb 10-1: USB disconnect, device number 10 [ 764.803197][T13173] usbtest 4-1:59.141: couldn't get endpoints, -71 [ 764.809843][T13173] usbtest 4-1:59.141: probe with driver usbtest failed with error -71 [ 764.837916][T13173] usb 4-1: USB disconnect, device number 48 [ 765.393429][T15611] netlink: 308 bytes leftover after parsing attributes in process `syz.9.2325'. [ 765.577121][T15607] netlink: 763 bytes leftover after parsing attributes in process `syz.8.2323'. [ 766.869825][T15630] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 767.040567][T15630] usb 10-1: Using ep0 maxpacket: 16 [ 767.066608][T15630] usb 10-1: config 1 has an invalid interface number: 105 but max is 0 [ 767.083615][T15630] usb 10-1: config 1 has no interface number 0 [ 767.094013][T15630] usb 10-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 767.117759][T15630] usb 10-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 767.130410][T15630] usb 10-1: config 1 interface 105 has no altsetting 0 [ 767.141153][T15630] usb 10-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 767.167270][T15630] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.196355][T15630] usb 10-1: Product: syz [ 767.208249][T15630] usb 10-1: Manufacturer: syz [ 767.227501][T15630] usb 10-1: SerialNumber: syz [ 767.237198][T15631] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 767.256934][T15631] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 767.552317][T15644] netlink: 156 bytes leftover after parsing attributes in process `syz.7.2334'. [ 767.564194][T15644] netlink: 156 bytes leftover after parsing attributes in process `syz.7.2334'. [ 767.588254][T15645] netlink: 156 bytes leftover after parsing attributes in process `syz.7.2334'. [ 767.659840][T15645] netlink: 156 bytes leftover after parsing attributes in process `syz.7.2334'. [ 767.727144][T15631] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 767.750147][T15631] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 767.860294][ T8060] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.869479][ T8060] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.908452][ T8060] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.927734][ T8060] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.030857][ T8192] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 768.083873][T15653] netlink: 212344 bytes leftover after parsing attributes in process `syz.8.2336'. [ 768.096568][T15655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.120442][T15655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.182790][T15630] aqc111 10-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 768.201160][ T8192] usb 4-1: Using ep0 maxpacket: 16 [ 768.211621][ T8192] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 768.223332][ T8192] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.240916][ T8192] usb 4-1: Product: syz [ 768.255601][ T8192] usb 4-1: Manufacturer: syz [ 768.268005][ T8192] usb 4-1: SerialNumber: syz [ 768.291863][ T8192] usb 4-1: config 0 descriptor?? [ 768.308519][ T8192] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 768.322768][T15665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.338165][ T8192] usb 4-1: Detected FT4233HP [ 768.380023][T15665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 769.542839][T15630] aqc111 10-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 769.585771][T15630] aqc111 10-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 769.736025][T15630] aqc111 10-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.9-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 34:7c:ea:65:83:67 [ 769.825822][T15630] usb 10-1: USB disconnect, device number 11 [ 769.862542][T15630] aqc111 10-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.9-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 770.030827][ T8192] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 770.175280][ T8192] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 770.306664][ T8192] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 770.321848][ T8192] usb 4-1: USB disconnect, device number 49 [ 770.332731][ T8192] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 770.383663][T15691] input: syz0 as /devices/virtual/input/input58 [ 770.392001][ T8192] ftdi_sio 4-1:0.0: device disconnected [ 770.540466][T15630] aqc111 10-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 770.630143][T15630] aqc111 10-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 770.679844][T15630] aqc111 10-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 772.048529][T15726] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!l1*$pOcɔr$G [ 772.199800][T15477] usb 9-1: new low-speed USB device number 36 using dummy_hcd [ 772.223070][T15729] syzkaller0: entered promiscuous mode [ 772.231001][T15729] syzkaller0: entered allmulticast mode [ 772.393021][T15477] usb 9-1: Invalid ep0 maxpacket: 32 [ 772.457455][T15717] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2352'. [ 772.539821][T15477] usb 9-1: new low-speed USB device number 37 using dummy_hcd [ 772.711042][T15477] usb 9-1: Invalid ep0 maxpacket: 32 [ 772.716993][T15477] usb usb9-port1: attempt power cycle [ 773.072160][T15477] usb 9-1: new low-speed USB device number 38 using dummy_hcd [ 773.109234][T15477] usb 9-1: Invalid ep0 maxpacket: 32 [ 773.239814][T15477] usb 9-1: new low-speed USB device number 39 using dummy_hcd [ 773.273620][T15477] usb 9-1: Invalid ep0 maxpacket: 32 [ 773.293507][T15477] usb usb9-port1: unable to enumerate USB device [ 774.049988][T15477] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 774.213722][T15477] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 774.223083][T15477] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.231622][T15477] usb 10-1: Product: syz [ 774.235884][T15477] usb 10-1: Manufacturer: syz [ 774.240857][T15477] usb 10-1: SerialNumber: syz [ 774.643043][T15786] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2372'. [ 774.655107][T15477] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 774.669041][T15477] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 774.681377][T15477] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 774.694058][T15477] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 774.705880][T15477] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 774.720838][T15477] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -32 [ 774.790493][T15789] IPVS: set_ctl: invalid protocol: 4 255.255.255.255:20003 [ 775.049438][T15806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2375'. [ 775.338320][T15816] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2380'. [ 775.399590][T15477] usb 10-1: USB disconnect, device number 12 [ 775.609872][ T8192] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 775.693776][T15831] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 775.772867][ T8192] usb 9-1: config 3 has an invalid interface number: 84 but max is 0 [ 775.790334][ T8192] usb 9-1: config 3 has no interface number 0 [ 775.796613][ T8192] usb 9-1: config 3 interface 84 has no altsetting 0 [ 775.814487][ T8192] usb 9-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=10.6b [ 775.844775][ T8192] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.884170][ T8192] usb 9-1: Product: syz [ 775.888414][ T8192] usb 9-1: Manufacturer: syz [ 775.910050][ T8192] usb 9-1: SerialNumber: syz [ 776.200186][ T8192] as10x_usb: device has been detected [ 776.212389][ T8192] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 776.257233][ T8192] usb 9-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 776.285384][ T8192] as10x_usb: error during firmware upload part1 [ 776.300535][ T8192] Registered device Abilis Systems DVB-Titan [ 776.421515][ T8192] usb 9-1: USB disconnect, device number 40 [ 776.549625][ T8192] Unregistered device Abilis Systems DVB-Titan [ 776.581994][ T8192] as10x_usb: device has been disconnected [ 776.939990][ T30] INFO: task kworker/1:7:5918 blocked for more than 143 seconds. [ 776.947769][ T30] Tainted: G L syzkaller #0 [ 777.001152][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 777.050577][ T30] task:kworker/1:7 state:D stack:21320 pid:5918 tgid:5918 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 777.089873][ T30] Workqueue: usb_hub_wq hub_event [ 777.095196][ T30] Call Trace: [ 777.098604][ T30] [ 777.102625][ T30] __schedule+0x1585/0x5340 [ 777.107334][ T30] ? __pfx___schedule+0x10/0x10 [ 777.123868][ T30] ? schedule+0x90/0x360 [ 777.162170][ T30] schedule+0x164/0x360 [ 777.174046][ T30] schedule_timeout+0xc3/0x2c0 [ 777.194690][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 777.223101][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 777.293580][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 777.331292][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 777.337613][ T30] ? wait_for_completion+0x274/0x5e0 [ 777.345362][ T30] wait_for_completion+0x2cc/0x5e0 [ 777.354257][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 777.360554][ T30] i2c_del_adapter+0x5c0/0x790 [ 777.366699][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 777.372731][ T30] ? __pfx_i2c_del_adapter+0x10/0x10 [ 777.379113][ T30] ? dvb_usbv2_exit+0x935/0xb60 [ 777.403606][ T30] dvb_usbv2_probe+0x4c3/0x3d40 [ 777.409262][ T30] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 777.569566][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 777.587555][ T30] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 777.606797][ T30] usb_probe_interface+0x668/0xc90 [ 777.616924][ T30] ? __pfx_usb_probe_interface+0x10/0x10 [ 777.628943][ T30] really_probe+0x267/0xaf0 [ 777.644415][ T30] __driver_probe_device+0x18c/0x320 [ 777.655397][ T30] driver_probe_device+0x4f/0x240 [ 777.665900][ T30] __device_attach_driver+0x2d4/0x4c0 [ 777.676884][ T30] bus_for_each_drv+0x258/0x2f0 [ 777.686931][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 777.699185][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 777.710512][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 777.715994][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 777.721981][ T30] __device_attach+0x2c5/0x450 [ 777.727246][ T30] ? __pfx___device_attach+0x10/0x10 [ 777.732880][ T30] ? _raw_spin_unlock+0x28/0x50 [ 777.738028][ T30] device_initial_probe+0xa1/0xd0 [ 777.745603][ T30] bus_probe_device+0x12a/0x220 [ 777.755218][ T30] ? device_add+0x726/0xb70 [ 777.761006][ T30] device_add+0x7b6/0xb70 [ 777.765646][ T30] usb_set_configuration+0x1a87/0x2110 [ 777.771953][ T30] usb_generic_driver_probe+0x8d/0x150 [ 777.777765][ T30] usb_probe_device+0x1c4/0x3b0 [ 777.783146][ T30] ? __pfx_usb_probe_device+0x10/0x10 [ 777.788791][ T30] really_probe+0x267/0xaf0 [ 777.794087][ T30] __driver_probe_device+0x18c/0x320 [ 777.800116][ T30] driver_probe_device+0x4f/0x240 [ 777.805343][ T30] __device_attach_driver+0x2d4/0x4c0 [ 777.811651][ T30] bus_for_each_drv+0x258/0x2f0 [ 777.816718][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 777.823322][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 777.828889][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 777.834929][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 777.860677][ T30] __device_attach+0x2c5/0x450 [ 777.865568][ T30] ? __pfx___device_attach+0x10/0x10 [ 777.871484][ T30] ? _raw_spin_unlock+0x28/0x50 [ 777.881278][ T30] device_initial_probe+0xa1/0xd0 [ 777.891660][ T30] bus_probe_device+0x12a/0x220 [ 777.904682][ T30] ? device_add+0x726/0xb70 [ 777.910694][ T30] device_add+0x7b6/0xb70 [ 777.915116][ T30] usb_new_device+0xa08/0x16f0 [ 777.920834][ T30] ? __pfx_usb_new_device+0x10/0x10 [ 777.926063][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 777.931536][ T30] hub_event+0x2a1c/0x4f30 [ 777.936305][ T30] ? __pfx_hub_event+0x10/0x10 [ 777.941205][ T30] ? process_scheduled_works+0xa25/0x1830 [ 777.947142][ T30] ? process_scheduled_works+0xa25/0x1830 [ 777.953090][ T30] process_scheduled_works+0xb02/0x1830 [ 777.958803][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 777.965062][ T30] ? assign_work+0x3d5/0x5e0 [ 777.969899][ T30] worker_thread+0xa50/0xfc0 [ 777.974541][ T30] kthread+0x388/0x470 [ 777.978626][ T30] ? __pfx_worker_thread+0x10/0x10 [ 777.983901][ T30] ? __pfx_kthread+0x10/0x10 [ 777.988762][ T30] ret_from_fork+0x51e/0xb90 [ 777.993675][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 777.998843][ T30] ? __switch_to+0xc7d/0x1450 [ 778.004436][ T30] ? __pfx_kthread+0x10/0x10 [ 778.009294][ T30] ret_from_fork_asm+0x1a/0x30 [ 778.014293][ T30] [ 778.017609][ T30] INFO: task syz.6.1825:13588 blocked for more than 144 seconds. [ 778.026651][ T30] Tainted: G L syzkaller #0 [ 778.038737][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 778.047837][ T30] task:syz.6.1825 state:D stack:26752 pid:13588 tgid:13575 ppid:7169 task_flags:0x400140 flags:0x00080002 [ 778.059973][ T30] Call Trace: [ 778.063427][ T30] [ 778.066406][ T30] __schedule+0x1585/0x5340 [ 778.071366][ T30] ? __pfx___schedule+0x10/0x10 [ 778.076324][ T30] ? schedule+0x90/0x360 [ 778.080959][ T30] schedule+0x164/0x360 [ 778.085150][ T30] schedule_preempt_disabled+0x13/0x30 [ 778.090905][ T30] __mutex_lock+0x7fe/0x1300 [ 778.095724][ T30] ? __mutex_lock+0x5ac/0x1300 [ 778.100815][ T30] ? usbdev_open+0x182/0x770 [ 778.105648][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 778.110939][ T30] ? bus_find_device+0x27d/0x2d0 [ 778.116119][ T30] ? __pfx_bus_find_device+0x10/0x10 [ 778.121545][ T30] ? usbdev_open+0xa7/0x770 [ 778.126227][ T30] ? __kmalloc_cache_noprof+0x15b/0x660 [ 778.131991][ T30] usbdev_open+0x182/0x770 [ 778.136641][ T30] ? kobject_get_unless_zero+0x167/0x1f0 [ 778.142451][ T30] ? __pfx_usbdev_open+0x10/0x10 [ 778.147621][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 778.152893][ T30] chrdev_open+0x4cd/0x5e0 [ 778.157514][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 778.163425][ T30] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 778.169958][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 778.175122][ T30] do_dentry_open+0x785/0x14e0 [ 778.180339][ T30] vfs_open+0x3b/0x340 [ 778.184463][ T30] ? path_openat+0x2df0/0x3860 [ 778.189241][ T30] path_openat+0x2e08/0x3860 [ 778.194023][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 778.199794][ T30] ? stack_depot_save_flags+0x33/0x810 [ 778.205488][ T30] ? __pfx_path_openat+0x10/0x10 [ 778.210587][ T30] ? __x64_sys_openat+0x138/0x170 [ 778.215858][ T30] ? do_syscall_64+0x14d/0xf80 [ 778.220799][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.227086][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 778.232190][ T30] do_file_open+0x23e/0x4a0 [ 778.236884][ T30] ? __pfx_do_file_open+0x10/0x10 [ 778.242073][ T30] ? _raw_spin_unlock+0x28/0x50 [ 778.247166][ T30] ? alloc_fd+0x64b/0x6c0 [ 778.251728][ T30] do_sys_openat2+0x113/0x200 [ 778.256722][ T30] ? __se_sys_futex+0x3a8/0x450 [ 778.261704][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 778.267145][ T30] ? rcu_is_watching+0x15/0xb0 [ 778.272095][ T30] __x64_sys_openat+0x138/0x170 [ 778.277207][ T30] do_syscall_64+0x14d/0xf80 [ 778.281990][ T30] ? trace_irq_disable+0x3b/0x150 [ 778.287224][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.293720][ T30] ? clear_bhb_loop+0x40/0x90 [ 778.298445][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.304444][ T30] RIP: 0033:0x7eff1a55cece [ 778.336140][ T30] RSP: 002b:00007eff187d4b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 778.347824][ T30] RAX: ffffffffffffffda RBX: 00007eff187d56c0 RCX: 00007eff1a55cece [ 778.356297][ T30] RDX: 0000000000002581 RSI: 00007eff187d4c00 RDI: ffffffffffffff9c [ 778.364595][ T30] RBP: 00007eff187d4c00 R08: 0000000000000000 R09: 0000000000000000 [ 778.373079][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 778.381222][ T30] R13: 00007eff1a816128 R14: 00007eff1a816090 R15: 00007eff1a93fa48 [ 778.389861][ T30] [ 778.393000][ T30] [ 778.393000][ T30] Showing all locks held in the system: [ 778.401173][ T30] 2 locks held by ksoftirqd/1/23: [ 778.406398][ T30] #0: ffff8880b863ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb6/0x150 [ 778.416558][ T30] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 778.425747][ T30] 1 lock held by khungtaskd/30: [ 778.431193][ T30] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 778.441182][ T30] 2 locks held by getty/5581: [ 778.446105][ T30] #0: ffff8880361d40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 778.459328][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 778.470439][ T30] 5 locks held by kworker/1:7/5918: [ 778.475669][ T30] #0: ffff888021aa3548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 778.487794][ T30] #1: ffffc90004b87c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 778.500211][ T30] #2: ffff888029a43198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 778.509295][ T30] #3: ffff8880569a2198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 778.518878][ T30] #4: ffff8880252df160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 778.528271][ T30] 6 locks held by kworker/0:10/8194: [ 778.533803][ T30] #0: ffff888021aa3548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 778.545423][ T30] #1: ffffc90003087c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 778.557608][ T30] #2: ffff888029a0f198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 778.568309][ T30] #3: ffff888036e12198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 778.577803][ T30] #4: ffff888036e10160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 778.587287][ T30] #5: ffffffff8e5fd770 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0 [ 778.599219][ T30] 1 lock held by syz.6.1825/13588: [ 778.604709][ T30] #0: ffff888029a43198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 778.614047][ T30] 1 lock held by syz.2.2095/14672: [ 778.619209][ T30] #0: ffff888029a43198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 778.628535][ T30] 1 lock held by syz.7.2345/15690: [ 778.633792][ T30] #0: ffff888029a0f198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 778.642989][ T30] [ 778.645354][ T30] ============================================= [ 778.645354][ T30] [ 778.653981][ T30] NMI backtrace for cpu 0 [ 778.654003][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 778.654031][ T30] Tainted: [L]=SOFTLOCKUP [ 778.654037][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 778.654048][ T30] Call Trace: [ 778.654057][ T30] [ 778.654066][ T30] dump_stack_lvl+0xe8/0x150 [ 778.654098][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 778.654123][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 778.654150][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 778.654175][ T30] sys_info+0x135/0x170 [ 778.654195][ T30] watchdog+0xfd9/0x1030 [ 778.654230][ T30] ? watchdog+0x21a/0x1030 [ 778.654264][ T30] kthread+0x388/0x470 [ 778.654286][ T30] ? __pfx_watchdog+0x10/0x10 [ 778.654314][ T30] ? __pfx_kthread+0x10/0x10 [ 778.654336][ T30] ret_from_fork+0x51e/0xb90 [ 778.654367][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 778.654392][ T30] ? __switch_to+0xc7d/0x1450 [ 778.654420][ T30] ? __pfx_kthread+0x10/0x10 [ 778.654442][ T30] ret_from_fork_asm+0x1a/0x30 [ 778.654483][ T30] [ 778.654493][ T30] Sending NMI from CPU 0 to CPUs 1: [ 778.772618][ C1] NMI backtrace for cpu 1 [ 778.772639][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 778.772662][ C1] Tainted: [L]=SOFTLOCKUP [ 778.772669][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 778.772679][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 778.772707][ C1] Code: 8e 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 3d 1c 00 fb f4 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 778.772721][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 778.772737][ C1] RAX: 0000000000cc9c67 RBX: ffffffff819a80ad RCX: 0000000080000001 [ 778.772750][ C1] RDX: 0000000000000001 RSI: ffffffff8def2270 RDI: ffffffff8c27a880 [ 778.772762][ C1] RBP: ffffc90000197f10 R08: ffff8880b873395b R09: 1ffff110170e672b [ 778.772773][ C1] R10: dffffc0000000000 R11: ffffed10170e672c R12: ffffffff90117db0 [ 778.772785][ C1] R13: 1ffff11003b5b000 R14: 0000000000000001 R15: 0000000000000001 [ 778.772796][ C1] FS: 0000000000000000(0000) GS:ffff888125567000(0000) knlGS:0000000000000000 [ 778.772810][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 778.772822][ C1] CR2: 00007f9f767e6158 CR3: 00000000773be000 CR4: 00000000003526f0 [ 778.772839][ C1] Call Trace: [ 778.772846][ C1] [ 778.772867][ C1] default_idle+0x9/0x20 [ 778.772884][ C1] default_idle_call+0x72/0xb0 [ 778.772902][ C1] do_idle+0x1bd/0x500 [ 778.772923][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 778.772947][ C1] ? __pfx_do_idle+0x10/0x10 [ 778.772971][ C1] cpu_startup_entry+0x43/0x60 [ 778.772992][ C1] start_secondary+0x101/0x110 [ 778.773011][ C1] common_startup_64+0x13e/0x147 [ 778.773034][ C1] [ 778.959754][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 778.966672][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 778.977472][ T30] Tainted: [L]=SOFTLOCKUP [ 778.981806][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 778.992059][ T30] Call Trace: [ 778.995340][ T30] [ 778.998272][ T30] vpanic+0x56c/0xa60 [ 779.002258][ T30] ? __pfx___schedule+0x10/0x10 [ 779.007124][ T30] ? __pfx_vpanic+0x10/0x10 [ 779.011638][ T30] ? __pfx_console_unlock+0x10/0x10 [ 779.017047][ T30] panic+0xc5/0xd0 [ 779.020770][ T30] ? __pfx_panic+0x10/0x10 [ 779.025191][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 779.030575][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 779.036740][ T30] watchdog+0x1023/0x1030 [ 779.041098][ T30] ? watchdog+0x21a/0x1030 [ 779.045560][ T30] kthread+0x388/0x470 [ 779.049640][ T30] ? __pfx_watchdog+0x10/0x10 [ 779.054336][ T30] ? __pfx_kthread+0x10/0x10 [ 779.058929][ T30] ret_from_fork+0x51e/0xb90 [ 779.063608][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 779.068812][ T30] ? __switch_to+0xc7d/0x1450 [ 779.073512][ T30] ? __pfx_kthread+0x10/0x10 [ 779.078145][ T30] ret_from_fork_asm+0x1a/0x30 [ 779.082921][ T30] [ 779.086443][ T30] Kernel Offset: disabled [ 779.090765][ T30] Rebooting in 86400 seconds..