last executing test programs: 5m45.140231073s ago: executing program 3 (id=1550): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000000)={0x40, 0x7, 0x6, "ca2397070078"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 5m41.939540633s ago: executing program 3 (id=1565): r0 = fsopen(&(0x7f0000000280)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000400)='uid', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x40a}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 5m41.328628302s ago: executing program 3 (id=1567): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f00000004c0)="fa", 0x1) syz_usb_connect$cdc_ncm(0x6, 0x8d, &(0x7f00000007c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x2, 0x1, 0x7, 0xe0, 0x9d, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "0100000034eb"}, {0x5, 0x24, 0x0, 0xfff6}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x9, 0x3, 0x4}, {0x6, 0x24, 0x1a, 0x0, 0x2}, [@mdlm={0x15, 0x24, 0x12, 0x1000}, @acm={0x4, 0x24, 0x2, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x2, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x6, 0x0, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x7, 0xf1, 0x1}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0xb, 0x2, 0x3, 0xff, 0x24}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x9, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x443}}, {0xbc, &(0x7f0000000200)=@string={0xbc, 0x3, "18bc1a623f48735e1bc5b9a554dcf8c235ca31c383eb25d0956d7d18c76978d7f3e537f6ac5d0e192092045123e818390d0da453d91be9dae9a93db5edfc0fd846f53a8f3da3b7112f1be180cb67ea93abe7a2f3e7e51b66abb8a0baaa324469a5c8161b6397029623d88e7b7fd43ae138fa6ea1f7571143d2a3025154ca9bc6961b408587625926067fdb35f0515b428609de89629e35ff4b0f6ca0c03f5f0907e096d0966b3b2d89aa231adce9b5b5e2c16db84592444742f7"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x41d}}, {0xe1, &(0x7f00000002c0)=@string={0xe1, 0x3, "7131d33365638451aef9e4eb8a2db8f151f09fddaeeda708548219a57d4377790b069e5551e5426acfdd1f5bce907961efcc160b711d60c2358b67542e1b57ea1ea0ce4f95df6c575f291724edcb93cf67333566f319a421d5069f34225f86138df0313531dcc0f7330f78dee99c81e5694677c7c58a6c7141a4cd61c04a6eae4a36101097ce1dda046e7a17a5f0b038a01f42e10c163193ab486e2cbe28507335030aea129721b4a6d8eb3cb6f6ec7fd28c517a6631937ebf9446b2c17c54e56b81e94a98a9e915415a18e8ff1d3a196ec18175b04f595e58aaadebc4758f"}}, {0xfa, &(0x7f00000003c0)=@string={0xfa, 0x3, "adc4d4cd33198701810a8819178906b2d3de7a2d9435569d98dc94de763e383642d88ae3e4e403ce269d2bfd7ae5ed55e3e374e4a03774144d0117ad5bdeabe7e1af0720c39608929f43363780b7e9507c9d474bcf507230317b2419f05cd429fa70851890ee18b985fe2bc99dcbc7ea489554662d481318eafedb8b8e3b030d91b6079cff80be5768b8aed638ff7a56e60a3fe80e7ac5c2023630cf78a8b3db5bf0629d036d5611206a44236762d3b65935c8cae448863632082ff8acfe3b079bb26a0d55e112a0ef41137644cb718802da019a8b99bd22336354fa99f31e56cc891aabb8cda1eb069a973dc0542a27ff85a5f8ed885053"}}, {0x58, &(0x7f0000000500)=@string={0x58, 0x3, "9edd63f57cb643f104924fdfacf33d5a01f7a63047f71936d8e29d1de5a18bb03b61952e53b2b40fcc2fc53f9034a62148e13b8896a325aa7a004453ad0084238065c88ad435cf262640529eb09f4daca6ed1787a1ee"}}, {0x49, &(0x7f0000000580)=@string={0x49, 0x3, "6236af716409610c6b5887fc00b212e0e9760e69603353fe1fead6504a2c9de621deed9dfa70ff2c4dcce6026011349e46a2f02d7b2d18b2fa38be5c1f19263c9be032badcd755"}}, {0x5c, &(0x7f0000000600)=@string={0x5c, 0x3, "c62ed694527c98209b8fb324f8bcb297296bc2852d775463c335b16896c68d28f3fb6c7302c6d7972ce1642e213fd34014f41634ff7655a0667600a264c2d135a90478a7beb548bd4110bbe4e038fb5c4f852e62357449e174d0"}}, {0x58, &(0x7f0000000680)=@string={0x58, 0x3, "aa6667a0f644277660126d80e97a260f628b603050782f2090af65eb093d520b9df1211599930964741701b6c8c7c2d17248557ff14193759f270b9279e472abe580c36200618ec76f46a5f51517e3328d7ad31205c7"}}]}) 5m39.51448817s ago: executing program 3 (id=1577): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = socket$kcm(0x10, 0x100000000002, 0x4) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x0, 0x0, 0x32315842}}) sendmsg$kcm(r1, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000050000611080000000000066050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8044) ioctl$sock_ifreq(r4, 0x8932, &(0x7f0000000180)={'vcan0\x00', @ifru_mtu}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = gettid() sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xff05, 0x70bd2a, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2a94, 0x60004}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008080) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x171a43, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x7) open(&(0x7f0000000040)='./file0\x00', 0x454000, 0x2) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x100, 0x8, 0x2}, 0x18) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) 5m36.525852415s ago: executing program 3 (id=1589): socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) syz_open_procfs(0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) r2 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) (async) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r3, 0x8) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) (async) sendto$inet6(r4, 0x0, 0x0, 0x4000050, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0xf) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="0000fe0f000000000000000000000000800000006ab2662c"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0) (async) syz_open_dev$sg(&(0x7f0000000140), 0xfffffffffffffffd, 0x19f482) (async) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000002000008004500001c00000000004f907800000000ffffffff00004e2000089078"], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaa3aa86dd60010100006411"], 0x0) socket(0x2, 0x80805, 0x0) 5m36.437894783s ago: executing program 3 (id=1590): socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x28, r0, 0x1, 0xfffffffe, 0x0, {{0x2}, {@void, @val={0xc, 0x99, {0x1, 0x2}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}]}, 0x28}}, 0x8000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r1, 0x0, 0x4040001) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYRESOCT=r2, @ANYRES16, @ANYBLOB="050000000000000800000000000008000300", @ANYRES32, @ANYBLOB="2d400e0000000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r0, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x440c0}, 0x20000805) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900"], 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x150, 0xd3, 0x12, 0x36, 0x10, 0x9fb, 0x602a, 0xfd36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3, 0x0, 0x0, 0xaa, 0x72, 0x59}}]}}]}}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000180)=ANY=[], 0x8) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYRES16=r0, @ANYRES32=r9, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newtfilter={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r9, {0xffe0}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4040940}, 0x0) 5m36.220666303s ago: executing program 32 (id=1590): socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x28, r0, 0x1, 0xfffffffe, 0x0, {{0x2}, {@void, @val={0xc, 0x99, {0x1, 0x2}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}]}, 0x28}}, 0x8000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r1, 0x0, 0x4040001) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYRESOCT=r2, @ANYRES16, @ANYBLOB="050000000000000800000000000008000300", @ANYRES32, @ANYBLOB="2d400e0000000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r0, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x440c0}, 0x20000805) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900"], 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x150, 0xd3, 0x12, 0x36, 0x10, 0x9fb, 0x602a, 0xfd36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3, 0x0, 0x0, 0xaa, 0x72, 0x59}}]}}]}}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000180)=ANY=[], 0x8) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYRES16=r0, @ANYRES32=r9, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newtfilter={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r9, {0xffe0}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4040940}, 0x0) 4m6.006329088s ago: executing program 2 (id=1933): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001940)={0x14, 0x14, 0x601, 0x0, 0x0, {0x9}}, 0x35}, 0x1, 0x0, 0x0, 0x240488d4}, 0x4000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x1e, 0x5, 0x0) connect$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x2}}, 0x10) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000100)={0x0, r0}) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, 0xfffffffffffffffd) r5 = syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13500, 0x0, 0x0, 0x0, r0}, &(0x7f0000000240), &(0x7f0000000480)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x21) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT=0x0], 0x0) syz_usb_control_io(r7, 0x0, 0x0) preadv2(r6, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0xc4, 0x0, 0x0, 0x9) fallocate(r5, 0x12, 0x5, 0x7) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x21, &(0x7f0000000440), 0x1) creat(&(0x7f0000000040)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000002c0)={0x14, &(0x7f00000004c0)={0x0, 0x10, 0x9e, {0x9e, 0xe, "d94ac2649e740db9625fc1fed280fb5ca46ce6d4e6918953698eee105f29334bb781f55282c504465f1085b8db380172892d1728bde16f76c1bfa026314044bb9a7e330eb52affc69d771078c400d9c88330277193893a8a10fdeae84c0f78377adab5ee160e021fe56f146cc5bdb59f6cec09e760adc59c007bcf5cd4f84cce2baf285e65af1ffdea60acf2dc366e821dca7b179009d81e6de19c21"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002300)={0x1c, &(0x7f0000002200)={0x0, 0xe, 0x62, "11d13df65927e68e53aa5e4bf40e3078a303cec35ded2bf18103dc9b8e1b1a2e2c3ef362d4fd36f25b0be5d5059960bd6081a8bf6dac31cfefb94d0c101248858e1c798cf819d084409a6dc916e7044d7336410f51e66f0a797744930bfaf1d35f23"}, &(0x7f0000002280)={0x0, 0xa, 0x1, 0x2f}, &(0x7f00000022c0)={0x0, 0x8, 0x1, 0xd}}) mknod(&(0x7f0000000180)='./file0\x00', 0x10, 0xc1) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000340)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x8000}}) umount2(&(0x7f0000000300)='./file0\x00', 0x4) umount2(&(0x7f0000000240)='./file0\x00', 0x4) syz_usb_connect$uac1(0x0, 0xb4, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000406b1d01014000010203010902a2000301ab00000904000000010100000a24010000000201020c240703000000ed129e8430072408000000000924030000000302000904010000010200000904010101010200000824020100000000090501090000000310072501800101010904020000010300000904020101010200000f"], 0x0) 4m4.097630541s ago: executing program 2 (id=1942): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020200091c00000003000000000000000200080008000000fd0000000000000002000100000000000002050000000000010016004e24000015000900d0a7"], 0xe0}, 0x1, 0x7}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x393, 0x0) write$binfmt_script(r1, &(0x7f0000020180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 4m4.001746612s ago: executing program 2 (id=1943): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl(r0, 0xffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000000010902240001000000000904010002ffffff000905fc52"], 0x0) 4m2.66228463s ago: executing program 2 (id=1946): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x8402, &(0x7f00000021c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 4m1.375584295s ago: executing program 2 (id=1947): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x103381) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x3) ioctl$sock_SIOCINQ(r3, 0x541b, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) (async) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r6}, @fda={0x66646185, 0x1, 0x1, 0x1d}, @fda={0x66646185, 0x5, 0x1, 0x18}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}, 0x40}], 0x0, 0x0, 0x0}) fsmount(r4, 0x0, 0x0) (async) r7 = fsmount(r4, 0x0, 0x0) fchdir(r7) r8 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r8, 0x2007ffb) (async) ftruncate(r8, 0x2007ffb) sendfile(r8, r8, 0x0, 0x1000000201005) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000100)=ANY=[@ANYBLOB="bf070000ff0000008181"]) (async) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000100)=ANY=[@ANYBLOB="bf070000ff0000008181"]) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) 4m1.238540294s ago: executing program 2 (id=1949): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x57, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 4m1.058309805s ago: executing program 33 (id=1949): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x57, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 2m15.418464745s ago: executing program 0 (id=2363): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r0, 0xa, 0x21) fcntl$setlease(r0, 0x400, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x8f, 0x67, &(0x7f0000000040)="23fc9aaee1aed30160d25889f0c94a1810e7fe858c959e752c8a6dc3a6ce8f20114c30480ab4a630d52eae410feb5401a91daa88826e95311d306c1cfb7afdd2616590c19301645dc36be55b797005b17acdf926ab0bd4b83818e10b14de93afe9451be465ed55f65c0fef7b06740b82e8cc9ed9123a65969470648ee9a7fd5a8eec21b1a85710ae1cb6ef441c7b1c", &(0x7f0000000140)=""/103, 0xe1, 0x0, 0xfe, 0xf9, &(0x7f00000001c0)="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", &(0x7f00000002c0)="6fa112aac664094e118f414565084ca98988662f05ed79d557d75996f9c269a15fff96ab18e2dbcf476725d40a967b64cfc99b2666903506810afbf8bfff4c36c17c60f7db4014e8e037bc97247d538bb0a02d672acbe0662b1d7b31341e9f231e537bfe53321bb86eecb712beebf35796250df2eb66bf20330cbef2564f07ecf1a3eed548fa2b99e2c237d00e7a6da035d828bc75cd4f2be09a673e7f5e2bed65243ce3e15b4aeb39b7bc0071819bfa608d1884224548e37efa4b6cc5a585dac2c7caa0ae607350d72fdbf5e413adcd138af37215fda9e7bd5e8df913ebb69c376159cd243d8eda935f88cf82b213ea09bd14ebf63a2361ef", 0x4, 0x0, 0x3}, 0x50) creat(&(0x7f0000000100)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m15.289731317s ago: executing program 0 (id=2365): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) landlock_create_ruleset(&(0x7f00000001c0)={0x1001, 0x0, 0x2}, 0x4, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 2m15.102403721s ago: executing program 0 (id=2367): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000000706010200000000000000000a00000a0800064000000006050001000700000008000640000008000900020073797a31000000000800064000007fffb548b1cd71562e7c29bfe3400a040000b5f7ba4d414ba7176b379043148284e7fd66a4a2e05542e60126059e80715b5471f5748ec9145cd218452f8d110a8d5cc6be041a0b39ddfe071350be0b379a595066207f1e15657f6e7f56a40670"], 0x40}, 0x1, 0x0, 0x0, 0x4008888}, 0x24008000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x78, 0x601, 0x70bd2a, 0x0, "", [@typed={0x7, 0x124, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1, 0x0, 0x0, 0x2000}, 0x4000880) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000040)={0x0, 0xfdd0}) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c0000001e00010a00000000000000f5c900bad608006e8004006c80"], 0x1c}, 0x1, 0x0, 0x0, 0x800d1}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x103241, 0x0) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) read$FUSE(r7, 0x0, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffff6, 0x1) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'wlan1\x00', {0x4}, 0x7fff}) 2m13.243663613s ago: executing program 0 (id=2374): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000680)=@urb_type_iso={0x0, {0x1, 0x1}, 0x7, 0x40, &(0x7f0000000240)="22c57e", 0x3, 0x1, 0x10, 0x75, 0x9, 0x7f, &(0x7f00000002c0)="cdafbd2e239294b9cb8db0deb765b7e215413a68dcc2deca6b123b02bb777f9e295ce8435e72703b4c722ccd5206cf5d617ee72cbeff3956a247", [{0x0, 0x2, 0x7}, {0x10001, 0xfff, 0x401}, {0x5, 0x1000, 0x7}, {0x81, 0x4, 0x4}, {0xa2, 0x9, 0x200}, {0x3, 0x80, 0xfffff000}, {0x6, 0x3ca5, 0x3}, {0x2, 0x7, 0x4}, {0x8000, 0x5, 0x2}, {0x1, 0x7, 0x3}, {0x8, 0x1}, {0x0, 0xfffffff8, 0x8cb2}, {0x100, 0x6}, {0xfffffffd, 0x200, 0x1f}, {0x2, 0xbd6, 0x1}, {0x127e, 0xa, 0x1}, {0x7f, 0x791, 0x200}, {0x5c0, 0x98, 0x3}, {0x7f, 0xd2, 0x17d}, {0x162f, 0x0, 0x4}, {0x3, 0x682, 0xa75}, {0xbba7, 0xab, 0x7}, {0x3, 0x5, 0xea3}, {0x5, 0x5, 0x7}, {0x3, 0xaf6, 0x8}, {0x9, 0x0, 0x7}, {0x9, 0x944}, {0xc1, 0x9, 0x3}, {0x1, 0xfffffff9, 0xffffff46}, {0x1, 0x2, 0x6}, {0xe0, 0x4, 0x5}, {0x7f, 0x9, 0x44}, {0x8, 0x1, 0x10000}, {0x5, 0x5, 0x2}, {0x4, 0x5, 0x5}, {0x0, 0x237f, 0x4}, {0x9, 0x80, 0x5}, {0x7a1e, 0x3, 0x800}, {0x3, 0x8e, 0x8}, {0x6, 0x5, 0x6d6a}, {0x5, 0x5, 0xfffffffe}, {0x0, 0x2, 0xa5de}, {0x4, 0x8, 0x7fff}, {0x0, 0x8001, 0x401}, {0x4, 0x9, 0xff}, {0x9, 0x3}, {0x39bf, 0x5, 0xc265}, {0x9, 0xfffffffe, 0x800}, {0x0, 0x9, 0x43}, {0x8, 0x4, 0x8}, {0x1, 0x8, 0x7fff}, {0x7, 0x7, 0x3c4}, {0xfffffff9, 0xfffffff8, 0xfa03}, {0x2, 0x7ff, 0x400}, {0x3, 0x6, 0x200}, {0x3, 0x1, 0x10}, {0xb0, 0x29bb80, 0xea}, {0xc1, 0xb19c, 0x7}, {0x4616e438, 0x9, 0x9}, {0x200, 0x7ff, 0x3}, {0x5, 0xaf28, 0x3}, {0x4f1, 0xb, 0x3}, {0xb6b, 0xa02, 0x6}, {0x0, 0x3, 0x4976c5d}, {0xc, 0xa6, 0x1}, {0xf, 0x519, 0x1}, {0x7, 0x6, 0x2}, {0x10001, 0x7695612d}, {0x1f61221f, 0x4, 0x8}, {0x1, 0xef, 0x4}, {0x1, 0xffffffff, 0x7}, {0x7, 0x4}, {0x6, 0x9, 0xe97d237}, {0x0, 0x7, 0x5}, {0x9, 0x10001, 0x100}, {0xc092, 0x52834eb8, 0x709}, {0x8, 0x2, 0xf7e6}, {0x78, 0x2, 0x2}, {0x4, 0x7, 0x9138}, {0xea2, 0x50000000, 0x1ff}, {0x5, 0x8, 0x9}, {0x800, 0x7, 0xffff}, {0x1, 0x9, 0x8}, {0x1ff, 0x2b29ce96}, {0x1, 0x9, 0x100}, {0xe, 0x3, 0x5}, {0x80, 0x3, 0x100}, {0x4, 0x9, 0x80000001}, {0x6, 0x1, 0x1}, {0x7, 0x6, 0x1277}, {0x1, 0x5, 0x9}, {0x5, 0x9, 0x2}, {0x2, 0x9de, 0x3}, {0x0, 0x1, 0x1}, {0x9, 0xf, 0x9}, {0x0, 0x7, 0x3}, {0x10, 0x7f, 0x6}, {0x9f1, 0x3, 0x68ea}, {0x9, 0x7, 0xffffffc0}, {0x3, 0x2, 0x5}, {0x8, 0x7, 0x8001}, {0x1, 0x6, 0xffffff7f}, {0x0, 0x9, 0x2}, {0x3, 0x6, 0xffffffff}, {0x741088e, 0x40, 0x6}, {0x10001, 0xffff, 0xd}, {0x63b, 0x1, 0x2}, {0x9, 0x19, 0xfe0}, {0x6, 0x3}, {0x1, 0xd, 0x6}, {0x0, 0xfd84, 0x7}, {0x1, 0x9, 0x10000}, {0xaf9, 0xa, 0xe0}, {0x49, 0x10, 0x5}, {0xfb7, 0x10000}, {0x1, 0x3, 0x5}, {0x7, 0x6, 0x4}]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x2, 0x7fffffff}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, r5}) r8 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_GEM_FLINK(r8, 0xc008640a, &(0x7f0000000180)={r9, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r8, 0xc010640b, &(0x7f0000000340)={r10}) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r11, &(0x7f0000000140)='.\x00', r7, &(0x7f0000000180)='./file0\x00', 0x0) r12 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r12, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r13 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r13, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r2) r14 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$KVM_RUN(r14, 0xae80, 0x0) 2m12.202277542s ago: executing program 0 (id=2379): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x1d, 0x4, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0x40d, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x600b2, 0x40c41}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xfffffff8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8840}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x1c3, 0x6}}, './file0\x00'}) ioctl$VIDIOC_G_MODULATOR(r3, 0xc0445636, &(0x7f0000000140)={0x9, "f235b0cf0f1e5a74f744573cb40e15eb0a21a2611144a6aff28ce2de14759e79", 0x20, 0xc, 0x4, 0x10, 0x2}) 2m11.81474434s ago: executing program 0 (id=2380): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a70000000060a0b04000000000000000002000000440004802c0001800b0001006e756d67656e00001c000280080002400000000708000340000000000800014000000015140001800b00010072656a6563740000040002800900010073797a30000000000900020073797a32"], 0x98}}, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001a00)={"b494ae43b0da3226d66ddf9e5ce8884b", 0x0, 0x0, {0x34c9, 0x8}, {0x3, 0xd19}, 0x3, [0x25ed, 0x8a, 0x2, 0xc, 0x5, 0x7, 0x4, 0xffff, 0x3, 0x7fff, 0x6, 0x4, 0x6, 0x2, 0x1, 0xffff]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000001e00)={0x0, 0x3, 0x8001}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000006600)={{r0}, r1, 0x2, @inherit={0x58, &(0x7f0000002200)=ANY=[@ANYBLOB="0100000000000000020000000000000004000000000000000d0000000000000017000000000000000400000000000000018bd8605a9bf16320000000000000000500000000000000050000000000010002000000000000007a5e9407754e5247df5a1c083cb1b2101332721447fe4bcb0abfc7cf28d14d046c158168138b8e4ea89373eb92c2f698c50180000001d02b8f370665e46ccf9249839e19778d45c73ffd069fd517b4ad1adbec37cbaec1f477160c8d2df13a931d48b624917c81c72658dcfe7a119bc4c06a8efa6ee2b4766d442bcfca1e23bb7a1566bc2dcd5c"]}, @devid=r2}) syz_emit_ethernet(0x4a, &(0x7f0000001b80)=ANY=[@ANYBLOB="ffffe0ffffffaaaaaaaaaa0408004200003c0000000000019078ac1e0001ac1414bb44140801ac1414bb00000000e000000200000000000026510000fffffffa0287e6330408d299d9c74aba2e43be61c85694225c6232f88e7a67f75cf936fa130e30e52f5b86ef0047a7a89cffca46b262b306874e5b356c7aed0f2bbb4a4a93af8da0ff648d73e196d755640fc97029a6c7980fd489c5bb6d90814ab18a295942fa8377f21c6b9072c5a8b0eb8d75e219fb076fa16a317675ef0a2e7552017cc25021c4c9d0caa4c1a25187f389359100df3966a48b4bd4ed18ad2b7c65f8d77cda7be3c096218985ab8410ba21c89c00"/251], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = syz_open_dev$audion(&(0x7f0000002dc0), 0x6, 0x82000) r4 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x6e23, 0xeffffdff, @loopback, 0xfffffffe}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) sendmmsg$inet6(r4, &(0x7f0000009d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r5}}}], 0x28}}], 0x1, 0x0) mkdirat(r3, &(0x7f0000004380)='./file1\x00', 0x2) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r6) r7 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x1a9a00) ioctl$VIDIOC_SUBDEV_S_FMT(r7, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x1, 0x200005, 0x100d, 0xb, 0x1, 0xc, 0x2, 0x310}}) mkdir(&(0x7f0000000100)='./control\x00', 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000c40)="174f0309acc581c27c0835a541d5ace14751a6fb5991e1eabe613766930c5209d76188595688370a8db8878df98ad326d6", 0x31}], 0x1, &(0x7f0000001dc0)=ANY=[@ANYBLOB="0000ff", @ANYRES32=0x0, @ANYBLOB="ac14140d7f00000100000000140000000000000000000000070000009404010000000000"], 0x38}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) r9 = openat$cgroup_freezer_state(r6, &(0x7f00000002c0), 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004280)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f0000001880)=[{&(0x7f00000001c0)=""/254, 0xfe}, {&(0x7f0000000480)=""/2, 0x2}, {&(0x7f0000001940)=""/164, 0xa4}, {&(0x7f0000001b00)=""/100, 0x64}, {&(0x7f0000004540)=""/4096, 0x1000}], 0x5, &(0x7f00000004c0)=""/229, 0xe5}, 0x9}, {{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f00000005c0)=""/170, 0xaa}, {&(0x7f0000000680)=""/71, 0x47}, {&(0x7f0000005540)=""/179, 0xb3}, {&(0x7f0000001c80)=""/176, 0xb0}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000004480)=""/129, 0x81}, {&(0x7f0000001900)=""/13, 0xd}, {&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000002940)=""/156, 0x9c}], 0x9, &(0x7f0000002ac0)=""/173, 0xad}, 0x7a4}, {{0x0, 0x0, &(0x7f0000004140), 0x0, &(0x7f0000000700)=""/132, 0x84}, 0x6}], 0x3, 0x102, &(0x7f0000004340)) write$cgroup_freezer_state(r9, &(0x7f00000000c0)='FROZEN\x00', 0x7) r10 = openat$sndseq(0xffffff9c, &(0x7f0000000380), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r10, 0x40505330, &(0x7f00000003c0)={{0xb6, 0x80}, {0xc, 0x6}, 0x6, 0x3, 0x3}) sendfile(r9, r9, 0x0, 0x8000002) 2m11.014636076s ago: executing program 34 (id=2380): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a70000000060a0b04000000000000000002000000440004802c0001800b0001006e756d67656e00001c000280080002400000000708000340000000000800014000000015140001800b00010072656a6563740000040002800900010073797a30000000000900020073797a32"], 0x98}}, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001a00)={"b494ae43b0da3226d66ddf9e5ce8884b", 0x0, 0x0, {0x34c9, 0x8}, {0x3, 0xd19}, 0x3, [0x25ed, 0x8a, 0x2, 0xc, 0x5, 0x7, 0x4, 0xffff, 0x3, 0x7fff, 0x6, 0x4, 0x6, 0x2, 0x1, 0xffff]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000001e00)={0x0, 0x3, 0x8001}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000006600)={{r0}, r1, 0x2, @inherit={0x58, &(0x7f0000002200)=ANY=[@ANYBLOB="0100000000000000020000000000000004000000000000000d0000000000000017000000000000000400000000000000018bd8605a9bf16320000000000000000500000000000000050000000000010002000000000000007a5e9407754e5247df5a1c083cb1b2101332721447fe4bcb0abfc7cf28d14d046c158168138b8e4ea89373eb92c2f698c50180000001d02b8f370665e46ccf9249839e19778d45c73ffd069fd517b4ad1adbec37cbaec1f477160c8d2df13a931d48b624917c81c72658dcfe7a119bc4c06a8efa6ee2b4766d442bcfca1e23bb7a1566bc2dcd5c"]}, @devid=r2}) syz_emit_ethernet(0x4a, &(0x7f0000001b80)=ANY=[@ANYBLOB="ffffe0ffffffaaaaaaaaaa0408004200003c0000000000019078ac1e0001ac1414bb44140801ac1414bb00000000e000000200000000000026510000fffffffa0287e6330408d299d9c74aba2e43be61c85694225c6232f88e7a67f75cf936fa130e30e52f5b86ef0047a7a89cffca46b262b306874e5b356c7aed0f2bbb4a4a93af8da0ff648d73e196d755640fc97029a6c7980fd489c5bb6d90814ab18a295942fa8377f21c6b9072c5a8b0eb8d75e219fb076fa16a317675ef0a2e7552017cc25021c4c9d0caa4c1a25187f389359100df3966a48b4bd4ed18ad2b7c65f8d77cda7be3c096218985ab8410ba21c89c00"/251], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = syz_open_dev$audion(&(0x7f0000002dc0), 0x6, 0x82000) r4 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x6e23, 0xeffffdff, @loopback, 0xfffffffe}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) sendmmsg$inet6(r4, &(0x7f0000009d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r5}}}], 0x28}}], 0x1, 0x0) mkdirat(r3, &(0x7f0000004380)='./file1\x00', 0x2) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r6) r7 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x1a9a00) ioctl$VIDIOC_SUBDEV_S_FMT(r7, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x1, 0x200005, 0x100d, 0xb, 0x1, 0xc, 0x2, 0x310}}) mkdir(&(0x7f0000000100)='./control\x00', 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000c40)="174f0309acc581c27c0835a541d5ace14751a6fb5991e1eabe613766930c5209d76188595688370a8db8878df98ad326d6", 0x31}], 0x1, &(0x7f0000001dc0)=ANY=[@ANYBLOB="0000ff", @ANYRES32=0x0, @ANYBLOB="ac14140d7f00000100000000140000000000000000000000070000009404010000000000"], 0x38}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) r9 = openat$cgroup_freezer_state(r6, &(0x7f00000002c0), 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004280)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f0000001880)=[{&(0x7f00000001c0)=""/254, 0xfe}, {&(0x7f0000000480)=""/2, 0x2}, {&(0x7f0000001940)=""/164, 0xa4}, {&(0x7f0000001b00)=""/100, 0x64}, {&(0x7f0000004540)=""/4096, 0x1000}], 0x5, &(0x7f00000004c0)=""/229, 0xe5}, 0x9}, {{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f00000005c0)=""/170, 0xaa}, {&(0x7f0000000680)=""/71, 0x47}, {&(0x7f0000005540)=""/179, 0xb3}, {&(0x7f0000001c80)=""/176, 0xb0}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000004480)=""/129, 0x81}, {&(0x7f0000001900)=""/13, 0xd}, {&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000002940)=""/156, 0x9c}], 0x9, &(0x7f0000002ac0)=""/173, 0xad}, 0x7a4}, {{0x0, 0x0, &(0x7f0000004140), 0x0, &(0x7f0000000700)=""/132, 0x84}, 0x6}], 0x3, 0x102, &(0x7f0000004340)) write$cgroup_freezer_state(r9, &(0x7f00000000c0)='FROZEN\x00', 0x7) r10 = openat$sndseq(0xffffff9c, &(0x7f0000000380), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r10, 0x40505330, &(0x7f00000003c0)={{0xb6, 0x80}, {0xc, 0x6}, 0x6, 0x3, 0x3}) sendfile(r9, r9, 0x0, 0x8000002) 13.175819555s ago: executing program 1 (id=2851): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$inet(0x2, 0x2, 0x2e) setsockopt$inet_mreq(r2, 0x0, 0x0, &(0x7f0000000c00)={@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0xc}}, 0x8) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xc70, 0xf00e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x406, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x8, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x2) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x54c, 0x24b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0xe0, 0x9, [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x3, 0x1, 0x1, 0x9, {0x9, 0x21, 0x8, 0x77, 0x1, {0x22, 0x63b}}, {{{0x9, 0x5, 0x81, 0x3, 0x1df, 0x9, 0x53, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x1, 0x8, 0x2}}]}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0xd, 0x2, 0x8, 0x40, 0x6}, 0x10, &(0x7f0000000180)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0xbf, 0x40, 0x9, 0x8}]}, 0x8, [{0x43, &(0x7f0000000200)=@string={0x43, 0x3, "b8d0dc63329d6bafae688e878664d933ef259e8c896feca5165b87aff43593dc0c845949399b1d53ae3beb971a9dedbf941cb493053a668eae46d35e06b92ef788"}}, {0x25, &(0x7f0000000280)=@string={0x25, 0x3, "648729b0448ab87cbc7e84f772b45b2551b1442733422a039b045ffbc4e4f8781219d4"}}, {0x75, &(0x7f00000002c0)=@string={0x75, 0x3, "e292c8e430909ac95857992240242411835d816371a256a790f5370fceb7170c1869a13b93607886067faaa9d28bb7312f47aac586e9408aa55a736263e9e5dac16bb1343853411103139dc37ab9d4da5204aebc5f96c8b11f18f8e7d9b6a7a2af83d9709498f738ca48fb5c661a899ec0d9f0"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x403}}, {0xaa, &(0x7f0000000400)=@string={0xaa, 0x3, "daaaf21ecb5ed814e3f6e7af9bedb7f3e2b2647d48d14611474093a30e85af56c4c3aeb4624fa33a57562f47b9d19ba82aacf59b8c5bdb8134e4d93aa185f2a0c70054114328eb920c5e7001f50789b34b34d47260e4dd8c51032fd3a55fb83b775bbfacc5b009647fbbaa8cff6f4d2fe1e4420a90de04a4c1834a08bda8b720153e1ec040a64211a26eca2ea366e4222aa33e4009e129c8f23d50b33640b4d2d4621959d8ff30c7"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x439}}, {0xec, &(0x7f0000000500)=@string={0xec, 0x3, "eb4978d2d819c91586844df4514beadb181227d501f47b89d36396b10ef98da8e0561bb2ba744ea156d61e74267e4cff7df0eae7293d18849fe8cf8f29120ab6feb7a2e95390d664b1fad2485c618f555841c33852b036f1a751f5faf9549562a57162e507930431a01e50ac3f1f48ed13c12996122c77fac5f538517adc3cb26bac996ffbd57e78d9284a5563d6a8bb6d15fd975e7eced776c21c205d2d8cf167adf9b4eac9c37cc334f0c5bb428e5719a19b8bede736909d240363d42a3eeaff138f8828e3a6d02e69121a87f6b20815d468a81d677490679aa5906d9decb4f24ba31989dfdd2ef51d"}}]}) syz_usb_connect$sierra_net(0x6, 0x3f, &(0x7f00000006c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x3, 0x2, 0x40, 0x5, 0x5, 0x5}, {0x9, 0x5, 0x9, 0x2, 0x20, 0x40, 0x73, 0xa6}, {0x9, 0x5, 0x8, 0x3, 0x200, 0x5, 0x9, 0x6}}}}}}]}}, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r3, 0x81, 0x1, &(0x7f0000000040)='\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b15, &(0x7f0000000000)={'wlan0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006100)={0x30, 0x3f, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x15, 0x0, 0x1, [@nested={0x4, 0x3f}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@multicast1, @multicast2}, 0x10) syz_usb_control_io$hid(r3, &(0x7f0000000940)={0x24, &(0x7f0000000700)={0x40, 0xe, 0xff, {0xff, 0x1, "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"}}, &(0x7f0000000840)={0x0, 0x3, 0xa5, @string={0xa5, 0x3, "36ada9466b80eb91314dd8b4200ffec59d3802e52efc9949faf56d5d92ad6450dd5aaf322371b5abdb14254acc86ba5eea8d74fc48c0425275131a87c2995910ffcc9a02b87995c899b0708fbccf4f3145e5587fe7862708bad48b61b866217ebbbedd5001d9bf9d3defb90b164710c471dbd1ca489002a66327886bf4d9fd34f45c71b114de5e2c0d129364a6211000250568efc0b7af437387f5d0ff628366594928"}}, &(0x7f0000000680)={0x0, 0x22, 0x12, {[@local=@item_4={0x3, 0x2, 0x4, "eb5c5be9"}, @global=@item_012={0x2, 0x1, 0xa, "bcec"}, @global=@item_012={0x1, 0x1, 0x3, "e0"}, @global=@item_012={0x2, 0x1, 0x1, "8567"}, @main=@item_4={0x3, 0x0, 0xc, "a67ea0f4"}]}}, &(0x7f0000000900)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1000, 0x4, 0x1, {0x22, 0x335}}}}, &(0x7f0000000bc0)={0x2c, &(0x7f0000000980)={0x20, 0xf, 0xcf, "bb94e7051c41816e2cce31c07868bafb80cc8b6eea628b93332667afd8a7a022bd47ab59d6762edfb9dc94193d86d8c465005af4c2cb38d325b054691fbfab6af840d3aaaf9449c0871cac226c656d6047e353125a45784282fd24406d397e7472017c42ecb985577fde15beeacb911080547153302d3cfa9a3c65dcefcc763024708b338ecc2f9effcec9c49777e86320fd60ff7d19fa4b68ac09a771490fdcb60962012f92e1e6aad2dc87c63e33422f1ac2d8efa03c93569d6ac278a290b159bd89be4dca66af8c792eb01c34d6"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0xa4}, &(0x7f0000000b00)={0x20, 0x1, 0x4b, "4cbbcb4d475099ee66e961af4e6d24bc87b0570d453f3aa5641541fedd066cd5a23e53d6149162c90495ccd4066794a107d69c32147f044c39b9ed0a4dca1d9c1e7e1cef03a83891ac3af6"}, &(0x7f0000000b80)={0x20, 0x3, 0x1, 0x7}}) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000080)=0x8, 0x4) syz_usb_connect(0x0, 0x33, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100007b8955403a0976245b0d0102030109022100010d20000009040000000e0100000f2402010102", @ANYRES64], 0x0) 10.174224776s ago: executing program 6 (id=2864): r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0) syz_usb_disconnect(r0) (async) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x0, 0xb4, 0x8c, 0xbb}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa, 0x86, 0xf3, 0x40, 0x1110, 0x9024, 0xdb24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe9, 0x50, 0x9, [{{0x9, 0x4, 0x62, 0x4, 0x0, 0x6f, 0x6f, 0x49, 0x5}}]}}]}}, 0x0) syz_usb_disconnect(r2) syz_usb_control_io$lan78xx(r2, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x20, 0x23, 0xcc, {0xcc, 0x21, "8fea586f9fa3397a925f807248cd73a91573ea8c718ad57476eba6ef4e852868dd4f68470d98a73c96251799537a2c02273a2eda2eda60b402a937c3e8d9c50ec346bf302a817605ec27465924578c139647fd3f034c61298c66f4b2c9b7a4749196cc03de37fde6ff6ebff2b6ac7913554f1a416119a8e956ca4264e92c1512e7cf6ec56d8ebad6d5274e76bfb23cdb5fe20e63bab5067a5ce66bcc8fcb0602e69741b326a2ffae370d979da0866f3ec17dbbff6ee9e7eb3205b7cbda4bd1592433709e71331137cb8c"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2401}}}, &(0x7f0000000400)={0x34, &(0x7f00000001c0)={0x40, 0xf, 0xd4, "130028c8c431a0588fcef136ea9f520433b39677b14b239ecf3e89cea0b95c00b842601dfa9d058ff0481b9bb59fee69b54b1885a0a1631c3cdfd68545c4b27c19d800b308f07df343108bfac95aababd40a9ac355d5983a2f6d77b149ff03410d20531e8ca4c7c0dd60ed37d458a4d39218f3ba371e1279fb640a87ece0cb8d4bfa3ad32d31879042fbe4a11e18296020c908ce742dc78a7ceb6dd7d94532e5d179526204469c50d453a50b57686993a1bc63ed636e73faab858240f20eb839ec5caa15819d830bbcc09aecde61f9233a8668ce"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x15}, &(0x7f0000000340)={0xc0, 0xa1, 0x4, 0x1}, &(0x7f0000000380)={0x40, 0xa0, 0x4, 0x7ff}, &(0x7f00000003c0)={0xc0, 0xa2, 0x2f, "a912f11b20dbf607b321bc8c9268d1df8250119a2f209e495a4d8b41b0f109cd92aaa31b0aa4e702bac8daddea3290"}}) (async) syz_usb_control_io$lan78xx(r2, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x20, 0x23, 0xcc, {0xcc, 0x21, "8fea586f9fa3397a925f807248cd73a91573ea8c718ad57476eba6ef4e852868dd4f68470d98a73c96251799537a2c02273a2eda2eda60b402a937c3e8d9c50ec346bf302a817605ec27465924578c139647fd3f034c61298c66f4b2c9b7a4749196cc03de37fde6ff6ebff2b6ac7913554f1a416119a8e956ca4264e92c1512e7cf6ec56d8ebad6d5274e76bfb23cdb5fe20e63bab5067a5ce66bcc8fcb0602e69741b326a2ffae370d979da0866f3ec17dbbff6ee9e7eb3205b7cbda4bd1592433709e71331137cb8c"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2401}}}, &(0x7f0000000400)={0x34, &(0x7f00000001c0)={0x40, 0xf, 0xd4, "130028c8c431a0588fcef136ea9f520433b39677b14b239ecf3e89cea0b95c00b842601dfa9d058ff0481b9bb59fee69b54b1885a0a1631c3cdfd68545c4b27c19d800b308f07df343108bfac95aababd40a9ac355d5983a2f6d77b149ff03410d20531e8ca4c7c0dd60ed37d458a4d39218f3ba371e1279fb640a87ece0cb8d4bfa3ad32d31879042fbe4a11e18296020c908ce742dc78a7ceb6dd7d94532e5d179526204469c50d453a50b57686993a1bc63ed636e73faab858240f20eb839ec5caa15819d830bbcc09aecde61f9233a8668ce"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x15}, &(0x7f0000000340)={0xc0, 0xa1, 0x4, 0x1}, &(0x7f0000000380)={0x40, 0xa0, 0x4, 0x7ff}, &(0x7f00000003c0)={0xc0, 0xa2, 0x2f, "a912f11b20dbf607b321bc8c9268d1df8250119a2f209e495a4d8b41b0f109cd92aaa31b0aa4e702bac8daddea3290"}}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000940)={0x44, &(0x7f00000005c0)={0x20, 0xc, 0x3, "bfb248"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000940)={0x44, &(0x7f00000005c0)={0x20, 0xc, 0x3, "bfb248"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000009c0)={{0x1, 0x1, 0x3, 0x3, '\x00', 0x8}, 0x0, [0xfff, 0x8, 0x7, 0x8, 0x7, 0x4, 0x80000001, 0x0, 0x9, 0x1, 0x4, 0x2, 0xd4f, 0x3, 0x4575, 0x2, 0xa82b, 0x5, 0x10001, 0x7f, 0x1, 0x0, 0x4174, 0x0, 0x6f, 0xd4b0, 0x80000001, 0xfffffffffffffff7, 0xe, 0x100000000000, 0x1a8f4768, 0x7, 0x8, 0x8, 0xa, 0x0, 0x7fffffffffffffff, 0x3, 0x1, 0x5, 0x69a, 0x80000001, 0x5, 0x9, 0xff, 0x6, 0x401, 0x1, 0x3, 0x398e48ed, 0xffffffffffff97bf, 0x4, 0x80000000, 0x80000001, 0x3de, 0x40, 0x3, 0x1, 0x3, 0x9, 0x8, 0x3, 0xde, 0x6, 0xffff, 0xfffffffffffff801, 0x1, 0x5, 0x10001, 0x322, 0xfffffffffffffff9, 0x80, 0xffffffffffffffff, 0x5, 0x0, 0x28d, 0x8000000000, 0x3, 0x0, 0x1, 0xd, 0x6, 0x4, 0x4, 0x200, 0x1000, 0xfffffffffffffff7, 0x80000000, 0x8, 0xf19f, 0x9, 0x4, 0x3, 0x7, 0x3, 0x1, 0xef, 0x4, 0x5, 0xffffffffffffffff, 0x9, 0xe, 0x6, 0x1000, 0x3, 0x5, 0x5, 0x2, 0x7, 0x4, 0xa1, 0x7fffffff, 0x2, 0x12c, 0x4f, 0x3, 0x4, 0x1, 0x2, 0x2750, 0x8000000000000001, 0xff, 0x0, 0x400, 0x7, 0x6, 0x2, 0x2400000000]}) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) 9.707378295s ago: executing program 1 (id=2869): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x31) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec21, 0x1000, 0x400001, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x2000, &(0x7f0000000440)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0xc00}}, {@blksize={'blksize', 0x3d, 0x600}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x7}}, {@allow_other}], [{@subj_type={'subj_type', 0x3d, '\x903!'}}, {@seclabel}]}}, 0x1, 0x0, &(0x7f00000006c0)="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") syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_STATX={0x15, 0x1e, 0x0, r6, &(0x7f00000007c0), &(0x7f0000000300)='./file0\x00', 0x80, 0x2000, 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500561308005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 8.641432985s ago: executing program 4 (id=2874): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x5452, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) dup(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r4, 0x0, 0x1, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) accept4(r3, &(0x7f0000000380)=@ieee802154, &(0x7f0000000400)=0x80, 0x80000) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0x2000, 0x9c, 0x400, 0x38000, 0x0, [{0x9, 0x5, 0x38, '\x00', 0xe8}, {0x5, 0x4, 0x0, '\x00', 0xf0}, {0x91, 0x7, 0x2, '\x00', 0x9}, {0xe, 0x2e, 0x9, '\x00', 0xe6}, {0x9, 0x2b, 0xd9, '\x00', 0x5}, {0x4f, 0x9, 0x76, '\x00', 0x9}, {0xa, 0xf6, 0x5, '\x00', 0x5}, {0xfe, 0x89, 0x8}, {0xf, 0x3, 0x1, '\x00', 0x2}, {0x1, 0x4, 0x9, '\x00', 0xff}, {0x7, 0xa8, 0x9, '\x00', 0x5}, {0x9, 0x9, 0x0, '\x00', 0x9}, {0x6, 0x5, 0xe, '\x00', 0xd}, {0xaf, 0x3, 0x1}, {0x5, 0xc0, 0x9, '\x00', 0x83}, {0x1, 0x6, 0xb, '\x00', 0x3}, {0x6, 0x9, 0x0, '\x00', 0x1}, {0x94, 0xd9, 0x74, '\x00', 0x4}, {0xd, 0xff, 0x0, '\x00', 0x2}, {0x8, 0x74, 0xa8, '\x00', 0x8}, {0x3, 0x8, 0x2, '\x00', 0x2}, {0xfb, 0x2, 0x6, '\x00', 0xf3}, {0x5, 0x2, 0x3, '\x00', 0xf2}, {0x7, 0x9, 0xd6, '\x00', 0x2c}]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x55) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) 7.374572101s ago: executing program 5 (id=2877): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents(r0, &(0x7f0000000000)=""/24, 0x18) mprotect(&(0x7f000014d000/0x3000)=nil, 0x3000, 0x4) r1 = socket(0x22, 0x2, 0x3) getsockopt$sock_int(r1, 0x1, 0x13, 0x0, &(0x7f0000000380)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0x9, 0x0, 0x4) 7.240301754s ago: executing program 5 (id=2878): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4004014) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f0000000200), &(0x7f0000000280)=0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x76, 0x0, 0x0) r7 = mq_open(0x0, 0x42, 0x0, 0x0) lseek(r7, 0x3, 0x3) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r6, 0xae80, 0x0) execve(0x0, 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000000), 0x4) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) 6.940933452s ago: executing program 6 (id=2879): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x28, r1, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}}, 0x0) socket(0x2, 0x80805, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0xc101}) ioctl$int_in(r2, 0x5452, &(0x7f0000000580)=0x4) r3 = socket$can_bcm(0x1d, 0x2, 0x2) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000300000000000889078ac1e03010a1e0a220101010b019078000100404581000100670002090800000a010101ac1e0101"], 0x0) connect$can_bcm(r3, &(0x7f0000000040), 0x10) sendmsg$netlink(r3, &(0x7f0000005d80)={&(0x7f0000000440)=@proc={0x10, 0x0, 0x25dfdbff, 0x80000}, 0x7, &(0x7f0000005cc0)=[{&(0x7f0000001380)=ANY=[], 0x38}], 0x1, 0x0, 0x0, 0x44011}, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x1701) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r7 = syz_usb_connect(0x4, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100007531031c0110e60f00979ad10102a0bec2906a00090000d578400ce52ac9241bd5e55da75a2dadfc97326014e3c265e677c875dfa61c4b7a92328b4ebbe08d3763fb93d3f2a82010e872e3ac6c222ca0cbbbe5af92d3c1fbbed0a74984e8d1222426aa90e357571b8fca2e5ebb2fad42bc106fe8b1d151"], 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000300)={0x40, 0x18, 0x6, "b17d51d220dd"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r9 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000001f80)=r8, 0x4) 6.173319415s ago: executing program 7 (id=2880): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6000000002061b0000000000000000000000000005000400000000000900020073797a3100000000140007800500150020000000080012400000002e0500050002000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x65) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 6.172961647s ago: executing program 4 (id=2881): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000000)='./file1\x00', 0x140007e2) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, 0x0) r5 = socket(0x2, 0x805, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r6, &(0x7f0000000140), 0x4001) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="77ba00000000000000001f000000080001000000000008000300", @ANYRES32=r7], 0x48}}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) 6.172573907s ago: executing program 7 (id=2882): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x2e8}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 6.096321364s ago: executing program 4 (id=2883): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x4a37e, 0x4) open(&(0x7f0000000040)='./bus\x00', 0x42b42, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$unix(0x1, 0x5, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000400)) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, 0x0, 0x4000810) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) read$FUSE(0xffffffffffffffff, &(0x7f00000028c0)={0x2020}, 0x2020) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}, 0x1, 0x0, 0x100000000000000}, 0x0) 5.892813294s ago: executing program 4 (id=2884): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x24480, 0x0) write$tun(r0, &(0x7f0000000040)={@void, @void, @x25={0x3, 0x1, 0x23, "fa7a2f2d66878ef058e0ced64e89123fa5ed3cc83c4014e91dc282ed74e7053f59e9259b92b6d7fe3b7640b85d8a6dd2a3ec056e74333e7b660aee5307a8371569c5e82e4783bb23699865c78c77791632484f"}}, 0x56) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ff4000/0xa000)=nil, 0xa000}) r2 = socket$xdp(0x2c, 0x3, 0x0) recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000100)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)=""/37, 0x25}, {&(0x7f00000001c0)=""/250, 0xfa}, {&(0x7f00000002c0)=""/87, 0x57}, {&(0x7f0000000340)=""/161, 0xa1}, {&(0x7f0000000400)=""/156, 0x9c}, {&(0x7f00000004c0)=""/211, 0xd3}, {&(0x7f00000005c0)=""/134, 0x86}], 0x7}, 0x1) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000740), 0x8) ioctl$TUNSETLINK(r0, 0x400454cd, 0x200) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000780)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "3b22618b24641b"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000001780)={{r3, 0x9, 0x0, 0x4, 0x7, 0x6, 0x10000, 0x3, 0x7, 0xa, 0x6, 0x4, 0xa1b5, 0x7, 0x5}, 0x18, [0x0, 0x0, 0x0]}) r4 = openat2(r0, &(0x7f0000001840)='./file0\x00', &(0x7f0000001880)={0x200081, 0x81, 0x19}, 0x18) write$qrtrtun(r4, &(0x7f00000018c0)="1bec85d1e0f71b86653fefe64847abf07de84c71472673ee27269305cea1132d3f516760ce5d7ad399fb40e5dc6585d0080df7a0fd3b69553f0284c64ac5b485a1860912c52eb66b61e77ec8912b78d0b453b2c0308e4c6c4873992abd2993d9b3c680f8dd5030f69d5a4978e2501a276c3c2074572d959ae5c7e98513ec55c511eee7c1cbe6274f978b61d1f70d991f430e64af6951a3eb8e6a2c700612cb8902da52e5be539ff1c34d3cc802104271ebcc4f11c168dab419e183b46499bfc4a4f23f01010cc3ff3aa2d041060706eae6099016e7c715cc009d", 0xda) mknod(&(0x7f00000019c0)='./file0\x00', 0x4, 0x2) fcntl$setstatus(r0, 0x4, 0x6000) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001a00), 0xa80, 0x0) close(r5) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f0000001a40)) exit(0x401) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ac0), r5) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000001d00)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001b00)={0x18c, r7, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x40}}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_NODE={0x2c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x16, 0x3, "a3057a16af216f4c2bd43b404a16c687aac2"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa258}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6gre0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff63711}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3f1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8c4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x49}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000800) clock_gettime(0x0, &(0x7f0000001d80)={0x0, 0x0}) epoll_pwait2(r4, &(0x7f0000001d40)=[{}, {}], 0x2, &(0x7f0000001dc0)={r8, r9+60000000}, &(0x7f0000001e00)={[0xfffffffffffffff5]}, 0x8) r10 = getegid() statx(r4, &(0x7f0000001e40)='./file0\x00', 0x400, 0x40, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r10, r11) close(0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 5.54699576s ago: executing program 6 (id=2885): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, &(0x7f0000000440)=ANY=[@ANYRESHEX=r4], 0x0, 0x6, 0x21, &(0x7f0000000200)=""/33, 0x41000, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x1, &(0x7f00000002c0)=[0xffffffffffffffff], &(0x7f0000000340)=[{0x1, 0x8000001, 0x7, 0x2}], 0x10, 0xab}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) fsopen(0x0, 0x0) unshare(0x40000080) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="141400002120000024001280090001007866726d00000000140002800800010003000000e26e5c87afcbce002655ff72a3f3"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./mnt\x00', 0x0, 0x0) socket(0x3, 0x1, 0x8) setitimer(0x2, &(0x7f0000000580)={{0x77359400}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xb4, 0x516f}, &(0x7f0000000180)) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x200000000000000) 5.448976368s ago: executing program 5 (id=2886): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r1}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r2, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r5, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x70940, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x20}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x68, 0x0, &(0x7f00000000c0)=[@clear_death, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@fd, @flat=@weak_handle={0x77682a85, 0xb, 0x2}, @flat=@binder={0x73622a85, 0x1, 0x1}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @increfs_done], 0x0, 0x0, 0x0}) 4.898997373s ago: executing program 4 (id=2887): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000280)={0x0, 0x5, 0x1, "14"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x40, 0x8, 0x33, {0x33, 0x4, "a88f7a46c717fb7267e4dd98eda68a152307f387cfd0ddd7eeaf87864396c7fd9dfdeae982dda836c59d50d4d3a690ed0c"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x426}}}, &(0x7f0000000e80)={0x34, &(0x7f0000000100)={0x0, 0xe, 0x17, "b145b5806f41802b5c1f83ad7d4515c7977191d5f26714"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000d40)={0x20, 0x0, 0x9a, {0x98, "27f534cf07603ed2f848ea53fd76eadcfb3f233a96354bbdb4342b5e8966e560f9115f47b5378e3d54fa91ffc6b14466eecda6bbb2177de202d66a1c597e7370cfd885172759d2bb73e4463dae21ae11abb9226b73edc5ac95bdda4d138ed17880ac9b9aea59e27407c2cfea94d0fd42108589472223de432f5b074dd5313fb8c4fe68459a56045f67b5c0672d2b52a26dec18e971446ed8"}}, &(0x7f0000000e00)={0x20, 0x1, 0x1, 0xc}, &(0x7f0000000e40)={0x20, 0x0, 0x1, 0x3}}) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/105, 0x69) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0xa201, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0x4020940d, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, 0x0, &(0x7f00000001c0)) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010017"], 0x1c}}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r6, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f91b5d390887f70e06d038e7ff7fc6e5539b3272298b089b07081b4d090890e0878f0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b39070d075d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc825d8e524b2451138e495bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546850a27af9544ae15a7e454dea05918b4fd42513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c9000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cfe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdc80c47ee4f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2691491abf8ab9c015073014d9e08d4338b8780bdecd436cf0541e4505bc3a45237f104b962102de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78ff95b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd735892892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af0000807e0000000002d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5407000000e3ad038f2211f1033195563c7f93cd54b9094f226e78b271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b4051db55e0510a6e4114a53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005008000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a6d8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546def271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652770711935f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f42f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599af40005b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fd30d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb84d9a88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678458fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000bd700", 0x1000}}, 0x375) syz_emit_ethernet(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) dup3(r8, r7, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) 4.280009203s ago: executing program 5 (id=2888): r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000005500e5012abd7000ffffffff07000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="01030300ff"], 0x38}, 0x1, 0x0, 0x0, 0x2800}, 0x40084c0) prctl$PR_SET_IO_FLUSHER(0x4e, 0x1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b00010000000009046b00016a93f00009058803", @ANYRESOCT], 0x0) syz_usb_connect$cdc_ecm(0x1, 0xa8, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x1, 0x1, 0xe, 0x80, 0x2, [{{0x9, 0x4, 0x0, 0xfe, 0x2, 0x2, 0x6, 0x0, 0x87, {{0xa, 0x24, 0x6, 0x0, 0x0, '/u9\v,'}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x3, 0x452, 0x45}, [@country_functional={0x12, 0x24, 0x7, 0x9, 0x81, [0x1, 0xd5f, 0x9, 0x0, 0x8, 0xe42]}, @country_functional={0x12, 0x24, 0x7, 0x2e, 0x1, [0x200, 0x10, 0x1, 0x5, 0x6, 0x8001]}, @dmm={0x7, 0x24, 0x14, 0x89, 0x1000}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x8, 0x50, 0x8}, @ncm={0x6, 0x24, 0x1a, 0x6, 0x3b}, @mdlm={0x15, 0x24, 0x12, 0x5}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x8, 0xe0}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x2, 0xe}}, {{0x9, 0x5, 0x3, 0x2, 0x248, 0x6f, 0x1, 0x6}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x310, 0x5, 0x8, 0x8, 0xff, 0xda}, 0x26, &(0x7f0000000140)={0x5, 0xf, 0x26, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x4e, 0x4}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x0, 0x8, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x2c, 0x7f, 0x8}]}, 0x8, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x38f8}}, {0xb2, &(0x7f00000007c0)=ANY=[@ANYBLOB="b20383a61a8dfae991c9ee139aaf9fe6d918a07f5e8e0453782b35b1209c1bef99ce2e06861af92a389148495eca875896c144514bed87ad161f1d916554cd60306e561d2ab4829a5852c86d0f7574df3519629c6afb945d9d9428fafdce530471b873584650ae12ccf78c8c2bd4e4c3d8853e69d7bb9ecca23ddfcfdbf947a2a312dc614df7b76cfe6f6dae05a96a9ad6f865330a4e5da2f73c2412b0ee6430542d8ff92b2b28c97c775f178ed9959cecabcc"]}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x104e}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2009}}, {0x76, &(0x7f00000003c0)=ANY=[@ANYBLOB="7603565db814e9414a830f3fb620056f30e3f990e2bacc2def7ba274704ff5f7db2b46528be86865f8aa0da9527a5981e673eb9905bab0a12869eaf5fdafbe8ca7856a22056e8210da2a82ec58ac593a1471155af399a2ae816c03cf46dd39ef2ae79a723a9efa758a78d36eee789c7e3c0557563749"]}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1}, &(0x7f0000000000), &(0x7f0000000500)}, 0x20) r5 = accept$unix(0xffffffffffffffff, &(0x7f0000001b80)=@abs, &(0x7f0000001c00)=0x6e) connect$unix(r5, &(0x7f0000001c40)=@file={0x0, './file0\x00'}, 0x6e) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580), 0x4) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1044, 0x7a4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) setpriority(0x2, 0x0, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000001cc0), r0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000080)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="0502000000ad38b67e9d00000045bcbb912d"], 0x0, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) syz_clone3(&(0x7f00000001c0)={0x2000000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001b00)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001b40)={'nr0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000019c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001700)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001780), 0x0, 0x8020003a, &(0x7f00000017c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001800), &(0x7f0000001840), 0xffffffffffffff26, 0x52, 0x8, 0x8, &(0x7f0000001880)}}, 0x10) prctl$PR_SET_NO_NEW_PRIVS(0x3c, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="60000000020601036c0000000000000000000000050005000a000000050001000600000005000400000000000900020073797a320000000012000300686173683a6e65742c706f727400000014000780080012400021000008000840"], 0x60}}, 0x0) 3.834165433s ago: executing program 7 (id=2889): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x20500, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r2, 0x80044dfc, &(0x7f0000004f00)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @remote}, 0x2}}, 0x2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) open(&(0x7f0000000780)='./bus\x00', 0x400141042, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000040)={@host}) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r8, 0x7a8, &(0x7f0000000180)={{@host}, @host, 0x4, 0xabc, 0x2449, 0x0, 0x0, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r8, 0x7a8, &(0x7f0000000080)={{@hyper, 0x10400000}, @hyper, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r7, 0x7a5, &(0x7f0000000140)={{@host}, 0x1}) 3.082312061s ago: executing program 6 (id=2890): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) io_submit(0x0, 0x3, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x7fff}, 0x0, 0x0]) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 2.646492834s ago: executing program 1 (id=2891): r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='exec :'], 0x9d) (async, rerun: 64) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async, rerun: 64) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) (async) syz_usb_control_io(r2, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r2, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0) 2.567159349s ago: executing program 6 (id=2892): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './control/file0'}, 0x13) (async) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x5) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000000000001) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async, rerun: 32) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) (rerun: 32) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) close(0x3) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x4048040}, 0x800) (async) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x27) (async) sendmmsg$unix(r6, &(0x7f00000001c0), 0x0, 0x4040) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r7, 0x0, 0x0) (async) sendmmsg$unix(r8, 0x0, 0x0, 0x20000040) 2.385012026s ago: executing program 6 (id=2893): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x3) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000140)={0xc, 0x103, 0x4, {0x8, 0x7, 0x2, 0x2}}) r3 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000009c0)=@IORING_OP_MSG_RING={0x28, 0x32, 0x0, r3, 0x1, &(0x7f0000000040)="5b0526a74d31f432d421d863af45725e7429eaa59d1a4c3e3a078b178743", 0x1e, 0x0, 0x1}) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x240008c0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000002400000125bd7000fbdbdf250900008c4762dc000600040081000000"], 0x1c}, 0x1, 0x0, 0x0, 0x854}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) syz_open_procfs(0x0, 0x0) io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6400000010000104000000004000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000280019800500060003000000140005000a226f7b5c1fa666b739561bbbe474260500060002000000080004003a01000014c503006272696467655f736c6176655f310000"], 0x64}}, 0x0) 2.266390696s ago: executing program 7 (id=2894): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x4a37e, 0x4) open(&(0x7f0000000040)='./bus\x00', 0x42b42, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$unix(0x1, 0x5, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000400)) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, 0x0, 0x4000810) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) read$FUSE(0xffffffffffffffff, &(0x7f00000028c0)={0x2020}, 0x2020) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}, 0x1, 0x0, 0x200000000000000}, 0x0) 2.253243971s ago: executing program 7 (id=2895): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000280)={0x40, 0x3}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) accept$alg(r1, 0x0, 0x0) (async) r2 = accept$alg(r1, 0x0, 0x0) recvmsg(r2, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000005600)=""/49, 0x31}, {&(0x7f0000006000)=""/4096, 0x1000}], 0x2}, 0x40000102) (async) recvmsg(r2, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000005600)=""/49, 0x31}, {&(0x7f0000006000)=""/4096, 0x1000}], 0x2}, 0x40000102) sendmmsg$inet(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="ec0767", 0x3}, {&(0x7f0000000900)="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", 0x148}, {&(0x7f00000000c0)="80819a406c4532b29ab729dd0e4b12cffeb3347d8b69fb0fd7cbd350f01b17ad694672000cf10c8ed49156aa8617da1d70dde03283db4bd40fafaf2acecd0b59707d0b4ffbe1d938673cfc2099646e761ddded8cd96605ce080e313344ca123c103fe1bcf68fd4f2890418d9b67537405b0bc2889546f05bd712495b432d4bce477d5aa2407923b2fff8bf1cfce5b74dd7d77c2e0d02", 0x96}, {&(0x7f0000000200)="2cad1cb24db0481cba0fe4efcc9b012f9976ea7f782c100ce30fca34ffa9c98e5c24851bc899a730ff662353fa6cad61e53be4c5d14f555ef2a1a9e7dfca05c8532236694df200cd9fba820c02cec743286b58f4380acfec90d09a8f38dee5976a2b5204b2", 0x65}], 0x4}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)="25bbf953d9e63a86502326a91bcb452d049906b8663a98ffd6eb4a9471a6b34a725ae193d99db3d460f7bc4aed2217ef4f96211bcb85f3c5b29b0357cb5526a2bf026fce752e9453032fe77673f0bf89cdb90d842e437d5d7c0a6af5493a6160e4019655e7ec27c1566b7e5c625149dc633e4c132a9118796e0dae4b094d7030d37e3b268c2da4c0716e9c9da8be9ad79d176059ed950c425404eee5c70a91acb3a80fa82c61d5637be14a66056edc33e8111e50e43eadc326d80dd63563cf75b7dc86f5aa26ac30bc812b0a42446257", 0xd0}, {&(0x7f00000002c0)="c88b24d13e46650476bd62b2a4a9e5258baaa2b1b66b01e3187aa58a5113890ed7917a083d5b4cc77aca9afa9e", 0x2d}, {&(0x7f0000000a80)="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", 0x18c}, {&(0x7f0000000600)="28af22ee5579386fc97a788ae2cb0a93652970304dd5154e567b867e4fc749d42f1bb962067560f20849897defddcc9d10bae0452d478880ba507183c78b5c1efe9f45f0e7a4ef0b76e656c836f13aab1d6dc20a979f369d0138ae25598c12691ae036ea88f7795caa2de286d76cd09ed58bfaa4c19d5ffa7504ae8da3e6cf4ba524ffd11c8235c0e5759bfd1bb1cc82c61e63a1316e3e6ae0acf6c9b445316d617d300df440817a4e505915ce6d77f883da6173830838af380d13e9c78300aad57a78d4408c4e2a55d011be914c1b93659eb7bbaf94c63636e2c14334e77699a4d77138aa08a37f9fc2", 0xea}, {&(0x7f0000000800)="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", 0xfa}, {&(0x7f0000001600)="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", 0x978}], 0x6}}], 0x2, 0x8058) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000001800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000001800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000b00)={0x40, 0x18, 0x4, ',y&]'}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.032892169s ago: executing program 5 (id=2896): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r0, &(0x7f0000001440)={0x2020}, 0x2020) socket(0xa, 0x3, 0xff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101440, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0xcf5) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x401, 0x0, 0x1, "0062ba7d82000000000000000000f7ffffff00"}) r5 = syz_open_pts(r1, 0x0) dup3(r5, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xd) close(0x3) 1.610210786s ago: executing program 5 (id=2897): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, 0x0, 0x300, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, 0x0) write(r3, &(0x7f0000000100)="7f1a8e3a61f548cb56aa4f5d3df981bb27f92fe8dae6c64c7b3e89c4781b2347271f1210b8415ce4856e9685d73e4a9926006bf9c89c22dc754df7b30f86c7fad5329efb9768a79198fb496accd4a32b8a45fa127172c5c9cf2de8fc288ec982438ac31370d1bf0cf22ffb98832e5c0c205ebc4574a72ec3ad64097245886c708efbf15511b525aeca5f0ef244f589f978ef0e3e379fec0228989059fedae14ac83677fbbe85109ebebc4d7d0cd3819bfc55206cc9ad193e820a0e35ecda596e8471a3726c133b8c5b79c319ec4ffa01", 0xd0) fcntl$notify(r3, 0x402, 0x32) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f0000000240)={0x1, 0xf725}) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000ac0)) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x8001) syz_genetlink_get_family_id$ipvs(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x401d}, 0x20000000) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000300)={0x1, @sliced={0x4, [0x0, 0x4, 0x2, 0x7, 0x0, 0x1, 0x1, 0x5, 0x8, 0x9, 0x1, 0x665, 0x4e, 0x200, 0x2f6, 0xfe01, 0x5, 0x9, 0x8, 0x643, 0xfff7, 0x1, 0x298b, 0x7, 0x7, 0x8000, 0x8, 0x639, 0x3, 0xfffd, 0x87b8, 0xb, 0x8, 0x2, 0xa, 0x2, 0x8001, 0x7c, 0xc, 0x4, 0x1, 0xb, 0x1ff, 0x0, 0x7, 0x8, 0x948, 0xc], 0x8b}}) r4 = syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000001c0)={0x7, @pix_mp={0x49, 0x2, 0x3432564e, 0x1, 0x1, [{0x1, 0x4}, {0xfa, 0x100}, {0x0, 0x4f11}, {0x5, 0x6}, {0x4, 0x3}, {0x400, 0x80000001}, {0x3ff, 0x2000002}, {0x5, 0x800003}], 0x9, 0xbe, 0x3}}) keyctl$read(0x20, r2, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) 1.5667906s ago: executing program 1 (id=2898): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r1}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r2, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r5, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x70940, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x20}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x68, 0x0, &(0x7f00000000c0)=[@clear_death, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@fd, @flat=@weak_handle={0x77682a85, 0xb, 0x2}, @flat=@binder={0x73622a85, 0x1, 0x1}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @increfs_done], 0x0, 0x0, 0x0}) 1.533585529s ago: executing program 4 (id=2899): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x2e8}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 424.523641ms ago: executing program 7 (id=2900): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r2 = dup(r1) write$binfmt_elf32(r2, &(0x7f0000002800)=ANY=[@ANYBLOB="7f454c464a03011301000000000000000200030004000000eb01000038000000d600000097700000fe032000010007000c0007000000000003000000060000000200000000040000d50e"], 0xa58) r3 = fanotify_init(0x200, 0x101000) fanotify_mark(r3, 0x1, 0x8001021, r2, 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) (async) dup(r1) (async) write$binfmt_elf32(r2, &(0x7f0000002800)=ANY=[@ANYBLOB="7f454c464a03011301000000000000000200030004000000eb01000038000000d600000097700000fe032000010007000c0007000000000003000000060000000200000000040000d50e"], 0xa58) (async) fanotify_init(0x200, 0x101000) (async) fanotify_mark(r3, 0x1, 0x8001021, r2, 0x0) (async) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) (async) 374.246782ms ago: executing program 1 (id=2901): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r2, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)="03836a0c655a81573b469619623162ee30ddd7e0527126b2f3a2a0d39c158c43bcd0e4af2f5768b62894d0f4eb972af5c20c59ff58604efa37875c492290ae8c098ad9044d314647448c44ed044cde6261b1893cc600a3f38c56d9be6d871d69ef0de6c48b3944f624dfb85dcdc29e19f51f7db519c17252a3a1c0e3a59cf79b9af33a659caf774b1547dfd478f565150d8c864d6130d2b19d900312fca0881bc2a2d728f717f71e8e4196085369de7257ae9d0a6201d1b8c20d26399d959822d92ff61c7cdfe04f442d2feb039eea12e688ce7854d70035da5bd4b9ec6415ed056210d6", 0xe4}, {&(0x7f0000000480)="08ef846b8b3d9c6d7af7a18ea65df25982588d247e8db2b31bc9b3fa1c182f5448e84e7a9e52431e2ac36bddd6c5b26bcc7640091468df8ed87fc9ca12fe45d1566f5f7688d10262df4bcc", 0x4b}, {&(0x7f00000006c0)="9cb32232fb0674887135b0ef48c4ee117f172a7518e2d10d5f2bdfc7f3bca959b404447e95dc145bb7f6e337e40190c97a7275a97bd8dfbcfdfb1834ba2f1820a5af2f5595f92fedb0400d48a42e945bcbd7bcf3d1caf2dc1d2bb39f3527b719a96d068ecbe238c7399a1d9f4cbefce32548b1a3981aa11a18ceb68eecdd74de44870494f76cc77fd2ee83761d070122b0edb80cdfdc6f9004197912420547f91597d76f10", 0xa5}, {&(0x7f0000000780)="18d5fc7cf7b1e2c8bdf84423b26d6893d614b560889fa3546a9bb60269b19c7094a60fb4292fe450ac6aea8f21b6ccdee8948ea8c9224db914eb1b48e41f2c68f63b08cbbac112f0ac516fbfd8d50317631885a05a3782cb5a4f64ab8b34dc4a33afb8619cf2021a10e0d94f2760", 0x6e}, {&(0x7f0000000800)="1a7a43043f0f36e560ca103daf9f25f5432f6232ff2204db0b3f8b15af3e46bea526c10fc45301f0", 0x28}, {&(0x7f00000002c0)="494e54f54840b8e9186a5e6f895bd8c32589e5c617a6798a457b01755139f9a917ef6302", 0x24}, {&(0x7f0000000880)="86f4a9c60f43501aed828aa9343e783975e85ff1b292d3b9e784a59bfccf288985fd8619d5087d5687293881bdc474b168ad233babe34c543a891eece4a2f3d220c39502915acdc3810c889fb46d4ca8a1f77060ad1e4fe57e94d42de389024512129b6f96d427c569091bf1d65738b096bb4b8929f8987104064f06febe523492e521652df7b55b5361770b6dbd9fe59f2c99642f4877cf22ca53092290993215e9f0e2", 0xa4}], 0x7, &(0x7f00000010c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYBLOB="ec390f55aab073d7b504c5126682b2cf8de18e724353828163e758e3df65488466575f4b36e58359600a690976bd0d174d8b76f178dacf13bdae70f7364f301a0b8a922aa57f1a8b3f4a733022d9d5a3de312cd0efd0f568676218684dbd95e0e99c74112bcee19aae5fb3b1287ac12e32c731528f543b5afa88b7eab6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r2, @ANYRESOCT, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r2, @ANYRESDEC=r2, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r1], 0xc0, 0x4040}}], 0x1, 0x0) (async, rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x22, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e23, 0x0, 0x4, 0x0, 0x2, 0x180, 0x0, 0x5c}, {0x4, 0x40000000000, 0x400, 0x0, 0x0, 0x4}, {0x200000000000, 0x0, 0x4}, 0x0, 0x1, 0x1, 0x1}, {{@in=@multicast1, 0x4d6, 0x6c}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x4, 0x3}}, 0x23d2b24c1179deb0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000008, 0x110, r0, 0x435db000) (async, rerun: 32) ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f00000015c0)={0x28, 0xa, 0x0, 0x0, 0x7ffffffffffffffd, 0x80000000000, 0x3fff}) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_stats={0x1d, 0x8, [0xfff, 0x3, 0x5, 0x5, 0x550, 0x9, 0x6, 0x5]}}) (async) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async, rerun: 32) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) (async, rerun: 32) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x800) (async) r8 = syz_io_uring_setup(0xeeb, &(0x7f0000000540)={0x0, 0xa87e, 0x1000, 0x2, 0x3c8}, &(0x7f0000000440)=0x0, &(0x7f0000000280)=0x0) getdents64(0xffffffffffffffff, &(0x7f0000000fc0)=""/224, 0xe0) (async, rerun: 32) syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xe, 0x2000, @fd_index=0x1, 0x1, 0x0, 0x0, 0x4, 0x0, {0x1}}) (async, rerun: 32) io_uring_enter(r8, 0x567, 0xa9ea, 0x5, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x201f00) socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x23, 0x6, 0x2007a30) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 0s ago: executing program 1 (id=2902): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) io_submit(0x0, 0x3, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x7fff}, 0x0, 0x0]) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) kernel console output (not intermixed with test programs): altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 702.341293][ T5975] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 702.378350][ T5975] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 702.395042][ T5975] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 702.411926][ T5975] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 702.441344][ T5975] usb 2-1: Manufacturer: syz [ 702.463630][ T5975] usb 2-1: config 0 descriptor?? [ 702.823299][ T5975] rc_core: IR keymap rc-hauppauge not found [ 702.836335][T15845] binder_alloc: 15844: binder_alloc_buf, no vma [ 702.848319][ T5975] Registered IR keymap rc-empty [ 702.856663][T15845] binder: 15844:15845 ioctl c0306201 200000000240 returned -11 [ 702.866766][ T5975] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 702.890702][ T5975] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 702.932136][ T5975] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 702.934231][ T5975] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input51 [ 702.961910][ T5975] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 702.980577][ T5975] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 703.003254][ T5975] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 703.020786][ T5975] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 703.043146][ T5975] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 703.069066][ T5975] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 703.082682][ T5975] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 703.100761][ T5975] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 703.115041][ T9739] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 703.124015][ T5975] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 703.145502][ T5975] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 703.154070][ T7683] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 703.180961][ T5975] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 703.180987][ T5975] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 703.270529][ T9739] usb 5-1: Using ep0 maxpacket: 16 [ 703.271300][ T9739] usb 5-1: too many configurations: 128, using maximum allowed: 8 [ 703.272916][ T9739] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 703.272950][ T9739] usb 5-1: can't read configurations, error -61 [ 703.313836][ T7683] usb 7-1: unable to get BOS descriptor or descriptor too short [ 703.315244][ T7683] usb 7-1: config 129 has an invalid interface number: 202 but max is 0 [ 703.315270][ T7683] usb 7-1: config 129 has an invalid interface number: 5 but max is 0 [ 703.315290][ T7683] usb 7-1: config 129 has an invalid descriptor of length 183, skipping remainder of the config [ 703.315333][ T7683] usb 7-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 703.315354][ T7683] usb 7-1: config 129 has no interface number 0 [ 703.315371][ T7683] usb 7-1: config 129 has no interface number 1 [ 703.315422][ T7683] usb 7-1: config 129 interface 202 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 703.315469][ T7683] usb 7-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 703.315505][ T7683] usb 7-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 703.315530][ T7683] usb 7-1: config 129 interface 202 has no altsetting 0 [ 703.315547][ T7683] usb 7-1: config 129 interface 5 has no altsetting 0 [ 703.319124][ T7683] usb 7-1: New USB device found, idVendor=041e, idProduct=4061, bcdDevice=1e.ee [ 703.319152][ T7683] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.319195][ T7683] usb 7-1: Product: syz [ 703.319210][ T7683] usb 7-1: Manufacturer: syz [ 703.319225][ T7683] usb 7-1: SerialNumber: syz [ 703.423440][ T9739] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 703.628905][ T9739] usb 5-1: Using ep0 maxpacket: 16 [ 703.633339][T15861] tmpfs: Unknown parameter '' [ 703.638662][ T9739] usb 5-1: too many configurations: 128, using maximum allowed: 8 [ 703.661495][ T9739] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 703.661533][ T9739] usb 5-1: can't read configurations, error -61 [ 703.661814][ T9739] usb usb5-port1: attempt power cycle [ 703.677750][ T7683] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 703.677850][ T7683] usb 7-1: MIDIStreaming interface descriptor not found [ 703.730090][ T7683] usb 7-1: USB disconnect, device number 35 [ 703.815726][ T6167] udevd[6167]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 704.021941][ T9739] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 704.121900][ T9739] usb 5-1: Using ep0 maxpacket: 16 [ 704.122581][ T9739] usb 5-1: too many configurations: 128, using maximum allowed: 8 [ 704.124520][ T9739] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 704.124555][ T9739] usb 5-1: can't read configurations, error -61 [ 704.254695][ T9739] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 704.276332][ T9739] usb 5-1: Using ep0 maxpacket: 16 [ 704.276865][ T9739] usb 5-1: too many configurations: 128, using maximum allowed: 8 [ 704.290000][ T9739] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 704.290025][ T9739] usb 5-1: can't read configurations, error -61 [ 704.290257][ T9739] usb usb5-port1: unable to enumerate USB device [ 704.554984][ T5828] usb 7-1: new low-speed USB device number 36 using dummy_hcd [ 704.679951][T15874] bond0: (slave bond_slave_1): Releasing backup interface [ 704.722176][ T5828] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 704.731072][ T5828] usb 7-1: config 0 has no interface number 0 [ 704.741280][ T7683] usb 2-1: USB disconnect, device number 33 [ 704.743896][ T5828] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 704.797208][ T5828] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 704.826244][ T5828] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 704.853674][ T5828] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.872738][ T5828] usb 7-1: config 0 descriptor?? [ 704.879050][T15870] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 704.911523][ T116] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 704.928785][ T5828] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 705.100485][ T116] usb 8-1: Using ep0 maxpacket: 8 [ 705.149607][ T116] usb 8-1: config 0 has an invalid interface number: 186 but max is 0 [ 705.159133][ T116] usb 8-1: config 0 has no interface number 0 [ 705.166095][ T116] usb 8-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 705.177781][ T116] usb 8-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 705.202529][ T5828] usb 7-1: USB disconnect, device number 36 [ 705.222087][ T116] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 705.234312][ T116] usb 8-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 705.265967][ T116] usb 8-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 705.275620][ T116] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.290894][ T116] usb 8-1: Product: syz [ 705.295130][ T116] usb 8-1: Manufacturer: syz [ 705.299747][ T116] usb 8-1: SerialNumber: syz [ 705.308260][ T116] usb 8-1: config 0 descriptor?? [ 705.564178][ T116] iowarrior 8-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 705.611406][ T116] usb 8-1: USB disconnect, device number 6 [ 706.161959][T15892] netlink: 'syz.4.2488': attribute type 5 has an invalid length. [ 706.172301][T15892] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2488'. [ 706.950700][ T7683] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 707.072604][T15892] bond0 (unregistering): left promiscuous mode [ 707.100781][T15892] bond_slave_0: left promiscuous mode [ 707.117814][T15892] bond_slave_1: left promiscuous mode [ 707.195818][T15892] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 707.336024][T15892] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 707.437778][ T7683] usb 8-1: config 0 has an invalid interface number: 83 but max is 0 [ 707.451978][ T7683] usb 8-1: config 0 has no interface number 0 [ 707.469693][ T7683] usb 8-1: config 0 interface 83 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 707.482452][T15892] bond0 (unregistering): Released all slaves [ 707.570606][ T7683] usb 8-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 707.579886][ T7683] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.612840][ T7683] usb 8-1: config 0 descriptor?? [ 707.822002][ T7683] ttusbir 8-1:0.83: cannot find expected altsetting [ 708.360717][T15915] tmpfs: Unknown parameter '' [ 708.685754][T15922] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 708.760925][T15923] openvswitch: netlink: Duplicate or invalid key (type 0). [ 708.770521][T15923] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 709.370559][T15085] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 709.623234][T15085] usb 5-1: unable to get BOS descriptor or descriptor too short [ 709.651805][T15085] usb 5-1: not running at top speed; connect to a high speed hub [ 709.711968][T15085] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 709.737794][T15085] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 709.768175][T15085] usb 5-1: config 1 has no interface number 1 [ 709.778350][T15085] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 709.836299][T15085] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 709.891282][ T7683] usb 2-1: new low-speed USB device number 34 using dummy_hcd [ 709.912538][T15085] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 709.929313][T15085] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.949665][T15085] usb 5-1: Product: syz [ 709.954759][T15085] usb 5-1: Manufacturer: syz [ 709.959377][T15085] usb 5-1: SerialNumber: syz [ 710.020559][ T7683] usb 2-1: device descriptor read/64, error -71 [ 710.071495][ T5828] usb 8-1: USB disconnect, device number 7 [ 710.213450][T15926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.229435][T15926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.255616][T15085] hub 5-1:1.0: Invalid hub with more than one config or interface [ 710.263601][ T7683] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 710.275986][T15085] hub 5-1:1.0: probe with driver hub failed with error -22 [ 710.287461][T15085] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 710.320635][T15085] usb 5-1: USB disconnect, device number 37 [ 710.390521][ T7683] usb 2-1: device descriptor read/64, error -71 [ 710.397109][ T6167] udevd[6167]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 710.504468][ T7683] usb usb2-port1: attempt power cycle [ 710.607391][T15951] netlink: 'syz.5.2504': attribute type 1 has an invalid length. [ 710.641731][T15951] 8021q: adding VLAN 0 to HW filter on device bond2 [ 710.697516][T15951] bond2: (slave veth5): Enslaving as an active interface with a down link [ 710.730992][T15951] vlan0: entered allmulticast mode [ 710.736161][T15951] veth1: entered allmulticast mode [ 710.741326][ T9739] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 710.751670][T15951] veth1: entered promiscuous mode [ 710.757915][T15951] veth1: left promiscuous mode [ 710.766792][T15951] bond2: (slave vlan0): making interface the new active one [ 710.776888][T15951] veth1: entered promiscuous mode [ 710.783383][T15951] vlan0: entered promiscuous mode [ 710.810526][ T5975] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 710.824283][T15951] bond2: (slave vlan0): Enslaving as an active interface with an up link [ 710.844154][T15953] mac80211_hwsim hwsim20 : renamed from wlan1 (while UP) [ 710.850499][ T7683] usb 2-1: new low-speed USB device number 36 using dummy_hcd [ 710.941931][ T9739] usb 7-1: Using ep0 maxpacket: 8 [ 710.961456][ T9739] usb 7-1: unable to get BOS descriptor or descriptor too short [ 710.974482][ T9739] usb 7-1: config 1 has an invalid interface number: 65 but max is 0 [ 710.990511][ T9739] usb 7-1: config 1 has no interface number 0 [ 711.009191][ T9739] usb 7-1: config 1 interface 65 has no altsetting 0 [ 711.040447][ T5975] usb 8-1: Using ep0 maxpacket: 16 [ 711.047788][ T7683] usb 2-1: device descriptor read/8, error -71 [ 711.071932][ T9739] usb 7-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=2b.cd [ 711.081325][ T5975] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.092419][ T9739] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.111885][ T9739] usb 7-1: Product: syz [ 711.121203][ T5975] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 711.145690][ T9739] usb 7-1: Manufacturer: syz [ 711.157563][ T9739] usb 7-1: SerialNumber: syz [ 711.170524][ T5975] usb 8-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 711.210051][ T5975] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.315725][ T5975] usb 8-1: config 0 descriptor?? [ 711.370658][ T7683] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 711.421091][ T7683] usb 2-1: device descriptor read/8, error -71 [ 711.571036][ T7683] usb usb2-port1: unable to enumerate USB device [ 711.884253][ T5975] input: HID 0458:5012 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5012.001D/input/input53 [ 711.903790][ T9739] kalmia 7-1:1.65 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 711.959424][ T9739] kalmia 7-1:1.65: probe with driver kalmia failed with error -22 [ 711.976217][T15967] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 711.990953][T15967] openvswitch: netlink: Duplicate or invalid key (type 0). [ 711.998434][T15967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 712.052809][ T5975] input: HID 0458:5012 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5012.001D/input/input54 [ 712.288753][ T9739] usb 7-1: USB disconnect, device number 37 [ 712.305056][ T5975] kye 0003:0458:5012.001D: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.7-1/input0 [ 712.536463][ T5975] usb 8-1: USB disconnect, device number 8 [ 712.627351][T15969] tmpfs: Unknown parameter '' [ 712.829570][T15974] fido_id[15974]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 713.230513][T15085] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 713.363499][T15085] usb 2-1: device descriptor read/64, error -71 [ 713.390484][ T5975] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 713.563380][ T5975] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 713.576511][ T5975] usb 8-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 713.585712][ T5975] usb 8-1: config 220 interface 0 has no altsetting 0 [ 713.598622][ T5975] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 713.608817][ T5975] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.613074][T15085] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 713.619888][ T5975] usb 8-1: Product: syz [ 713.630198][ T5975] usb 8-1: Manufacturer: syz [ 713.635319][ T5975] usb 8-1: SerialNumber: syz [ 713.732657][ T5828] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 713.780549][T15085] usb 2-1: device descriptor read/64, error -71 [ 713.890792][T15085] usb usb2-port1: attempt power cycle [ 713.898250][ T5828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 713.910168][ T5828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 713.921429][ T5828] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 713.935908][ T5828] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 713.945339][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.967142][ T5828] usb 5-1: config 0 descriptor?? [ 714.164275][T15990] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2515'. [ 714.178776][T15990] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2515'. [ 714.194387][T15989] ALSA: mixer_oss: invalid OSS volume '' [ 714.200244][T15989] ALSA: mixer_oss: invalid OSS volume '+]OؓOGec9bx'ĮC' [ 714.208915][T15989] ALSA: mixer_oss: invalid OSS volume '_*[bYcq~lr=V' [ 714.353162][T15989] ALSA: mixer_oss: invalid OSS volume '+ͿnU<$^EKʘr+' [ 714.362422][T15989] ALSA: mixer_oss: invalid OSS volume '+8iYJz' [ 714.521148][T15085] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 714.564759][T15085] usb 2-1: device descriptor read/8, error -71 [ 714.686524][T15085] usb usb2-port1: unable to enumerate USB device [ 714.950204][ T5828] usbhid 5-1:0.0: can't add hid device: -71 [ 714.956341][ T5828] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 714.966278][T16009] netlink: 'syz.5.2518': attribute type 1 has an invalid length. [ 714.990970][ T5828] usb 5-1: USB disconnect, device number 38 [ 715.059282][T16012] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 715.078956][T16012] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 715.158223][T16009] gretap2: entered promiscuous mode [ 715.175179][T16009] bond3: (slave gretap2): making interface the new active one [ 715.184068][T16009] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 715.197792][T16012] macvlan2: entered promiscuous mode [ 715.207717][T16012] macvlan2: entered allmulticast mode [ 715.215707][T16012] bond3: entered promiscuous mode [ 715.221412][T16012] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 715.231821][T16012] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 715.245724][T16012] bond3: left promiscuous mode [ 715.661106][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 715.661122][ T30] audit: type=1326 audit(1760422781.743:6512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16013 comm="syz.4.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c298eec9 code=0x7ffc0000 [ 715.692955][ T30] audit: type=1326 audit(1760422781.773:6513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16013 comm="syz.4.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c298eec9 code=0x7ffc0000 [ 715.747941][ T30] audit: type=1326 audit(1760422781.773:6514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16013 comm="syz.4.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fe8c298eec9 code=0x7ffc0000 [ 716.156591][ T30] audit: type=1326 audit(1760422781.773:6515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16013 comm="syz.4.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c298eec9 code=0x7ffc0000 [ 716.181881][ T30] audit: type=1326 audit(1760422781.773:6516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16013 comm="syz.4.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c298eec9 code=0x7ffc0000 [ 716.206166][ T30] audit: type=1326 audit(1760422781.803:6517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16013 comm="syz.4.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe8c298eec9 code=0x7ffc0000 [ 716.250334][ T30] audit: type=1326 audit(1760422781.803:6518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16013 comm="syz.4.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c298eec9 code=0x7ffc0000 [ 716.278620][ T30] audit: type=1326 audit(1760422781.803:6519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16013 comm="syz.4.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fe8c298eec9 code=0x7ffc0000 [ 716.544366][ T30] audit: type=1326 audit(1760422781.803:6520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16013 comm="syz.4.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c298eec9 code=0x7ffc0000 [ 716.623470][ T30] audit: type=1326 audit(1760422781.803:6521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16013 comm="syz.4.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8c298eec9 code=0x7ffc0000 [ 717.324573][T16030] tmpfs: Unknown parameter '' [ 718.189262][T16033] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2523'. [ 718.198672][T16033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 718.315649][T16033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 718.638145][T16051] loop6: detected capacity change from 0 to 7 [ 718.647672][T16051] Dev loop6: unable to read RDB block 7 [ 718.662019][T16051] loop6: unable to read partition table [ 718.667999][T16051] loop6: partition table beyond EOD, truncated [ 718.680496][T16051] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 718.711424][ T5975] uvcvideo 8-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 718.719179][T16051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.739737][ T5975] uvcvideo 8-1:220.0: No valid video chain found. [ 718.741505][T16051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.807184][ T5198] Dev loop6: unable to read RDB block 7 [ 718.813830][ T5198] loop6: unable to read partition table [ 718.819782][ T5198] loop6: partition table beyond EOD, truncated [ 719.124461][ T5975] usb 8-1: USB disconnect, device number 9 [ 720.067551][T16075] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 720.160797][ T5975] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 720.320543][ T5975] usb 8-1: Using ep0 maxpacket: 8 [ 720.336094][ T5975] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 720.367550][ T5975] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 720.386639][ T5975] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 720.407939][ T5975] usb 8-1: config 250 has no interface number 0 [ 720.440707][ T5975] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 720.502340][ T5975] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 720.534934][ T5975] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 720.552176][ T5975] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 720.575970][ T5975] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 720.615234][ T5975] usb 8-1: config 250 interface 228 has no altsetting 0 [ 720.680663][ T5975] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 720.705448][ T5975] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 720.772426][ T5975] usb 8-1: Product: syz [ 720.776642][ T5975] usb 8-1: SerialNumber: syz [ 720.818135][ T5975] hub 8-1:250.228: bad descriptor, ignoring hub [ 720.845330][ T5975] hub 8-1:250.228: probe with driver hub failed with error -5 [ 720.904669][T16080] random: crng reseeded on system resumption [ 721.012721][T16082] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2536'. [ 721.029594][ T5975] usblp 8-1:250.228: usblp0: USB Bidirectional printer dev 10 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 721.047584][T16083] batadv_slave_0: entered promiscuous mode [ 721.167267][T16083] tap0: tun_chr_ioctl cmd 1074025675 [ 721.173745][T16083] tap0: persist enabled [ 721.321477][T16088] veth1_to_batadv: entered promiscuous mode [ 721.327771][T16080] Unrecognized hibernate image header format! [ 721.335062][T16080] PM: hibernation: Image mismatch: architecture specific data [ 721.394121][T16088] veth1_to_batadv: left promiscuous mode [ 721.413008][T16094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.424776][T16094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.441088][T16085] netlink: 'syz.4.2535': attribute type 20 has an invalid length. [ 721.449540][T16085] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 721.472437][T16085] tmpfs: Unknown parameter '' [ 721.536178][ T5975] usb 8-1: reset high-speed USB device number 10 using dummy_hcd [ 721.547941][T16080] batadv_slave_0: left promiscuous mode [ 721.611888][T16093] [U]  [ 722.439106][T16117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.448642][T16117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.457738][T16117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.580909][T16117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.679976][ T7683] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 722.842205][ T7683] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 722.852738][ T7683] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 722.905020][ T7683] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 722.969059][ T7683] usb 7-1: config 0 interface 0 has no altsetting 0 [ 722.970252][ T7683] usb 7-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 722.970279][ T7683] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.987910][ T7683] usb 7-1: config 0 descriptor?? [ 723.194345][ T7683] usbhid 7-1:0.0: can't add hid device: -71 [ 723.270735][ T7683] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 723.341843][T12546] vlan0: left promiscuous mode [ 723.373909][ T7683] usb 7-1: USB disconnect, device number 38 [ 723.572158][T16141] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2548'. [ 723.692778][ T5975] usb 8-1: failed to restore interface 228 altsetting 255 (error=-71) [ 723.729573][ T5975] usb 8-1: USB disconnect, device number 10 [ 723.852660][ T5975] usblp0: removed [ 723.860862][ T1210] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 724.182078][ T1210] usb 2-1: Using ep0 maxpacket: 32 [ 724.201582][ T1210] usb 2-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 724.252241][T16154] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2552'. [ 724.261579][T16154] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2552'. [ 724.282240][ T1210] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 724.342679][ T1210] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 724.351892][ T1210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.382539][ T1210] usb 2-1: Product: syz [ 724.386842][ T1210] usb 2-1: Manufacturer: syz [ 724.460474][ T1210] usb 2-1: SerialNumber: syz [ 724.486746][ T1210] usb 2-1: config 0 descriptor?? [ 724.772959][T16160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.800951][T16160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.917986][T16157] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2551'. [ 724.961932][T16157] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2551'. [ 725.721794][ T1210] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 725.876121][T16171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.885107][T16171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.945163][ T1210] usb 5-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 725.965243][ T1210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.011615][ T1210] usb 5-1: config 0 descriptor?? [ 726.024242][ T1210] pwc: Creative Labs Webcam Pro Ex detected. [ 726.225477][ T1210] pwc: Failed to set LED on/off time (-71) [ 726.233828][ T1210] pwc: send_video_command error -71 [ 726.240490][ T1210] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 726.247982][T16180] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 726.258925][ T1210] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 726.285649][ T1210] usb 5-1: USB disconnect, device number 39 [ 726.882181][T16185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.906051][T16185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.023194][T16188] netlink: 'syz.4.2561': attribute type 8 has an invalid length. [ 727.234643][ T1210] usb 2-1: USB disconnect, device number 42 [ 727.644511][T16201] batadv0: left allmulticast mode [ 727.649679][T16201] batadv0: left promiscuous mode [ 727.670858][T12552] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.680085][T12552] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.689639][T12552] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.700101][T12552] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.709629][ T1210] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 727.865437][ T1210] usb 2-1: config 5 has an invalid interface number: 123 but max is 0 [ 727.874339][ T1210] usb 2-1: config 5 has no interface number 0 [ 727.886967][ T1210] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 727.909842][ T1210] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 727.920336][ T1210] usb 2-1: config 5 interface 123 has no altsetting 0 [ 727.932686][ T1210] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 727.948224][ T1210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.956404][ T1210] usb 2-1: Product: syz [ 727.962343][ T1210] usb 2-1: Manufacturer: syz [ 727.969858][ T1210] usb 2-1: SerialNumber: syz [ 728.220858][ T1210] ni6501 2-1:5.123: driver 'ni6501' failed to auto-configure device. [ 728.254616][ T1210] usb 2-1: USB disconnect, device number 43 [ 728.451487][T16211] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2568'. [ 728.610157][T16216] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2570'. [ 728.655900][T16216] veth0_macvtap: left promiscuous mode [ 728.966310][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 728.966327][ T30] audit: type=1326 audit(1760422795.043:6593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16222 comm="syz.1.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df998eec9 code=0x7ffc0000 [ 729.050630][T15085] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 729.294207][ T30] audit: type=1326 audit(1760422795.043:6594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16222 comm="syz.1.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df998eec9 code=0x7ffc0000 [ 729.392284][T15085] usb 5-1: config 7 has an invalid interface number: 109 but max is 0 [ 729.470489][T15085] usb 5-1: config 7 has no interface number 0 [ 729.478859][T15085] usb 5-1: config 7 interface 109 altsetting 4 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 729.500009][T15085] usb 5-1: config 7 interface 109 altsetting 4 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 729.805719][T15085] usb 5-1: config 7 interface 109 altsetting 4 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 730.003379][T15085] usb 5-1: config 7 interface 109 altsetting 4 endpoint 0x8 has invalid wMaxPacketSize 0 [ 730.021036][T15085] usb 5-1: config 7 interface 109 altsetting 4 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 730.041006][T15085] usb 5-1: config 7 interface 109 has no altsetting 0 [ 730.051034][T15085] usb 5-1: New USB device found, idVendor=1965, idProduct=0018, bcdDevice=d9.4d [ 730.071856][T15085] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.080272][T15085] usb 5-1: Product: syz [ 730.090534][T15085] usb 5-1: Manufacturer: syz [ 730.128321][T15085] usb 5-1: SerialNumber: syz [ 730.137984][T16219] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 730.280805][ T5975] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 730.437924][T16249] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2579'. [ 730.471070][ T5975] usb 8-1: Using ep0 maxpacket: 8 [ 730.492807][ T5975] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 730.516284][ T5975] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 730.604396][ T5975] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 730.629124][T15085] usbhid 5-1:7.109: couldn't find an input interrupt endpoint [ 730.685351][ T5975] usb 8-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 730.688349][T15085] usb 5-1: USB disconnect, device number 40 [ 730.700947][ T5975] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.749923][ T5975] usb 8-1: Product: syz [ 730.759916][ T5975] usb 8-1: Manufacturer: syz [ 730.810641][ T9739] usb 7-1: new full-speed USB device number 39 using dummy_hcd [ 730.880517][ T5975] usb 8-1: SerialNumber: syz [ 730.890503][ T1210] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 730.925625][ T5975] usb 8-1: config 0 descriptor?? [ 730.961196][ T5975] radioshark2 8-1:0.0: Invalid radioSHARK2 device [ 730.971006][ T5975] radioshark2 8-1:0.0: probe with driver radioshark2 failed with error -22 [ 730.984346][ T5975] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 731.040757][ T1210] usb 2-1: Using ep0 maxpacket: 32 [ 731.048118][ T1210] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 731.060309][ T1210] usb 2-1: config 0 has no interface number 0 [ 731.075429][ T9739] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 731.153584][ T7683] usb 8-1: USB disconnect, device number 11 [ 731.186740][ T1210] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 731.195999][ T9739] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 731.207185][ T1210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.216998][ T9739] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 731.231600][ T1210] usb 2-1: Product: syz [ 731.236194][ T1210] usb 2-1: Manufacturer: syz [ 731.241388][ T1210] usb 2-1: SerialNumber: syz [ 731.266655][ T9739] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 731.278971][ T1210] usb 2-1: config 0 descriptor?? [ 731.296151][ T9739] usb 7-1: New USB device strings: Mfr=8, Product=0, SerialNumber=1 [ 731.309242][ T1210] smsc95xx v2.0.0 [ 731.314364][ T9739] usb 7-1: Manufacturer: syz [ 731.328431][T16261] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 731.421292][ T9739] usb 7-1: SerialNumber: syz [ 731.814431][ T1210] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 731.825670][ T1210] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 731.890528][ T7683] usb 5-1: new low-speed USB device number 41 using dummy_hcd [ 731.954081][T16280] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 731.996583][T16280] openvswitch: netlink: Duplicate or invalid key (type 0). [ 732.004223][T16280] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 732.027426][ T5975] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 732.042863][ T1210] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 732.058785][ T1210] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 732.070544][ T7683] usb 5-1: device descriptor read/64, error -71 [ 732.180526][ T5975] usb 8-1: Using ep0 maxpacket: 32 [ 732.187897][ T5975] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 732.204663][ T5975] usb 8-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 732.215680][ T5975] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.224231][ T5975] usb 8-1: Product: syz [ 732.228509][ T5975] usb 8-1: Manufacturer: syz [ 732.233626][ T5975] usb 8-1: SerialNumber: syz [ 732.243230][ T5975] usb 8-1: config 0 descriptor?? [ 732.265279][ T5975] usb 8-1: bad CDC descriptors [ 732.273019][ T5975] usb 8-1: unsupported MDLM descriptors [ 732.313349][ T5975] usb 2-1: USB disconnect, device number 44 [ 732.319357][ T7683] usb 5-1: new low-speed USB device number 42 using dummy_hcd [ 732.494442][ T1210] usb 8-1: USB disconnect, device number 12 [ 732.510631][ T7683] usb 5-1: device descriptor read/64, error -71 [ 732.621019][ T7683] usb usb5-port1: attempt power cycle [ 732.970637][ T7683] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 733.003482][ T7683] usb 5-1: device descriptor read/8, error -71 [ 733.285326][ T9739] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 733.300852][ T7683] usb 5-1: new low-speed USB device number 44 using dummy_hcd [ 733.344669][ T9739] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 733.361404][ T7683] usb 5-1: device descriptor read/8, error -71 [ 733.373705][ T9739] usb 7-1: USB disconnect, device number 39 [ 733.380828][ T1210] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 733.412774][T16293] cgroup: fork rejected by pids controller in /syz5 [ 733.425721][ T116] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 733.496750][ T7683] usb usb5-port1: unable to enumerate USB device [ 733.604082][ T116] usb 8-1: Using ep0 maxpacket: 32 [ 733.604155][ T1210] usb 2-1: Using ep0 maxpacket: 8 [ 733.611756][ T116] usb 8-1: config 4 has an invalid interface number: 231 but max is 0 [ 733.623347][ T116] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 733.673146][ T116] usb 8-1: config 4 has no interface number 0 [ 733.683193][ T1210] usb 2-1: unable to get BOS descriptor or descriptor too short [ 733.690456][ T116] usb 8-1: too many endpoints for config 4 interface 231 altsetting 175: 35, using maximum allowed: 30 [ 733.704246][ T1210] usb 2-1: config 8 has an invalid interface number: 24 but max is 0 [ 733.713239][ T1210] usb 2-1: config 8 has no interface number 0 [ 733.723938][ T1210] usb 2-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 733.742515][ T1210] usb 2-1: config 8 interface 24 has no altsetting 0 [ 733.755057][ T116] usb 8-1: config 4 interface 231 altsetting 175 has 0 endpoint descriptors, different from the interface descriptor's value: 35 [ 733.756332][ T1210] usb 2-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 733.778256][ T1210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.787677][ T1210] usb 2-1: Product: syz [ 733.792227][ T1210] usb 2-1: Manufacturer: syz [ 733.797397][ T1210] usb 2-1: SerialNumber: syz [ 733.838559][ T116] usb 8-1: config 4 interface 231 has no altsetting 0 [ 733.847872][ T116] usb 8-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 733.858111][ T116] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.944130][ T116] usb 8-1: Product: syz [ 733.954545][ T116] usb 8-1: Manufacturer: syz [ 733.974751][ T116] usb 8-1: SerialNumber: syz [ 735.283454][T16447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2594'. [ 735.336197][T16447] netlink: 'syz.4.2594': attribute type 10 has an invalid length. [ 735.353971][T16447] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 735.910203][ T1210] vmk80xx 2-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 735.948350][ T1210] usb 2-1: USB disconnect, device number 45 [ 736.225184][ T1210] usb 8-1: USB disconnect, device number 13 [ 736.621660][ T1210] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 736.660291][T16460] binder: 16458:16460 ioctl 40046205 0 returned -22 [ 736.705268][ T30] audit: type=1326 audit(1760422802.783:6595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16454 comm="syz.4.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c298eec9 code=0x7ffc0000 [ 736.779797][ T30] audit: type=1326 audit(1760422802.813:6596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16454 comm="syz.4.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fe8c298eec9 code=0x7ffc0000 [ 736.812444][ T30] audit: type=1326 audit(1760422802.813:6597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16454 comm="syz.4.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c298eec9 code=0x7ffc0000 [ 736.850600][ T30] audit: type=1326 audit(1760422802.813:6598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16454 comm="syz.4.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c298eec9 code=0x7ffc0000 [ 736.883939][T16467] binder: 16458:16467 ioctl 81f8943c 200000000300 returned -22 [ 736.894580][ T1210] usb 8-1: config 1 interface 0 has no altsetting 0 [ 736.929000][ T1210] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 737.280548][ T5828] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 737.305085][ T1210] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.373388][ T30] audit: type=1326 audit(1760422802.813:6599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16454 comm="syz.4.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe8c298eec9 code=0x7ffc0000 [ 737.441309][ T1210] usb 8-1: Product: syz [ 737.442631][ T5828] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 737.445512][ T1210] usb 8-1: Manufacturer: syz [ 737.445531][ T1210] usb 8-1: SerialNumber: syz [ 737.478644][ T5828] usb 2-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 737.498606][ T30] audit: type=1326 audit(1760422802.813:6600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16454 comm="syz.4.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c298eec9 code=0x7ffc0000 [ 737.521575][ T5828] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 737.531868][ T5828] usb 2-1: config 8 has no interface number 0 [ 737.538496][ T5828] usb 2-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 737.559804][ T5828] usb 2-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 737.584590][ T5828] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 737.593746][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.613598][ T5828] usb 2-1: Product: syz [ 737.621189][ T5828] usb 2-1: Manufacturer: syz [ 737.646493][ T5828] usb 2-1: SerialNumber: syz [ 737.667630][ T30] audit: type=1326 audit(1760422802.813:6601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16454 comm="syz.4.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fe8c298eec9 code=0x7ffc0000 [ 737.747669][ T30] audit: type=1326 audit(1760422802.813:6602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16454 comm="syz.4.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c298eec9 code=0x7ffc0000 [ 737.791611][ T30] audit: type=1326 audit(1760422802.813:6603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16454 comm="syz.4.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8c298eec9 code=0x7ffc0000 [ 737.854908][ T30] audit: type=1326 audit(1760422802.813:6604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16454 comm="syz.4.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c298eec9 code=0x7ffc0000 [ 737.889407][T16471] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2601'. [ 737.914030][ T1210] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 737.969535][ T5828] usb 2-1: USB disconnect, device number 46 [ 738.058252][T16477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.072510][T16477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.085732][T16477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.120961][T16477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.129934][T16477] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2602'. [ 738.297850][T16486] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2603'. [ 738.500489][T15085] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 738.616593][ T1210] usb 8-1: USB disconnect, device number 14 [ 738.627364][ T1210] usblp0: removed [ 738.823866][T15085] usb 5-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 738.864286][T15085] usb 5-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 738.947024][T15085] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 738.972501][T16498] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2608'. [ 739.000800][T15085] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 739.050510][T15085] usb 5-1: Manufacturer: syz [ 739.060223][T15085] usb 5-1: SerialNumber: syz [ 739.170562][ T9739] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 739.341841][ T5828] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 739.384331][T15085] usbhid 5-1:36.0: couldn't find an input interrupt endpoint [ 739.396973][T15085] usb 5-1: USB disconnect, device number 45 [ 739.500686][ T9739] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 739.520153][ T9739] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 739.550501][ T9739] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 739.597599][ T5828] usb 8-1: Using ep0 maxpacket: 16 [ 739.600246][ T9739] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 739.614508][ T9739] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.626100][ T5828] usb 8-1: too many configurations: 25, using maximum allowed: 8 [ 739.635574][ T9739] usb 2-1: config 0 descriptor?? [ 739.645141][ T5828] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 3.06 [ 739.674448][ T5828] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 739.683704][ T5828] usb 8-1: Product: syz [ 739.688949][ T5828] usb 8-1: SerialNumber: syz [ 739.698620][ T5828] r8152-cfgselector 8-1: Unknown version 0x0000 [ 739.928403][T16500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.937444][T16500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.962641][T16500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.974327][T16500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.002194][ T5828] r8152-cfgselector 8-1: USB disconnect, device number 15 [ 740.330631][T16516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.340679][T16516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.370493][T15085] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 740.543866][ T9739] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 740.544660][T15085] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.598205][T15085] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 740.647424][T15085] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.676293][T15085] usb 5-1: config 0 descriptor?? [ 740.689075][T16522] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2614'. [ 740.940513][ T9739] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 740.987048][T16526] loop5: detected capacity change from 0 to 7 [ 740.999226][T16526] Dev loop5: unable to read RDB block 7 [ 741.006308][T16526] loop5: unable to read partition table [ 741.041875][T16526] loop5: partition table beyond EOD, truncated [ 741.053266][T16526] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 741.101483][ T9739] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 741.112951][ T9739] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 741.123403][ T9739] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 741.150984][ T9739] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 741.160189][T15085] keytouch 0003:0926:3333.001F: fixing up Keytouch IEC report descriptor [ 741.175706][T15085] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.001F/input/input55 [ 741.175819][ T9739] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.204587][ T9739] usb 8-1: config 0 descriptor?? [ 741.331684][T15085] keytouch 0003:0926:3333.001F: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 741.636190][ T9739] plantronics 0003:047F:FFFF.0020: item fetching failed at offset 13/15 [ 741.663545][ T9739] plantronics 0003:047F:FFFF.0020: parse failed [ 741.678871][ T9739] plantronics 0003:047F:FFFF.0020: probe with driver plantronics failed with error -22 [ 742.233255][T16535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.261154][T16535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.421905][ T9760] usb 2-1: USB disconnect, device number 47 [ 742.554965][T16540] loop9: detected capacity change from 0 to 7 [ 742.570072][T16540] Dev loop9: unable to read RDB block 7 [ 742.581729][T16540] loop9: unable to read partition table [ 742.592752][T16540] loop9: partition table beyond EOD, truncated [ 742.606010][T16540] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 742.985831][T16548] tipc: Enabled bearer , priority 0 [ 742.996447][T16548] syzkaller0: entered promiscuous mode [ 743.005868][T16548] syzkaller0: entered allmulticast mode [ 743.037282][T16548] tipc: Resetting bearer [ 743.082186][T16547] tipc: Resetting bearer [ 743.106341][T16547] tipc: Disabling bearer [ 743.136320][T16553] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2622'. [ 743.207831][T16555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.222707][T16555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.244064][T16557] loop2: detected capacity change from 0 to 7 [ 743.251959][T12104] loop2: [ 743.255008][T12104] loop2: partition table partially beyond EOD, truncated [ 743.266496][T16557] loop2: [ 743.270056][T16557] loop2: partition table partially beyond EOD, truncated [ 743.430040][T16561] loop5: detected capacity change from 0 to 7 [ 743.442632][T16561] Dev loop5: unable to read RDB block 7 [ 743.448361][T16561] loop5: unable to read partition table [ 743.458448][T16561] loop5: partition table beyond EOD, truncated [ 743.460185][ T9760] usb 5-1: USB disconnect, device number 46 [ 743.465112][T16561] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 743.686970][ T5828] usb 8-1: USB disconnect, device number 16 [ 744.165586][ T5975] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 744.196168][T16590] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 744.203527][T16590] IPv6: NLM_F_CREATE should be set when creating new route [ 744.211162][ T5828] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 744.233393][T16590] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2630'. [ 744.260717][T16592] loop2: detected capacity change from 0 to 7 [ 744.268039][T16592] loop2: [ 744.271434][T16592] loop2: partition table partially beyond EOD, truncated [ 744.291358][ T5198] loop2: [ 744.294430][ T5198] loop2: partition table partially beyond EOD, truncated [ 744.370525][ T5828] usb 8-1: Using ep0 maxpacket: 8 [ 744.379132][ T5828] usb 8-1: config 2 interface 0 has no altsetting 0 [ 744.380644][ T5975] usb 2-1: Using ep0 maxpacket: 32 [ 744.425814][ T5828] usb 8-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 744.435818][ T5975] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 744.439334][ T5828] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.445259][ T5975] usb 2-1: can't read configurations, error -61 [ 744.458673][ T5828] usb 8-1: Product: syz [ 744.493358][ T5828] usb 8-1: Manufacturer: syz [ 744.500963][ T5828] usb 8-1: SerialNumber: syz [ 744.600587][ T5975] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 744.731715][ T5828] usb 8-1: USB disconnect, device number 17 [ 744.751523][ T5975] usb 2-1: Using ep0 maxpacket: 32 [ 744.763050][ T5975] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 744.771410][ T5975] usb 2-1: can't read configurations, error -61 [ 744.788889][ T5975] usb usb2-port1: attempt power cycle [ 744.794815][ T1210] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 744.876748][T16599] loop5: detected capacity change from 0 to 7 [ 744.885257][T16599] Dev loop5: unable to read RDB block 7 [ 744.899993][T16599] loop5: unable to read partition table [ 744.908443][T16599] loop5: partition table beyond EOD, truncated [ 744.916101][T16599] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 744.932858][ T1210] usb 7-1: device descriptor read/64, error -71 [ 745.155455][ T5975] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 745.180618][ T1210] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 745.206673][ T5975] usb 2-1: Using ep0 maxpacket: 32 [ 745.216182][ T5975] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 745.225048][ T5975] usb 2-1: can't read configurations, error -61 [ 745.330483][ T1210] usb 7-1: device descriptor read/64, error -71 [ 745.390605][ T5975] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 745.411664][T16608] syz.5.2640 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 745.444126][T16608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 745.453444][T16608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.500952][ T1210] usb usb7-port1: attempt power cycle [ 745.510889][ T5975] usb 2-1: Using ep0 maxpacket: 32 [ 745.521922][ T5975] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 745.529843][ T5975] usb 2-1: can't read configurations, error -61 [ 745.539774][ T5975] usb usb2-port1: unable to enumerate USB device [ 745.840629][ T1210] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 745.939687][ T1210] usb 7-1: device descriptor read/8, error -71 [ 745.993949][T16614] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 746.035700][T16614] openvswitch: netlink: Duplicate or invalid key (type 0). [ 746.044233][T16614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 746.200489][ T1210] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 746.241006][ T1210] usb 7-1: device descriptor read/8, error -71 [ 746.350684][ T1210] usb usb7-port1: unable to enumerate USB device [ 747.108810][T16628] openvswitch: netlink: Duplicate or invalid key (type 0). [ 747.117318][T16628] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 747.217705][T16631] loop2: detected capacity change from 0 to 7 [ 747.235981][T16631] loop2: [ 747.243719][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.244220][T16631] loop2: partition table partially beyond EOD, truncated [ 747.250304][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.645271][T16642] loop5: detected capacity change from 0 to 7 [ 747.670893][ T5828] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 747.671531][T16642] Dev loop5: unable to read RDB block 7 [ 747.723682][T16642] loop5: unable to read partition table [ 747.747355][T16642] loop5: partition table beyond EOD, truncated [ 747.979083][ T5828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 747.993657][ T5828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.021028][T16642] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 748.027439][ T5828] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 748.108301][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.148877][ T5828] usb 5-1: config 0 descriptor?? [ 748.592170][ T5828] isku 0003:1E7D:319C.0021: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0 [ 748.720494][ T5975] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 748.792285][ T5828] isku 0003:1E7D:319C.0021: couldn't init struct isku_device [ 748.799761][ T5828] isku 0003:1E7D:319C.0021: couldn't install keyboard [ 748.850732][ T5975] usb 8-1: device descriptor read/64, error -71 [ 748.855349][ T5828] isku 0003:1E7D:319C.0021: probe with driver isku failed with error -71 [ 748.874789][T16658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.893166][T16660] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2654'. [ 748.902898][T16658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.905013][T16660] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2654'. [ 748.939610][ T5828] usb 5-1: USB disconnect, device number 47 [ 749.218564][ T5975] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 749.410609][ T5975] usb 8-1: device descriptor read/64, error -71 [ 749.531053][ T5975] usb usb8-port1: attempt power cycle [ 749.717025][T16677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.738021][T16677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.930531][T15085] usb 7-1: new low-speed USB device number 44 using dummy_hcd [ 749.965317][T16681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2659'. [ 749.996998][ T5975] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 750.247302][ T5975] usb 8-1: device descriptor read/8, error -71 [ 750.260636][T15085] usb 7-1: device descriptor read/64, error -71 [ 750.476322][T16684] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2660'. [ 750.490516][ T5975] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 750.500949][T15085] usb 7-1: new low-speed USB device number 45 using dummy_hcd [ 750.533524][ T5975] usb 8-1: device descriptor read/8, error -71 [ 750.635473][T15085] usb 7-1: device descriptor read/64, error -71 [ 750.768111][T15085] usb usb7-port1: attempt power cycle [ 750.790637][ T5975] usb usb8-port1: unable to enumerate USB device [ 751.150537][T15085] usb 7-1: new low-speed USB device number 46 using dummy_hcd [ 751.171223][T15085] usb 7-1: device descriptor read/8, error -71 [ 751.450488][T15085] usb 7-1: new low-speed USB device number 47 using dummy_hcd [ 751.475253][T15085] usb 7-1: device descriptor read/8, error -71 [ 751.590750][T15085] usb usb7-port1: unable to enumerate USB device [ 752.264080][T16717] netlink: 'syz.1.2668': attribute type 27 has an invalid length. [ 752.435777][T16720] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2669'. [ 752.470107][T16722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.498474][T16717] bridge1: left promiscuous mode [ 752.503924][T16717] bridge1: left allmulticast mode [ 752.512133][T16722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.515666][T16717] ipip0: left promiscuous mode [ 752.525864][T16717] ipip0: left allmulticast mode [ 752.614601][T16718] 8021q: adding VLAN 0 to HW filter on device team0 [ 752.638536][T16718] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 752.706783][T16720] bond0: option updelay: invalid value (18446744073072017407) [ 752.714560][T16720] bond0: option updelay: allowed values 0 - 2147483647 [ 752.724522][T16720] bond0 (unregistering): Released all slaves [ 752.800983][ T5975] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 752.928218][T16730] loop2: detected capacity change from 0 to 7 [ 752.947997][T16730] loop2: [ 752.965179][T16730] loop2: partition table partially beyond EOD, truncated [ 752.970857][ T5975] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 753.035115][ T5975] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 753.185316][ T5975] usb 2-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 753.221402][ T5975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.280049][ T5975] usb 2-1: Product: syz [ 753.296726][ T5975] usb 2-1: Manufacturer: syz [ 753.310617][ T5975] usb 2-1: SerialNumber: syz [ 753.323143][ T5975] usb 2-1: config 0 descriptor?? [ 753.323546][T16740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.339037][ T5975] option 2-1:0.0: GSM modem (1-port) converter detected [ 753.498552][T16740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.140224][T16748] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2678'. [ 754.522275][T16757] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2680'. [ 754.540588][ T7683] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 754.722495][ T7683] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 754.732600][ T7683] usb 8-1: config 0 interface 0 has no altsetting 0 [ 754.776186][ T7683] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 754.817548][ T7683] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 754.939478][ T7683] usb 8-1: Product: syz [ 755.020828][ T7683] usb 8-1: Manufacturer: syz [ 755.096577][ T7683] usb 8-1: SerialNumber: syz [ 755.112449][ T7683] usb 8-1: config 0 descriptor?? [ 755.169578][ T7683] usb 8-1: selecting invalid altsetting 0 [ 755.264597][T16763] openvswitch: netlink: Duplicate or invalid key (type 0). [ 755.272161][T16763] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 755.374062][ T116] usb 8-1: USB disconnect, device number 22 [ 755.415865][ T6167] udevd[6167]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 755.762993][ T5975] usb 2-1: USB disconnect, device number 52 [ 755.773240][ T5975] option 2-1:0.0: device disconnected [ 755.801072][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 755.801089][ T30] audit: type=1326 audit(1760422821.873:6640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16769 comm="syz.6.2683" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f155a18eec9 code=0x0 [ 756.140578][ T116] usb 7-1: new full-speed USB device number 48 using dummy_hcd [ 756.308639][ T116] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 756.331105][T16780] loop5: detected capacity change from 0 to 7 [ 756.337368][ T116] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 756.345103][T16780] Dev loop5: unable to read RDB block 7 [ 756.366288][T16780] loop5: unable to read partition table [ 756.371868][ T116] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 756.383329][ T116] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.388846][T16780] loop5: partition table beyond EOD, truncated [ 756.419266][T16780] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 756.429858][ T116] usb 7-1: Product: syz [ 756.460232][ T116] usb 7-1: Manufacturer: syz [ 756.505260][ T116] usb 7-1: SerialNumber: syz [ 756.739800][T16771] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2683'. [ 756.790088][T16771] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 756.815002][ T30] audit: type=1326 audit(1760422822.823:6641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16789 comm="syz.7.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9398eec9 code=0x7ffc0000 [ 757.047808][ T116] usb 7-1: 0:2 : does not exist [ 757.107027][ T116] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 757.116419][ T30] audit: type=1326 audit(1760422822.823:6642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16789 comm="syz.7.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9398eec9 code=0x7ffc0000 [ 757.154177][T16801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.166012][T16801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.236890][ T116] usb 7-1: USB disconnect, device number 48 [ 757.261696][ T30] audit: type=1326 audit(1760422822.823:6643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16789 comm="syz.7.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f9a9398eec9 code=0x7ffc0000 [ 757.496277][T12104] udevd[12104]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 757.510470][ T30] audit: type=1326 audit(1760422822.823:6644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16789 comm="syz.7.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9398eec9 code=0x7ffc0000 [ 757.588491][T16805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2692'. [ 757.600326][ T30] audit: type=1326 audit(1760422822.833:6645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16789 comm="syz.7.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f9a9398eec9 code=0x7ffc0000 [ 757.640556][ T5975] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 757.659538][ T30] audit: type=1326 audit(1760422822.833:6646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16789 comm="syz.7.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9398eec9 code=0x7ffc0000 [ 757.718615][ T30] audit: type=1326 audit(1760422822.833:6647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16789 comm="syz.7.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f9a9398eec9 code=0x7ffc0000 [ 757.780509][ T5975] usb 5-1: device descriptor read/64, error -71 [ 757.784667][ T30] audit: type=1326 audit(1760422822.833:6648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16789 comm="syz.7.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9398eec9 code=0x7ffc0000 [ 757.838562][ T30] audit: type=1326 audit(1760422822.833:6649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16789 comm="syz.7.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f9a9398eec9 code=0x7ffc0000 [ 758.030694][ T5975] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 758.074925][T16805] 8021q: adding VLAN 0 to HW filter on device bond3 [ 758.201269][ T5975] usb 5-1: device descriptor read/64, error -71 [ 758.311400][ T5975] usb usb5-port1: attempt power cycle [ 758.346571][T16819] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 758.397923][T16820] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2694'. [ 758.469685][T16817] netlink: 'syz.5.2696': attribute type 1 has an invalid length. [ 758.650604][ T1210] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 758.658370][ T5975] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 758.728906][ T5975] usb 5-1: device descriptor read/8, error -71 [ 758.860890][ T1210] usb 8-1: Using ep0 maxpacket: 16 [ 758.876688][ T1210] usb 8-1: unable to get BOS descriptor or descriptor too short [ 758.890601][T15085] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 758.936985][T16830] openvswitch: netlink: Duplicate or invalid key (type 0). [ 758.944578][T16830] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 758.970628][ T5975] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 758.982311][ T1210] usb 8-1: config 13 has an invalid interface number: 50 but max is 0 [ 759.011604][ T5975] usb 5-1: device descriptor read/8, error -71 [ 759.021200][ T1210] usb 8-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 759.037477][ T1210] usb 8-1: config 13 has no interface number 0 [ 759.049948][ T1210] usb 8-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 759.069812][ T1210] usb 8-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 759.101385][ T1210] usb 8-1: config 13 interface 50 has no altsetting 0 [ 759.146951][ T1210] usb 8-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 759.156417][ T5975] usb usb5-port1: unable to enumerate USB device [ 759.165197][ T1210] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.182834][ T1210] usb 8-1: Product: syz [ 759.189617][ T1210] usb 8-1: Manufacturer: syz [ 759.203978][ T1210] usb 8-1: SerialNumber: syz [ 759.225450][T16820] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 759.390063][T15085] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 86, changing to 10 [ 759.405221][T15085] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.430093][T15085] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 759.460202][T15085] usb 2-1: config 0 interface 0 has no altsetting 0 [ 759.473941][T15085] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 759.493739][T15085] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.599660][T15085] usb 2-1: config 0 descriptor?? [ 760.468798][T15085] usbhid 2-1:0.0: can't add hid device: -71 [ 760.500084][T15085] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 760.527488][T15085] usb 2-1: USB disconnect, device number 53 [ 760.567967][T16839] loop5: detected capacity change from 0 to 7 [ 760.617386][T16839] Dev loop5: unable to read RDB block 7 [ 760.664428][T16839] loop5: unable to read partition table [ 760.700970][T16839] loop5: partition table beyond EOD, truncated [ 760.770531][T16839] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 760.961419][T16846] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2702'. [ 760.970703][T16846] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2702'. [ 761.653608][T16853] geneve2: entered promiscuous mode [ 761.658848][T16853] geneve2: entered allmulticast mode [ 761.664261][ T116] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 761.692647][T16856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.775376][T16856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.823138][ T116] usb 7-1: Using ep0 maxpacket: 32 [ 761.847417][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 761.847434][ T30] audit: type=1326 audit(1760422827.903:6680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16852 comm="syz.1.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df998eec9 code=0x7ffc0000 [ 761.847570][ T116] usb 7-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 761.891890][ T30] audit: type=1326 audit(1760422827.913:6681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16852 comm="syz.1.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f2df998eec9 code=0x7ffc0000 [ 761.896780][ T1210] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 761.965665][ T30] audit: type=1326 audit(1760422827.913:6682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16852 comm="syz.1.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df998eec9 code=0x7ffc0000 [ 761.989552][ T116] usb 7-1: config 32 has 0 interfaces, different from the descriptor's value: 1 [ 762.008524][ T1210] usb 8-1: MIDIStreaming interface descriptor not found [ 762.075487][ T30] audit: type=1326 audit(1760422827.913:6683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16852 comm="syz.1.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df998eec9 code=0x7ffc0000 [ 762.178098][ T116] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 762.199094][ T116] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.217855][ T116] usb 7-1: Product: syz [ 762.223728][ T116] usb 7-1: Manufacturer: syz [ 762.228403][ T30] audit: type=1326 audit(1760422827.913:6684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16852 comm="syz.1.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2df998eec9 code=0x7ffc0000 [ 762.258223][ T116] usb 7-1: SerialNumber: syz [ 762.385837][ T1210] usb 8-1: USB disconnect, device number 23 [ 762.455702][ T30] audit: type=1326 audit(1760422827.913:6685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16852 comm="syz.1.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df998eec9 code=0x7ffc0000 [ 762.539611][ T30] audit: type=1326 audit(1760422827.913:6686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16852 comm="syz.1.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df998eec9 code=0x7ffc0000 [ 762.617326][ T116] usb 7-1: USB disconnect, device number 49 [ 762.720966][ T30] audit: type=1326 audit(1760422827.913:6687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16852 comm="syz.1.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f2df998eec9 code=0x7ffc0000 [ 762.749517][ T30] audit: type=1326 audit(1760422827.913:6688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16852 comm="syz.1.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df998eec9 code=0x7ffc0000 [ 763.046956][ T30] audit: type=1326 audit(1760422827.913:6689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16852 comm="syz.1.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f2df998eec9 code=0x7ffc0000 [ 763.644876][T16875] syzkaller1: entered promiscuous mode [ 763.651082][T16875] syzkaller1: entered allmulticast mode [ 763.720579][ T5829] Bluetooth: hci0: command 0x0405 tx timeout [ 763.965890][T16883] loop5: detected capacity change from 0 to 7 [ 763.977030][T12104] Dev loop5: unable to read RDB block 7 [ 763.988488][T12104] loop5: unable to read partition table [ 764.000663][T12104] loop5: partition table beyond EOD, truncated [ 764.011132][T16883] Dev loop5: unable to read RDB block 7 [ 764.019545][T16883] loop5: unable to read partition table [ 764.026459][T16883] loop5: partition table beyond EOD, truncated [ 764.036416][T16883] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 764.339569][T16891] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2716'. [ 765.930477][ T5828] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 766.271325][ T5828] usb 2-1: no configurations [ 766.276037][ T5828] usb 2-1: can't read configurations, error -22 [ 766.450518][ T5828] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 766.671130][ T5828] usb 2-1: no configurations [ 766.675991][ T5828] usb 2-1: can't read configurations, error -22 [ 766.730746][ T5828] usb usb2-port1: attempt power cycle [ 766.999373][T16929] tipc: Enabled bearer , priority 0 [ 767.007610][T16929] syzkaller0: entered promiscuous mode [ 767.021591][T16929] syzkaller0: entered allmulticast mode [ 767.151383][ T5828] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 767.171631][ T5828] usb 2-1: no configurations [ 767.190150][ T5828] usb 2-1: can't read configurations, error -22 [ 767.271370][T16941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2729'. [ 767.280491][ T5975] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 767.306339][T16941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2729'. [ 767.350521][ T5828] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 767.402239][ T5828] usb 2-1: no configurations [ 767.406946][ T5828] usb 2-1: can't read configurations, error -22 [ 767.420113][ T5828] usb usb2-port1: unable to enumerate USB device [ 767.580722][ T5975] usb 8-1: Using ep0 maxpacket: 32 [ 767.591027][ T5975] usb 8-1: New USB device found, idVendor=ae6f, idProduct=79f4, bcdDevice=8f.99 [ 767.600101][ T5975] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.610556][ T5975] usb 8-1: Product: syz [ 767.614748][ T5975] usb 8-1: Manufacturer: syz [ 767.619366][ T5975] usb 8-1: SerialNumber: syz [ 767.631695][ T5975] usb 8-1: config 0 descriptor?? [ 767.781263][T16928] tipc: Resetting bearer [ 767.852157][T16931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.871411][T16928] tipc: Disabling bearer [ 767.895969][T16931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.907832][T16931] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2727'. [ 768.160643][T16950] loop5: detected capacity change from 0 to 7 [ 768.218001][T12104] Dev loop5: unable to read RDB block 7 [ 768.226384][T12104] loop5: unable to read partition table [ 768.232872][T12104] loop5: partition table beyond EOD, truncated [ 768.240119][T16950] Dev loop5: unable to read RDB block 7 [ 768.251579][T16950] loop5: unable to read partition table [ 768.261829][T16950] loop5: partition table beyond EOD, truncated [ 768.280957][T16950] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 768.579832][ T5975] usb 8-1: USB disconnect, device number 24 [ 768.777912][T16961] netlink: 'syz.5.2732': attribute type 12 has an invalid length. [ 768.902452][ T1210] usb 2-1: new low-speed USB device number 58 using dummy_hcd [ 768.961968][T16961] netlink: 120 bytes leftover after parsing attributes in process `syz.5.2732'. [ 768.994353][T16973] netlink: 'syz.7.2737': attribute type 20 has an invalid length. [ 769.002612][T16973] IPv6: NLM_F_CREATE should be specified when creating new route [ 769.010860][T16973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 769.018079][T16973] IPv6: NLM_F_CREATE should be set when creating new route [ 769.031617][T16972] tmpfs: Unknown parameter '' [ 769.111211][ T1210] usb 2-1: device descriptor read/64, error -71 [ 769.360497][ T1210] usb 2-1: new low-speed USB device number 59 using dummy_hcd [ 769.615443][T16980] netlink: 'syz.6.2738': attribute type 20 has an invalid length. [ 769.624605][T16980] IPv6: NLM_F_CREATE should be specified when creating new route [ 769.656168][T16977] tmpfs: Unknown parameter '' [ 769.690462][ T1210] usb 2-1: device descriptor read/64, error -71 [ 769.800629][ T1210] usb usb2-port1: attempt power cycle [ 770.150522][ T1210] usb 2-1: new low-speed USB device number 60 using dummy_hcd [ 770.403919][ T1210] usb 2-1: device descriptor read/8, error -71 [ 770.710532][ T1210] usb 2-1: new low-speed USB device number 61 using dummy_hcd [ 770.752209][ T1210] usb 2-1: device descriptor read/8, error -71 [ 770.802633][T16988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2743'. [ 770.805534][T16990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 770.830496][ T9739] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 770.841715][T16990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 770.860974][ T1210] usb usb2-port1: unable to enumerate USB device [ 770.863231][T16988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 770.922507][T16988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 770.983466][ T9739] usb 8-1: unable to get BOS descriptor or descriptor too short [ 770.992909][ T9739] usb 8-1: too many configurations: 232, using maximum allowed: 8 [ 771.013996][ T9739] usb 8-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 771.034971][ T9739] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 771.054070][ T9739] usb 8-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 771.070424][ T9739] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 771.090495][ T9739] usb 8-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 771.101140][ T9739] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 771.123542][ T9739] usb 8-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 771.136105][ T9739] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 771.156122][ T9739] usb 8-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 771.171220][ T9739] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 771.182433][ T9739] usb 8-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 771.193840][ T9739] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 771.209348][ T9739] usb 8-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 771.225073][ T9739] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 771.244368][ T9739] usb 8-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 771.259968][ T9739] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 771.273479][ T9739] usb 8-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.40 [ 771.284382][ T9739] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.296469][ T9739] usb 8-1: Product: syz [ 771.303514][ T9739] usb 8-1: Manufacturer: syz [ 771.311024][ T9739] usb 8-1: SerialNumber: syz [ 771.533629][ T9739] usb 8-1: USB disconnect, device number 25 [ 771.572737][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 771.572754][ T30] audit: type=1326 audit(1760422837.653:6756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16997 comm="syz.4.2745" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe8c298eec9 code=0x0 [ 771.793710][T17009] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 771.900462][ T5828] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 772.101528][ T5828] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 772.148424][ T5828] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 772.169424][ T5828] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 772.504642][ T116] usb 8-1: new full-speed USB device number 26 using dummy_hcd [ 772.530462][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.550141][T17001] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 772.576685][ T5828] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 772.662599][ T116] usb 8-1: unable to get BOS descriptor or descriptor too short [ 772.688897][ T116] usb 8-1: not running at top speed; connect to a high speed hub [ 772.714092][ T116] usb 8-1: config 6 has an invalid interface number: 30 but max is 0 [ 772.730892][ T116] usb 8-1: config 6 has no interface number 0 [ 772.746788][ T116] usb 8-1: config 6 interface 30 altsetting 0 has an endpoint descriptor with address 0x47, changing to 0x7 [ 772.803106][ T116] usb 8-1: config 6 interface 30 altsetting 0 endpoint 0x7 has invalid maxpacket 40968, setting to 64 [ 772.847398][T17023] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2747'. [ 772.863789][ T116] usb 8-1: config 6 interface 30 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 772.879694][ T116] usb 8-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice= a.74 [ 772.889357][ T116] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.897809][ T116] usb 8-1: Product: syz [ 772.903006][ T116] usb 8-1: Manufacturer: syz [ 772.907698][ T116] usb 8-1: SerialNumber: syz [ 772.952647][T17019] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 773.173681][ T116] usbtest 8-1:6.30: usb test device [ 773.185987][ T116] usbtest 8-1:6.30: full-speed {control in/out iso-out} tests (+alt) [ 773.222495][ T116] usb 8-1: USB disconnect, device number 26 [ 774.250514][ T5828] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 774.357491][ T116] usb 5-1: USB disconnect, device number 52 [ 774.412182][T17056] xt_CT: You must specify a L4 protocol and not use inversions on it [ 774.423808][ T5828] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.465124][ T5828] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 774.507925][ T5828] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 774.528158][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.559475][ T5828] usb 2-1: config 0 descriptor?? [ 774.578733][ T5828] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 774.586168][ T5828] dvb-usb: bulk message failed: -22 (3/0) [ 774.622250][ T5828] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 774.637520][ T5828] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 774.674866][ T5828] usb 2-1: media controller created [ 774.810092][ T5828] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 774.856141][ T5828] dvb-usb: bulk message failed: -22 (6/0) [ 774.856244][ T5828] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 774.871334][ T5828] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input56 [ 775.268954][ T5828] dvb-usb: schedule remote query interval to 150 msecs. [ 775.308303][ T5828] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 775.326931][ T5828] usb 2-1: USB disconnect, device number 62 [ 775.347619][T17082] netlink: 'syz.6.2766': attribute type 5 has an invalid length. [ 775.366110][T17082] netlink: 'syz.6.2766': attribute type 2 has an invalid length. [ 775.409082][T17084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.638619][ T5828] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 775.662785][T17084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.863724][T17095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2770'. [ 776.057411][T17100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2771'. [ 776.068211][T17101] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2771'. [ 776.071269][T17098] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2772'. [ 776.088611][T17098] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2772'. [ 776.099893][T17100] 8021q: adding VLAN 0 to HW filter on device bond4 [ 776.186005][T17101] 8021q: adding VLAN 0 to HW filter on device bond5 [ 776.276529][T17098] bond0: entered promiscuous mode [ 776.283353][T17098] bond_slave_0: entered promiscuous mode [ 776.289420][T17098] bond_slave_1: entered promiscuous mode [ 776.297850][T17098] ip6gretap0: entered promiscuous mode [ 776.305939][T17098] debugfs: 'hsr1' already exists in 'hsr' [ 776.314573][T17098] Cannot create hsr debugfs directory [ 776.320242][T17098] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 776.331322][T17098] hsr1: Slave B (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 776.685650][T17113] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2775'. [ 776.733102][T17113] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 777.063775][ T9739] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 777.412213][ T9739] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 777.420632][ T9739] usb 8-1: config 1 has no interface number 0 [ 777.436917][ T9739] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 64 [ 777.470080][ T9739] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 777.510871][ T9739] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 777.520204][ T9739] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.565112][ T9739] usb 8-1: Product: syz [ 777.577084][ T9739] usb 8-1: Manufacturer: syz [ 777.589998][ T9739] usb 8-1: SerialNumber: syz [ 777.628969][T17129] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 777.640591][T17129] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 777.677500][ T9739] usb 8-1: Error in usbnet_get_endpoints (-22) [ 777.863494][ T5828] usb 8-1: USB disconnect, device number 27 [ 777.991641][ T30] audit: type=1326 audit(1760422844.073:6757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17139 comm="syz.4.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c298eec9 code=0x7ffc0000 [ 778.075280][ T30] audit: type=1326 audit(1760422844.093:6758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17139 comm="syz.4.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c298eec9 code=0x7ffc0000 [ 778.099750][ T30] audit: type=1326 audit(1760422844.093:6759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17139 comm="syz.4.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fe8c298eec9 code=0x7ffc0000 [ 778.129934][ T30] audit: type=1326 audit(1760422844.093:6760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17139 comm="syz.4.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c298eec9 code=0x7ffc0000 [ 778.159443][ T30] audit: type=1326 audit(1760422844.093:6761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17139 comm="syz.4.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c298eec9 code=0x7ffc0000 [ 778.183658][ T30] audit: type=1326 audit(1760422844.093:6762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17139 comm="syz.4.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe8c298eec9 code=0x7ffc0000 [ 778.207252][ T30] audit: type=1326 audit(1760422844.093:6763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17139 comm="syz.4.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c298eec9 code=0x7ffc0000 [ 778.259654][ T30] audit: type=1326 audit(1760422844.093:6764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17139 comm="syz.4.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c298eec9 code=0x7ffc0000 [ 778.396619][ T9739] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 778.448980][ T30] audit: type=1326 audit(1760422844.093:6765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17139 comm="syz.4.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fe8c298eec9 code=0x7ffc0000 [ 778.473863][ T30] audit: type=1326 audit(1760422844.093:6766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17139 comm="syz.4.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c298eec9 code=0x7ffc0000 [ 778.605663][ T9739] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 778.615008][ T9739] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.644031][ T9739] usb 2-1: config 0 descriptor?? [ 778.657042][ T9739] cp210x 2-1:0.0: cp210x converter detected [ 778.700011][T17154] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2784'. [ 778.710628][T17154] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2784'. [ 778.831723][T17154] bond0: entered promiscuous mode [ 778.860462][T17154] bond_slave_0: entered promiscuous mode [ 778.872920][ T9739] usb 2-1: cp210x converter now attached to ttyUSB0 [ 778.902217][T17154] bond_slave_1: entered promiscuous mode [ 778.916946][T17154] ip6gretap0: entered promiscuous mode [ 778.933547][T17154] debugfs: 'hsr1' already exists in 'hsr' [ 778.939437][T17154] Cannot create hsr debugfs directory [ 779.060312][ T5828] usb 2-1: USB disconnect, device number 63 [ 779.069413][ T5828] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 779.090800][ T5828] cp210x 2-1:0.0: device disconnected [ 779.472974][T17170] netlink: 'syz.5.2790': attribute type 1 has an invalid length. [ 779.510443][ T5828] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 779.674366][ T5828] usb 5-1: config 0 has an invalid interface number: 229 but max is 0 [ 779.682668][ T5828] usb 5-1: config 0 has no interface number 0 [ 779.690852][ T5828] usb 5-1: New USB device found, idVendor=0781, idProduct=55e8, bcdDevice=44.f3 [ 779.699907][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.708006][ T5828] usb 5-1: Product: syz [ 779.712235][ T5828] usb 5-1: Manufacturer: syz [ 779.716845][ T5828] usb 5-1: SerialNumber: syz [ 779.724868][ T5828] usb 5-1: config 0 descriptor?? [ 779.850465][ T9739] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 779.939282][T17167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.949783][T17167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.962766][ T5828] usb-storage 5-1:0.229: USB Mass Storage device detected [ 779.974101][ T5828] usb-storage 5-1:0.229: Quirks match for vid 0781 pid 55e8: 800000 [ 780.053650][ T9739] usb 2-1: Using ep0 maxpacket: 16 [ 780.082275][ T5828] usb 5-1: USB disconnect, device number 53 [ 780.106733][ T9739] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 780.163029][ T9739] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 780.186445][ T9739] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 780.229492][ T9739] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.253455][ T9739] usb 2-1: Product: syz [ 780.260465][ T9739] usb 2-1: Manufacturer: syz [ 780.265182][ T9739] usb 2-1: SerialNumber: syz [ 780.418804][T17197] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2796'. [ 780.435187][T17197] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2796'. [ 780.455992][T17200] netlink: 'syz.5.2797': attribute type 1 has an invalid length. [ 780.696490][T17174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 780.713303][T17174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.730791][ T9739] usb 2-1: 0:2 : does not exist [ 780.823116][ T9739] usb 2-1: USB disconnect, device number 64 [ 780.833490][T17212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 780.860256][T17212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 781.090502][ T5828] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 781.220447][ T5828] usb 5-1: device descriptor read/64, error -71 [ 781.290607][T17222] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2803'. [ 781.500653][ T5828] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 781.515303][T17228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 781.639722][T17228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 781.670467][ T5828] usb 5-1: device descriptor read/64, error -71 [ 781.740464][ T116] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 781.792902][ T5828] usb usb5-port1: attempt power cycle [ 781.900458][ T116] usb 2-1: Using ep0 maxpacket: 8 [ 781.907315][ T116] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 781.967524][ T116] usb 2-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 781.996388][T17233] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2805'. [ 782.005870][ T116] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 782.052520][ T116] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 782.061824][ T116] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.069982][ T116] usb 2-1: Product: syz [ 782.074396][ T116] usb 2-1: Manufacturer: syz [ 782.079034][ T116] usb 2-1: SerialNumber: syz [ 782.133196][ T116] usb 2-1: config 0 descriptor?? [ 782.223771][ T5828] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 782.265604][ T5828] usb 5-1: device descriptor read/8, error -71 [ 782.349568][ T116] usb 2-1: USB disconnect, device number 65 [ 782.510483][ T5828] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 782.581261][ T5828] usb 5-1: device descriptor read/8, error -71 [ 782.752987][ T5828] usb usb5-port1: unable to enumerate USB device [ 782.993760][T17237] dlm: Unknown command passed to DLM device : 15 [ 782.993760][T17237] [ 783.020473][ T9739] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 783.170508][ T9739] usb 7-1: Using ep0 maxpacket: 32 [ 783.179920][ T9739] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 783.189485][ T9739] usb 7-1: config 0 has no interface number 0 [ 783.200218][ T9739] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 783.209696][ T9739] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.219280][ T9739] usb 7-1: Product: syz [ 783.225014][ T9739] usb 7-1: Manufacturer: syz [ 783.229967][ T9739] usb 7-1: SerialNumber: syz [ 783.250443][ T5828] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 783.252292][ T9739] usb 7-1: config 0 descriptor?? [ 783.414226][ T5828] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 783.425169][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.433854][ T5828] usb 2-1: Product: syz [ 783.438125][ T5828] usb 2-1: Manufacturer: syz [ 783.443191][ T5828] usb 2-1: SerialNumber: syz [ 783.469990][ T9739] radio-si470x 7-1:0.35: this is not a si470x device. [ 783.678316][ T9739] radio-raremono 7-1:0.35: this is not Thanko's Raremono. [ 783.693861][ T9739] usb 7-1: USB disconnect, device number 50 [ 784.140613][ T7683] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 784.189129][T17251] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2812'. [ 784.295117][T17237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2807'. [ 784.304725][ T7683] usb 5-1: Using ep0 maxpacket: 32 [ 784.318696][ T7683] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 784.331079][T17237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2807'. [ 784.340628][ T7683] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 784.359027][ T7683] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 784.374719][ T7683] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 784.391716][ T7683] usb 5-1: Product: syz [ 784.406981][ T5828] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 784.440846][ T7683] usb 5-1: Manufacturer: syz [ 784.498795][ T5828] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 784.507696][ T7683] hub 5-1:4.0: USB hub found [ 784.547513][ T5828] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 784.588149][ T5828] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 784.614548][ T5828] usb 2-1: USB disconnect, device number 66 [ 784.702764][ T7683] hub 5-1:4.0: 7 ports detected [ 784.708210][ T7683] hub 5-1:4.0: insufficient power available to use all downstream ports [ 784.995029][ T7683] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 785.008112][ T7683] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 785.060233][ T7683] usb 5-1: USB disconnect, device number 58 [ 785.635561][T17282] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2818'. [ 785.985814][ T7683] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 786.130473][ T7683] usb 8-1: device descriptor read/64, error -71 [ 786.383060][ T7683] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 786.541783][ T7683] usb 8-1: device descriptor read/64, error -71 [ 786.605742][T17298] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 786.650879][ T7683] usb usb8-port1: attempt power cycle [ 786.951114][T17309] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 786.990770][ T7683] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 787.033846][ T7683] usb 8-1: device descriptor read/8, error -71 [ 787.287775][ T7683] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 787.331438][ T7683] usb 8-1: device descriptor read/8, error -71 [ 787.449681][ T7683] usb usb8-port1: unable to enumerate USB device [ 787.529734][T17330] netlink: 'syz.6.2831': attribute type 1 has an invalid length. [ 787.542210][T17330] netlink: 'syz.6.2831': attribute type 6 has an invalid length. [ 787.550133][T17330] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2831'. [ 787.701047][T17336] openvswitch: netlink: Duplicate or invalid key (type 0). [ 787.710121][T17336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 787.810486][ T7683] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 787.920471][ T1210] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 787.962411][ T7683] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 787.973684][ T7683] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.989731][ T7683] usb 5-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 788.005550][ T7683] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.021034][ T7683] usb 5-1: config 0 descriptor?? [ 788.072445][ T1210] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 788.085576][ T1210] usb 7-1: config 0 interface 0 has no altsetting 1 [ 788.098839][ T1210] usb 7-1: New USB device found, idVendor=0499, idProduct=5ae2, bcdDevice= 9.0f [ 788.117816][ T1210] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 788.134706][ T1210] usb 7-1: Product: syz [ 788.143597][ T1210] usb 7-1: Manufacturer: syz [ 788.152342][ T1210] usb 7-1: SerialNumber: syz [ 788.163917][ T1210] usb 7-1: config 0 descriptor?? [ 788.642573][ T1210] usb 7-1: USB disconnect, device number 51 [ 788.742428][T17351] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 788.887441][T17355] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 788.908473][T12104] udevd[12104]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 789.196639][T17359] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2837'. [ 789.208532][T17359] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2837'. [ 790.315340][T17376] netlink: 'syz.5.2840': attribute type 1 has an invalid length. [ 790.921256][ T5828] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 791.230472][ T116] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 791.341038][ T5828] usb 2-1: Using ep0 maxpacket: 32 [ 791.351803][ T5828] usb 2-1: config 7 has an invalid interface number: 123 but max is 0 [ 791.370237][ T5828] usb 2-1: config 7 has no interface number 0 [ 791.386844][ T5828] usb 2-1: config 7 interface 123 altsetting 6 bulk endpoint 0xC has invalid maxpacket 8 [ 791.429441][ T5828] usb 2-1: config 7 interface 123 has no altsetting 0 [ 791.452336][ T5828] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0123, bcdDevice=b0.be [ 791.480485][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.530534][ T5828] usb 2-1: Product: syz [ 791.540696][ T5828] usb 2-1: Manufacturer: syz [ 791.550627][ T116] usb 7-1: Using ep0 maxpacket: 32 [ 791.555994][ T5828] usb 2-1: SerialNumber: syz [ 791.597446][ T116] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.651388][ T116] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 791.661669][T17373] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 791.695565][ T116] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 791.730746][ T7683] usbhid 5-1:0.0: can't add hid device: -71 [ 791.736900][ T7683] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 791.760428][ T116] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.800956][ T7683] usb 5-1: USB disconnect, device number 59 [ 791.810110][ T116] usb 7-1: config 0 descriptor?? [ 791.887391][T17373] fuse: Unknown parameter 'gr p_id' [ 791.905869][ T5828] kvaser_usb 2-1:7.123: error -ENODEV: Cannot get usb endpoint(s) [ 791.937351][ T5828] usb 2-1: USB disconnect, device number 67 [ 792.144230][T17383] netlink: 'syz.4.2844': attribute type 10 has an invalid length. [ 792.152901][T17383] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2844'. [ 792.263626][ T116] savu 0003:1E7D:2D5A.0022: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 792.516253][ T116] usb 7-1: USB disconnect, device number 52 [ 792.658333][T17397] bond6: Unable to set peer notification delay as MII monitoring is disabled [ 792.687718][T17397] bond6 (unregistering): Released all slaves [ 792.825033][T17406] loop5: detected capacity change from 0 to 7 [ 792.834781][T17406] Dev loop5: unable to read RDB block 7 [ 792.849007][T17406] loop5: unable to read partition table [ 792.870787][T17406] loop5: partition table beyond EOD, truncated [ 792.900483][T17406] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 793.124999][T17419] autofs4:pid:17419:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 793.165008][T17419] fuse: Unknown parameter 'nTracerPid: 0 [ 793.165008][T17419] Uid: 0 0 0 0 [ 793.165008][T17419] Gid: 0 0 0 0 [ 793.165008][T17419] FDSize: 256 [ 793.165008][T17419] Groups: 0 65534 [ 793.165008][T17419] NStgid: 1087 [ 793.165008][T17419] NSpid: 1088 [ 793.165008][T17419] NSpgid: 1087 [ 793.165008][T17419] NSsid: 0 [ 793.165008][T17419] Kthread: 0 [ 793.165008][T17419] VmPeak: 102020 kB [ 793.165008][T17419] VmSize: 102020 kB [ 793.165008][T17419] VmLck: 0 kB [ 793.165008][T17419] VmPin: 0 kB [ 793.165008][T17419] VmHWM: 24300 kB [ 793.165008][T17419] VmRSS: 24300 kB [ 793.165008][T17419] RssAnon: 1348 kB [ 793.165008][T17419] RssFile: 22952 kB [ 793.165008][T17419] RssShmem: 0 kB [ 793.165008][T17419] VmData: 36584 kB [ 793.165008][T17419] VmStk: 132 kB [ 793.165008][T17419] VmExe: 1676 kB [ 793.165008][T17419] VmLib: 8 kB [ 793.165008][T17419] VmPTE: 128 kB [ 793.165008][T17419] VmSwap: 0 kB [ 793.165008][T17419] HugetlbPages: 0 kB [ 793.165008][T17419] CoreDumping: 0 [ 793.165008][T17419] THP_enabled: 1 [ 793.165008][T17419] untag_mask: 0xffffffffffffffff [ 793.165008][T17419] Threads: 2 [ 793.165008][T17419] SigQ: 0/13009 [ 793.165008][T17419] SigPnd: 0000000000000000 [ 793.165008][T17419] ShdPnd: 0000000000000000 [ 793.165008][T17419] SigBlk: 0000000000000000 [ 793.165008][T17419] SigIgn: fffffffefffaba35 [ 793.165008][T17419] SigCgt: 0000000100010440 [ 793.165008][T17419] CapInh: 0000000000000000 [ 793.165008][T17419] CapPrm: 000001ffff77ffff [ 793.165008][T17419] CapEff: 000001ffff77ffff [ 793.165008][T17419] CapBnd: 000001ffffffffff [ 793.165008][T17419] CapAmb: 0000000000000000 [ 793.165008][T17419] NoNewPrivs: 0 [ 793.165008][T17419] Seccomp: 0 [ 793.165008][T17419] Seccomp_filters: 0 [ 793.165008][T17419] Speculation_Store_Bypass: thread vulnerable [ 793.165008][T17419] SpeculationIndirectBranch: conditional enabled [ 793.165008][T17419] Cpus_allowed: 3 [ 793.440465][ T116] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 793.517068][T17430] loop2: detected capacity change from 0 to 7 [ 793.559433][T12104] Dev loop2: unable to read RDB block 7 [ 793.573726][T12104] loop2: unable to read partition table [ 793.589113][T12104] loop2: partition table beyond EOD, truncated [ 793.600587][ T116] usb 2-1: Using ep0 maxpacket: 32 [ 793.610320][T17430] Dev loop2: unable to read RDB block 7 [ 793.611149][ T116] usb 2-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 793.616426][T17430] loop2: unable to read partition table [ 793.654697][ T116] usb 2-1: config 0 interface 0 has no altsetting 0 [ 793.675048][ T116] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 793.691486][T17433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 793.713116][T17430] loop2: partition table beyond EOD, truncated [ 793.713270][T17433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 793.721854][T17430] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 793.727340][ T116] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.762684][ T116] usb 2-1: config 0 descriptor?? [ 794.176381][T17411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.184980][ T7683] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 794.195414][T17411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 794.238622][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 794.238641][ T30] audit: type=1804 audit(1760422860.313:6803): pid=17441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.2854" name="/newroot/177/file1" dev="fuse" ino=1 res=1 errno=0 [ 794.390707][ T7683] usb 5-1: Using ep0 maxpacket: 16 [ 794.406633][ T7683] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 794.449965][ T7683] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 794.498390][ T7683] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 794.545227][ T7683] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 794.554462][ T7683] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.585925][ T7683] usb 5-1: config 0 descriptor?? [ 794.631245][T17439] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 794.723440][T17411] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 794.950184][T17411] dvmrp0: entered allmulticast mode [ 795.241168][ T116] aquacomputer_d5next 0003:0C70:F00E.0023: hidraw0: USB HID v4.06 Device [HID 0c70:f00e] on usb-dummy_hcd.1-1/input0 [ 795.254896][T17411] dvmrp0: left allmulticast mode [ 795.262362][ C1] usb 2-1: input irq status -75 received [ 795.424184][T17413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.557776][T17413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.784851][ T116] usb 2-1: USB disconnect, device number 68 [ 795.799846][ T7683] usbhid 5-1:0.0: can't add hid device: -71 [ 795.831342][ T7683] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 795.854027][ T7683] usb 5-1: USB disconnect, device number 60 [ 796.015709][T17470] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2867'. [ 796.066181][T17471] tipc: Enabled bearer , priority 0 [ 796.078238][T17471] syzkaller0: entered promiscuous mode [ 796.087088][T17471] syzkaller0: entered allmulticast mode [ 796.104801][T17471] tipc: Resetting bearer [ 796.115135][T17471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 796.126088][T17471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 796.140431][ T5915] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 796.160894][T17467] tipc: Resetting bearer [ 796.185542][T17467] tipc: Disabling bearer [ 796.196913][T17475] netlink: 'syz.7.2868': attribute type 1 has an invalid length. [ 796.246768][T17475] bond1: entered promiscuous mode [ 796.254482][T17475] bond1: entered allmulticast mode [ 796.260289][T17475] 8021q: adding VLAN 0 to HW filter on device bond1 [ 796.286705][T17475] bridge1: entered promiscuous mode [ 796.292596][ T5915] usb 7-1: Using ep0 maxpacket: 32 [ 796.299073][T17475] bridge1: entered allmulticast mode [ 796.299198][ T5915] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 796.346813][T17475] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 796.350597][T16431] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 796.595981][ T5915] usb 7-1: config 0 has no interface number 0 [ 796.606962][ T5915] usb 7-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 796.640499][ T5915] usb 7-1: config 0 interface 1 has no altsetting 0 [ 796.657228][ T5915] usb 7-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 796.681605][ T5915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.689622][ T5915] usb 7-1: Product: syz [ 796.697401][T17484] syzkaller1: entered promiscuous mode [ 796.713247][T12552] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 796.720824][ T5915] usb 7-1: Manufacturer: syz [ 796.737797][T17484] syzkaller1: entered allmulticast mode [ 796.750417][ T5915] usb 7-1: SerialNumber: syz [ 796.789114][ T5915] usb 7-1: config 0 descriptor?? [ 796.966915][T17489] loop2: detected capacity change from 0 to 7 [ 796.974845][T17489] loop2: [ 796.984664][T17489] loop2: partition table partially beyond EOD, truncated [ 797.027239][ T5915] cx231xx 7-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 797.097833][ T5915] cx231xx 7-1:0.1: Failed to read PCB config [ 797.140505][ T5915] cx231xx 7-1:0.1: probe with driver cx231xx failed with error -71 [ 797.213113][ T5915] usb 7-1: USB disconnect, device number 53 [ 797.567194][ T5915] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 797.741334][ T5915] usb 7-1: Using ep0 maxpacket: 32 [ 797.849041][ T5915] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 797.857219][ T5915] usb 7-1: config 0 has no interface number 0 [ 797.863619][ T5915] usb 7-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 797.874895][ T5915] usb 7-1: config 0 interface 1 has no altsetting 0 [ 797.888333][ T5915] usb 7-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 797.897677][ T5915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.916195][ T5915] usb 7-1: Product: syz [ 797.925001][ T5915] usb 7-1: Manufacturer: syz [ 798.021492][ T5915] usb 7-1: SerialNumber: syz [ 798.027797][ T5915] usb 7-1: config 0 descriptor?? [ 798.359016][T17464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 798.400656][T17464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.651041][ T5915] cx231xx 7-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 798.663409][ T5915] cx231xx 7-1:0.1: Failed to read PCB config [ 798.689578][ T5915] cx231xx 7-1:0.1: probe with driver cx231xx failed with error -32 [ 799.087400][ T5915] usb 7-1: USB disconnect, device number 54 [ 799.831009][T17526] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2881'. [ 800.523014][T17505] Bluetooth: hci0: command 0x0405 tx timeout [ 800.759025][T17543] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2885'. [ 800.792177][T17543] random: crng reseeded on system resumption [ 801.441189][ T5915] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 801.866484][ T5915] usb 5-1: Using ep0 maxpacket: 32 [ 801.892299][T17557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.898778][ T5915] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 801.973446][ T5915] usb 5-1: config 0 has no interface number 0 [ 801.973581][T17557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 801.987478][ T5915] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 802.032514][T17557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 802.032517][ T5915] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 802.032542][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.079547][T17557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 802.108715][T17557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 802.140019][T17557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 802.165272][ T5915] usb 5-1: Product: syz [ 802.178427][ T5915] usb 5-1: Manufacturer: syz [ 802.211944][ T5915] usb 5-1: SerialNumber: syz [ 802.254330][ T5915] usb 5-1: config 0 descriptor?? [ 802.305487][ T5915] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 802.320507][ T5915] em28xx 5-1:0.132: Video interface 132 found: [ 802.533065][T17562] Failed to get privilege flags for destination (handle=0x2:0x0) [ 802.761328][ T5915] em28xx 5-1:0.132: chip ID is em2840 [ 803.169729][T17567] loop5: detected capacity change from 0 to 7 [ 803.188705][T17567] Dev loop5: unable to read RDB block 7 [ 803.298406][T17567] loop5: unable to read partition table [ 803.299269][T17567] loop5: partition table beyond EOD, truncated [ 803.299296][T17567] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 803.373101][T17569] binder: 17554:17569 ioctl c0306201 0 returned -14 [ 803.760567][ T116] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 803.951668][ T116] usb 2-1: Using ep0 maxpacket: 32 [ 803.977639][ T116] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 803.989734][ T116] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.001449][ T116] usb 2-1: config 0 descriptor?? [ 804.101901][ T116] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 804.121101][ T5915] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 804.146006][ T5915] em28xx 5-1:0.132: board has no eeprom [ 804.190682][ T7683] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 804.210429][ T5915] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 804.218414][ T5915] em28xx 5-1:0.132: analog set to bulk mode. [ 804.225558][ T9760] em28xx 5-1:0.132: Registering V4L2 extension [ 804.262959][T17593] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2893'. [ 804.299377][ T116] gspca_vc032x: reg_r err -32 [ 804.316151][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 804.332894][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 804.355184][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 804.367405][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 804.380539][ T9760] em28xx 5-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 804.402701][ T9760] em28xx 5-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 804.410807][ T7683] usb 8-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 804.420378][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 804.439232][ T7683] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.449056][ T9760] em28xx 5-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 804.484340][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 804.489865][ T7683] usb 8-1: Product: syz [ 804.505088][ T7683] usb 8-1: Manufacturer: syz [ 804.509825][ T7683] usb 8-1: SerialNumber: syz [ 804.510936][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 804.525630][ T5915] usb 5-1: USB disconnect, device number 61 [ 804.572517][ T5915] em28xx 5-1:0.132: Disconnecting em28xx [ 804.579522][ T9760] em28xx 5-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 804.591686][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 804.597014][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 804.604847][ T7683] usb 8-1: config 0 descriptor?? [ 804.616093][ T7683] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 804.616645][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 804.654039][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 804.672051][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 804.677521][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 804.721529][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 804.795489][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 804.803512][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 804.809326][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 804.829227][ T116] gspca_vc032x: I2c Bus Busy Wait 00 [ 805.029464][ T116] gspca_vc032x: Unknown sensor... [ 805.079406][ T116] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 805.213637][ T116] usb 2-1: USB disconnect, device number 69 [ 805.511489][ T7683] gspca_sunplus: reg_r err -71 [ 805.516350][ T7683] sunplus 8-1:0.0: probe with driver sunplus failed with error -71 [ 805.649080][ T7683] usb 8-1: USB disconnect, device number 32 [ 805.719831][ T9760] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 805.794911][ T9760] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 805.830142][ T9760] em28xx 5-1:0.132: No AC97 audio processor [ 805.848484][T17618] wireguard0: entered promiscuous mode [ 805.854861][T17618] wireguard0: entered allmulticast mode [ 805.944262][ T9760] usb 5-1: Decoder not found [ 806.010397][ T9760] em28xx 5-1:0.132: failed to create media graph [ 806.081149][ T9760] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 806.134786][T17628] ================================================================== [ 806.142896][T17628] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 806.150277][T17628] Read of size 8 at addr ffff888062f80740 by task v4l_id/17628 [ 806.153064][ T9760] em28xx 5-1:0.132: Remote control support is not available for this card. [ 806.157904][T17628] [ 806.157918][T17628] CPU: 0 UID: 0 PID: 17628 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 806.157938][T17628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 806.157949][T17628] Call Trace: [ 806.157958][T17628] [ 806.157966][T17628] dump_stack_lvl+0x189/0x250 [ 806.157989][T17628] ? __virt_addr_valid+0x1c8/0x5c0 [ 806.158009][T17628] ? rcu_is_watching+0x15/0xb0 [ 806.158032][T17628] ? __pfx_dump_stack_lvl+0x10/0x10 [ 806.158049][T17628] ? rcu_is_watching+0x15/0xb0 [ 806.158071][T17628] ? lock_release+0x4b/0x3e0 [ 806.158092][T17628] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 806.158118][T17628] ? __virt_addr_valid+0x1c8/0x5c0 [ 806.158134][T17628] ? __virt_addr_valid+0x4a5/0x5c0 [ 806.158153][T17628] print_report+0xca/0x240 [ 806.158173][T17628] ? v4l2_fh_open+0xac/0x420 [ 806.158188][T17628] kasan_report+0x118/0x150 [ 806.158209][T17628] ? v4l2_fh_open+0xac/0x420 [ 806.158228][T17628] v4l2_fh_open+0xac/0x420 [ 806.158244][T17628] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 806.158264][T17628] em28xx_v4l2_open+0x157/0x9a0 [ 806.158291][T17628] v4l2_open+0x1bf/0x3a0 [ 806.158310][T17628] chrdev_open+0x4cc/0x5e0 [ 806.158332][T17628] ? __pfx_chrdev_open+0x10/0x10 [ 806.158353][T17628] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 806.158377][T17628] ? __pfx_chrdev_open+0x10/0x10 [ 806.158396][T17628] do_dentry_open+0x953/0x13f0 [ 806.158430][T17628] vfs_open+0x3b/0x340 [ 806.158451][T17628] ? path_openat+0x2ecd/0x3830 [ 806.158468][T17628] path_openat+0x2ee5/0x3830 [ 806.158498][T17628] ? __pfx_path_openat+0x10/0x10 [ 806.158521][T17628] do_filp_open+0x1fa/0x410 [ 806.158537][T17628] ? __lock_acquire+0xab9/0xd20 [ 806.158557][T17628] ? __pfx_do_filp_open+0x10/0x10 [ 806.158581][T17628] ? _raw_spin_unlock+0x28/0x50 [ 806.158604][T17628] ? alloc_fd+0x64c/0x6c0 [ 806.158627][T17628] do_sys_openat2+0x121/0x1c0 [ 806.158651][T17628] ? __pfx_do_sys_openat2+0x10/0x10 [ 806.158674][T17628] ? exc_page_fault+0x82/0x100 [ 806.158692][T17628] ? do_user_addr_fault+0xc85/0x1380 [ 806.158713][T17628] __x64_sys_openat+0x138/0x170 [ 806.158739][T17628] do_syscall_64+0xfa/0xfa0 [ 806.158755][T17628] ? lockdep_hardirqs_on+0x9c/0x150 [ 806.158772][T17628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.158789][T17628] ? clear_bhb_loop+0x60/0xb0 [ 806.158807][T17628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.158825][T17628] RIP: 0033:0x7fd1530a7407 [ 806.158842][T17628] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 806.158857][T17628] RSP: 002b:00007ffe16ae88f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 806.158876][T17628] RAX: ffffffffffffffda RBX: 00007fd153764880 RCX: 00007fd1530a7407 [ 806.158890][T17628] RDX: 0000000000000000 RSI: 00007ffe16ae9f1b RDI: ffffffffffffff9c [ 806.158902][T17628] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 806.158913][T17628] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 806.158924][T17628] R13: 00007ffe16ae8b40 R14: 00007fd1538cb000 R15: 000055862ef124d8 [ 806.158944][T17628] [ 806.158951][T17628] [ 806.471944][T17628] Allocated by task 9760: [ 806.476264][T17628] kasan_save_track+0x3e/0x80 [ 806.480942][T17628] __kasan_kmalloc+0x93/0xb0 [ 806.485545][T17628] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 806.490901][T17628] em28xx_v4l2_init+0x10b/0x2e70 [ 806.495841][T17628] em28xx_init_extension+0x120/0x1c0 [ 806.501647][T17628] process_scheduled_works+0xae1/0x17b0 [ 806.507530][T17628] worker_thread+0x8a0/0xda0 [ 806.512123][T17628] kthread+0x711/0x8a0 [ 806.516183][T17628] ret_from_fork+0x4bc/0x870 [ 806.520768][T17628] ret_from_fork_asm+0x1a/0x30 [ 806.525521][T17628] [ 806.527830][T17628] Freed by task 9760: [ 806.531792][T17628] kasan_save_track+0x3e/0x80 [ 806.536454][T17628] __kasan_save_free_info+0x46/0x50 [ 806.541649][T17628] __kasan_slab_free+0x5c/0x80 [ 806.546398][T17628] kfree+0x19a/0x6d0 [ 806.550271][T17628] em28xx_v4l2_init+0x1683/0x2e70 [ 806.555378][T17628] em28xx_init_extension+0x120/0x1c0 [ 806.560652][T17628] process_scheduled_works+0xae1/0x17b0 [ 806.566187][T17628] worker_thread+0x8a0/0xda0 [ 806.570765][T17628] kthread+0x711/0x8a0 [ 806.574816][T17628] ret_from_fork+0x4bc/0x870 [ 806.579414][T17628] ret_from_fork_asm+0x1a/0x30 [ 806.584181][T17628] [ 806.586509][T17628] The buggy address belongs to the object at ffff888062f80000 [ 806.586509][T17628] which belongs to the cache kmalloc-8k of size 8192 [ 806.600645][T17628] The buggy address is located 1856 bytes inside of [ 806.600645][T17628] freed 8192-byte region [ffff888062f80000, ffff888062f82000) [ 806.614606][T17628] [ 806.616918][T17628] The buggy address belongs to the physical page: [ 806.623319][T17628] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x62f80 [ 806.632069][T17628] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 806.640552][T17628] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 806.648095][T17628] page_type: f5(slab) [ 806.652063][T17628] raw: 00fff00000000040 ffff88813ffa7280 ffffea00016a8400 dead000000000002 [ 806.660628][T17628] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 806.669192][T17628] head: 00fff00000000040 ffff88813ffa7280 ffffea00016a8400 dead000000000002 [ 806.677844][T17628] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 806.686495][T17628] head: 00fff00000000003 ffffea00018be001 00000000ffffffff 00000000ffffffff [ 806.695152][T17628] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 806.703801][T17628] page dumped because: kasan: bad access detected [ 806.710205][T17628] page_owner tracks the page as allocated [ 806.715898][T17628] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 15337, tgid 15328 (syz.1.2383), ts 675683571924, free_ts 674576534501 [ 806.737422][T17628] post_alloc_hook+0x240/0x2a0 [ 806.742184][T17628] get_page_from_freelist+0x2365/0x2440 [ 806.747717][T17628] __alloc_frozen_pages_noprof+0x181/0x370 [ 806.753513][T17628] alloc_pages_mpol+0x232/0x4a0 [ 806.758359][T17628] allocate_slab+0x96/0x3a0 [ 806.762849][T17628] ___slab_alloc+0xe94/0x18a0 [ 806.767512][T17628] __slab_alloc+0x65/0x100 [ 806.771912][T17628] __kmalloc_noprof+0x471/0x7f0 [ 806.776830][T17628] vhost_dev_set_owner+0x298/0xb10 [ 806.781924][T17628] vhost_dev_ioctl+0xc6/0xe00 [ 806.786579][T17628] vhost_vsock_dev_ioctl+0x21f/0xdc0 [ 806.791847][T17628] __se_sys_ioctl+0xfc/0x170 [ 806.796417][T17628] do_syscall_64+0xfa/0xfa0 [ 806.800902][T17628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.806782][T17628] page last free pid 5198 tgid 5198 stack trace: [ 806.813095][T17628] __free_frozen_pages+0xbc4/0xd30 [ 806.818188][T17628] __slab_free+0x2e7/0x390 [ 806.822589][T17628] qlist_free_all+0x97/0x140 [ 806.827178][T17628] kasan_quarantine_reduce+0x148/0x160 [ 806.832618][T17628] __kasan_slab_alloc+0x22/0x80 [ 806.837452][T17628] kmem_cache_alloc_noprof+0x367/0x6e0 [ 806.842901][T17628] getname_flags+0xb8/0x540 [ 806.847388][T17628] do_sys_openat2+0xbc/0x1c0 [ 806.851967][T17628] __x64_sys_openat+0x138/0x170 [ 806.856803][T17628] do_syscall_64+0xfa/0xfa0 [ 806.861469][T17628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.867347][T17628] [ 806.869651][T17628] Memory state around the buggy address: [ 806.875271][T17628] ffff888062f80600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 806.883329][T17628] ffff888062f80680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 806.891372][T17628] >ffff888062f80700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 806.899410][T17628] ^ [ 806.905810][T17628] ffff888062f80780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 806.913851][T17628] ffff888062f80800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 806.921980][T17628] ================================================================== [ 806.930232][ T5915] em28xx 5-1:0.132: Closing input extension [ 807.102939][T17630] loop5: detected capacity change from 0 to 7 [ 807.112518][ T5836] Dev loop5: unable to read RDB block 7 [ 807.118172][ T5836] loop5: unable to read partition table [ 807.125900][ T5836] loop5: partition table beyond EOD, truncated [ 807.135853][T17628] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 807.143061][T17628] CPU: 1 UID: 0 PID: 17628 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 807.152063][T17628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 807.162097][T17628] Call Trace: [ 807.165366][T17628] [ 807.168290][T17628] dump_stack_lvl+0x99/0x250 [ 807.172878][T17628] ? __asan_memcpy+0x40/0x70 [ 807.177457][T17628] ? __pfx_dump_stack_lvl+0x10/0x10 [ 807.182657][T17628] ? __pfx__printk+0x10/0x10 [ 807.187231][T17628] vpanic+0x237/0x6d0 [ 807.191199][T17628] ? __pfx_vpanic+0x10/0x10 [ 807.195711][T17628] ? preempt_schedule+0xae/0xc0 [ 807.200571][T17628] ? __pfx_preempt_schedule+0x10/0x10 [ 807.205958][T17628] panic+0xb9/0xc0 [ 807.209696][T17628] ? __pfx_panic+0x10/0x10 [ 807.214111][T17628] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 807.219993][T17628] ? is_module_address+0x17/0xf0 [ 807.225001][T17628] ? v4l2_fh_open+0xac/0x420 [ 807.229575][T17628] check_panic_on_warn+0x89/0xb0 [ 807.234493][T17628] ? v4l2_fh_open+0xac/0x420 [ 807.239066][T17628] end_report+0x78/0x160 [ 807.243294][T17628] kasan_report+0x129/0x150 [ 807.247778][T17628] ? v4l2_fh_open+0xac/0x420 [ 807.252354][T17628] v4l2_fh_open+0xac/0x420 [ 807.256752][T17628] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 807.262712][T17628] em28xx_v4l2_open+0x157/0x9a0 [ 807.267547][T17628] v4l2_open+0x1bf/0x3a0 [ 807.271771][T17628] chrdev_open+0x4cc/0x5e0 [ 807.276181][T17628] ? __pfx_chrdev_open+0x10/0x10 [ 807.281118][T17628] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 807.287443][T17628] ? __pfx_chrdev_open+0x10/0x10 [ 807.292368][T17628] do_dentry_open+0x953/0x13f0 [ 807.297120][T17628] vfs_open+0x3b/0x340 [ 807.301172][T17628] ? path_openat+0x2ecd/0x3830 [ 807.305929][T17628] path_openat+0x2ee5/0x3830 [ 807.310547][T17628] ? __pfx_path_openat+0x10/0x10 [ 807.315498][T17628] do_filp_open+0x1fa/0x410 [ 807.319983][T17628] ? __lock_acquire+0xab9/0xd20 [ 807.324815][T17628] ? __pfx_do_filp_open+0x10/0x10 [ 807.329825][T17628] ? _raw_spin_unlock+0x28/0x50 [ 807.334668][T17628] ? alloc_fd+0x64c/0x6c0 [ 807.338995][T17628] do_sys_openat2+0x121/0x1c0 [ 807.343664][T17628] ? __pfx_do_sys_openat2+0x10/0x10 [ 807.348857][T17628] ? exc_page_fault+0x82/0x100 [ 807.353607][T17628] ? do_user_addr_fault+0xc85/0x1380 [ 807.358981][T17628] __x64_sys_openat+0x138/0x170 [ 807.363852][T17628] do_syscall_64+0xfa/0xfa0 [ 807.368349][T17628] ? lockdep_hardirqs_on+0x9c/0x150 [ 807.373529][T17628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.379584][T17628] ? clear_bhb_loop+0x60/0xb0 [ 807.384258][T17628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.390138][T17628] RIP: 0033:0x7fd1530a7407 [ 807.394537][T17628] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 807.414129][T17628] RSP: 002b:00007ffe16ae88f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 807.422537][T17628] RAX: ffffffffffffffda RBX: 00007fd153764880 RCX: 00007fd1530a7407 [ 807.430497][T17628] RDX: 0000000000000000 RSI: 00007ffe16ae9f1b RDI: ffffffffffffff9c [ 807.438457][T17628] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 807.446416][T17628] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 807.454368][T17628] R13: 00007ffe16ae8b40 R14: 00007fd1538cb000 R15: 000055862ef124d8 [ 807.462327][T17628] [ 807.465718][T17628] Kernel Offset: disabled [ 807.470028][T17628] Rebooting in 86400 seconds..