last executing test programs: 22m22.513604819s ago: executing program 2 (id=67): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) close(0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020}, 0x2020) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x3084, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x800}, &(0x7f0000ffc000), 0x0, &(0x7f0000000000)) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x0, @empty, 'veth0\x00'}}, 0x1e) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000000)={0x0, 0x10, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f0000000240)={r6}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xe, &(0x7f0000003b40)={0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040b01, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x400) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) 22m19.077372974s ago: executing program 2 (id=89): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000100)={0xed5f, 0x2, 0x3, 0x7}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000240)=[0x0], 0x2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae03, 0x32) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) write(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000340)={&(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000040)={0x500, 0x1, &(0x7f0000000180)=[r7], &(0x7f0000000180), &(0x7f0000000240)=[r8, r8], &(0x7f00000001c0), 0x0, 0xff}) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r9, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r10}) r12 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r12, 0xc01064ab, &(0x7f0000000380)={0xfffffffffffffffe, r11, r10}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r9, 0xc01064ab, &(0x7f0000000080)={0x0, r11, r10}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000400)={0x100, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[0x3, 0x8, 0x0], &(0x7f0000000380)=[r2, r4, r8, r11], &(0x7f00000003c0)=[0x7, 0x5, 0xffffffff, 0xffff, 0x0, 0x64, 0x1], 0x0, 0x100000000}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, 0x0, &(0x7f0000000040)) 22m15.750199437s ago: executing program 2 (id=108): writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a06e7bc45ff810500000000000058000b480000", 0x24}], 0x1) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xfffffffffffffffe, 0x2000) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0xbb, 0x7e, 0x0, 0x8, 0xeb1, 0x7007, 0x204, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x2, 0x10, 0x7, "", [{{0x9, 0x4, 0x19, 0x2, 0x0, 0x7d, 0x9a, 0xa, 0x80}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000001a80)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/70, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x4000000) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001b80)={0x1, 0x0, [{0x80f8000, 0xeb, &(0x7f0000001d00)=""/235}]}) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/83, 0x53) socket$alg(0x26, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000000)={0x181f, 0x8, 0x2, 0x1}, 0x8) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd0000008019000000050000000000000000000000000000d900", [0x80000000008, 0x2]}}) 22m14.098100675s ago: executing program 2 (id=120): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x2, 0x3, 0xff) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="faab1d43a65d20ccf90a2bc53c6384d81e049741816045278e7e25ee0c020808bb08360001ce61fcb7e067b20800000000000000d964ef413b57037d7b69e34cdda89b0328e064119c9e8c7beb616f163c", 0x51}], 0x1, 0x0, 0x0, 0x20000850}], 0x1, 0x4000080) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000a40)={&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000340)=""/166, 0xa6}], 0x1, 0x0, 0x0, 0x4000050}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x697d}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x68}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_open_dev$loop(&(0x7f0000000100), 0x400, 0x6a0200) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0\x00') unshare(0x26020480) pivot_root(&(0x7f0000000340)='./file0/../file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00') 22m11.56471546s ago: executing program 2 (id=128): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x58, 0x4, 0x8, 0x802, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4890}, 0x880) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00000000ffefffff00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) 22m10.526358978s ago: executing program 2 (id=131): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x74d241, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x11) 22m9.568158837s ago: executing program 32 (id=131): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x74d241, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x11) 14m9.525242988s ago: executing program 5 (id=1772): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_DBG_G_CHIP_INFO(r2, 0xc0c85666, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010500000000000000000000000a50000000060a0bad040000000000000000020000012400048020000180070000f96374000014000280080001400000000e086a0000000000000000010073797a30000000034ae200001400000011000100000000000023e7ea1400"/120], 0x78}}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x6, 0x80805513, 0x0}) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$chown(0x4, r5, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) io_submit(0x0, 0x0, &(0x7f0000000380)) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="b80000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000008000000000000000000000000000000000000000000000000000000000000000000000000000000002000"/96], 0xb8}, 0x1, 0x0, 0x0, 0x24008844}, 0x4000000) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) r8 = semget(0x1, 0x1, 0x39c) semctl$SETALL(r8, 0x0, 0x11, &(0x7f0000000140)) r9 = socket$netlink(0x10, 0x3, 0x15) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r10, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031880000200012800b0001006d61637365630000100002800c00040001001017c8dacd0bfe665e00", @ANYRES32=r11, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) semctl$IPC_RMID(r8, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e26, @remote}, 0x10) sendmmsg$inet(r6, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x1701) 14m8.333301322s ago: executing program 5 (id=1778): writev(0xffffffffffffffff, 0x0, 0x0) (async) process_vm_writev(0x0, &(0x7f0000000880)=[{0x0}, {0xfffffffffffffffc}], 0x2, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000f8f1ffff48000001000000242f0b4c688fc46f18230000060001000201000000"], 0x38}}, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x2d1, 0x200, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48040}, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r13, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0xffffffff, 0xdb7, 0x6, 0x4, 0x9}, 0xd, 0xeb, [{0x3, 0xc, 0x0, 0x0, 0x9, 0x40}]}, [{0x2, 0x8, 0xfff, 0x8, 0x7ff, 0x7}, {0x626, 0x5, 0x5, 0xe38b, 0x54, 0x3bf}, {0x59, 0xffff, 0x4, 0xffffffff, 0x4, 0x9}, {0xb, 0x1355, 0x4, 0x8, 0x51e, 0x806}, {0x4, 0x5, 0xf02, 0xffff, 0xe, 0x94a}, {0x3, 0x6, 0x7, 0x0, 0x8, 0x4}, {0x2f, 0x3, 0xb, 0x0, 0x9, 0xf}, {0x3ff, 0x80000001, 0xa3, 0x200, 0x913, 0x8001}, {0x1f0, 0x10000, 0xfffffff8, 0x0, 0x3, 0x8000}, {0xc, 0x5, 0x8, 0x0, 0x101, 0x4}, {0x200, 0x8, 0xfc3, 0xffffffff, 0xf, 0x1}, {0x2, 0x2, 0x662, 0x7, 0x4}, {0x0, 0x9511, 0xf, 0xfffff001, 0x0, 0x89a}, {0x6, 0x5, 0x7ff, 0x7, 0xffff}, {0x7a, 0x5, 0x800, 0x6, 0x6, 0x1}, {0x600000, 0x9e, 0x8039, 0x102d, 0x90, 0x9}, {0xffd, 0xa7, 0x200, 0xa4, 0x3, 0xffffff01}, {0x3, 0x200, 0xffffffff, 0x4, 0x4, 0x500}, {0x7, 0xc, 0x8, 0x7, 0x3, 0x4000}, {0x401, 0x81, 0x8, 0x6, 0xffff, 0x59}, {0x401, 0x4, 0x9, 0x9, 0xee, 0xa0e}, {0x9, 0x1, 0x7, 0x1, 0xc, 0xf0}, {0x40, 0x0, 0x0, 0x4, 0x1}, {0x6, 0x7, 0x0, 0x1, 0x7, 0x200}, {0x6, 0x10001, 0x0, 0x8, 0xf31d, 0x95}, {0x2, 0xfffffffe, 0xe, 0x5, 0x7fff, 0xffffffc3}, {0x3, 0x400, 0x4, 0x3ff, 0x0, 0x61b9f92}, {0x1, 0x349, 0x7e, 0x6, 0x1, 0x7fff}, {0x188, 0x2, 0x418b3d83, 0x8, 0x3, 0x8}, {0x1ff, 0x8, 0x8, 0x7, 0x1000, 0x4}, {0x7f33eafe, 0xffffffff, 0xb, 0x2, 0x7, 0x8}, {0x1, 0x7f, 0x7, 0x9, 0x3, 0x6}, {0xf469, 0x2, 0x401, 0x4, 0x8, 0x4}, {0x5, 0x2, 0x6, 0x1, 0x401, 0x2}, {0x0, 0x7fffffff, 0x4, 0x4, 0x6, 0x8515}, {0x7, 0x7, 0x8001, 0x76, 0x8000, 0xffffffff}, {0xc0f, 0x6, 0x1, 0x8, 0x200, 0xa7a2ee47}, {0x8, 0x2, 0x4e, 0xff, 0x7, 0x6}, {0x6, 0xfffffffc, 0x63a8, 0x6, 0x288a6aae, 0x1}, {0xc52, 0x0, 0xfff, 0xe3c, 0x8, 0x10}, {0x80, 0xb, 0x8, 0x1, 0xa, 0x1}, {0x7, 0x9, 0x5, 0x4, 0x9, 0x80000001}, {0x5, 0x5, 0xffff, 0x3, 0x96e, 0x800}, {0x3, 0xa, 0x6, 0xffff1816, 0x9, 0x7f}, {0xd4, 0x100, 0x1, 0x2, 0x9, 0x9}, {0xcf680000, 0x3b9e, 0x28b7, 0x1, 0x4, 0x5}, {0xf8cd, 0x805, 0x900, 0xffffffeb, 0x1, 0x7}, {0x9, 0x24fd, 0x7, 0x80, 0x237e078f, 0x80}, {0x6, 0x55, 0x7, 0x101, 0xfffffffb, 0x1}, {0x8, 0x7, 0x8, 0xf9, 0x877, 0x7c}, {0xd732, 0x6, 0x2, 0x7, 0x1}, {0x81, 0x8, 0x6, 0xffffffff, 0x80000001, 0x5}, {0x8, 0xc, 0xeb6, 0x8, 0x80, 0xfffffffe}, {0x5, 0x56b, 0x0, 0x1, 0x9, 0x3}, {0x2, 0x8, 0x6, 0x9, 0xfffffff8, 0x48}, {0x6, 0xa5cb, 0x100, 0x9, 0x400, 0x7}, {0xfffffff6, 0x4, 0x6, 0x4756, 0x2b13, 0x80}, {0x4, 0x1c0000, 0x7, 0xe, 0x0, 0x2}, {0x6, 0x1, 0x6, 0x4, 0x202, 0xb}, {0x425, 0x0, 0x3, 0x4f, 0x7, 0x8}, {0x4, 0x8, 0xd9b, 0x4, 0x9, 0x9}, {0xfe, 0x8, 0x2, 0x0, 0x930, 0xc3c}, {0x85f, 0x3, 0x0, 0xcd4, 0x7, 0x484}, {0x2, 0x2, 0x0, 0x9, 0x7, 0x40}, {0x1ff, 0x5, 0x7, 0x6, 0x400, 0x3ff}, {0xa, 0x5, 0x80000001, 0x5, 0x5, 0x6}, {0x2, 0x5, 0x80, 0xfffffffd}, {0xcd, 0xfac, 0xb19d, 0x6, 0x4}, {0xc, 0x3, 0x1, 0x7, 0x7fff, 0x8}, {0x81, 0x10, 0x1, 0x273, 0x1, 0xd}, {0x5c39c017, 0x7f, 0xffff7fff, 0x5, 0x3, 0x3}, {0x2, 0x3, 0x8, 0x81, 0xa, 0x9b7b}, {0x4, 0x39, 0xc, 0xb4c, 0xd, 0x6}, {0x9, 0x303a, 0x6, 0x6, 0x7, 0x6}, {0x2, 0xfffff942, 0xfb5, 0x4, 0x0, 0x7}, {0x0, 0x10001, 0x0, 0x4, 0x401, 0x3}, {0x65, 0x7, 0x9, 0xff, 0x2, 0x8}, {0xe, 0x200, 0x8, 0x7fff, 0x7, 0x8}, {0xf, 0xfffffffb, 0x8, 0x2, 0x1, 0x7}, {0x3, 0x7, 0x2, 0x1a, 0x11a, 0x100}, {0xe, 0x7, 0x6, 0x6c95, 0x10000}, {0x6, 0x5, 0x2, 0x921, 0x4, 0x20}, {0x795c, 0x494d, 0xfff, 0x80, 0x7fff, 0x3}, {0x3, 0x6, 0xb, 0xfffffffc, 0x0, 0x8}, {0x9, 0xfffffff7, 0x2, 0x2, 0xf68, 0x7}, {0x5, 0x4, 0x8, 0x7, 0xf5c, 0x8}, {0x1, 0x0, 0x5419, 0xc, 0x9, 0x7}, {0x3ff, 0x3, 0x1037, 0x5, 0xd, 0x10000}, {0x101, 0x9, 0x101, 0xb99, 0x2e7, 0x8}, {0x3, 0x8001, 0x10001, 0x6, 0x54f7, 0x6}, {0x1, 0x7, 0x8, 0x1, 0x400, 0xd}, {0x8, 0x6, 0xfff, 0xce, 0x1b, 0x6}, {0x8, 0x9, 0x2bd, 0xffff79af, 0x7, 0x3}, {0x7, 0x0, 0x6, 0x1, 0x6, 0x5}, {0x7, 0xe, 0x7, 0xfff, 0x7, 0x2}, {0x0, 0x8, 0xfff, 0x4, 0x2}, {0x9, 0x200, 0x1, 0x8702, 0xffff8a6e, 0x8}, {0x200, 0x2, 0x4, 0xc, 0x3, 0x5}, {0xe, 0x6, 0x0, 0x9, 0x8, 0xb5}, {0x100, 0x5, 0x2400000, 0x8, 0x0, 0x8000}, {0x0, 0xfffffff0, 0x101, 0xd786, 0x6}, {0x5, 0x6, 0x5, 0x0, 0x97, 0x10001}, {0x2, 0x45c9, 0x5, 0x5, 0x6, 0x337bc25c}, {0x7f, 0x10, 0x6, 0x834, 0x5, 0x4e8e}, {0x0, 0x4, 0x14, 0x2, 0x2, 0x4}, {0x8001, 0x0, 0x25, 0x869, 0x3, 0x7}, {0x1000000a, 0x9, 0x100, 0x4, 0x5, 0x8000}, {0x8, 0x4, 0x8, 0x8, 0x1, 0x2}, {0x7, 0x1, 0x400, 0x6, 0x5, 0x2de}, {0x1, 0xfffffff7, 0x6, 0x4f, 0x401, 0x610ddc80}, {0x6, 0x1ff, 0x0, 0x0, 0x7f}, {0x6, 0x0, 0x1fbb, 0x5, 0xe53, 0x73}, {0x8, 0x3, 0x0, 0x10, 0x4e5ae85, 0x1}, {0x8, 0xa8e, 0x2, 0x4, 0x1, 0x8}, {0x5, 0x20004, 0x7559, 0x800, 0x7507f659, 0x1000}, {0x4, 0xa3, 0xad4, 0x0, 0x4, 0x9d2}, {0x4, 0x0, 0x17c, 0x5, 0xfffffffc, 0xeae8}, {0xd, 0x81, 0x8, 0x6, 0x0, 0x2}, {0xfffffffa, 0xa, 0xffffff96, 0x5, 0x3, 0xffd9}, {0x9, 0x7ff, 0xfffffff8, 0x1, 0x3ff}, {0x0, 0x9, 0x8, 0x2, 0xdec9, 0x5}, {0x9, 0x1ff, 0x800, 0x8, 0x1, 0x5}, {0x1, 0xfff, 0x10001, 0x6, 0x1, 0x5}, {0xffffffff, 0xd55c, 0x68, 0xfffffffd, 0xa5b7, 0x10001}, {0x9, 0x9, 0x80, 0x6e0, 0x8, 0x389}, {0xa0, 0x3111013c, 0x8, 0x3, 0x80000000, 0x93fb}, {0x1, 0x9, 0x6, 0x5, 0x32, 0x800}, {0x7, 0x76, 0x5, 0x4, 0x101, 0x7}], [{}, {0x5}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x854056177ef68b07, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x6fb9e8e116338fa4}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0xebb446fe48414d9f}, {}, {0x2, 0x1}, {0x7, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x3}, {0x3}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4}, {}, {}, {0x7}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x5}, {0x2}, {}, {0x2, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x28, 0x4000}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200084014000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 14m8.200690413s ago: executing program 5 (id=1780): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x4) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) getdents(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) (async) io_uring_enter(r1, 0x2218, 0x7721, 0x1a, 0x0, 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0xfffffff7, 0x4, 0x3, 0x8, 0x7, "694202a4c5b36220c433ab0c8eea6d46d0a0ed"}) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) set_mempolicy(0x6005, &(0x7f0000000080)=0x1, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x81, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000140)={0x28729f328c68897}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x8, 0x2, 0x80, "d505e8061000fa44967600006ea86917a4c0ffa663006000000400e300ff00", 0x34325258}) (async) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r8, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x4004090) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r5, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x24}}, 0x8004) 14m8.005791157s ago: executing program 5 (id=1782): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x26}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0xa10c4, 0x0, 0x0, 0x0, 0x0) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000300), 0x3) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000380)) (async) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000780)={0x0, 0x0, @pic={0x1, 0xe, 0x4a, 0x5, 0x81, 0x7, 0xc0, 0x81, 0x2, 0xa, 0x7f, 0x4, 0xa, 0x4, 0x5, 0x6}}) (async) setns(r5, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638a00fe00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000007fffff5850000006900000095"], &(0x7f0000005d80)='GPL\x00', 0xc}, 0x94) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_cmd={0xe, 0x1, 0x7fff, 0x0, 0x3, 0x4, 0x41, 0x5, 0x8, 0x6, 0x7, 0x4, 0xfff3, 0x80, 0x84, 0x7f, [0x7fffffff, 0x4]}}) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r8, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xb}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000091) 14m6.672096493s ago: executing program 5 (id=1792): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x5}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}]}], {0x14}}, 0xc4}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000f40)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x130, 0x0, 0x200, 0x398, 0x98, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@ip={@local, @broadcast, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {0xff}, {}, 0x0, 0x0, 0x18}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x2000000}}, @inet=@DSCP={0x28}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @private=0xa010101, 0x0, 0x0, 'dvmrp0\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0xffffffff, 0x8000, 0x8d84, 0xcafc, 0xffffff8e, 0x70, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @local, 0x0, 0x0, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x8, @ipv4=@multicast1, 0x5e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x26}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0xfff9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 14m6.259482541s ago: executing program 5 (id=1796): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80001, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x97f5, 0x800, 0x3, 0xab}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2cec, 0x400, 0x2, 0x2a9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4ca4, 0x4, 0x3, 0x134}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2f88, 0x800, 0x1, 0x17a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9f16, 0x10, 0x1, 0x242}, 0xffffffffffffffff}], 0x4, &(0x7f0000003a40)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x1}, 0x0, 0x0, '\x00', {0x1, 0x292, 0x0, &(0x7f0000002a40)=@buf_512="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"}}, &(0x7f0000003ac0)) io_uring_setup(0x5bef, &(0x7f0000000200)={0x0, 0xfffffff9, 0x2000, 0x0, 0xfffffffd, 0x0, r1}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x1a, 0x0, @void}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYRES8=r3], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) chroot(&(0x7f00000002c0)='./file0\x00') r5 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x60, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x2}}}}}]}}, 0x0) syz_usb_control_io$uac3(r5, 0x0, 0x0) syz_usb_control_io$uac3(r5, 0x0, 0x0) syz_usb_control_io$uac2(r5, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40c}}}, 0x0) r6 = socket(0xa, 0x5, 0x0) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000040)={0x0, 0x0, 0x4, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000000, 0x107}, {0xffffffe8, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0x103, 0x7}], 0x1, 0x2c, 0x2, 0x0, 0x3}}, 0xffffffff}) bind$unix(r6, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000280)={&(0x7f0000000200)=""/108, 0x6c, 0x9, 0x8}) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xce, 0x0, 0x8}]}) r9 = syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x0) ioctl$LOOP_CONFIGURE(r9, 0x1276, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f00000027c0)='/proc/asound/timers\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000089c33f40f70a0101622d000000010902120001000000000904"], 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) read$FUSE(r0, &(0x7f00000009c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r10, &(0x7f0000002a00)={0x10, 0x0, r11}, 0x10) 14m6.009076447s ago: executing program 33 (id=1796): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80001, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x97f5, 0x800, 0x3, 0xab}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2cec, 0x400, 0x2, 0x2a9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4ca4, 0x4, 0x3, 0x134}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2f88, 0x800, 0x1, 0x17a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9f16, 0x10, 0x1, 0x242}, 0xffffffffffffffff}], 0x4, &(0x7f0000003a40)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x1}, 0x0, 0x0, '\x00', {0x1, 0x292, 0x0, &(0x7f0000002a40)=@buf_512="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"}}, &(0x7f0000003ac0)) io_uring_setup(0x5bef, &(0x7f0000000200)={0x0, 0xfffffff9, 0x2000, 0x0, 0xfffffffd, 0x0, r1}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x1a, 0x0, @void}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYRES8=r3], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) chroot(&(0x7f00000002c0)='./file0\x00') r5 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x60, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x2}}}}}]}}, 0x0) syz_usb_control_io$uac3(r5, 0x0, 0x0) syz_usb_control_io$uac3(r5, 0x0, 0x0) syz_usb_control_io$uac2(r5, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40c}}}, 0x0) r6 = socket(0xa, 0x5, 0x0) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000040)={0x0, 0x0, 0x4, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000000, 0x107}, {0xffffffe8, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0x103, 0x7}], 0x1, 0x2c, 0x2, 0x0, 0x3}}, 0xffffffff}) bind$unix(r6, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000280)={&(0x7f0000000200)=""/108, 0x6c, 0x9, 0x8}) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xce, 0x0, 0x8}]}) r9 = syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x0) ioctl$LOOP_CONFIGURE(r9, 0x1276, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f00000027c0)='/proc/asound/timers\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000089c33f40f70a0101622d000000010902120001000000000904"], 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) read$FUSE(r0, &(0x7f00000009c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r10, &(0x7f0000002a00)={0x10, 0x0, r11}, 0x10) 3m2.577616597s ago: executing program 6 (id=4774): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtfilter={0xbc, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x88, 0x2, [@TCA_MATCHALL_ACT={0x84, 0x2, [@m_ife={0x80, 0x1, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0xfeff}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffff9, 0xe1, 0x8, 0x5, 0x8001}, 0x1}}, @TCA_IFE_METALST={0x0, 0x6, [@IFE_META_PRIO={0x0, 0x3, @void}, @IFE_META_SKBMARK={0x0, 0x1, @val=0x9}, @IFE_META_PRIO={0x0, 0x3, @void}]}, @TCA_IFE_SMAC={0xa}]}, {0x4}, {0xfffffffffffffcad}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x50}, 0x0) 3m2.104585517s ago: executing program 6 (id=4778): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/16) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0x1000, 0xc000000, 0xfffffffb, 0xaaf, 0x0, [{0x4, 0x6, 0x2, '\x00', 0xfe}, {0x4, 0xe7, 0x9, '\x00', 0x7}, {0xf7, 0x8, 0x0, '\x00', 0x1}, {0x1, 0x5, 0x6, '\x00', 0x1}, {0xd2, 0x2, 0x5, '\x00', 0x6}, {0xe, 0x50, 0x0, '\x00', 0x9}, {0x7, 0x6, 0x7c, '\x00', 0x3}, {0x81, 0x8, 0x8, '\x00', 0x2}, {0xb, 0x80, 0xa, '\x00', 0x7}, {0x2, 0x9, 0x8, '\x00', 0x7}, {0xe, 0x80, 0x0, '\x00', 0x3}, {0x6, 0x40, 0x3, '\x00', 0x5}, {0x81, 0x81, 0x6, '\x00', 0x6}, {0x3, 0x2, 0x6, '\x00', 0x8}, {0x4, 0x2, 0x81}, {0x5, 0x0, 0x9, '\x00', 0x4}, {0x2, 0x9, 0xc1, '\x00', 0x3}, {0x5, 0x7, 0x5, '\x00', 0x9}, {0x23, 0x6, 0xb6, '\x00', 0x2}, {0x88, 0x3, 0x3f, '\x00', 0x4}, {0x8, 0xc, 0x3, '\x00', 0x3}, {0x0, 0x8, 0x6, '\x00', 0x5}, {0x6, 0x0, 0x8, '\x00', 0x10}, {0x40, 0x5, 0x81, '\x00', 0x5}]}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x6, 0x7, 0x5, 0x180, 0x0, 0x0, 0xf1, 0x9, 0x8, 0x5, 0x0, 0x9, 0x0, 0x8, 0x0, 0xbd9], 0x1, 0x1c4292}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x24040000) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_GET_MP_STATE(r5, 0x8004ae98, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r7, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 2m59.305999981s ago: executing program 6 (id=4788): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtfilter={0xbc, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x88, 0x2, [@TCA_MATCHALL_ACT={0x84, 0x2, [@m_ife={0x80, 0x1, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0xfeff}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffff9, 0xe1, 0x8, 0x5, 0x8001}, 0x1}}, @TCA_IFE_METALST={0x0, 0x6, [@IFE_META_PRIO={0x0, 0x3, @void}, @IFE_META_SKBMARK={0x0, 0x1, @val=0x9}, @IFE_META_PRIO={0x0, 0x3, @void}]}, @TCA_IFE_SMAC={0xa}]}, {0x4}, {0xfffffffffffffcad}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x50}, 0x0) 2m58.69894239s ago: executing program 6 (id=4791): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f00000001c0)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11}, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f00000004c0)) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x50, 0x1, 0x9, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7f00000}}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x10001}}]}, 0x50}, 0x1, 0x0, 0x0, 0x48801}, 0x4040090) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x0, 0x3, 0x8, {{0x9, 0x4, 0x0, 0x33, 0x24, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x3c, 0x3, 0x2, [{@empty, 0x8}]}, @ssrr={0x89, 0x3, 0xb5}]}}}}}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$PPPIOCSMRRU(r5, 0x4004743b, &(0x7f0000001e40)=0xb) openat$rfkill(0xffffffffffffff9c, 0x0, 0x40000, 0x0) add_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000580)="27bbb1597dc47f6337451576aeb8dfb5bd94109520e8e86f17154f1f9cf65ecb99c8d4a09b832e2b06377bd6f3465578f7e4bd03f416c956da02a542dee2d985d0a7b21a2186c034b3296ef41bac2493e03b67e25e27", 0x56, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000000300), 0x0, 0x0, 0x0) r6 = add_key$fscrypt_provisioning(&(0x7f0000000380), &(0x7f0000000600)={'syz', 0x1}, 0x0, 0x48, 0xfffffffffffffffc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0}, &(0x7f0000000700)=0xc) lstat(0x0, 0x0) keyctl$chown(0x4, r6, r7, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x7e, 0x21, 0x1, 0x60, @dev={0xfe, 0x80, '\x00', 0x2a}, @loopback={0x300, 0x460c6}, 0x1, 0x8, 0x25a1, 0x40}}) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r8, 0x40085112, &(0x7f0000000080)=@generic={0x8}) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r9, 0xc0945662, &(0x7f0000000100)={0x1000, 0x0, '\x00', {0x0, @bt={0x0, 0x5, 0x0, 0x0, 0x9, 0x9, 0xb, 0x7f, 0xbc, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x14, 0x1b, {0x0, 0x6}, 0x7, 0x40}}}) 2m56.929904445s ago: executing program 4 (id=4796): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x0, &(0x7f0000000180)=[0x10085, 0xec46, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x100000000000004, 0x10000, 0x100, 0x9024, 0x0, 0x7, 0x5, 0x5, 0x49, 0x400, 0x5, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x1, 0x2, 0x888f, 0x5, 0xb, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x3, 0xfffefffffffffff7, 0xfffffffffffffffa, 0x2, 0x4, 0x7, 0x8, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0x3, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc01, 0x2, 0x4, 0x8004, 0xcdc, 0x7, 0x1000000000000002, 0x3, 0x2, 0x5, 0xfff, 0x3, 0x4, 0x6, 0xab9, 0x0, 0x4, 0xfff, 0xfdffffffffffff81, 0x9, 0x4, 0x2000000000000006, 0x1, 0x3, 0x400000000008061f, 0x3, 0x8, 0xf6, 0x4, 0x6, 0xffffffffffffffff, 0x7, 0xe53e, 0x2c, 0x8, 0x2293332d, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0xdfd4, 0xfffd, 0x0, 0x8, 0x8, 0xfffffffffffffff2, 0x53e0f100, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcd, 0x8, 0x3]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000c40)=@arm64={0x9, 0x40, 0x3, '\x00', 0x7}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000140)=0x8000, 0x4) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="d311000000010400180a000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x105, 0x4) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000000080300000000000000000005797a31000000000900010073797a3000000000140004800800024000000007080001400000000a00"/72], 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x200040c4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x4e24, @rand_addr=0x64010101}, {0x1, @multicast}, 0x0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'hsr0\x00'}) ioctl$FITHAW(r6, 0xc0045878) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r9, r9, 0x8, 0x0) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000380), r10) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="000228bd7000ffdbdf250103982f404eec74e427a028a4a40000000800020081000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x804) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) r12 = open(&(0x7f00009e1000)='./file0\x00', 0x149042, 0x40) fcntl$setlease(r12, 0x400, 0x0) bind$xdp(r4, &(0x7f0000000040)={0x2c, 0x8, r7, 0x1c, r5}, 0x10) 2m53.762103641s ago: executing program 4 (id=4805): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000fb0930000000060a0b0400000000"], 0x58}, 0x1, 0x0, 0x0, 0x10010}, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f00000002c0)={0xb0, 0x0, 0x0, [{0x3, 0xf2ab, 0x14, 0x4, '/dev/dri/renderD128\x00'}, {0x3, 0xffffffff80000000, 0x9, 0x7c, '/dev/sg#\x00'}, {0x3, 0x2, 0x4, 0x2, '[,:\x00'}, {0x1, 0x1000, 0x9, 0x8, '/dev/sg#\x00'}]}, 0xb0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000020000000700000a20000000000a"], 0xc0}, 0x1, 0x0, 0x0, 0x60040004}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x20008040, &(0x7f0000000080)={0x11, 0x8100, r5, 0x1, 0xfb, 0x6, @broadcast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', r5, 0x8000, 0x20, 0x5, 0x5, {{0x26, 0x4, 0x0, 0x3, 0x98, 0x67, 0x0, 0x3, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x1c, 0x6c, 0x0, 0x3, [0x56931561, 0x8, 0x0, 0x7, 0x22, 0x4e14]}, @lsrr={0x83, 0x1b, 0xb0, [@remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x19}, @multicast2, @empty, @empty]}, @timestamp_addr={0x44, 0x1c, 0xa8, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xda2}, {@rand_addr=0x64010101, 0x7}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x3ff}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x2c, 0x6, 0x3, 0x9, [{@broadcast, 0x7ff}, {@local, 0x7}, {@private=0xa010102, 0xfffffffc}, {@loopback, 0xff}, {@rand_addr=0x64010100, 0x5}]}, @end]}}}}}) mremap(&(0x7f0000fff000/0x1000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000c40000/0x4000)=nil) 2m52.995637155s ago: executing program 4 (id=4810): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto(r0, &(0x7f0000000540)="219f", 0x2, 0x40001, 0x0, 0x0) readv(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/70, 0x46}], 0x1) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0xa72, 0x8, 0x55595659, 0x5, 0x3, 0x2, 0x9, 0x1, 0x1, 0x2, 0x2, 0x5}}) 2m52.800278255s ago: executing program 6 (id=4813): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x4c, 0x14, 0x511, 0x0, 0x25dfdbfb, {0x2b, 0x0, 0x0, 0x1, {0x4e22, 0x0, [0x0, 0x0, 0x0, 0xd], [0x0, 0x0, 0x0, 0x3]}, 0x4}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000840}, 0x8004) 2m52.702995129s ago: executing program 6 (id=4814): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="c962", 0x2}], 0x1}, 0x4004045) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) sendfile(r3, r4, 0x0, 0x7ffff006) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000fe6000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/174, 0xae, 0x0, 0x0}, &(0x7f0000000100)=0x40) setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x200}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa8}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) accept4(r0, 0x0, &(0x7f0000000180), 0x80000) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000c580000008001b"], 0x28}}, 0x0) 2m51.621598334s ago: executing program 4 (id=4819): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000200)={0x80, 0xa, 0x8, 0x6, 0x1, 0x81, &(0x7f0000000080)='h'}) sendmsg$key(0xffffffffffffffff, &(0x7f00000007c0)={0x40000000000ff80, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005"], 0xa8}}, 0x40080) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @empty}, 0x1c) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a7f2fb0f1334d55328120422c3423f91ee76022a4433e3fbdb48148f9a4b879328c1ab38debc07dda821ed3a803c1462429ee680d07b1f553fba3155f99c363fa47fa77e63ecfc7b6c2c87863ae37fe69f873a4896e853e26735646a927b6177d50d25cb756b9942404ce3d241aa605b2a46b5d58a785ea2d0c66071246e0a7b6b305ad789acfa4ae48c120acf3ca805ccbe16a1e0629c2d7fcbd66225e2644f20a7275e99f85cd08d2f3c54ce5a067cc3379d392"], 0xb8}, 0x1, 0x0, 0x0, 0x4048000}, 0x24008000) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.log\x00', 0x3058c0, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r3) syz_mount_image$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000100)='./file0\x00') r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000280)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f00000000c0)='./file0\x00') r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x34, r8, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x76}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x34}, 0x1, 0x0, 0x0, 0x40095}, 0x8040) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, r5, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x1ff, 0x7e}}}}, [@NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, r11, 0x400, 0x70bd2b, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0xde89dfea600f9fd4) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="760100001b"], 0x188}, 0x1, 0x0, 0x0, 0x40004}, 0x0) semget(0x1, 0x3, 0x301) 2m49.797090126s ago: executing program 4 (id=4826): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r10, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xd0, r10, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x66}}}}, [@NL80211_ATTR_MESH_SETUP={0x34, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x3}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x5}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}]}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x9f}, @NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x7}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x17}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0xfff}]}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xc7}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x4}]}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x6d}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x6}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xa}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20040800}, 0x84080) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 2m48.369810213s ago: executing program 4 (id=4833): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="c962", 0x2}], 0x1}, 0x4004045) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) sendfile(r3, r4, 0x0, 0x7ffff006) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000fe6000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/174, 0xae, 0x0, 0x0}, &(0x7f0000000100)=0x40) setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x200}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa8}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) accept4(r0, 0x0, &(0x7f0000000180), 0x80000) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000c580000008001b"], 0x28}}, 0x0) 2m47.93215112s ago: executing program 34 (id=4833): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="c962", 0x2}], 0x1}, 0x4004045) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) sendfile(r3, r4, 0x0, 0x7ffff006) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000fe6000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/174, 0xae, 0x0, 0x0}, &(0x7f0000000100)=0x40) setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x200}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa8}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) accept4(r0, 0x0, &(0x7f0000000180), 0x80000) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000c580000008001b"], 0x28}}, 0x0) 2m37.542030487s ago: executing program 35 (id=4814): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="c962", 0x2}], 0x1}, 0x4004045) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) sendfile(r3, r4, 0x0, 0x7ffff006) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000fe6000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/174, 0xae, 0x0, 0x0}, &(0x7f0000000100)=0x40) setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x200}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa8}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) accept4(r0, 0x0, &(0x7f0000000180), 0x80000) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000c580000008001b"], 0x28}}, 0x0) 2m35.064662672s ago: executing program 1 (id=4867): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1008, 0x1, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff5, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4000004}, @TCA_TBF_PRATE64={0xc, 0x5, 0xd1901bfe29d4b54d}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x22, 0x10}, 0xfffff, 0x3, 0x229d}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe000001000000", @ANYRES64], 0x24}}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x1007, &(0x7f00000005c0)=""/4103, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0xc0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="010002000000164d3a3d256277a75bda8abdf88dd58af6867da1f0"], 0x18}, 0x1, 0x0, 0x0, 0x20000050}, 0x8000) r10 = syz_open_dev$vim2m(&(0x7f0000000440), 0x2, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r10, 0xc100565c, &(0x7f0000000340)={0x0, 0x4005, 0x2, {0x1, @win={{0x0, 0x8, 0x278e, 0x8}, 0x2, 0x9, 0x0, 0xfffffffc, 0x0}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r10, 0xc100565c, &(0x7f0000000240)={0x0, 0x6, 0x2, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x37]}}}) 2m31.301066s ago: executing program 1 (id=4880): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r1) r2 = open(&(0x7f0000000380)='./file1\x00', 0x1c3142, 0x80) ftruncate(r2, 0x136) r3 = accept$alg(r0, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0, r2) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)="be", 0xfffffd0c}], 0x1, 0x0, 0x0, 0x4080}, 0x8000) accept4(r3, 0x0, 0x0, 0x800) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) close(r4) move_mount(0xffffffffffffff9c, 0x0, r4, 0x0, 0x262) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000840)={0x28, 0x2, r8, 0x0, &(0x7f0000007000/0x3000)=nil, 0x3000, 0x7fffffffffffffff}) ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r8, 0x0, &(0x7f0000000140)="a3", 0x1, 0x6}) ioctl$IOMMU_IOAS_COPY(r7, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r8, r8, 0x6f4, 0x3ff, 0x3ffe}) ioctl$FE_SET_PROPERTY(r6, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000140)}) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x340, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x328, 0xffffffff, 0xffffffff, 0x328, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x4}, 0x0, 0x170, 0x198, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffff00, 0xff000000, 0xffffffff, 0x83f5bcc3332ee8a0], @ipv4=@dev={0xac, 0x14, 0x14, 0x14}, [0xff, 0xffffffff, 0xffffffff, 0xffffff00], @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xff000000, 0xa269b67463b87903, 0xff000000], @ipv4=@local, [0xffffffff, 0xff, 0xff000000, 0xff000000], 0xe19, 0x9, 0x33, 0x4e20, 0x4e22, 0x4e20, 0x4e21, 0x2000, 0x20}, 0x0, 0x701, 0x4e22, 0x4e23, 0x4e23, 0x4e20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0xffffff00], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3a0) recvmmsg(r3, &(0x7f00000002c0), 0x0, 0x40010000, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0xd4, 0x80, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x5}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0xc}}]}}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x86606b93045ad1da, 0x2, 0x9, 0x80, 0x10, 0xf}, 0x21, &(0x7f0000000000)=ANY=[@ANYBLOB="050f2100030a1003000800ffc105040b1001040000a547040004810000007c0100a4de0907e0d6e6bf210ef9e47e71162f07f46c43c71a3737a426ba8376deb18f2f4a2ec856202e12a725730935237e6eddb0fa0c09879b5d6907c80e905eb2546d643c0242c1ec2353d0be95272724776da817cc2ca8fa75b5acbd2e144f2de5cf0edb38deeb542bf5733e0d363f3380e3dd37bb6a31a0e4e8ce2ee7ffa0d7beaad42593e6ac64cc783692"]}) 2m29.849385085s ago: executing program 1 (id=4889): syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a00090504"], 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x8, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x7, 0x9}]}, @float={0x9, 0x0, 0x0, 0x10, 0x8}, @float={0x9, 0x0, 0x0, 0x10, 0x2}, @volatile={0x4, 0x0, 0x0, 0x9, 0x1}, @decl_tag={0xf, 0x0, 0x0, 0x11, 0x4, 0x4}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x10, 0x2}, {0xa, 0x4}, {0xa, 0x4}, {0x6, 0x4}, {0x6, 0x1}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xc, 0x2}, {0x3, 0x2}, {0x3, 0x2}, {0xc}]}, @float={0x9, 0x0, 0x0, 0x10, 0x24}]}, {0x0, [0x5f, 0x2e, 0x30, 0x61, 0x30, 0x2e]}}, &(0x7f00000001c0)=""/195, 0xd4, 0xc3, 0x1, 0x5, 0x10000}, 0x28) r1 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000040)={0x1}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r0, 0x20, &(0x7f0000000480)={&(0x7f0000000300)=""/249, 0xf9, 0x0, &(0x7f0000000400)=""/98, 0x62}}, 0x10) 2m28.756512667s ago: executing program 1 (id=4892): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) inotify_init() symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r4 = inotify_init1(0x80800) inotify_add_watch(r4, &(0x7f0000000300)='./file1\x00', 0x10000200) socket(0x2b, 0x80801, 0x1) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r3, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) set_mempolicy(0x6005, &(0x7f0000000080)=0x5, 0x7) socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 2m27.016473901s ago: executing program 1 (id=4897): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$cec(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) io_setup(0x5, &(0x7f00000000c0)=0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) io_submit(r3, 0x1, &(0x7f0000000500)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xc, r4, &(0x7f0000000080)='E', 0x1, 0x8000}]) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f00000000c0)=0x58, 0x5) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000000)=0x6000) setuid(0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x10000000}, 0x24048000) r7 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r7, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{0x0}, {&(0x7f0000000740)="fae0", 0x2}], 0x2, &(0x7f0000000540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @local}}}], 0x20}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x48, 0x2, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008000) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) socket$alg(0x26, 0x5, 0x0) 2m23.161210965s ago: executing program 1 (id=4914): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x18, &(0x7f0000000000), 0x8) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8fb, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0f, 0xffffffff}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="64000000150001000000000000000000ac1414aa00000000000000000000000000000000000000000000ffffe000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000a0010"], 0x64}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8004) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@newsa={0x14c, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast1, @in6=@local}, {@in=@broadcast, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x6}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}]}, 0x14c}}, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @win={{0xc78e, 0xffffcaca, 0x5, 0x7}, 0x8, 0x5, 0x0, 0xfffffeff, 0x0, 0x5}}) 2m7.059269288s ago: executing program 36 (id=4914): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x18, &(0x7f0000000000), 0x8) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8fb, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0f, 0xffffffff}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="64000000150001000000000000000000ac1414aa00000000000000000000000000000000000000000000ffffe000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000a0010"], 0x64}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8004) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@newsa={0x14c, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast1, @in6=@local}, {@in=@broadcast, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x6}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}]}, 0x14c}}, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @win={{0xc78e, 0xffffcaca, 0x5, 0x7}, 0x8, 0x5, 0x0, 0xfffffeff, 0x0, 0x5}}) 9.140316777s ago: executing program 0 (id=5464): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="c962", 0x2}], 0x1}, 0x4004045) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) sendfile(r3, r4, 0x0, 0x7ffff006) setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x200}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa8}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) accept4(r0, 0x0, &(0x7f0000000180), 0x80000) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000c580000008001b"], 0x28}}, 0x0) 9.077656489s ago: executing program 3 (id=5465): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100003afe0620e6040b00000101020301090224000100001000090414000239261a5509050602ff0300000009058202"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x4, 0x4, 0x4, 0x9}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000004000000040000000010000000000000", @ANYRES32=r1], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f00000002c0), &(0x7f0000000400)=r2}, 0x20) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x309c}}, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x309c}}, 0x0, 0x0}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 7.354938986s ago: executing program 0 (id=5472): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtfilter={0xbc, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {}, {0xfff3, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x88, 0x2, [@TCA_MATCHALL_ACT={0x84, 0x2, [@m_ife={0x80, 0x1, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0xfeff}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffff9, 0xe1, 0x8, 0x5, 0x8001}, 0x1}}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x9}, @IFE_META_PRIO={0x4, 0x3, @void}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x50}, 0x0) 6.977313882s ago: executing program 8 (id=5473): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000002600)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) r2 = getpgrp(0x0) syz_open_procfs(r2, &(0x7f0000000080)='personality\x00') ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000ac0)={&(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80), 0x4000000000000120, r6, 0xeeeeeeee}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r7, 0x0, 0x4) syz_emit_ethernet(0x5e, &(0x7f0000000180)=ANY=[@ANYBLOB="e62747213b76906fd873dbe975208946a3a64effffffffffffff7f496c97d0addf7539954aaf9447b28633e26cdde2dd1b2d9596d037b63a0730a3512345aae4994788767910284181fb3abbdd601ce02a83a9fb68"], 0x0) copy_file_range(r4, 0x0, r4, &(0x7f0000000100)=0x2295, 0xf, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000000c0)={0x3, 0x1}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 6.404362712s ago: executing program 0 (id=5474): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(fcrypt-generic)\x00'}, 0x58) (async, rerun: 64) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) (rerun: 64) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) landlock_restrict_self(0xffffffffffffffff, 0xc) (async, rerun: 32) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) (async, rerun: 32) io_uring_setup(0x178e, &(0x7f00000008c0)={0x0, 0x52be, 0x100, 0xfffffffe, 0x14e}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x400000, 0x0) (async) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) syz_open_dev$sndpcmp(&(0x7f0000002440), 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x6, 0x0) (async) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) (async) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x20, 0x4, 0x0, 0xee2, 0x8, 0x3}, 0x0, 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={0x200001, 0x81, 0x100000}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='mountinfo\x00') pread64(r5, &(0x7f0000000600)=""/4093, 0x1049, 0xfffffffd) (async) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async, rerun: 32) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="ad338bfbae36295adf24df7b3f8156b6c5820fae9d6dcd3292", 0x19) (async, rerun: 64) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 6.190454592s ago: executing program 9 (id=5475): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf}, {@in=@multicast2, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x80000000, 0x20000000}, {0x400}, 0x0, 0x0, 0xa, 0x1, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x1a0}}, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, 'gre0\x00'}}, 0x1e) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x20000000) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) gettid() r4 = request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='gre0\x00', 0xffffffffffffffff) r5 = socket(0x10, 0x3, 0x0) keyctl$instantiate(0xc, r4, &(0x7f0000001500)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'user:', ']g', 0x20, 0x600}, 0x2a, r4) write(r5, &(0x7f00000002c0)="240000001e005f02140c00fffffffff80700000001000000000000000500e99c11e85637", 0x24) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r6, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r6, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r6, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000380)="f2a3caf12c99b40132fd592132e08f0f952c87a30e5747a2d122cb755867e6eb5188ea264a07a2f38b58c6338ec4f67c78fcd77e9f7d11fd8d50fb354b4d31782546ce2b3be2c5fbca0f7f7b57063937aff9c2d3f560c35c4351633c58424e3bde9c932ebdd66045b093dce8bfae552a94248d75a06c0d41803451c4a2381c8a76c0172996b2411d070e5f6a334fead34442bbfb5593f3783b6f2315f2f638402afcfb2288b3f68b1e7b007fb5784296e68a40a21a6f8449b075b7", 0xbb}], 0x1}}], 0x1, 0xc840) r7 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)="1fd95dbb5ba8919d5eb0dffdba99cc96aeeaca56703a444ae9b13f9798594a96119a0f7695a64247c04357fe12ad4fcabd3c9e296b6ee10be4b597af77865e28e603005d919659a3df60da6b22d1ed331fb77f0bc6c8eb97e559483fd71ffde9e243a01a01076a822cabb779b29c58a67411d0019c75b965fb0282c5f4479b", 0x7f, 0xfffffffffffffffd) r8 = add_key$user(&(0x7f0000000340), 0x0, &(0x7f00000003c0)="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", 0x1000, 0xfffffffffffffffe) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r5) sendmsg$DEVLINK_CMD_PORT_SET(r5, &(0x7f00000017c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001780)={&(0x7f0000001580)=ANY=[@ANYBLOB="e0010000", @ANYRES16=r9, @ANYBLOB="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"], 0x1e0}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) keyctl$dh_compute(0x17, &(0x7f00000013c0)={r4, r7, r8}, &(0x7f0000001400)=""/134, 0x86, &(0x7f0000001540)={&(0x7f00000014c0)={'sha3-224-ce\x00'}, &(0x7f0000001500)}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x0, {0xa, 0x4e24, 0x4, @remote, 0xffff2ea6}}}, 0x38) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 6.104440664s ago: executing program 8 (id=5476): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x440, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) 5.805699575s ago: executing program 3 (id=5477): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f00000001c0)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11}, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f00000004c0)) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x5c, 0x1, 0x9, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7f00000}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x10001}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48801}, 0x4040090) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x0, 0x3, 0x8, {{0x9, 0x4, 0x0, 0x33, 0x24, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x3c, 0x3, 0x2, [{@empty, 0x8}]}, @ssrr={0x89, 0x3, 0xb5}]}}}}}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$PPPIOCSMRRU(r5, 0x4004743b, &(0x7f0000001e40)=0xb) openat$rfkill(0xffffffffffffff9c, 0x0, 0x40000, 0x0) add_key(&(0x7f00000002c0)='asymmetric\x00', 0x0, &(0x7f0000000580)="27bbb1597dc47f6337451576aeb8dfb5bd94109520e8e86f17154f1f9cf65ecb99c8d4a09b832e2b06377bd6f3465578f7e4bd03f416c956da02a542dee2d985d0a7b21a2186c034b3296ef41bac2493e03b67e25e27", 0x56, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000000300), 0x0, 0x0, 0x0) r6 = add_key$fscrypt_provisioning(&(0x7f0000000380), &(0x7f0000000600)={'syz', 0x1}, 0x0, 0x48, 0xfffffffffffffffc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0}, &(0x7f0000000700)=0xc) lstat(0x0, 0x0) keyctl$chown(0x4, r6, r7, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x7e, 0x21, 0x1, 0x60, @dev={0xfe, 0x80, '\x00', 0x2a}, @loopback={0x300, 0x460c6}, 0x1, 0x8, 0x25a1, 0x40}}) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r8, 0x40085112, &(0x7f0000000080)=@generic={0x8}) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r9, 0xc0945662, &(0x7f0000000100)={0x1000, 0x0, '\x00', {0x0, @bt={0x0, 0x5, 0x0, 0x0, 0x9, 0x9, 0xb, 0x7f, 0xbc, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x14, 0x1b, {0x0, 0x6}, 0x7, 0x40}}}) 5.804251882s ago: executing program 8 (id=5478): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r1 = accept4(r0, 0x0, 0x0, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x4}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 5.468519538s ago: executing program 8 (id=5479): syslog(0x3, &(0x7f00000000c0)=""/88, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) setxattr$system_posix_acl(0x0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x1}, [{0x2, 0x8}], {0x4, 0x4}, [], {0x10, 0x1}, {0x20, 0x6}}, 0x2c, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/custom0\x00') syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0xff08, &(0x7f0000000c40)="2318e78a8110b1c89f478f51e1a8dc6a90c8e40855f1484f523e935f5b4f4a225183bfd4ca317400"/49) read$char_usb(r1, &(0x7f0000000100)=""/242, 0xf2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 5.102480745s ago: executing program 9 (id=5480): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000dc0)={0x28, 0x14, 0x211, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0xfa, "4ac2411e47061aefad04000000"}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000841}, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) socket(0x25, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr(r2, &(0x7f0000000200)=@known='user.syz\x00', &(0x7f00000002c0)='msdos\x00', 0x6, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0xf, 0xd, 0x200004) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r4, &(0x7f0000000d00)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) writev(r3, &(0x7f00000034c0)=[{&(0x7f0000000340)="00000013000347006e35ccece4ffff010000000100e7ff5500000025000000190004db0004000000077dce1a56f8f4f26feb6c801bd411efc40800ff010000000000000000", 0x45}, {&(0x7f0000000440)="9fe436d83c8e2a95ae28f836d34ea59344d5e0215f3a50ce98ffff353ce768d4d1c7fe39377e4bc5449d2424f33fbcb4132ca75fc6e9b3efa5d1e0e705597f111f82ddc01d1faa5263fc8b4269ceedf614de56", 0x53}, {&(0x7f0000000500)="9c0e5d4ebb5276625e7f66c4c259653c0ef362f557a1b2d38349184d251a019be5bb24eaf79f88d759a801e24b19652b8e03332b3ead83d7a24abd4e25c92de95bad3bd4bd0003a14be03cb9882cee25587285c529c983c303f059a7fe367901f28203783865560487bdb48410a5fae73ea820fc1eb0c6075e296df703e64cde9e", 0x81}, {&(0x7f00000024c0)="23f5f708f175bfb35e2b154e627821db2d8b60212a8173eb10a271e8f9c3ede63ad6fb50c70fe2882c2363e8c80966af6baa3a78078e10a0f1dbaf7005fed7e27c29928359bc77db698929135bee633b6c497bd740cc4085f895278119731536b70cf89c3148bb75f4033b2515666406dc0bd02ee130ca38fbd4d24cce6f2d535caac191805b759dd16dbd6f002ad2bd1550f916bc831025cf4a367baab790301be3950133fbddb0d96ef82b4ba60c9f67326c1811726d927d0e0a37956647216f7fe18a0a3b68dbe853d465e6cf4aeb21542250ea79aba972aa7be86555d578bf06e2a88725df33e50ebc903a6b2e73ea4b960ef1ce48a44fcf540d3640cc0ddce67b774889ef885cf51ab1727e80d70dad3a97a8da64729eed34d54c1a22679949626a2795aa0f35db366575aeafedd5d8dc00d6a7c01e56484ea039319d7388b5087ba7e3665cc68b180112768312d39c694e93c4eb4f5474ea94052e884a09879f73cb333b2cf278b12911e8fae4138a75c193774df9f46ae93ba66905493db5485f5977dff33131a820f162b403337d0afbe24ff3759c06aaa5d8d4fb99bc4e87786181c8ae4af43e76385ecabdd77baa7eb423a1ae91c17351ab5cc68e7c284f8bc263d66a1dc078d9248c7b2677f1a4767b8e58818faed47173441d053d98b681cf513e6e02d7e68adcc84b2d1972d966f29f73044ee7aaa24c5e5526127323f0b7f3b093beb4fae310696b0aba60bd1ec205d814518ade755ead523dd8104f8577e493ed9f8c128c48d2e04b311d0c665b813ca945afdd29e87826e8522bdc63be8b2cd1c4512f8c49592dbb244ebc66a415da69421369b626819ba607caa45bc45277497b6ac34d0c260ab6d56aa9c9f53e1f4ccf6360abecfece34ba0eda3cd176ff7a1c5853b1450c1871f3782e4fee6917d0cee0a2ae1fc844302cc60063b8592b5cffc61a05933b0f68e23725c844a207c044717557ea4d9482c9d017dcc76f9995b2cde688b71063a39a4d5730bc8d9cd13ff00c474952dfd7d0388324d1f02c29ef4d1dd49c4601325637ae7304e0760db8395391416df96611af730d62cf504c724713f54958febd587e8c346225852ea2c9eb9049588adb8a9ceac7592ae1c06826efc445a8987492fb603aff238d06981a7578e11e4a9f5213c6948c3bb522b7023f179417eb1133e939cd3206307ba0185e66cd16660aa29fc605f0949d375e5dc5db35a659a95442614d3528c51536af3f10672e8ea3ff38d5d15f9f4d542806c9d6599ceba30c970fb1e4929456c36af98ce3e27fa026fcf3d53254c6de5be7e2b424a2db18cc96159427a3a980d0e95a1f331c8619f082aaf1fc80cefa39f69b8740e432a80c3f92ab5314698d009b098df2bd59a159e3adb1a89b80cd02e710fea9fd551355da336574c566c83099f2f6a897dfbd81deaf10f4cd8fc102f6af8bef0c2ad0e2bb2d2830037ee10ee698bf5210e77ae6a7094e98398fa3ee1ba3101dc57e01cd2e136556b2ac716f3c97630963aed60d497d308b3d918fdd7fa551412d4c64112c79b833ff3f040961a48b76ea3dfe8557d9f1c0e39aee309bfb6fd03920216a5fbd880bc8a8efc13dd2238988e432b9a3c7d931c91664a1493c88e2477abfc10c9e31529b489303052fb14f80843ecfe9fbce3d106358a7f3f742e6109ea3efe36398ea0dbe09f2c59d0836c049e3e371f1d9e79fec24ea943667453ed25b83994c9f301bcc9e5e9aa187860f19edb7e77b6322528f85e5534d4e990b2e4d1987329b1bbf6b4faea49530c7ee2d82d9563eebbfa021658e4a9f8632b800c2f5a7a7f3b3fc8dd432784e99d9848ef4a1f997f598c99930aef46f50cfb5b382c83dd8c5dc350ace93fa63ec63fc9d4f3a5053e55682db9bbe8d1134a90a95050dbcbc8111024b49c83110e7bf3a935d138539dc87834cb24b1d57ede374a7967d118b3c1646113db81b2c45c85a15abbe542717b2ed891015b10218cc22fc762e1adec7fcbfd0af7f16c11ea62de7cdd287a02b6c08be0095431cc4c83b92b82808b62dd56d8c04710659c5584d1b4043b5e8532c88441c66b7a1d3af90699d2545be2702adb423d42aa49d96d3e1d294596bab3f7e6ff5a42771fb2371b32584c69960f6b7a952f0dee0303019ac55490d5d65f0e19ec7369059b9d2a206fa18eeea668f6820f24ee96ad3a2b8d1f044a099a37381f7c7cacdff8f7e0b2d9b3333a4eb0a015699ccb882610e28570c6575ee80615c020db5a3f90ce9b910f22a6db6c8aabc4b0c35b183b9cb89c817e3bcccb14fa1c44d4078bc00f3e90b761941ad69df06655a98e4dca9fdcbef8d3e86602475a6e9ff585b2c490a465ce2dad2ba7ec95e5ef84dad150b7b7af80abfab4b6a048d4fad2f2568024bf291f9f94c40d42aac0cc8623ace93af063a170f02fa77106f5cbca06c7629ff796e85a0003ef41cd578065a39da2b5b93c22341ed1ef0f11812566c10b286e51093a3de338abe47881173fad4d9c07ca8b0820e7f94d67059105045e821c641cfbd9c38aca64872aeea908cd4998f7a1b85e96b0ac7d2057b8d0b868450af117514548a9040c9bf402055616c55859f97f8e482af96c73d99873ced19061c6d3c75719498110940ccabb1b24ad3c0fb173be94869597668cc21da57d537b572cc4bbebf8bb07faedd75f7c58f12958581deac6fb03646327936144f0734ac5fb14db7cb164c3c5980747cfabc478f46a79697332db71001a5fa1d855ee1bf16118005c67c2d5c6c4fd717de400c273cdf50a57f3228c857775e58e5b927b207579cb7299b3e10be21ad14d7ccb13e8414252ddac818f1e1a6e68eb85c51a74d580af03d1fb41bafc1c8926d2e2e58b3cdde652b7f5ef6c60589a7b61799a2fc0e61d88bc5ad6a43fc5e81579eae79135c0f00522100d3d1b7cb50472ea74820e3b8aa2f2a32c97fba9f61352a22e683f347a8adf53c80472e35c47cd26779f752bd7daa1c0f8d7ee6eb771bcd4a37351992bf7ef2fd01eadf94e1420c04a663021154d833d0e8de89be70c3c1a8d96d43bc905e582e2401a5a440c4c51f90a1b21d12df149b4047891202ccd16943d4b6beb32dba97ae985c8e2a20f3c83148569ac004eaf562cd4cb130ce0818ad48df2963c2922d7cfd319d18909b400011475569e72c9c08cebcd1f73cc263257ef6e5da3e8abfb4b6a721066f0415bb85e1f7ffff9546e150409e343ccd68cc214662c99b8889b8a8fe6ff7b7d531794b45c6d7b26b5388a2d3cdebe185aa48a8362671da853dbed9a0b8feedcdc8adf382e2b00190161da849be2589225902dbe206fa974d1a23e291100c71e7b108f7169626db37b3830859a230995693e421a7d5ccfd3ff280e68e3730603c938b06f3b5ca6b253a70afd56f21b5db9c7ec1e9ec7c5ea005d5646c9445f51470b94e819747219e21ed6521fa06ac1a4abe289a96a0c276dbd9d9cec6001cd2edd7804a27524b3fc3d87b440d4174f4b4c4488440e32a5e605e2eef27090605be8a7a949de8ef7212db59732863a8a230c682eff3c41a1e73ce8104d020ff716ec3d7cbaeb0f18bc619352b241bc2b7935c631b782a2db7a548874a5d24931d8c7edea24b2846c9e5f60880164e37c4fd6d589bea4509db33abff012bb2a50937b29f45ed500c1996fcdf87b590ca9e0c4cc118afbd781981f7c38fd77782dbc9a65ae6d344194c68cae4aa237d3b9f4064d5d57cc1a5392e7a889200594832f890f383806192aaa9367d450f8fcf0eb6a7e816f308ec6cf80c287a25b74f5c24bc627a941ba79069849004cdc97018faf4ad952a453d5d1e691c9ae677d914934211e51741bcd20359c0c546e1cd670923f0120aa6454940aeb70f26504d799a18c659d81817fa473fe7ed5feacaaedf2bce3625fb401d961480feb3ed28c733d2799f02d3d9b65eba5894079cf269b44379957fdb6a89395f75c355450f8be8dbb2fedc7d1422197394397b2c2dabcbd55d07060ebb7345e327a599a7e978c40eb5ad05d272a6e30167d1f86774092fb5a984202bdaccce4da4018d2494e05a922db817af52bffbd13862c31344eba8ebecbcb06fcca20411c954a2db536c198ca99cad2f2cf9c2d04d557ee2def37ba1c61af45be6d06983d63643fc5d97bba929cbc6f5980289a155e7a0afd9a85e009e68742c68c2b44c16a0113eb02121f20a43bc057df1e127c2bfcb80cd6df9b5eae7b11481ae52eae8f7f5a61e61f30f16a6dd75cb7fb9f0832730dc2ce9f85c01b2d637b81cd0acab7b3255fe3b682dad667e469a620bfb367b05600773865b6c0f3fc449b48f38891e94246fe040348da1e8ca1a2e61b4a48304ca39c44f305ff2e106db75814762bc428232eb36456afbeff580cd4f9f564f0841491a3e46fea9721ff0e575650638f2f8d9e3cc0681573512b6a1e50378c81d4fdc283cbdada5e34466f807831c95865631d169868d38e4f638b1990c92e0a2d99f50da712794e2b70a5fa4c2d2790824eb16a51be6b36a01757dcc480b8bc60d9a69e37dc2d9893f0e1afa4c302d5e228aa34fb9e672ac8e78d18d99f7391d4cdef185f6c88705613fac6b69b9c31813b3c6fdec396b4844bf2be5cf2ff787c4b4d408db250aaecae2c38be26aa9de7f3850a55ad795cd7dc822a160b07844a26df92f16c3d7abbba4b8cb28961df3de759bb597408351fb964c0e50fdcf00628b7803314798482d135bdd19c4cad35244d4dc168a380bf80023b46834c2a60c301116047c8ff6301317e2d09e0a3c31087cecb7e5017d4bd64fa0cdf90ed5e4618d26469c0033a09bf0005bc6ce0d2cdbc504eebc8a23f867806b9cbc98c2b302fda7c78d93469f697d95c1b22b878c51635f901f2d67545dee610c93cbe17d2d1acc4fa007df45ce43ca704a98b05beef4fb1136d988dbfe0aeb32aef340a20e328f3c7596e179317ce356ed991470b8f77d2f9375b6325a017cb9be37a5f6062e67c3062dc62f1428afbc0572f3e45b6f7e32a7ecff47cc6b64e1c90b59b828975044c24bc136407c6eb700c2b7f5c38eec3a5980dd29ac85e08de7629dc14c6e51a07ef298d2aae936f648f3751ec37e8819d7240d13adcd4b6140f4a6ff3c3c31ddc86070c315d0cf5fe46717a547993fc46afad690921e13184ba36b44a48fd858c725c5c60065872aec8e3244c4a2c2b4e785cb4ecefda4a5decb9947f12af564e19e91ff6de8c7ce58ff1af49e384311c37d88c76db91deb10ba6cd1a690aa5e3a914c573ad254674585c3ba60f9214ea6d51996e6b346433967e88d842ab2a9b7191eefd4068d08c8344a727478b91c74598c192bca8975378f72b4c19369a5c4752cc192ffc34f32c75b900dac4a4e77712e3cace071ba48cc808e4e3fed400b302b0e61c7b7950e272ee35c775036b76fd93907cd1666f11e0e96e64985b5c15fe11cd518ef9a51ff765087495a8a0bc73658fe8fb966eecfb82af3cc5aad2386eeefd739b0b60a1f74df4fe196087296de38e6b63180d8290a859f77af039c16b67a495e46aa353f82e0df5a2618db18215c130fb685f9edf0bebdc8d30a4c2fb3deaaab17686fb21edd1bcd40809cec9792222151fc90ff0c4b06b53dbfa0b9ae9bdf4f89bbf64dec754e9248905fb7dd23a6db9f4d751a6a25488640bd4eda75b586e70e0d114693c35288196f34da12866f40a24aa08ae84c6f1b3f47b0bbf9f697c08b3ba0be1bc417202388d22bca8aaff30b571a134489abd9fbea5557b6fd", 0x1000}], 0x4) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x141301) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='./file0\x00') ioctl$USBDEVFS_CLEAR_HALT(r7, 0x80045515, 0x0) socket$inet_udp(0x2, 0x2, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3) fsopen(&(0x7f00000000c0)='msdos\x00', 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r8, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r8, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) connect$inet6(r8, &(0x7f0000000240)={0xa, 0x4e22, 0x5, @mcast2, 0x80000001}, 0x1c) sendto$inet6(r8, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r8, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) 4.153274477s ago: executing program 9 (id=5482): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="c962", 0x2}], 0x1}, 0x4004045) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) sendfile(r3, r4, 0x0, 0x7ffff006) setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x200}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa8}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) accept4(r0, 0x0, &(0x7f0000000180), 0x80000) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000c580000008001b"], 0x28}}, 0x0) 3.944955124s ago: executing program 0 (id=5483): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1d) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fanotify_init(0x200, 0x48801) fanotify_mark(r6, 0x1, 0x1001, r4, 0x0) write$vhost_msg_v2(r5, &(0x7f0000002b00)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x4}}, 0x48) syz_open_procfs$namespace(0x0, 0x0) r7 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r7, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x0, 0x81, 0xffffffff}) sendmsg$inet(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4048014) recvmsg$kcm(r8, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x10000) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_usb_disconnect(0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000380)={0x4c, 0x0, 0x30c, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x200}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) socket$nl_netfilter(0x10, 0x3, 0xc) 3.798415748s ago: executing program 3 (id=5484): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtfilter={0xbc, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {}, {0xfff3, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x88, 0x2, [@TCA_MATCHALL_ACT={0x84, 0x2, [@m_ife={0x80, 0x1, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0xfeff}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffff9, 0xe1, 0x8, 0x5, 0x8001}, 0x1}}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x9}, @IFE_META_PRIO={0x4, 0x3, @void}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x50}, 0x0) 3.647849342s ago: executing program 3 (id=5485): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) inotify_init() symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r3 = inotify_init1(0x80800) inotify_add_watch(r3, &(0x7f0000000300)='./file1\x00', 0x10000200) socket(0x2b, 0x80801, 0x1) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) set_mempolicy(0x6005, &(0x7f0000000080)=0x5, 0x7) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r1, 0xffffffffffffffff, 0x0) 2.789436301s ago: executing program 3 (id=5487): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000440000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x3, r0, 0x4}, 0x38) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r4, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f00000001c0)=0x2) syz_usb_control_io$hid(r4, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x8000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000240)="b9800000c00f3235000100000f300f20c035000000800f22c066ba6100b805000000efc4e1555538c4c1b1d24900660f60c50f2055660fae3a66bad004edc744240000000080c7442402f8ff0000c7442406000000000f011c24", 0x5a}], 0x1, 0x44, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xe0}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a30000000000900030000000000000003000c000240000000000000000114000000110001"], 0x60}}, 0x0) r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r8, 0xc040aed4, &(0x7f0000000000)={0x8, 0x3}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r10 = socket(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x40, 0xfffff008}, {0x6, 0x0, 0x8, 0x5}]}, 0x10) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) r11 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020800000400000001"], 0x48) ioctl$KVM_SET_SREGS(r12, 0x4138ae84, &(0x7f0000000480)={{0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x12, 0x0, 0x8, 0x6, 0x40}, {0xffff1000, 0x70000, 0xc, 0xeb, 0x2, 0x0, 0x1, 0x0, 0x7, 0x2}, {0xeeee0000, 0x1000, 0x10, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x45, 0x3, 0x0, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x1, 0x0, 0x9, 0x0, 0x3, 0x0, 0x4}, {0xfec00000, 0xffff1000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x3c}, {0xffff1000, 0x0, 0x0, 0x78, 0x5, 0x0, 0x2, 0x1c, 0xa4, 0xff, 0x5}, {0x0, 0xeeee8000, 0xa, 0x4, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x3}, {0x80a0000, 0x4003}, {0xdddd1000, 0xfffd}, 0xfdfdffde, 0x0, 0x0, 0x120, 0x0, 0xe801, 0x0, [0x80000001, 0xe1e3, 0x10, 0xfffffffffffffffe]}) 2.385792136s ago: executing program 9 (id=5488): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) flock(r1, 0x6) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller0\x00', {0x4}, 0xb5}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000000)=""/26, 0x1a}], 0x1, 0x3c, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r4, &(0x7f0000000a80)=""/4085, 0xff5) getdents(r4, 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, &(0x7f00000000c0)) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000000100)="9d990d317922781f127e2d5e354806692740125eb6b6abfad1769a827726ae799653aea430f81a98193e25a7f9527f0badb338e21b6cefca3e03f0d927d0fa6b0309d812315b276ab7c47d968469c1596d3c81206d9042aa7e7613105a6f13ddcc67bc740d4a9f0cb46df5133e4c28c6e1a3a5dac56ab990d985a97d", 0x7c}, {&(0x7f0000000180)="3a8b6761ece1d84cee6f4726242428fe655b78a66f74240e17810349ce2c22eebd13396e5feffa4fd56d4964a36bfab1ca2fbefba59d4e5052096209ec59011e6dd5f08fdab20fd7c78efde0d3f82f36dca280de5737aa5d", 0x58}], 0x2}, 0x20000090) 2.283889049s ago: executing program 8 (id=5489): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r1 = accept4(r0, 0x0, 0x0, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x4}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.206164576s ago: executing program 8 (id=5490): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r0) r1 = syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f0100080000000000000004240200090581031000000000090582"], 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000700)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, &(0x7f0000000000)={0x14, &(0x7f0000000140)={0x40, 0x31, 0xb, {0xb, 0xd, "5d768d97c37e80aa81"}}, 0x0}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) 1.861960849s ago: executing program 7 (id=5491): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f00000000c0), 0x0}, 0x20) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000900142603600e1208000f0000000401a80016002000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954343370e9701", 0xd8}], 0x1}, 0x200008d0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x101a82, 0x30) copy_file_range(r2, &(0x7f0000000000)=0x7, r2, 0x0, 0x7, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) socket$inet6(0xa, 0x80002, 0x5) 1.608931551s ago: executing program 0 (id=5492): r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000c00)=@filter={'filter\x00', 0x42, 0x4, 0xb40, 0xffffffff, 0xc8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xaa8, 0xaa8, 0xaa8, 0xffffffff, 0x5, 0x0, {[{{@ip={@empty, @dev, 0x0, 0x0, 'bridge_slave_1\x00', 'nr0\x00'}, 0x3127, 0xa0, 0xc8, 0x1ba, {0x46010000}, [@common=@addrtype={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x287, 0x898, 0x8f8, 0x0, {0x0, 0x4}, [@common=@unspec=@u32={{0x7e0}, {[{[{}, {0x1000000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}, {[{}, {}, {0x0, 0x2}], [{}, {0x0, 0x8}]}, {}, {}, {[{}, {}, {}, {}, {}, {0xfffffffe}], [{0x6}, {0x0, 0x3}], 0xfe}, {[{}, {}, {}, {}, {}, {}, {0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {0x0, 0xfe40}]}, {[{0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}, {[{}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}, {}, {[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}, {[], [{}, {0x4}, {}, {}, {}, {}, {}, {}, {0x4}]}], 0x5}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@private=0xa010102, [0xff000000, 0xff, 0xff0000ff], 0x4e24, 0xc, 0x2, 0x4e24, 0x1, 0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x1], 0x1, 0x1}, {0x0, [0x4, 0x0, 0x5, 0x1, 0x5, 0x4], 0x4, 0x3}}}}, {{@ip={@multicast1, @broadcast, 0x0, 0x0, 'lo\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x1, 0x1}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xba0) (async) r2 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0xe9) fchdir(r3) (async) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r4, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x100010, r4, 0x0) (async) mlock(&(0x7f00009e4000/0x4000)=nil, 0x4000) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000004c0)={0x9, 0x4, 0x7f, 0x7ff, '\x00', 0x1ff}) (async) r5 = syz_open_dev$usbmon(&(0x7f0000000480), 0x7fff, 0x400002) unshare(0x22020400) (async) ioctl$MON_IOCQ_URB_LEN(r5, 0x9201) (async) r6 = syz_open_dev$evdev(&(0x7f00000003c0), 0x2, 0x0) ioctl$EVIOCGMASK(r6, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) (async) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000017c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x74, 0x40, 0x8}, {}, {}, {}, {0x0, 0xfe, 0x0, 0x100}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x5973599c}, {}, {0x0, 0x0, 0x0, 0x8}, {0x3}, {0x0, 0x20, 0xcd, 0xe}, {0x1, 0x0, 0x0, 0x3}, {0x0, 0xff, 0x7e, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5, 0x1}, {}, {0x0, 0x0, 0xfd, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x0, 0x2}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {0x800}, {0x6}, {0x20, 0x6, 0x0, 0x4}, {0x3}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x0, 0x4b}, {}, {}, {0x0, 0x0, 0xe2}, {0x4}, {0x0, 0x0, 0x0, 0x8001}, {}, {}, {0xfc}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x2}, {0x0, 0xb}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c047c00000400c280f19f2626da056c9b6afbecab0b0b960400080000"], 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) (async) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c000180060006000806"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x400c004) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000440)={0xa, 0x4e23, 0x78, @private1, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYRESDEC=r3, @ANYBLOB="ae2af0cb46adfdd66711c8ccb81c8e65a4e1f6ffa21c398f2505127ab1ccd587eecb7f507f974d354ab1f6d59d00a4ea000000001168405c2e2f91d39508e1d5e998bdba54b617f260dc9197902770dd42f0108223", @ANYRES8=r7, @ANYRES64=r2, @ANYRES64=r4, @ANYRES8=r1], 0x30}, 0x4040805) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) (async) pipe2$9p(&(0x7f0000000200), 0x80000) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="b6dff8f43fd3", @ANYRES16=r8, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r9, @ANYBLOB="1e00940000101e0300000000000000070008001f000000000404000000c000000400440004004600"], 0x44}, 0x1, 0x0, 0x0, 0x40040e0}, 0x20004800) (async) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000e915f029b2257ec2ea0f1e4d8b7a73981b6527e541dae6d253de808fb02b15f8fe3013", @ANYRESOCT=r9, @ANYBLOB="f7b90f815c6e5eb24d350e9c39ace291d17a34a348d720d45fda2b3ee281e0517133b4afeb7d0cfd71aa1e18b6c75231c701b450cd551bff8cb5dbfc097c7e52df03204976f00b639d7cd256930caaa09ad12aa1cb82cddbc540d7f1bacbe9e0573a1754ee4d38ac92479dd829415830d633fb3de675e62f3f259006c2b748493c27c1"], 0x14}, 0x1, 0x0, 0x0, 0x4044804}, 0x4000) 1.518189624s ago: executing program 7 (id=5493): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="8216ad146505c638040000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40982, 0x0) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x3, 0x3, 0x0, {0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3ff}}}, 0x32) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000040)="44bb98") ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r4, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0xfffffffd}], 0x1, 0x40000100, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x8000}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) (async, rerun: 32) write$tun(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) (rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'veth0\x00', 0x0}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newtaction={0x44, 0x76, 0x1, 0xfffffffc, 0x25dfdbfe, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x200a, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x7, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x1000000, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async, rerun: 64) r9 = fsopen(&(0x7f0000000140)='vfat\x00', 0x0) (rerun: 64) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@deltclass={0x24, 0x2a, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xa, 0xb}, {0x7}, {0xffe0, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r0}, 0x8) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0800000006000000040000000100000000000000", @ANYRES32=r0, @ANYBLOB="000000000000493c2de5df092751000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/28], 0x50) (async, rerun: 64) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) (rerun: 64) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) r11 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (rerun: 64) ioctl$UDMABUF_CREATE(r11, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x1f}) (async) prlimit64(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x96, r10}, 0x38) 1.436013152s ago: executing program 9 (id=5494): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f00000001c0)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11}, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f00000004c0)) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x5c, 0x1, 0x9, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7f00000}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x10001}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48801}, 0x4040090) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x0, 0x3, 0x8, {{0x9, 0x4, 0x0, 0x33, 0x24, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x3c, 0x3, 0x2, [{@empty, 0x8}]}, @ssrr={0x89, 0x3, 0xb5}]}}}}}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$PPPIOCSMRRU(r5, 0x4004743b, &(0x7f0000001e40)=0xb) openat$rfkill(0xffffffffffffff9c, 0x0, 0x40000, 0x0) add_key(&(0x7f00000002c0)='asymmetric\x00', 0x0, &(0x7f0000000580)="27bbb1597dc47f6337451576aeb8dfb5bd94109520e8e86f17154f1f9cf65ecb99c8d4a09b832e2b06377bd6f3465578f7e4bd03f416c956da02a542dee2d985d0a7b21a2186c034b3296ef41bac2493e03b67e25e27", 0x56, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000000300), 0x0, 0x0, 0x0) r6 = add_key$fscrypt_provisioning(&(0x7f0000000380), &(0x7f0000000600)={'syz', 0x1}, 0x0, 0x48, 0xfffffffffffffffc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0}, &(0x7f0000000700)=0xc) lstat(0x0, 0x0) keyctl$chown(0x4, r6, r7, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x7e, 0x21, 0x1, 0x60, @dev={0xfe, 0x80, '\x00', 0x2a}, @loopback={0x300, 0x460c6}, 0x1, 0x8, 0x25a1, 0x40}}) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r8, 0x40085112, &(0x7f0000000080)=@generic={0x8}) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r9, 0xc0945662, &(0x7f0000000100)={0x1000, 0x0, '\x00', {0x0, @bt={0x0, 0x5, 0x0, 0x0, 0x9, 0x9, 0xb, 0x7f, 0xbc, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x14, 0x1b, {0x0, 0x6}, 0x7, 0x40}}}) 1.338010319s ago: executing program 7 (id=5495): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtfilter={0xbc, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {}, {0xfff3, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x88, 0x2, [@TCA_MATCHALL_ACT={0x84, 0x2, [@m_ife={0x80, 0x1, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0xfeff}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffff9, 0xe1, 0x8, 0x5, 0x8001}, 0x1}}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x9}, @IFE_META_PRIO={0x4, 0x3, @void}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1.079915176s ago: executing program 7 (id=5496): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf}, {@in=@multicast2, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x80000000}, {0x400}, 0x0, 0x0, 0xa, 0x1, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x1a0}}, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, 'gre0\x00'}}, 0x1e) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x20000000) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) gettid() r4 = request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='gre0\x00', 0xffffffffffffffff) r5 = socket(0x10, 0x3, 0x0) keyctl$instantiate(0xc, r4, &(0x7f0000001500)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'user:', ']g', 0x20, 0x600}, 0x2a, r4) write(r5, &(0x7f00000002c0)="240000001e005f02140c00fffffffff80700000001000000000000000500e99c", 0x20) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r6, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r6, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r6, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000380)="f2a3caf12c99b40132fd592132e08f0f952c87a30e5747a2d122cb755867e6eb5188ea264a07a2f38b58c6338ec4f67c78fcd77e9f7d11fd8d50fb354b4d31782546ce2b3be2c5fbca0f7f7b57063937aff9c2d3f560c35c4351633c58424e3bde9c932ebdd66045b093dce8bfae552a94248d75a06c0d41803451c4a2381c8a76c0172996b2411d070e5f6a334fead34442bbfb5593f3783b6f2315f2f638402afcfb2288b3f68b1e7b007fb5784296e68a40a21a6f8449b075b7", 0xbb}], 0x1}}], 0x1, 0xc840) r7 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)="1fd95dbb5ba8919d5eb0dffdba99cc96aeeaca56703a444ae9b13f9798594a96119a0f7695a64247c04357fe12ad4fcabd3c9e296b6ee10be4b597af77865e28e603005d919659a3df60da6b22d1ed331fb77f0bc6c8eb97e559483fd71ffde9e243a01a01076a822cabb779b29c58a67411d0019c75b965fb0282c5f4479b", 0x7f, 0xfffffffffffffffd) r8 = add_key$user(&(0x7f0000000340), 0x0, &(0x7f00000003c0)="df7da9324913311b9a14ff16cf3310db80bedfa52c34306fc5e197e55818a7ff1db4ee388aa4405f1a4624fc49fbced16af89186296dc0eb33e8bd8c6f079692c5be6e18bec49f2e6730c31926412ff08b3bb198b8795c6bffa4c63df15434840ce34a6239d2501b68d1aebe074b5a8867ab7051b7a4b614acb376b6a8245589183f50daf8b5012efd04475cdbd3110c03cd86c9dc38e4996c58893eaabb787d896900c25855fc764f89d2a0120dab87805d131788e7b82007e4771b9db6e4d1d360eef7feed5cdca9c30f13e88512ca18ff235f233648d090cc732ccf520e0edcd2906a5d981e79e50c186422f2faaad737ef0f238b306b0c9c579ac97e286bfaf8335dc0a8d1ff2d8b8f73336e3a86413b5eb0a9f62e0257287372fbc75dbb53ba1a0b32b5d4923a718404cb9f5db38aef423f0d77df4b96e5ce7fe558d79e8acf11d99216c51f88fe986f2cc32999ba3ed476e0258fa2ffb27bc209786045efbdfbfc0bd33bbfbdac3c01c48e7a279c604453c2072b2db88d7cd2d13577d6c4e91064efdfbff21152ac8fcda19c8a070b3bf0ab94f4b7635ba313101db87fbb6e270ca1ae6b6de97c88c6348ef526198fc08587eca25ac70a48c3d9ea584d1ae5e4ac6c06b3596f9d576a87d43504aa301b49a0908aba8c89c1caacb51bc1b4e356949968803181cf640b851ae81fa9ec4926119fdfdebd3c0a2a1172bcb8e775615a7e05971521a34ccf2028a60f6efa55c4f41a4bb16008f6b24420a25a3dc0472478948d145b9f684b92f8b040fff3d41b129c37013df2ea37a12446d1c45af0deb4c7ddda4e18aac3c68156ce78af7248baf91934684d415bf277e0081663711e8a124129b6ffc84af51a53e003ce6328313c4201a15492951a6b8e97dc8a99cef803664674dc8ac5cd9f07e2cf556f39d2afcaf2dbcede1b97633461487624fab44ac35ce82775c9543f0e43ba6c06df86fd1a6b12afba791a6912010963f1f957d7070b2c75c84f0e3473c0f88a379c50231a600de554ff8edd5e4e43fb0a13ffa1bf87bfd4e59c9dbec21f8e3aac33cd7e01ed8a0b0e0ec7fd987289a9aea27b0d162f688fdd1d37bdf93d15fa8dea4237259ef998bfea8505fa796f5df253b250f6f5746f1bdf3757ebbb5961206b5ac0641ee1cfcb379da1068d128f5e32b330161d0d55560d299ccf1d09b46a1469e432e977a6b27441efec50c6ac0c33f08cf946bff7c074ca2cfe224474141b14b81598522a71c31153d5a79b1dda95dd06ce7d7225595e34771f18861ec9a646d74efc2b425c6f1ea43e91b2e02f014f97cf53f1733e0bdfc0fcefa01dec051f44edc30e63e97f42b484fd01b56912b2c2bdd8184eb17e089591af624eb7b3018305bf99a8489985850b37a908ef267b10162bb2b97421a12b6765597febb5a8f45922e362e8f5ba563d7d8db5474ee238ebeb6a12d1439cbc23b101492e358e1e68dd39b052b707900a1422faa7f9f0f690943b500347bebb0aa5a98aa793e33c0a837e3639c8955318a09eb0f5b9d3dbf1e6ed45db515286c1af795cb670d1930fd35a18806780e554b6936b0fe81901fa538dc375d39de8fe5b4a1c71004d3c3d594eb6aa05956d863be38c998cafa1cd7138ba7604bcc293d49b7039ec3115070c6f5d5dfa827a49e47377fc7e6d23b29d15d60623f17472b6412428eafb69cb37a033cf3083bfc91353123b7617616da3c2d7aede99959587cc64dd9a4ef5c35f2caae3cbea962c6d39fb1db0b667ca799b236e15398c68da8d1942c1d54502f1f991d50b85d58db0db7d79a0006b504149592c3c34c999f7ea9495ce4cfca3fe9a248becadafbe2d15f343860d952a9553010061ec7a50029f5997f71d0a569d798f5092241c0a4da0b49ea634a2c4c95764d3d7865773a6db4be3c238d5c87bf1fc54a24eebf94a5927fe327ee8c277633735b82579236ab12055521f3e9ff3ec4cadfbd997626eb83d7023514431b2c96a95e15c8128e09d03f7f34d14bfae4004f214a6c34fa664f9a2ec1d47331561c56b869651985399de8b6663a00d2944c84a4712ddc439634d571976f5af8b2f61a8995d81e20e88672e4f2f2dfac0ce349bc0326f3c30a5a6f9bba11d723685850918430aafb38b03a263870564f6bcf7938cba771d1ababc1b9258a498f464389cb4cc81c52ecdc88399e4ed2e5fa532d86ef1b9c79bad53a747900ad4bb4c4ca393813e5e207ccda7440a1254c33e9b9b85e6f7b2f90b8e7f120733350957eeb0f1be8c8263cd8b69469b8ec5a82c40598e2dc3d4005c2299c5fa24c0328ec340f05f729cfb93875d8c50e7c6fb28b6ee3d482f8e4565581a4648b0d3db43ef936cb7e33c0cf85fd054605bc7b0e903322a357521c79192bdcace3ffaadf31c56459a6773c8021b6a737f2d1b8d2de22deb6ceb082bbea9c7a5675df49aedba9be73011380f55d44ea556b44efd41d9663d07e4bdc59a21f4ddf1fc9e327a44385782c644d7a0de932bd1a829e293e2808b928cef232a8882108739a37accc21a84012c2e5e3fe3a616fb24dc39273468207496951841083f9afa5191f03754117104874093ff8beef63d5469016630188d2aaeab981c997d5dacd48cf0e6acb1d5114ed23f134e4f55580a242f9b2cfa35c74b3c5ee1462b6ab2ebd00f01597c8e57c7bbbf95f1f1e5c29e225b5619b0eda01d9fb2eed70d6a227a7c1afd2817dbb899322d9ffc5037509f4e4d6b9481b889c130dcc0970605f724251f14bcdab981a81bfc127555f59f97bbebaa48bea43093b1ccef014de85c41a57ec4639a52658f55b94c14fbe6e30750e0e69bb6757e927ff14cc5f7a0e988671867d7bbc3be2fc45ac9921542f1b1aadf376c58de1bd16ca9d142cbb17305be8ba7ff6816dd2be08801b6efe5b19463e742160a2d62c66591ac97fd1d0cabaf0c9acfcec6a256a51d7f6f586fc8f4115f24d21443e141b7e63af8478f13b08aee876f485b98d962369cbefd056310ca48e77a396b4c2f698cfc2ee1a8faf1ff896738e0c6b78c7a0a2764e00f57e14b7642d9c76e471e6269133d3981ef975a6ea7f9ad322bff3e1b7f951b177d763ebab698adfdd26a933ebb1f0e576b86a9a53b1c853f450c25fd682adea193bccd525f6e4a087d56a9781fac3a50195fc949aeeb381e17cd8e45534c8e9ed0223dcd34b3a1e382f3d4ba11665a4397b7e294d07a076d58bb9e78511d1958fbb038501b9a01f038e0f756ed865de481ec5f9efb8db1f3458e996fc43cb64bde8e92ec6dd5ead501e5569e31c85b5742a52e50a2defd3a3f9bd6bb65fb3c53d25ba9f1e5010dd5aa5f1c403f744d4a6b67278ca45d2a9709251958c4ce2419383d921ed007fbdbe887fc8cbf1ece843f078b960a02fe3b987b8ea870a245dcccd72b27bdd058555d4da4bc1266ffdb61e8d282ca534accf588b262f5023376d55998c19ebf87d7e0d6975ab5fdf3c7ec09672467676dbf4ca4a9a68c0b7467628fb644d235524d8b826a07449394908d64ccceabdbfca2cf38163f691091fdee3bba20635ed8d93cb67f7d1c61b7b0194d3c3af64b8e597db52074b7619eaae3e5044e285232912f89975f0f5822107d21cf4c0df653839954dc09cb427cfd7b3dd70ae6ba32e187f75a89701125138d830d574f08284f64579ea2b22caf3f5e938615eb58537ccdbe8c23805d9b26db3a7310c8a1c5cc056fb9e5d254b63ffc16465ff8fd3c466876ceeb9b907f971ef6c83a1d391dd906c810fd43ae048019a2efcdad15306001fd0d3a3f6dc051887ce3c5f78c96faab036a242c6bd5c8d07348f755df972b0dad6fed5b3d92472760471f30e71b1fb1420d3419b20257d8b6514f9ea1d2baeeb531a5d56db36f5861191d7db2fc09d9068c916c25a3eb72d9da0ea7734a44c032a2297ca392819449aa621a109003d87ad2ff13377935275707f2d3a44961c310f4dc93c5b909318c8a406aae92789e5487008aeefab6cd4a742fba57fed0da42ccfcb50592955d448786f51fd849af163caed6ffaff535ca51410bf0ecab423912b0090d7046f64128568ff3c5ab376c37de409ab597d6138a8eabca92fdacfcc5a66c3038382b5bb542edaaf082d402e5932752db5d25b0e33610070e1fbe5c6741c69e05472548f291abaa506ffcd7b973367bc093ac316ec9c70561415ac843aa9979b6412ff7ffec548076a151260534bb7f56ca84b97f18262cc203a7adcfcc53e837425e634d5c519ddc6a367c5ea1481a4a80468389d7eed50759577ec29ff86c0105d4445ca562f23f40cd7394982cb01968db2d0a4922a1e871da70d488fc06ff653e8e7c6f5a406396066db780e7082d1b99e7d15d75bcfb1dfa095ccc941e7f881a99181f0ab7face09f082360c470381d11765eae5cdf814002e9358108dafc8427205478d9a4a6a6062adc911a7b8532bfb8f50a9c285f534cfcc473662ab32b9a6609785fe4e2b51890590e9e82db47503669cfc1f8c77792f8b56a44c6568e13208323f385773765dff196e75dd64daac5ddee9fe271d2e88fa39d0d2a19ccd2041376a8cd166b013ae16fe4fb9b2577557f8e991c6df172011a1c43a1674c14df49c524405c8ccb7ab127b576851e44d30fa7182fedd6843b79d0f096cd2fc2a49806385d0b35dc2a3ee0bcd34d1781c3bb184f91e4ded3c60efd5bef741c8234d3b303ec19ab4e8a4ee3bff5ed71c90dd1b102dfb524c38138cee9a77867db2054e0f71c6d524879ac8f1370af161f5a7c09355fcba01ac1afed99fc997ca7b7a7ffb76d1d18fd22da68f89c3d7204a65d8ebd7fb0e7a543e408fcbb1e9e0b63bf9ff3b3a2349bbcf56353019787c2dd51bef83cf296e1e86bb967c7e8af8fd8a5bbbd5693b8db5de615554419b32327413232ce399ac890d0827dfbbd4a50203ecd1afaa5e8a65663ad4866a78b058aeed02fd8a7e6375ba1a463788e50e0db744a3da139be1fdb339f49f983b25a48304a46163c32533f971b0809f8d99d7dfdca5c1f1fab521b7ee19d09d18036bf31086c4c62a7ca06c3c68c10f63c978089032fb9a6f73f3701b6e2b897bfb473b7467f242684884b5f8d67241bc3b69ec2fb8ec9831cfaada5ca7391abe090789f42317cb1d53e7269334f23dde35bd9b0ab2d295c92e954446aef307a4c5d5c49d20e4e8ac41645b2aad8fef01669cb9bf184f6d027c32d52649bce64ad0b113b0b5fb59352ca6886375b4b83312954de0d2e952d91af054930399fd4fa25ee76f29b4ea696a210deeef051d840e377a01ad6d9644fc59521fb0df33e7cf3553acaf57a4df2e56ad9d9d7fb8241f10ef34ec5028dc086806a40273ebfee874a9b46330528ccb6d54578559077a6e2dd7c33dfbd4da21244d68e68ee57a3af6b6c8dbccdf2083af5b87c1ba6c6a3845a25e9d572b773e2ab76b8c227366d92071f221f8dab2908595355684a04bc9efe48eb86cbb0e1ff396304f3ec4260a6c645eb2b7ca00758647e965130c17e85388ed79f4cb28dff7d6316169c4b6fa716f2003d02083068e851a05a534cfc71210f5dbe27e9c95e652962a0c660b9144b7caed14a1b93a8fbfc4c0c04264fdd6ff23227cd07dbcc76e799b7fa61929ba55e136cea4538534ef2d32cc31c8ca1cdde3e6fb86793c98c89d78b3dd3dce730f66d9a97c11993b9ae2ea61c8139e0b2e53e7e97aee9bfdace3cdb6f83551f42cdfb7bb7a97fa8e249c2081fee4fb73cf6589cd6be041a9cfaaacc7f53aace240fbef219580632e2d74", 0x1000, 0xfffffffffffffffe) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r5) sendmsg$DEVLINK_CMD_PORT_SET(r5, &(0x7f00000017c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001780)={&(0x7f0000001580)=ANY=[@ANYBLOB="e0010000", @ANYRES16=r9, @ANYBLOB="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"], 0x1e0}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) keyctl$dh_compute(0x17, &(0x7f00000013c0)={r4, r7, r8}, &(0x7f0000001400)=""/134, 0x86, &(0x7f0000001540)={&(0x7f00000014c0)={'sha3-224-ce\x00'}, &(0x7f0000001500)}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x0, {0xa, 0x4e24, 0x4, @remote, 0xffff2ea6}}}, 0x38) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 817.995371ms ago: executing program 0 (id=5497): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RRENAMEAT(r1, &(0x7f00000002c0)={0x7, 0x4b, 0x2}, 0xff7a) write$P9_RREADDIR(r1, &(0x7f0000000300)={0x1012, 0x29, 0x2, {0x7, [{{0x20, 0x3, 0x3}, 0x100000000, 0xbc, 0xfef, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}]}}, 0x1012) openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x80000011}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000c40)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x81}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xf}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x401, 0x0, 0x0, {0x2}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}}, 0x0) r4 = signalfd(r0, &(0x7f0000000040)={[0x2]}, 0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x3}, &(0x7f0000000100)=0x8) r6 = socket(0x2b, 0x1, 0x1) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x240000c4) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000000)={r9, 0x5d, 0xffff, 0xfffffbff}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000300)={r9, 0xba, "17ee121d5477b5beeb8c7b4c3bc7a5ea235e51889221af44bb13c125506b6fb41cf01855b0412cbfd4b0a68f723fbee62ccfb5bc38af0d15ba5e5f4e9611235a4cae41b85126c855ac659b6d492dd421799f2d7c4b899527a6989980d07337eb193841dde19a23139c694619557889a1282e9ad029ef45bbe31d3bf5a1367c106ebfa67472eff9d545d2208d0a2cf406846ae22e3be779e75a3fb6192a896d846d487fcbf904fca497e12d298f838c0990e6c670efdfc76f84bf"}, &(0x7f0000000440)=0xc2) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000280)={r5, 0x1, 0x8, 0x2, 0x401, 0x4c9, 0x4, 0x40, {r9, @in={{0x2, 0x4e24, @multicast2}}, 0x49f, 0x1800, 0xc, 0x2}}, &(0x7f0000000340)=0xb0) 440.332045ms ago: executing program 9 (id=5498): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="c962", 0x2}], 0x1}, 0x4004045) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) sendfile(r3, r4, 0x0, 0x7ffff006) setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x200}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa8}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) accept4(r0, 0x0, &(0x7f0000000180), 0x80000) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000c580000008001b"], 0x28}}, 0x0) 134.276475ms ago: executing program 3 (id=5499): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) inotify_init() symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r3 = inotify_init1(0x80800) inotify_add_watch(r3, &(0x7f0000000300)='./file1\x00', 0x10000200) socket(0x2b, 0x80801, 0x1) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r1, 0xffffffffffffffff, 0x0) 78.178226ms ago: executing program 7 (id=5500): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x4}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 0s ago: executing program 7 (id=5501): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) inotify_init() symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r3 = inotify_init1(0x80800) inotify_add_watch(r3, &(0x7f0000000300)='./file1\x00', 0x10000200) socket(0x2b, 0x80801, 0x1) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): evice descriptor read/8, error -71 [ 1327.645700][T17590] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 1327.675460][T17590] usb 4-1: device descriptor read/8, error -71 [ 1327.813598][T17590] usb usb4-port1: unable to enumerate USB device [ 1328.315905][T17590] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1328.545678][T17590] usb 8-1: device descriptor read/64, error -71 [ 1328.930188][T17590] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1329.106084][T17590] usb 8-1: device descriptor read/64, error -71 [ 1329.256683][T17590] usb usb8-port1: attempt power cycle [ 1329.399832][T23318] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1329.566535][T23318] usb 4-1: Using ep0 maxpacket: 8 [ 1329.575203][T23318] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1329.583771][T23318] usb 4-1: config 0 has no interface number 0 [ 1329.590662][T23304] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1329.601090][T23318] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1329.612576][T23318] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1329.625007][T23318] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1329.636384][T17590] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1329.644242][T23318] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1329.657711][T23318] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1329.666952][T23318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.676924][T17590] usb 8-1: device descriptor read/8, error -71 [ 1329.685342][T23318] usb 4-1: config 0 descriptor?? [ 1329.705057][T23318] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1329.778529][T23304] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1329.790796][T23304] usb 1-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 1329.801131][T23304] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.809245][T23304] usb 1-1: Product: syz [ 1329.813567][T23304] usb 1-1: Manufacturer: syz [ 1329.818336][T23304] usb 1-1: SerialNumber: syz [ 1329.831839][T23304] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1329.915815][T17590] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1329.956301][T17590] usb 8-1: device descriptor read/8, error -71 [ 1330.076203][T17590] usb usb8-port1: unable to enumerate USB device [ 1330.124694][T23309] usb 4-1: USB disconnect, device number 20 [ 1330.124876][ C0] ldusb 4-1:0.55: usb_submit_urb failed (-19) [ 1330.201402][T23304] usb 1-1: USB disconnect, device number 87 [ 1330.207512][T25292] ldusb: No device or device unplugged -19 [ 1330.207620][T23309] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1330.466908][T25311] netlink: 'syz.3.5068': attribute type 3 has an invalid length. [ 1330.682932][T25322] __nla_validate_parse: 159 callbacks suppressed [ 1330.682945][T25322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5071'. [ 1330.685722][T23304] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1330.856454][T23304] usb 10-1: Using ep0 maxpacket: 32 [ 1330.864575][T23304] usb 10-1: config 4 has an invalid interface number: 93 but max is 0 [ 1330.876616][T23304] usb 10-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1330.888228][T23304] usb 10-1: config 4 has no interface number 0 [ 1330.894443][T23304] usb 10-1: config 4 interface 93 altsetting 8 bulk endpoint 0x2 has invalid maxpacket 32 [ 1330.905185][T23304] usb 10-1: config 4 interface 93 altsetting 8 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1330.917238][T23304] usb 10-1: config 4 interface 93 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1330.928500][T23304] usb 10-1: config 4 interface 93 altsetting 8 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1330.938389][T23304] usb 10-1: config 4 interface 93 altsetting 8 has 4 endpoint descriptors, different from the interface descriptor's value: 11 [ 1330.952484][T23304] usb 10-1: config 4 interface 93 has no altsetting 0 [ 1330.961276][T23304] usb 10-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=70.6c [ 1330.970689][T23304] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.978857][T23304] usb 10-1: Product: syz [ 1330.983230][T23304] usb 10-1: Manufacturer: syz [ 1330.988024][T23304] usb 10-1: SerialNumber: syz [ 1330.995974][T25313] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1331.086137][T23318] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1331.213317][T25313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1331.222910][T25313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1331.236421][T23318] usb 1-1: device descriptor read/64, error -71 [ 1331.249263][T23304] ir_toy 10-1:4.93: required endpoints not found [ 1331.273962][T23304] usb 10-1: USB disconnect, device number 7 [ 1331.486201][T23318] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1331.605752][T23309] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 1331.665557][T23318] usb 1-1: device descriptor read/64, error -71 [ 1331.784305][T23309] usb 8-1: not running at top speed; connect to a high speed hub [ 1331.805972][T23318] usb usb1-port1: attempt power cycle [ 1331.827795][T23309] usb 8-1: New USB device found, idVendor=04b4, idProduct=9320, bcdDevice= 0.40 [ 1331.841047][T23309] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.857979][T25340] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 1331.860315][T23309] usb 8-1: Product: syz [ 1331.931436][T23309] usb 8-1: Manufacturer: syz [ 1331.957144][T23309] usb 8-1: SerialNumber: syz [ 1332.166059][T23318] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1332.185695][T23304] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1332.198263][T23318] usb 1-1: device descriptor read/8, error -71 [ 1332.368796][T23304] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1332.393879][T23304] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1332.410609][T23304] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1332.423194][T23304] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1332.444342][T23304] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1332.454959][T23304] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1332.466718][T23304] usb 10-1: Manufacturer: syz [ 1332.479486][T23318] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1332.504657][T23304] usb 10-1: config 0 descriptor?? [ 1332.510796][T23318] usb 1-1: device descriptor read/8, error -71 [ 1332.626270][T23318] usb usb1-port1: unable to enumerate USB device [ 1332.698329][T25346] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5080'. [ 1332.868034][T25348] syz.3.5080 (25348): drop_caches: 1 [ 1332.915034][T25348] syz.3.5080 (25348): drop_caches: 1 [ 1332.931937][T23304] appleir 0003:05AC:8243.0042: item fetching failed at offset 0/1 [ 1332.940565][T23304] appleir 0003:05AC:8243.0042: parse failed [ 1332.946634][T23304] appleir 0003:05AC:8243.0042: probe with driver appleir failed with error -22 [ 1333.349552][T13962] usb 10-1: USB disconnect, device number 8 [ 1333.877043][T25359] netlink: 164 bytes leftover after parsing attributes in process `syz.8.5083'. [ 1333.976484][T23301] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1334.129202][T23301] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1334.130778][T23301] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1334.132079][T23301] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1334.132111][T23301] usb 4-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 1334.132123][T23301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.187532][T23301] usb 4-1: config 0 descriptor?? [ 1334.191858][T23309] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1334.191892][T23309] usb 8-1: MIDIStreaming interface descriptor not found [ 1334.428680][T25357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5084'. [ 1334.535804][T23301] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1334.568720][T23309] usb 8-1: USB disconnect, device number 13 [ 1334.604388][T25370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5084'. [ 1334.641053][T25370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5084'. [ 1334.690560][T23301] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1334.690589][T23301] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1334.692494][T23301] usb 10-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1334.692520][T23301] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.692533][T23301] usb 10-1: Product: syz [ 1334.692541][T23301] usb 10-1: Manufacturer: syz [ 1334.692548][T23301] usb 10-1: SerialNumber: syz [ 1334.712107][T23301] usb 10-1: config 0 descriptor?? [ 1334.716757][T25368] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1334.716886][T25368] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1334.764510][T23318] usb 4-1: USB disconnect, device number 21 [ 1334.929671][T25368] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1334.929795][T25368] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1335.003144][T17353] udevd[17353]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1335.265736][T23309] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1335.357025][T23301] Error reading MAC address [ 1335.425786][T23309] usb 8-1: Using ep0 maxpacket: 32 [ 1335.440618][T23309] usb 8-1: config 4 has an invalid interface number: 93 but max is 0 [ 1335.450230][T23309] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1335.460851][T23309] usb 8-1: config 4 has no interface number 0 [ 1335.483005][T23309] usb 8-1: config 4 interface 93 altsetting 8 bulk endpoint 0x2 has invalid maxpacket 32 [ 1335.508805][T23309] usb 8-1: config 4 interface 93 altsetting 8 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1335.557470][T23309] usb 8-1: config 4 interface 93 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1335.614136][T23309] usb 8-1: config 4 interface 93 altsetting 8 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1335.702107][T23309] usb 8-1: config 4 interface 93 altsetting 8 has 4 endpoint descriptors, different from the interface descriptor's value: 11 [ 1335.730633][T23309] usb 8-1: config 4 interface 93 has no altsetting 0 [ 1335.742833][T23309] usb 8-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=70.6c [ 1335.763982][T23309] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.772593][T23309] usb 8-1: Product: syz [ 1335.776988][T23309] usb 8-1: Manufacturer: syz [ 1335.781825][T23309] usb 8-1: SerialNumber: syz [ 1335.811612][T25372] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1335.885754][ T30] audit: type=1326 audit(1780516331.779:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25385 comm="syz.8.5091" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f87abb9ce59 code=0x0 [ 1336.067974][T25372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1336.083891][T25372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1336.106244][T23309] ir_toy 8-1:4.93: required endpoints not found [ 1336.132999][T23309] usb 8-1: USB disconnect, device number 14 [ 1337.383546][T23319] usb 10-1: USB disconnect, device number 9 [ 1337.591968][T25404] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1337.601841][T25419] binder_alloc: 25402: binder_alloc_buf, no vma [ 1337.664656][T25404] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1337.754943][T25404] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1337.757359][T25421] loop3: detected capacity change from 0 to 7 [ 1337.793601][T25421] Dev loop3: unable to read RDB block 7 [ 1337.815536][T25421] loop3: AHDI p1 p2 [ 1337.820748][T25421] loop3: partition table partially beyond EOD, truncated [ 1337.830917][T25417] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1337.844690][T25421] loop3: p1 size 150995200 extends beyond EOD, truncated [ 1337.925118][T17609] udevd[17609]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 1338.006017][T25424] dlm: no locking on control device [ 1338.445396][T25435] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1338.700351][ T30] audit: type=1326 audit(1780516334.599:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25439 comm="syz.9.5105" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993d19ce59 code=0x7ffc0000 [ 1338.754244][ T30] audit: type=1326 audit(1780516334.629:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25439 comm="syz.9.5105" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993d19ce59 code=0x7ffc0000 [ 1338.782153][ T30] audit: type=1326 audit(1780516334.629:3030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25439 comm="syz.9.5105" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993d19ce59 code=0x7ffc0000 [ 1338.818810][ T30] audit: type=1326 audit(1780516334.629:3031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25439 comm="syz.9.5105" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993d19ce59 code=0x7ffc0000 [ 1338.850180][ T30] audit: type=1326 audit(1780516334.629:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25439 comm="syz.9.5105" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f993d19ce59 code=0x7ffc0000 [ 1338.879430][ T30] audit: type=1326 audit(1780516334.639:3033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25439 comm="syz.9.5105" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993d19ce59 code=0x7ffc0000 [ 1338.906836][ T30] audit: type=1326 audit(1780516334.639:3034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25439 comm="syz.9.5105" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993d19ce59 code=0x7ffc0000 [ 1338.938310][ T30] audit: type=1326 audit(1780516334.639:3035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25439 comm="syz.9.5105" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993d19ce59 code=0x7ffc0000 [ 1338.999999][ T30] audit: type=1326 audit(1780516334.639:3036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25439 comm="syz.9.5105" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993d19ce59 code=0x7ffc0000 [ 1339.046025][T23319] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1339.206007][T23319] usb 1-1: Using ep0 maxpacket: 32 [ 1339.219224][T23319] usb 1-1: config 4 has an invalid interface number: 93 but max is 0 [ 1339.256533][T23319] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1339.309286][T23319] usb 1-1: config 4 has no interface number 0 [ 1339.353712][T23319] usb 1-1: config 4 interface 93 altsetting 8 bulk endpoint 0x2 has invalid maxpacket 32 [ 1339.399752][T23319] usb 1-1: config 4 interface 93 altsetting 8 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1339.462329][T23319] usb 1-1: config 4 interface 93 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1339.509083][T23319] usb 1-1: config 4 interface 93 altsetting 8 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1339.546466][T23319] usb 1-1: config 4 interface 93 altsetting 8 has 4 endpoint descriptors, different from the interface descriptor's value: 11 [ 1339.596465][T23319] usb 1-1: config 4 interface 93 has no altsetting 0 [ 1339.628435][T23319] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=70.6c [ 1339.666003][T23319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.697380][T23319] usb 1-1: Product: syz [ 1339.715019][T23319] usb 1-1: Manufacturer: syz [ 1339.743846][T23319] usb 1-1: SerialNumber: syz [ 1339.779793][T25442] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1339.834001][T25448] loop3: detected capacity change from 0 to 7 [ 1339.858522][T25448] Dev loop3: unable to read RDB block 7 [ 1339.876730][T25448] loop3: unable to read partition table [ 1339.894300][T25448] loop3: partition table beyond EOD, truncated [ 1339.934490][T25448] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1340.012236][T25442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1340.053932][T25442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1340.119155][T23319] ir_toy 1-1:4.93: required endpoints not found [ 1340.154500][T23319] usb 1-1: USB disconnect, device number 92 [ 1340.307482][T25455] loop3: detected capacity change from 0 to 7 [ 1340.324223][T25455] Dev loop3: unable to read RDB block 7 [ 1340.340050][T25455] loop3: AHDI p1 p2 [ 1340.349431][T25455] loop3: partition table partially beyond EOD, truncated [ 1340.377325][T25455] loop3: p1 size 150995200 extends beyond EOD, truncated [ 1340.400851][T25458] netlink: 'syz.7.5112': attribute type 32 has an invalid length. [ 1340.428538][T25458] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5112'. [ 1340.564359][T17609] udevd[17609]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 1340.595084][T25458] bond1: Setting coupled_control to off (0) [ 1340.611598][T25461] loop3: detected capacity change from 0 to 7 [ 1340.644867][T25461] Dev loop3: unable to read RDB block 7 [ 1340.671607][T25461] loop3: unable to read partition table [ 1340.695018][T25461] loop3: partition table beyond EOD, truncated [ 1340.721940][T25461] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1340.771132][T25463] batman_adv: batadv0: Adding interface: dummy0 [ 1340.812809][T25463] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1340.943929][T25463] batman_adv: batadv0: Interface activated: dummy0 [ 1341.006229][T25465] batadv0: mtu less than device minimum [ 1341.020740][T25465] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1341.031852][T25465] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1341.042897][T25465] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1341.053921][T25465] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1341.065099][T25465] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1341.076238][T25465] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1341.087356][T25465] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1341.098447][T25465] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1341.109596][T25465] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1341.277791][T25476] QAT: failed to copy from user. [ 1341.386091][T23318] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1341.475705][T23310] usb 10-1: new low-speed USB device number 10 using dummy_hcd [ 1341.545677][T23318] usb 4-1: Using ep0 maxpacket: 32 [ 1341.553317][T23318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1341.581014][T23318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1341.601887][T23318] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1341.625665][T23318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.645212][T23318] usb 4-1: config 0 descriptor?? [ 1341.647400][T23310] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1341.674423][T23310] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1341.695408][T23310] usb 10-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1341.707030][T23310] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.721326][T23310] usb 10-1: config 0 descriptor?? [ 1341.744050][T23310] qmi_wwan 10-1:0.0: bogus CDC Union: master=25, slave=0 [ 1341.753128][T23310] qmi_wwan 10-1:0.0: probe with driver qmi_wwan failed with error -22 [ 1341.965973][T23304] usb 10-1: USB disconnect, device number 10 [ 1342.076075][T23310] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1342.129045][T23318] savu 0003:1E7D:2D5A.0043: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 1342.226633][T23310] usb 1-1: Using ep0 maxpacket: 8 [ 1342.254161][T23310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1342.268022][T23310] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1342.281074][T23310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.297049][T23310] usb 1-1: config 0 descriptor?? [ 1342.536284][T23310] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 1343.283711][T25499] could not allocate digest TFM handle sha3-224-ce [ 1343.332117][T25500] could not allocate digest TFM handle sha3-224-ce [ 1343.446957][T23304] usb 4-1: reset high-speed USB device number 22 using dummy_hcd [ 1343.575069][T25511] fuse: Unknown parameter '' [ 1343.700089][ T30] kauditd_printk_skb: 2006 callbacks suppressed [ 1343.700105][ T30] audit: type=1800 audit(1780516339.599:5043): pid=25514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5124" name="file1" dev="tmpfs" ino=283 res=0 errno=0 [ 1343.806090][T23310] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1343.946041][T23310] usb 10-1: device descriptor read/64, error -71 [ 1344.083974][T25520] loop3: detected capacity change from 0 to 7 [ 1344.097859][T25520] Dev loop3: unable to read RDB block 7 [ 1344.103494][T25520] loop3: unable to read partition table [ 1344.109627][T25520] loop3: partition table beyond EOD, truncated [ 1344.120123][T25520] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1344.206101][T23310] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1344.295982][T25524] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5128'. [ 1344.345852][T23310] usb 10-1: device descriptor read/64, error -71 [ 1344.468141][T23310] usb usb10-port1: attempt power cycle [ 1344.751859][T23318] usb 4-1: USB disconnect, device number 22 [ 1344.778991][T23309] usb 1-1: USB disconnect, device number 93 [ 1344.825919][T23310] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1344.868599][T23310] usb 10-1: device descriptor read/8, error -71 [ 1344.975865][T22911] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1345.115847][T23310] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1345.136154][T23310] usb 10-1: device descriptor read/8, error -71 [ 1345.151953][T22911] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 1345.165246][T22911] usb 8-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1345.174482][T22911] usb 8-1: config 220 has an invalid descriptor of length 157, skipping remainder of the config [ 1345.186332][T22911] usb 8-1: config 220 has no interface number 2 [ 1345.192632][T22911] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1345.206435][T22911] usb 8-1: config 220 interface 0 has no altsetting 0 [ 1345.213247][T22911] usb 8-1: config 220 interface 76 has no altsetting 0 [ 1345.221086][T22911] usb 8-1: config 220 interface 1 has no altsetting 0 [ 1345.230952][T22911] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1345.241053][T22911] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.246095][T23310] usb usb10-port1: unable to enumerate USB device [ 1345.249225][T22911] usb 8-1: Product: syz [ 1345.260033][T22911] usb 8-1: Manufacturer: syz [ 1345.264666][T22911] usb 8-1: SerialNumber: syz [ 1345.275797][T23318] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1345.436309][T23318] usb 4-1: Using ep0 maxpacket: 32 [ 1345.443107][T23318] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1345.452188][T23318] usb 4-1: config 0 has no interface number 0 [ 1345.458627][T23318] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1345.467568][T23318] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1345.491278][T23318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.509192][T23318] usb 4-1: Product: syz [ 1345.514715][T23318] usb 4-1: Manufacturer: syz [ 1345.524509][T23318] usb 4-1: SerialNumber: syz [ 1345.530424][T22911] uvcvideo 8-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1345.549110][T23318] usb 4-1: config 0 descriptor?? [ 1345.554101][T22911] uvcvideo 8-1:220.0: No valid video chain found. [ 1345.576906][T22911] usb 8-1: selecting invalid altsetting 0 [ 1345.632630][T22911] usb 8-1: selecting invalid altsetting 0 [ 1345.643490][T22911] usbtest 8-1:220.1: probe with driver usbtest failed with error -22 [ 1345.673139][T22911] usb 8-1: USB disconnect, device number 15 [ 1346.184110][T23318] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1346.208930][T23318] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1346.921506][T25542] could not allocate digest TFM handle sha3-224-ce [ 1347.033301][T23318] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 1347.066706][T23318] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 1347.105058][T23318] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1347.144597][T23318] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 1347.162144][T25557] loop3: detected capacity change from 0 to 7 [ 1347.197270][T23318] usb 4-1: USB disconnect, device number 23 [ 1347.205121][T25557] Dev loop3: unable to read RDB block 7 [ 1347.236088][T25557] loop3: unable to read partition table [ 1347.261666][T25557] loop3: partition table beyond EOD, truncated [ 1347.305962][T25557] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1347.475930][T23304] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1347.570637][T25563] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1347.666391][T23304] usb 1-1: Using ep0 maxpacket: 16 [ 1347.684324][T23304] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1347.715240][T23304] usb 1-1: config 0 has no interface number 0 [ 1347.742710][T23304] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1347.771401][T23304] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1347.801296][T23304] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1347.824699][T23304] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1347.838003][T23304] usb 1-1: Product: syz [ 1347.842354][T23304] usb 1-1: SerialNumber: syz [ 1347.854043][T23304] usb 1-1: config 0 descriptor?? [ 1347.886277][T23304] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 1347.912797][T23304] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input96 [ 1347.958743][T23318] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1348.117568][T25559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1348.126216][T23318] usb 4-1: device descriptor read/64, error -71 [ 1348.135081][T25559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1348.149868][T25559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1348.181130][T25559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1348.300901][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1348.311037][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1348.318662][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1348.326034][T23319] usb 1-1: USB disconnect, device number 94 [ 1348.332166][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1348.332182][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1348.370137][T23319] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1348.407416][T23318] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1348.476241][T23309] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1348.555751][T23318] usb 4-1: device descriptor read/64, error -71 [ 1348.645762][T23309] usb 10-1: Using ep0 maxpacket: 8 [ 1348.657476][T23309] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 1348.678347][T23309] usb 10-1: config 0 has no interface number 0 [ 1348.691232][T23318] usb usb4-port1: attempt power cycle [ 1348.700695][T23309] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1348.725891][T23309] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1348.763957][T23309] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1348.792290][T23309] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1348.822796][T23309] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1348.842744][T23309] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.865166][T23309] usb 10-1: config 0 descriptor?? [ 1348.885863][T23309] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1348.989904][T25588] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5147'. [ 1349.076108][T23318] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1349.118098][T23318] usb 4-1: device descriptor read/8, error -71 [ 1349.127152][T23309] usb 10-1: USB disconnect, device number 15 [ 1349.176666][T23309] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 1349.299744][T25597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1349.312711][T25597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1349.396558][T23318] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1349.467636][T23318] usb 4-1: device descriptor read/8, error -71 [ 1349.617461][T23318] usb usb4-port1: unable to enumerate USB device [ 1350.346240][T23318] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1350.525844][T23318] usb 10-1: Using ep0 maxpacket: 8 [ 1350.537674][T23318] usb 10-1: config 186 has an invalid interface number: 209 but max is 1 [ 1350.549300][T23318] usb 10-1: config 186 has an invalid interface number: 161 but max is 1 [ 1350.559996][T23318] usb 10-1: config 186 has no interface number 0 [ 1350.572609][T23318] usb 10-1: config 186 has no interface number 1 [ 1350.579581][T23318] usb 10-1: config 186 interface 209 has no altsetting 0 [ 1350.587125][T23318] usb 10-1: config 186 interface 161 has no altsetting 0 [ 1350.604085][T23318] usb 10-1: New USB device found, idVendor=046d, idProduct=08d8, bcdDevice= 9.d0 [ 1350.613681][T23318] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.624875][T23318] usb 10-1: Product: syz [ 1350.632033][T23318] usb 10-1: Manufacturer: syz [ 1350.639794][T23318] usb 10-1: SerialNumber: syz [ 1350.896544][T23318] rndis_host 10-1:186.161: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1350.908505][T23318] usb 10-1: USB disconnect, device number 16 [ 1351.115763][ T5706] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1351.280944][ T5706] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1351.312350][ T5706] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1351.347907][ T5706] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1351.374314][ T5706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.418125][ T5706] usb 4-1: Product: syz [ 1351.438423][ T5706] usb 4-1: Manufacturer: syz [ 1351.478436][ T5706] usb 4-1: SerialNumber: syz [ 1351.725129][ T5706] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1351.765768][T23309] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1351.905844][T23309] usb 10-1: device descriptor read/64, error -71 [ 1352.008713][T25637] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5161'. [ 1352.021104][T25637] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5161'. [ 1352.155995][T23309] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1352.306068][T23309] usb 10-1: device descriptor read/64, error -71 [ 1352.325547][ T5706] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 1352.411557][ T5706] usb 4-1: USB disconnect, device number 28 [ 1352.418650][T23309] usb usb10-port1: attempt power cycle [ 1352.464181][T17609] udevd[17609]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1352.775704][T23309] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1352.796543][T23309] usb 10-1: device descriptor read/8, error -71 [ 1352.922342][T25653] xt_hashlimit: size too large, truncated to 1048576 [ 1352.946485][ T5706] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1353.036427][T23309] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1353.076267][T23309] usb 10-1: device descriptor read/8, error -71 [ 1353.097257][ T5706] usb 8-1: Using ep0 maxpacket: 16 [ 1353.104407][ T5706] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1353.114010][ T5706] usb 8-1: config 1 has an invalid descriptor of length 138, skipping remainder of the config [ 1353.129001][ T5706] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1353.139909][ T5706] usb 8-1: config 1 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1353.162882][ T5706] usb 8-1: config 1 interface 1 has no altsetting 1 [ 1353.185954][T23309] usb usb10-port1: unable to enumerate USB device [ 1353.200979][ T5706] usb 8-1: New USB device found, idVendor=08e4, idProduct=017f, bcdDevice= 0.40 [ 1353.212113][ T5706] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.220376][ T5706] usb 8-1: Product: syz [ 1353.224735][ T5706] usb 8-1: Manufacturer: syz [ 1353.230965][ T5706] usb 8-1: SerialNumber: syz [ 1353.232996][ T30] audit: type=1326 audit(1780516349.119:5044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25659 comm="syz.0.5168" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56399ce59 code=0x7ffc0000 [ 1353.270041][ T30] audit: type=1326 audit(1780516349.129:5045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25659 comm="syz.0.5168" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56399ce59 code=0x7ffc0000 [ 1353.294940][ T30] audit: type=1326 audit(1780516349.129:5046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25659 comm="syz.0.5168" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56399ce59 code=0x7ffc0000 [ 1353.319634][T23319] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1353.327597][ T30] audit: type=1326 audit(1780516349.129:5047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25659 comm="syz.0.5168" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56399ce59 code=0x7ffc0000 [ 1353.353140][ T30] audit: type=1326 audit(1780516349.129:5048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25659 comm="syz.0.5168" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb56395d68e code=0x7ffc0000 [ 1353.379810][ T30] audit: type=1326 audit(1780516349.129:5049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25659 comm="syz.0.5168" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb56399caeb code=0x7ffc0000 [ 1353.404268][ T30] audit: type=1326 audit(1780516349.129:5050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25659 comm="syz.0.5168" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb56399caeb code=0x7ffc0000 [ 1353.428801][ T30] audit: type=1326 audit(1780516349.159:5051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25659 comm="syz.0.5168" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb56399caeb code=0x7ffc0000 [ 1353.458530][ T30] audit: type=1326 audit(1780516349.159:5052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25659 comm="syz.0.5168" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb56399caeb code=0x7ffc0000 [ 1353.475802][ T5706] usb 8-1: 0:2 : does not exist [ 1353.485075][ T30] audit: type=1326 audit(1780516349.279:5053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25659 comm="syz.0.5168" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb56399caeb code=0x7ffc0000 [ 1353.514160][T23304] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1353.535918][T23319] usb 4-1: Using ep0 maxpacket: 16 [ 1353.547160][ T5706] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1353.554509][T23319] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1353.560929][ T5706] usb 8-1: USB disconnect, device number 16 [ 1353.569042][T23319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.582275][T23319] usb 4-1: Product: syz [ 1353.594238][T23319] usb 4-1: Manufacturer: syz [ 1353.599190][T23319] usb 4-1: SerialNumber: syz [ 1353.602094][T17609] udevd[17609]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1353.631499][T23319] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1353.639931][T23319] r8152-cfgselector 4-1: config 0 descriptor?? [ 1353.654656][T23319] hub 4-1:0.0: bad descriptor, ignoring hub [ 1353.663268][T23319] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1353.671549][T23304] usb 1-1: Using ep0 maxpacket: 8 [ 1353.679595][T23304] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 1353.696488][T23304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 1353.712189][T23304] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1353.721675][T23304] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.730549][T23304] usb 1-1: Product: syz [ 1353.734769][T23304] usb 1-1: Manufacturer: syz [ 1353.740545][T23304] usb 1-1: SerialNumber: syz [ 1353.747324][T23304] usb 1-1: config 0 descriptor?? [ 1353.755355][T23304] streamzap 1-1:0.0: streamzap_probe: endpoint doesn't match input device 0201 [ 1354.385688][ T5706] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 1354.489921][T23304] usb 1-1: USB disconnect, device number 95 [ 1354.553761][ T5706] usb 8-1: config 6 has an invalid interface number: 2 but max is 0 [ 1354.586463][ T5706] usb 8-1: config 6 has no interface number 0 [ 1354.600997][ T5706] usb 8-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1354.614798][ T5706] usb 8-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 1354.629358][ T5706] usb 8-1: config 6 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 1354.645170][ T5706] usb 8-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1354.655352][ T5706] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.683518][ T5706] usb 8-1: Product: syz [ 1354.689736][ T5706] usb 8-1: Manufacturer: syz [ 1354.694519][ T5706] usb 8-1: SerialNumber: syz [ 1354.713832][ T5706] hso 8-1:6.2: Failed to find INT IN ep [ 1354.913833][T23304] usb 8-1: USB disconnect, device number 17 [ 1354.987513][T25679] bridge0: port 2(bridge_slave_1) entered disabled state [ 1354.994933][T25679] bridge0: port 1(bridge_slave_0) entered disabled state [ 1355.042216][T25679] batman_adv: batadv0: Interface deactivated: dummy0 [ 1355.091802][T25683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5175'. [ 1355.245104][T25679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1355.289147][T25679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1355.818678][T25695] could not allocate digest TFM handle sha3-224-ce [ 1355.838150][T25683] hsr_slave_0: left promiscuous mode [ 1355.857800][T25683] hsr_slave_1: left promiscuous mode [ 1355.902052][T21715] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1355.931332][T21715] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1355.940986][T21715] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1355.950149][T21715] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.125936][T17590] r8152-cfgselector 4-1: USB disconnect, device number 29 [ 1356.171568][T25704] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1356.617161][T25729] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1356.682238][T25729] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1356.764651][T25723] could not allocate digest TFM handle sha3-224-ce [ 1356.934124][T25745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1356.984671][T25745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1357.007724][T25747] netlink: 'syz.7.5193': attribute type 1 has an invalid length. [ 1357.087051][T25747] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1357.109195][T25751] vlan2: entered allmulticast mode [ 1357.114426][T25751] bond2: entered allmulticast mode [ 1357.149592][T25747] bond2: (slave geneve2): making interface the new active one [ 1357.165680][T25747] geneve2: entered allmulticast mode [ 1357.166012][T23319] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1357.186115][T25747] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1357.327837][T23319] usb 4-1: Using ep0 maxpacket: 8 [ 1357.341052][T23319] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1357.350817][T23319] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1357.365926][T23319] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1357.383753][T23319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.403502][T23319] usb 4-1: Product: syz [ 1357.413367][T23319] usb 4-1: Manufacturer: syz [ 1357.424523][T23319] usb 4-1: SerialNumber: syz [ 1357.550516][T25752] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5194'. [ 1357.565803][ T5706] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1357.645381][T25762] bridge0: port 2(bridge_slave_1) entered disabled state [ 1357.653019][T25762] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.745885][ T5706] usb 10-1: Using ep0 maxpacket: 16 [ 1357.753066][ T5706] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1357.772143][T23319] usb 4-1: USB disconnect, device number 30 [ 1357.787384][ T5706] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1357.826492][ T5706] usb 10-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1357.856075][ T5706] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.869096][T17472] udevd[17472]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1357.886924][ T5706] usb 10-1: Product: syz [ 1357.891204][ T5706] usb 10-1: Manufacturer: syz [ 1357.897482][ T5706] usb 10-1: SerialNumber: syz [ 1357.906693][ T5706] usb 10-1: config 0 descriptor?? [ 1357.988115][T25762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1358.003503][T25762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1358.148804][ T5706] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input97 [ 1358.184923][ C1] imon 10-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1358.353333][ T5706] imon:send_packet: packet tx failed (-71) [ 1358.385835][ T5706] imon 10-1:0.0: panel buttons/knobs setup failed [ 1358.504715][ T9582] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1358.526560][ T9582] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1358.545957][ T5706] rc_core: IR keymap rc-imon-pad not found [ 1358.547207][ T9582] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1358.552601][ T5706] Registered IR keymap rc-empty [ 1358.566884][ T5706] imon 10-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1358.577316][ T5706] imon 10-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1358.588505][ T5706] imon:send_packet: packet tx failed (-71) [ 1358.591138][ T9582] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1358.615778][ T5706] imon 10-1:0.0: remote input dev register failed [ 1358.627767][ T5706] imon 10-1:0.0: imon_init_intf0: rc device setup failed [ 1358.692956][ T5706] imon 10-1:0.0: unable to initialize intf0, err 0 [ 1358.699562][T15189] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1358.717133][ T5706] imon:imon_probe: failed to initialize context! [ 1358.741082][ T5706] imon 10-1:0.0: unable to register, err -19 [ 1358.755493][T25776] could not allocate digest TFM handle sha3-224-ce [ 1358.782728][ T5706] usb 10-1: USB disconnect, device number 21 [ 1358.868862][T15189] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1358.904111][T15189] usb 4-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 1358.938166][T15189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.961975][T15189] usb 4-1: config 0 descriptor?? [ 1358.977289][T15189] smsusb:smsusb_probe: board id=8, interface number 0 [ 1358.997201][T15189] smsusb:smsusb_probe: Device initialized with return code -19 [ 1359.201233][T14025] bond0 (unregistering): Released all slaves [ 1359.233659][T25774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1359.245843][T25774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1359.378488][T15189] usb 4-1: USB disconnect, device number 31 [ 1359.799949][T25808] could not allocate digest TFM handle sha3-224-ce [ 1359.885839][T15189] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1360.045679][T15189] usb 4-1: Using ep0 maxpacket: 32 [ 1360.062990][T15189] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1360.081428][T15189] usb 4-1: config 0 has no interface number 0 [ 1360.102991][T15189] usb 4-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 1360.117342][T15189] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1360.127119][T15189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.135936][T15189] usb 4-1: Product: syz [ 1360.141259][T15189] usb 4-1: Manufacturer: syz [ 1360.146014][T15189] usb 4-1: SerialNumber: syz [ 1360.158673][T15189] usb 4-1: config 0 descriptor?? [ 1360.178447][T15189] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1360.196506][T15189] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 1360.277720][T25819] geneve3: entered promiscuous mode [ 1360.468791][T21715] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.537895][T21715] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.560156][T25822] dvmrp31: entered allmulticast mode [ 1360.577793][T21715] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.619008][T21715] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.774516][T25840] program syz.0.5215 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1360.944230][T25842] could not allocate digest TFM handle sha3-224-ce [ 1360.958929][T15189] usb 4-1: USB disconnect, device number 32 [ 1361.437752][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.444280][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.955835][T17590] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1362.141462][T17590] usb 8-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1362.152823][T17590] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.179227][T17590] usb 8-1: Product: syz [ 1362.200426][T17590] usb 8-1: Manufacturer: syz [ 1362.224880][T17590] usb 8-1: SerialNumber: syz [ 1362.254566][T25869] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5223'. [ 1362.284090][T17590] usb 8-1: config 0 descriptor?? [ 1362.319920][T25871] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1362.321788][T17590] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1362.331111][T25869] macvtap1: entered promiscuous mode [ 1362.353396][T25869] bond0: entered promiscuous mode [ 1362.378014][T25869] bond_slave_0: entered promiscuous mode [ 1362.395041][T25869] bond_slave_1: entered promiscuous mode [ 1362.407667][T25869] macvtap1: entered allmulticast mode [ 1362.419832][T25869] bond0: entered allmulticast mode [ 1362.435967][T25869] bond_slave_0: entered allmulticast mode [ 1362.443324][T25869] bond_slave_1: entered allmulticast mode [ 1362.454898][T25869] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1362.780549][ T30] kauditd_printk_skb: 115 callbacks suppressed [ 1362.780566][ T30] audit: type=1326 audit(1780516358.679:5169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25884 comm="syz.3.5228" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9c59ce59 code=0x7ffc0000 [ 1362.824209][T25885] support for cryptoloop has been removed. Use dm-crypt instead. [ 1362.834076][T25874] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 1362.848057][T25874] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 1362.891254][ T30] audit: type=1326 audit(1780516358.679:5170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25884 comm="syz.3.5228" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9c59ce59 code=0x7ffc0000 [ 1362.971422][T25857] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1362.992453][ T30] audit: type=1326 audit(1780516358.709:5171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25884 comm="syz.3.5228" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9c59ce59 code=0x7ffc0000 [ 1363.059047][ T30] audit: type=1326 audit(1780516358.719:5172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25884 comm="syz.3.5228" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9c59ce59 code=0x7ffc0000 [ 1363.101601][ T30] audit: type=1326 audit(1780516358.719:5173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25884 comm="syz.3.5228" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2b9c55d68e code=0x7ffc0000 [ 1363.127890][ T30] audit: type=1326 audit(1780516358.719:5174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25884 comm="syz.3.5228" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9c59ce59 code=0x7ffc0000 [ 1363.152571][ T30] audit: type=1326 audit(1780516358.719:5175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25884 comm="syz.3.5228" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9c59ce59 code=0x7ffc0000 [ 1363.177357][ T30] audit: type=1326 audit(1780516358.719:5176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25884 comm="syz.3.5228" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9c59ce59 code=0x7ffc0000 [ 1363.186087][T23319] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1363.202352][ T30] audit: type=1326 audit(1780516358.719:5177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25884 comm="syz.3.5228" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9c59ce59 code=0x7ffc0000 [ 1363.234797][ T30] audit: type=1326 audit(1780516358.719:5178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25884 comm="syz.3.5228" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2b9c59ce59 code=0x7ffc0000 [ 1363.327778][T17590] usb 8-1: USB disconnect, device number 18 [ 1363.366298][T23319] usb 10-1: Using ep0 maxpacket: 8 [ 1363.384490][T23319] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1363.420076][T23319] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1363.456453][T23319] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1363.466473][T23319] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1363.482684][T23319] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1363.496220][T23319] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1363.506566][T23319] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.771656][T21715] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1363.772539][T23319] usb 10-1: GET_CAPABILITIES returned 0 [ 1363.801222][T23319] usbtmc 10-1:16.0: can't read capabilities [ 1363.801222][T21715] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1363.801257][T21715] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1363.833804][T21715] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.011716][T23319] usb 10-1: USB disconnect, device number 22 [ 1365.387576][T23309] usb 1-1: new low-speed USB device number 96 using dummy_hcd [ 1365.565934][T23309] usb 1-1: device descriptor read/64, error -71 [ 1365.825842][T23309] usb 1-1: new low-speed USB device number 97 using dummy_hcd [ 1365.931000][T25929] netdevsim netdevsim9: Direct firmware load for  failed with error -2 [ 1365.962125][T25929] netdevsim netdevsim9: Falling back to sysfs fallback for:  [ 1366.045969][T23309] usb 1-1: device descriptor read/64, error -71 [ 1366.075804][T23319] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 1366.166747][T23309] usb usb1-port1: attempt power cycle [ 1366.255928][T23319] usb 4-1: Invalid ep0 maxpacket: 64 [ 1366.395989][T23319] usb 4-1: new low-speed USB device number 34 using dummy_hcd [ 1366.498825][T25944] binder_alloc: binder_alloc_mmap_handler: 25943 200000ffd000-200001000000 already mapped failed -16 [ 1366.505794][T23309] usb 1-1: new low-speed USB device number 98 using dummy_hcd [ 1366.517331][T25948] tipc: Enabling not permitted [ 1366.517363][T25948] tipc: Enabling of bearer rejected, failed to enable media [ 1366.570381][T23319] usb 4-1: Invalid ep0 maxpacket: 64 [ 1366.580026][T23309] usb 1-1: device descriptor read/8, error -71 [ 1366.582921][T23319] usb usb4-port1: attempt power cycle [ 1366.825689][T23309] usb 1-1: new low-speed USB device number 99 using dummy_hcd [ 1366.848323][T23309] usb 1-1: device descriptor read/8, error -71 [ 1366.870001][T25965] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5251'. [ 1366.891921][T25965] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5251'. [ 1366.926403][T25965] erspan0: entered promiscuous mode [ 1366.941158][T25965] gretap0: entered promiscuous mode [ 1366.955492][T25965] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 1366.967569][T23319] usb 4-1: new low-speed USB device number 35 using dummy_hcd [ 1366.975330][T25965] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 1366.976541][T23309] usb usb1-port1: unable to enumerate USB device [ 1366.999545][T23319] usb 4-1: Invalid ep0 maxpacket: 64 [ 1367.035908][T15189] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1367.156167][T23319] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 1367.197710][T23319] usb 4-1: Invalid ep0 maxpacket: 64 [ 1367.203425][T23319] usb usb4-port1: unable to enumerate USB device [ 1367.207513][T15189] usb 8-1: Using ep0 maxpacket: 8 [ 1367.223233][T15189] usb 8-1: config 253 has an invalid interface number: 252 but max is 0 [ 1367.242453][T15189] usb 8-1: config 253 has no interface number 0 [ 1367.255807][T15189] usb 8-1: config 253 interface 252 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1023 [ 1367.279793][T15189] usb 8-1: New USB device found, idVendor=0bfd, idProduct=010b, bcdDevice= b.a4 [ 1367.298741][T15189] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.318545][T15189] usb 8-1: Product: syz [ 1367.327665][T15189] usb 8-1: Manufacturer: syz [ 1367.337617][T15189] usb 8-1: SerialNumber: syz [ 1367.353506][T25962] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1367.568313][T25962] netlink: 'syz.7.5249': attribute type 2 has an invalid length. [ 1367.588537][T25962] program syz.7.5249 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1367.650646][T15189] kvaser_usb 8-1:253.252: error -ENODEV: Cannot get usb endpoint(s) [ 1367.667277][T15189] usb 8-1: USB disconnect, device number 19 [ 1368.105688][T15189] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1368.201539][T23310] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1368.267829][T15189] usb 8-1: Using ep0 maxpacket: 16 [ 1368.280641][T23310] hid-generic 0000:0000:0000.0044: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1368.305469][T15189] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 211, changing to 7 [ 1368.338471][T15189] usb 8-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 1368.361899][T15189] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.389132][T15189] usb 8-1: Product: 좀 [ 1368.402062][T15189] usb 8-1: Manufacturer: 㠊 [ 1368.416506][T15189] usb 8-1: SerialNumber: syz [ 1368.632451][T25996] netlink: 'syz.0.5257': attribute type 3 has an invalid length. [ 1370.276947][T17590] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1370.456125][T17590] usb 10-1: Using ep0 maxpacket: 16 [ 1370.504229][T17590] usb 10-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1370.557932][T17590] usb 10-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1370.593804][T17590] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1370.621851][T17590] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1370.641766][T26036] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5267'. [ 1370.930779][T26036] bond1: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 1370.983629][T26036] bond1 (unregistering): Released all slaves [ 1371.054342][T14023] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.064704][T14023] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.078403][T14023] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.089332][T17590] mcp2221 0003:04D8:00DD.0045: unbalanced collection at end of report description [ 1371.111596][T14023] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.122035][T17590] mcp2221 0003:04D8:00DD.0045: can't parse reports [ 1371.149076][T17590] mcp2221 0003:04D8:00DD.0045: probe with driver mcp2221 failed with error -22 [ 1371.197147][T26041] could not allocate digest TFM handle sha3-224-ce [ 1371.348680][ T30] kauditd_printk_skb: 239 callbacks suppressed [ 1371.348696][ T30] audit: type=1804 audit(1780516367.239:5418): pid=26048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.5269" name="/newroot/74/file1" dev="tmpfs" ino=400 res=1 errno=0 [ 1371.538003][T23310] usb 10-1: USB disconnect, device number 23 [ 1371.759276][ T30] audit: type=1326 audit(1780516367.659:5419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26061 comm="syz.9.5273" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f993d19ce59 code=0x0 [ 1372.281407][T26077] vxcan3: entered promiscuous mode [ 1372.315751][T17590] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1372.485762][T17590] usb 4-1: Using ep0 maxpacket: 32 [ 1372.497129][T17590] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1372.512135][T17590] usb 4-1: config 0 has no interface number 0 [ 1372.525724][T17590] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1372.548785][T17590] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1372.570055][T17590] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.595214][T17590] usb 4-1: Product: syz [ 1372.609594][T17590] usb 4-1: Manufacturer: syz [ 1372.625915][T17590] usb 4-1: SerialNumber: syz [ 1372.643647][T17590] usb 4-1: config 0 descriptor?? [ 1372.883258][T26084] pim6reg1: entered promiscuous mode [ 1372.889779][T26084] pim6reg1: entered allmulticast mode [ 1373.441910][T15189] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1373.464134][T15189] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1373.655681][T22911] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1373.727274][T17590] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: 98 failed: -71 [ 1373.743393][T17590] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 1373.761455][T17590] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1373.787453][T17590] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 1373.820865][T17590] usb 4-1: USB disconnect, device number 37 [ 1373.838609][T22911] usb 10-1: Using ep0 maxpacket: 32 [ 1373.862319][T22911] usb 10-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1373.881074][T22911] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.907631][T22911] usb 10-1: config 0 descriptor?? [ 1373.930774][T22911] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1374.698456][T26105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5284'. [ 1374.709461][T26105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5284'. [ 1374.735420][T17590] usb 8-1: USB disconnect, device number 20 [ 1375.666406][T17590] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1375.715697][T15189] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1375.817795][T22911] gspca_sunplus: reg_w_riv err -71 [ 1375.824161][T22911] sunplus 10-1:0.0: probe with driver sunplus failed with error -71 [ 1375.834856][T22911] usb 10-1: USB disconnect, device number 24 [ 1375.842938][T17590] usb 1-1: Using ep0 maxpacket: 32 [ 1375.854188][T17590] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1375.865794][T17590] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.874153][T17590] usb 1-1: Product: syz [ 1375.881515][T17590] usb 1-1: Manufacturer: syz [ 1375.886706][T15189] usb 4-1: Using ep0 maxpacket: 8 [ 1375.887880][T17590] usb 1-1: SerialNumber: syz [ 1375.910834][T17590] usb 1-1: config 0 descriptor?? [ 1375.917347][T15189] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1375.921654][T17590] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1375.938407][T17590] dvb-usb: bulk message failed: -22 (2/0) [ 1375.950617][T15189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.967362][T15189] usb 4-1: Product: syz [ 1375.975688][T15189] usb 4-1: Manufacturer: syz [ 1375.979035][T17590] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1375.986066][T15189] usb 4-1: SerialNumber: syz [ 1375.990609][T17590] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1376.005942][T17590] usb 1-1: media controller created [ 1376.036985][T15189] usb 4-1: config 0 descriptor?? [ 1376.050489][T15189] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1376.063878][T17590] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1376.095016][T17590] usb 1-1: selecting invalid altsetting 7 [ 1376.106172][T17590] cxusb: set interface failed [ 1376.110988][T17590] dvb-usb: bulk message failed: -22 (1/0) [ 1376.164584][T17590] DVB: Unable to find symbol lgdt330x_attach() [ 1376.170849][T17590] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1376.255711][T17590] rc_core: IR keymap rc-dvico-portable not found [ 1376.262376][T17590] Registered IR keymap rc-empty [ 1376.274792][T17590] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 1376.292076][T17590] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input100 [ 1376.320718][T17590] dvb-usb: schedule remote query interval to 100 msecs. [ 1376.329719][T17590] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1376.350034][T17590] usb 1-1: USB disconnect, device number 100 [ 1376.459482][T26118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1376.494920][T26118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1376.539016][T26138] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1376.579003][T17590] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1376.591122][T26138] bond1: (slave lo): Enslaving as an active interface with an up link [ 1376.614547][T26138] net_ratelimit: 10 callbacks suppressed [ 1376.614563][T26138] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1376.760429][T15189] radio-usb-si4713 4-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 1376.787771][T15189] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1376.808484][T15189] usb 4-1: USB disconnect, device number 38 [ 1377.200783][T26146] syzkaller0: entered promiscuous mode [ 1377.208286][T26146] syzkaller0: entered allmulticast mode [ 1377.492018][T26151] bond3 (unregistering): Released all slaves [ 1378.075989][T17590] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1378.239518][T17590] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1378.260426][T17590] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.308463][T17590] usb 8-1: Product: syz [ 1378.316126][T17590] usb 8-1: Manufacturer: syz [ 1378.325309][T17590] usb 8-1: SerialNumber: syz [ 1378.509297][T26166] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5299'. [ 1378.977136][T17590] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1378.990374][T17590] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1380.033699][T17590] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 1380.046218][T17590] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1380.056731][T17590] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1380.082323][T17590] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -32 [ 1381.633838][T15189] usb 8-1: USB disconnect, device number 21 [ 1382.062895][T26192] loop3: detected capacity change from 0 to 7 [ 1382.066214][T26189] Cannot find add_set index 0 as target [ 1382.083002][T26192] Dev loop3: unable to read RDB block 7 [ 1382.101328][T26192] loop3: unable to read partition table [ 1382.114086][T26190] kvm: pic: non byte write [ 1382.119238][T26192] loop3: partition table beyond EOD, truncated [ 1382.126662][T26192] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1382.255398][T26198] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5308'. [ 1382.286006][T26198] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5308'. [ 1382.309364][T26198] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5308'. [ 1382.329005][T26198] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5308'. [ 1383.360746][T26218] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5311'. [ 1383.394356][T26218] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5311'. [ 1384.080007][ T30] audit: type=1326 audit(1780516379.979:5420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26230 comm="syz.7.5316" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4459ce59 code=0x7ffc0000 [ 1384.105277][ T30] audit: type=1326 audit(1780516379.979:5421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26230 comm="syz.7.5316" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4459ce59 code=0x7ffc0000 [ 1384.133534][ T30] audit: type=1326 audit(1780516379.999:5422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26230 comm="syz.7.5316" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2f4455d68e code=0x7ffc0000 [ 1384.159027][ T30] audit: type=1326 audit(1780516379.999:5423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26230 comm="syz.7.5316" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2f4459caeb code=0x7ffc0000 [ 1384.183754][ T30] audit: type=1326 audit(1780516380.009:5424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26230 comm="syz.7.5316" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2f4459caeb code=0x7ffc0000 [ 1384.208719][ T30] audit: type=1326 audit(1780516380.009:5425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26230 comm="syz.7.5316" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2f4459caeb code=0x7ffc0000 [ 1384.234056][ T30] audit: type=1326 audit(1780516380.009:5426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26230 comm="syz.7.5316" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2f4459caeb code=0x7ffc0000 [ 1384.259190][ T30] audit: type=1326 audit(1780516380.129:5427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26230 comm="syz.7.5316" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2f4459caeb code=0x7ffc0000 [ 1384.295865][T17590] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1384.303679][ T30] audit: type=1326 audit(1780516380.199:5428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26230 comm="syz.7.5316" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2f4459caeb code=0x7ffc0000 [ 1384.355698][T15189] usb 8-1: new full-speed USB device number 22 using dummy_hcd [ 1384.363764][ T30] audit: type=1326 audit(1780516380.259:5429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26230 comm="syz.7.5316" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2f4459caeb code=0x7ffc0000 [ 1384.492172][T17590] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1384.510040][T15189] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1384.510307][T17590] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.522627][T15189] usb 8-1: not running at top speed; connect to a high speed hub [ 1384.530926][T17590] usb 1-1: Product: syz [ 1384.537067][T15189] usb 8-1: config 4 has an invalid interface number: 147 but max is 0 [ 1384.540139][T17590] usb 1-1: Manufacturer: syz [ 1384.548602][T15189] usb 8-1: config 4 has an invalid descriptor of length 39, skipping remainder of the config [ 1384.551737][T17590] usb 1-1: SerialNumber: syz [ 1384.564272][T15189] usb 8-1: config 4 has no interface number 0 [ 1384.578057][T15189] usb 8-1: string descriptor 0 read error: -22 [ 1384.585490][T15189] usb 8-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1384.594701][T15189] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38 [ 1384.618227][T15189] uvcvideo 8-1:4.147: probe with driver uvcvideo failed with error -22 [ 1384.736387][T13962] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1384.778869][T17590] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1384.801178][T17590] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1384.813988][T17590] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1384.828088][T17590] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1384.839864][T23304] usb 8-1: USB disconnect, device number 22 [ 1384.851169][T17590] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1384.879054][T17590] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1384.897793][T13962] usb 10-1: config 0 has an invalid interface number: 117 but max is 0 [ 1384.906107][T17590] usb 1-1: USB disconnect, device number 101 [ 1384.912660][T13962] usb 10-1: config 0 has an invalid descriptor of length 65, skipping remainder of the config [ 1384.924022][T13962] usb 10-1: config 0 has no interface number 0 [ 1384.939341][T13962] usb 10-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 112, changing to 10 [ 1384.961249][T13962] usb 10-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid maxpacket 50371, setting to 1024 [ 1384.980972][T13962] usb 10-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1384.999991][T13962] usb 10-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1385.010957][T13962] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.020255][T13962] usb 10-1: Product: syz [ 1385.024651][T13962] usb 10-1: Manufacturer: syz [ 1385.029653][T13962] usb 10-1: SerialNumber: syz [ 1385.038419][T13962] usb 10-1: config 0 descriptor?? [ 1385.044429][T26235] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 1385.095353][T26248] binder: 26247:26248 ioctl 401845ff 200000000240 returned -22 [ 1385.770620][T26260] fuse: Bad value for 'fd' [ 1385.811163][T26260] bond1: option mode: unable to set because the bond device has slaves [ 1385.842245][T26260] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1385.868025][T26260] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1386.610564][T26277] bond0: left allmulticast mode [ 1386.633137][T26277] bond_slave_0: left allmulticast mode [ 1386.646443][T26277] bond_slave_1: left allmulticast mode [ 1386.663658][T26277] bond0: left promiscuous mode [ 1386.698383][T26277] bond_slave_0: left promiscuous mode [ 1386.713235][T26277] bond_slave_1: left promiscuous mode [ 1387.609252][T13962] usb 10-1: USB disconnect, device number 25 [ 1388.416358][T17590] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1388.457276][T26320] netlink: 'syz.8.5338': attribute type 1 has an invalid length. [ 1388.466910][T26321] netlink: 'syz.8.5338': attribute type 1 has an invalid length. [ 1388.549666][T26320] bond1: entered promiscuous mode [ 1388.559091][T26320] bond1: entered allmulticast mode [ 1388.569452][T23319] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1388.583072][T26320] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1388.590238][T17590] usb 4-1: Using ep0 maxpacket: 8 [ 1388.620844][T17590] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1388.630247][T17590] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.638554][T17590] usb 4-1: Product: syz [ 1388.642982][T17590] usb 4-1: Manufacturer: syz [ 1388.647746][T17590] usb 4-1: SerialNumber: syz [ 1388.663374][T17590] usb 4-1: config 0 descriptor?? [ 1388.672415][T17590] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1388.688928][T26323] erspan1: entered allmulticast mode [ 1388.706482][T26323] bond1: (slave erspan1): making interface the new active one [ 1388.745766][T26323] erspan1: entered promiscuous mode [ 1388.756849][T26323] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 1388.785738][T23319] usb 1-1: Using ep0 maxpacket: 16 [ 1388.848261][T23319] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 211, changing to 7 [ 1388.886672][T23319] usb 1-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 1388.904385][T23319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.916127][T23319] usb 1-1: Product: 좀 [ 1388.920413][T23319] usb 1-1: Manufacturer: 㠊 [ 1388.925305][T23319] usb 1-1: SerialNumber: syz [ 1389.243242][T26331] netdevsim netdevsim8: Direct firmware load for  failed with error -2 [ 1389.264888][T26331] netdevsim netdevsim8: Falling back to sysfs fallback for:  [ 1389.609993][T17590] radio-usb-si4713 4-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 1389.664000][T17590] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1389.746675][T17590] usb 4-1: USB disconnect, device number 39 [ 1389.966512][T22911] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1390.135786][T22911] usb 8-1: Using ep0 maxpacket: 32 [ 1390.148343][T22911] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1390.164548][T22911] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 64 [ 1390.178312][T22911] usb 8-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40 [ 1390.202046][T22911] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.220541][T22911] usb 8-1: Product: syz [ 1390.227527][T22911] usb 8-1: Manufacturer: syz [ 1390.232321][T22911] usb 8-1: SerialNumber: syz [ 1390.244311][T26342] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1390.472398][T22911] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1390.482308][T22911] usb 8-1: MIDIStreaming interface descriptor not found [ 1390.494348][T26353] tipc: Enabled bearer , priority 0 [ 1390.520090][T26353] syzkaller0: entered promiscuous mode [ 1390.533717][T26353] syzkaller0: entered allmulticast mode [ 1390.571039][T26353] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5343'. [ 1390.584849][T26353] tipc: Resetting bearer [ 1390.624258][T22911] usb 8-1: USB disconnect, device number 23 [ 1390.702961][T17353] udevd[17353]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1391.030120][T26351] tipc: Resetting bearer [ 1391.220279][T26351] tipc: Disabling bearer [ 1391.555730][T13962] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1391.715664][T13962] usb 8-1: Using ep0 maxpacket: 32 [ 1391.731577][T13962] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1391.755274][T13962] usb 8-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40 [ 1391.772194][T13962] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.791900][T13962] usb 8-1: Product: syz [ 1391.801575][T13962] usb 8-1: Manufacturer: syz [ 1391.811911][T13962] usb 8-1: SerialNumber: syz [ 1393.400779][T23319] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1393.416398][T23319] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1393.501568][T23319] usb 1-1: USB disconnect, device number 102 [ 1393.577494][T22911] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1393.590364][T17613] udevd[17613]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1393.788396][T22911] usb 10-1: Using ep0 maxpacket: 16 [ 1393.814120][T22911] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 211, changing to 7 [ 1393.850921][T22911] usb 10-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 1393.861168][T22911] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.869600][T22911] usb 10-1: Product: 좀 [ 1393.873966][T22911] usb 10-1: Manufacturer: 㠊 [ 1393.878857][T22911] usb 10-1: SerialNumber: syz [ 1393.956890][T26402] syzkaller0: entered promiscuous mode [ 1393.962641][T26402] syzkaller0: entered allmulticast mode [ 1394.075875][T15189] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1394.167821][T13962] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1394.193780][T13962] usb 8-1: MIDIStreaming interface descriptor not found [ 1394.227405][T15189] usb 4-1: config 0 has no interfaces? [ 1394.241837][T15189] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1394.260871][T15189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.277574][T15189] usb 4-1: Product: syz [ 1394.287311][T15189] usb 4-1: Manufacturer: syz [ 1394.296897][T15189] usb 4-1: SerialNumber: syz [ 1394.307071][T13962] usb 8-1: USB disconnect, device number 24 [ 1394.315036][T15189] usb 4-1: config 0 descriptor?? [ 1394.374073][T17353] udevd[17353]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1394.544774][T26398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1394.554079][T26398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1394.609392][T26398] veth1_vlan: left promiscuous mode [ 1394.616890][T23319] usb 4-1: USB disconnect, device number 40 [ 1395.310674][T26417] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1395.535927][T26422] bond3: entered promiscuous mode [ 1395.541407][T26422] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1395.716899][T26429] loop5: detected capacity change from 0 to 7 [ 1395.754065][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1395.763261][ C0] buffer_io_error: 27 callbacks suppressed [ 1395.763332][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1395.796263][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1395.805473][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1395.814980][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1395.824129][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1395.836142][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1395.845308][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1395.856779][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1395.865993][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1395.899863][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1395.909083][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1395.927831][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1395.937062][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1395.945475][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1395.954653][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1395.962582][T26429] ldm_validate_partition_table(): Disk read failed. [ 1395.972737][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1395.981921][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1395.999327][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1396.008548][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1396.019779][T26429] Dev loop5: unable to read RDB block 0 [ 1396.030765][T26431] loop5: detected capacity change from 7 to 0 [ 1396.039243][T26429] loop5: unable to read partition table [ 1396.053769][T26429] loop5: partition table beyond EOD, truncated [ 1396.083785][T26429] loop_reread_partitions: partition scan of loop5 (ɍn/C>|n˨,l-"@Iy}c9sGQaG%x?) failed (rc=-5) [ 1396.271966][T22911] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1396.285483][T22911] usb 10-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1396.420786][T22911] usb 10-1: USB disconnect, device number 26 [ 1396.576105][T17349] udevd[17349]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1397.454590][T26449] team0: entered allmulticast mode [ 1397.512070][T26449] team_slave_0: entered allmulticast mode [ 1397.905703][T13962] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1398.075019][T13962] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1398.084379][T13962] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1398.097257][T13962] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 1398.107818][T13962] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1398.117616][T13962] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 1398.134554][T13962] usb 4-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 1398.144052][T13962] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.152625][T13962] usb 4-1: Product: syz [ 1398.157746][T13962] usb 4-1: Manufacturer: syz [ 1398.162369][T13962] usb 4-1: SerialNumber: syz [ 1398.173488][T13962] usb 4-1: config 0 descriptor?? [ 1398.181106][T26457] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1398.196147][ C1] usb 4-1: NFC: Urb failure (status -71) [ 1398.207424][T13962] usb 4-1: NFC: Unable to get FW version [ 1398.225311][T13962] pn533_usb 4-1:0.0: probe with driver pn533_usb failed with error -90 [ 1398.265868][T26449] team_slave_1: entered allmulticast mode [ 1398.387452][T26459] netlink: 'syz.0.5367': attribute type 1 has an invalid length. [ 1398.613626][T26462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5367'. [ 1398.871967][T26451] team0: left allmulticast mode [ 1398.892321][T26451] team_slave_0: left allmulticast mode [ 1398.911439][T26451] team_slave_1: left allmulticast mode [ 1399.409240][T22911] usb 4-1: USB disconnect, device number 41 [ 1401.765939][T23304] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1401.938808][T23304] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1401.954781][T23304] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1401.966261][T23304] usb 8-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1401.977809][T23304] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1401.995811][T23304] usb 8-1: config 0 descriptor?? [ 1402.007999][T22911] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1402.177303][T22911] usb 10-1: Using ep0 maxpacket: 16 [ 1402.184872][T22911] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1402.214863][T22911] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 1402.241463][T22911] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 1402.252314][T22911] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1402.270221][T22911] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1402.280262][T22911] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1402.300582][T22911] usb 10-1: SerialNumber: syz [ 1402.321209][T26531] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1402.328954][T26531] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1402.344918][T22911] hub 10-1:1.0: bad descriptor, ignoring hub [ 1402.375205][T22911] hub 10-1:1.0: probe with driver hub failed with error -5 [ 1402.515540][T26555] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5389'. [ 1402.572558][T22911] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -71 [ 1402.617739][T26520] netlink: 'syz.7.5380': attribute type 1 has an invalid length. [ 1402.679113][T22911] usb 10-1: USB disconnect, device number 27 [ 1402.752658][T26520] bond3: entered promiscuous mode [ 1402.771960][T26520] bond3: entered allmulticast mode [ 1402.793619][T26520] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1402.833840][T23304] hid-led 0003:1D34:000A.0046: probe with driver hid-led failed with error -71 [ 1402.878352][T23304] usb 8-1: USB disconnect, device number 25 [ 1403.245829][T22911] usb 10-1: new full-speed USB device number 28 using dummy_hcd [ 1403.425899][T22911] usb 10-1: device descriptor read/64, error -71 [ 1403.677772][T22911] usb 10-1: new full-speed USB device number 29 using dummy_hcd [ 1403.692096][T26575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5395'. [ 1403.703072][T26575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5395'. [ 1403.719442][T26575] 8021q: VLANs not supported on gre0 [ 1403.732073][T26575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5395'. [ 1403.751666][T26575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5395'. [ 1403.773101][T26575] 8021q: VLANs not supported on gre0 [ 1403.785859][T23304] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1403.794418][T26575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5395'. [ 1403.812292][T26575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5395'. [ 1403.824842][T26575] 8021q: VLANs not supported on gre0 [ 1403.831963][T26575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5395'. [ 1403.835641][T22911] usb 10-1: device descriptor read/64, error -71 [ 1403.848937][T26575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5395'. [ 1403.869247][T26575] 8021q: VLANs not supported on gre0 [ 1403.882610][T26575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5395'. [ 1403.891784][T26575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5395'. [ 1403.901032][T26575] 8021q: VLANs not supported on gre0 [ 1403.913582][T26575] 8021q: VLANs not supported on gre0 [ 1403.928459][T26575] 8021q: VLANs not supported on gre0 [ 1403.939983][T26575] 8021q: VLANs not supported on gre0 [ 1403.952900][T26575] 8021q: VLANs not supported on gre0 [ 1403.955636][T23304] usb 8-1: device descriptor read/64, error -71 [ 1403.965329][T26575] 8021q: VLANs not supported on gre0 [ 1403.966100][T22911] usb usb10-port1: attempt power cycle [ 1403.981095][T26575] 8021q: VLANs not supported on gre0 [ 1403.987153][T26575] 8021q: VLANs not supported on gre0 [ 1403.992989][T26575] 8021q: VLANs not supported on gre0 [ 1404.001414][T26575] 8021q: VLANs not supported on gre0 [ 1404.010333][T26575] 8021q: VLANs not supported on gre0 [ 1404.025212][T26575] 8021q: VLANs not supported on gre0 [ 1404.038711][T26575] 8021q: VLANs not supported on gre0 [ 1404.056022][T26575] 8021q: VLANs not supported on gre0 [ 1404.063938][T26575] 8021q: VLANs not supported on gre0 [ 1404.080020][T26575] 8021q: VLANs not supported on gre0 [ 1404.092603][T26575] 8021q: VLANs not supported on gre0 [ 1404.117514][T26575] 8021q: VLANs not supported on gre0 [ 1404.123328][T26575] 8021q: VLANs not supported on gre0 [ 1404.129588][T26575] 8021q: VLANs not supported on gre0 [ 1404.135352][T26575] 8021q: VLANs not supported on gre0 [ 1404.142027][T26575] 8021q: VLANs not supported on gre0 [ 1404.148378][T26575] 8021q: VLANs not supported on gre0 [ 1404.154168][T26575] 8021q: VLANs not supported on gre0 [ 1404.161730][T26575] 8021q: VLANs not supported on gre0 [ 1404.167674][T26575] 8021q: VLANs not supported on gre0 [ 1404.173978][T26575] 8021q: VLANs not supported on gre0 [ 1404.180717][T26575] 8021q: VLANs not supported on gre0 [ 1404.186816][T26575] 8021q: VLANs not supported on gre0 [ 1404.196667][T26575] 8021q: VLANs not supported on gre0 [ 1404.202696][T26575] 8021q: VLANs not supported on gre0 [ 1404.210098][T26575] 8021q: VLANs not supported on gre0 [ 1404.215657][T23304] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1404.216502][T26575] 8021q: VLANs not supported on gre0 [ 1404.230430][T26575] 8021q: VLANs not supported on gre0 [ 1404.237664][T26575] 8021q: VLANs not supported on gre0 [ 1404.244179][T26575] 8021q: VLANs not supported on gre0 [ 1404.250995][T26575] 8021q: VLANs not supported on gre0 [ 1404.257358][T26575] 8021q: VLANs not supported on gre0 [ 1404.263361][T26575] 8021q: VLANs not supported on gre0 [ 1404.269732][T26575] 8021q: VLANs not supported on gre0 [ 1404.280619][T26575] 8021q: VLANs not supported on gre0 [ 1404.287936][T26575] 8021q: VLANs not supported on gre0 [ 1404.294307][T26575] 8021q: VLANs not supported on gre0 [ 1404.305096][T26575] 8021q: VLANs not supported on gre0 [ 1404.316149][T22911] usb 10-1: new full-speed USB device number 30 using dummy_hcd [ 1404.317170][T26575] 8021q: VLANs not supported on gre0 [ 1404.335083][T26575] 8021q: VLANs not supported on gre0 [ 1404.341656][T26575] 8021q: VLANs not supported on gre0 [ 1404.347774][T26575] 8021q: VLANs not supported on gre0 [ 1404.348306][T22911] usb 10-1: device descriptor read/8, error -71 [ 1404.353814][T26575] 8021q: VLANs not supported on gre0 [ 1404.368586][T23304] usb 8-1: device descriptor read/64, error -71 [ 1404.370879][T26575] 8021q: VLANs not supported on gre0 [ 1404.382043][T26575] 8021q: VLANs not supported on gre0 [ 1404.388334][T26575] 8021q: VLANs not supported on gre0 [ 1404.394531][T26575] 8021q: VLANs not supported on gre0 [ 1404.407388][T26575] 8021q: VLANs not supported on gre0 [ 1404.413674][T26575] 8021q: VLANs not supported on gre0 [ 1404.419856][T26575] 8021q: VLANs not supported on gre0 [ 1404.425796][T26575] 8021q: VLANs not supported on gre0 [ 1404.431655][T26575] 8021q: VLANs not supported on gre0 [ 1404.437619][T26575] 8021q: VLANs not supported on gre0 [ 1404.443417][T26575] 8021q: VLANs not supported on gre0 [ 1404.449427][T26575] 8021q: VLANs not supported on gre0 [ 1404.499752][T23304] usb usb8-port1: attempt power cycle [ 1404.656027][T22911] usb 10-1: new full-speed USB device number 31 using dummy_hcd [ 1404.686592][T22911] usb 10-1: device descriptor read/8, error -71 [ 1404.796528][T22911] usb usb10-port1: unable to enumerate USB device [ 1404.875653][T23304] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1404.907214][T23304] usb 8-1: device descriptor read/8, error -71 [ 1405.106296][T23319] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1405.165705][T23304] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1405.186217][T23304] usb 8-1: device descriptor read/8, error -71 [ 1405.205849][T22911] usb 10-1: new full-speed USB device number 32 using dummy_hcd [ 1405.265833][T23319] usb 4-1: Using ep0 maxpacket: 32 [ 1405.274238][T23319] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1405.283955][T23319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.292034][T23319] usb 4-1: Product: syz [ 1405.296835][T23304] usb usb8-port1: unable to enumerate USB device [ 1405.304669][T23319] usb 4-1: Manufacturer: syz [ 1405.310031][T23319] usb 4-1: SerialNumber: syz [ 1405.320249][T23319] usb 4-1: config 0 descriptor?? [ 1405.368776][T22911] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1405.391376][T22911] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1405.403776][T22911] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 1405.415200][T22911] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1405.430984][T22911] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1405.440730][T22911] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1405.448967][T22911] usb 10-1: Manufacturer: syz [ 1405.458448][T22911] usb 10-1: config 0 descriptor?? [ 1405.735716][T22911] rc_core: IR keymap rc-hauppauge not found [ 1405.742701][T22911] Registered IR keymap rc-empty [ 1405.750226][T22911] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1405.758315][T23304] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1405.786201][T22911] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1405.807094][T22911] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1405.820735][T22911] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input103 [ 1405.836092][T22911] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1405.865941][T22911] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1405.886277][T22911] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1405.906080][T23304] usb 1-1: device descriptor read/64, error -71 [ 1405.912482][T22911] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1405.945973][T22911] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1405.965834][T22911] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1405.985953][T22911] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1406.005985][T22911] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1406.027335][T22911] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1406.045855][T22911] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1406.068200][T22911] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1406.077676][T22911] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1406.144870][T22911] usb 10-1: USB disconnect, device number 32 [ 1406.172697][T23304] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1406.307289][T23304] usb 1-1: device descriptor read/64, error -71 [ 1406.416281][T23304] usb usb1-port1: attempt power cycle [ 1406.758941][T23304] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1406.806492][T23304] usb 1-1: device descriptor read/8, error -71 [ 1407.045910][T23304] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1407.096839][T23304] usb 1-1: device descriptor read/8, error -71 [ 1407.236077][T23304] usb usb1-port1: unable to enumerate USB device [ 1407.355982][T23319] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: failure sending bit rate [ 1407.378785][T23319] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -110 [ 1407.626039][T23319] usb 4-1: USB disconnect, device number 42 [ 1408.515753][T13962] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1408.572315][T23319] IPVS: starting estimator thread 0... [ 1408.685852][T13962] usb 10-1: Using ep0 maxpacket: 32 [ 1408.693294][T13962] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 1408.696250][T26645] IPVS: using max 42 ests per chain, 100800 per kthread [ 1408.701938][T13962] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1408.726028][T13962] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1408.753492][T13962] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1408.771757][T13962] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1408.784759][T13962] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1408.799255][T13962] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1408.809247][T13962] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1408.819425][T13962] usb 10-1: config 0 descriptor?? [ 1408.933038][T26654] fuse: Bad value for 'fd' [ 1408.937573][T15189] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1409.025944][T23319] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1409.050494][T13962] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 33 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1409.097032][T15189] usb 1-1: Using ep0 maxpacket: 8 [ 1409.104577][T15189] usb 1-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 1409.104605][T15189] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.104621][T15189] usb 1-1: Product: syz [ 1409.104633][T15189] usb 1-1: Manufacturer: syz [ 1409.104646][T15189] usb 1-1: SerialNumber: syz [ 1409.113617][T15189] usb 1-1: config 0 descriptor?? [ 1409.118497][T15189] cdc_ether 1-1:0.0: bad CDC descriptors [ 1409.119438][T15189] usb 1-1: unsupported MDLM descriptors [ 1409.196762][T23319] usb 8-1: Using ep0 maxpacket: 8 [ 1409.207665][T23319] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1409.245109][T23319] usb 8-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 1409.281336][T23319] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.311985][T26633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1409.325658][T23319] usb 8-1: Product: syz [ 1409.341316][T26647] __nla_validate_parse: 121 callbacks suppressed [ 1409.341328][T26647] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5414'. [ 1409.357051][T23319] usb 8-1: Manufacturer: syz [ 1409.367746][T26633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1409.382798][T23319] usb 8-1: SerialNumber: syz [ 1409.419076][T26647] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1409.471927][T23304] usb 10-1: USB disconnect, device number 33 [ 1409.489773][T26647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1409.519242][T23304] usblp0: removed [ 1409.533186][T26647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1409.621708][T23319] usb 8-1: 1:1 : format type 0 is detected, processed as PCM [ 1409.643474][T23319] usb 8-1: 1:1 : sample bitwidth 177 in over sample bytes 2 [ 1409.685498][T23319] usb 8-1: 1:1: cannot set freq 137 to ep 0x1 [ 1409.710201][T23319] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1409.810254][T23319] usb 8-1: USB disconnect, device number 30 [ 1410.187806][T26668] netlink: 164 bytes leftover after parsing attributes in process `syz.9.5418'. [ 1411.364929][T26679] sctp: [Deprecated]: syz.3.5421 (pid 26679) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1411.364929][T26679] Use struct sctp_sack_info instead [ 1411.546579][T26683] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1411.634448][T26685] syzkaller0: entered promiscuous mode [ 1411.654184][T26685] syzkaller0: entered allmulticast mode [ 1411.677240][T26685] tipc: Started in network mode [ 1411.682459][T26685] tipc: Node identity 9ea400f0a374, cluster identity 4711 [ 1411.694589][T26685] tipc: Enabled bearer , priority 0 [ 1411.709105][T23319] usb 1-1: USB disconnect, device number 107 [ 1411.718491][T26684] tipc: Resetting bearer [ 1411.790260][T26684] tipc: Disabling bearer [ 1411.810865][T26687] kvm: pic: single mode not supported [ 1411.811677][T26687] kvm: pic: single mode not supported [ 1411.820021][T26687] kvm: pic: level sensitive irq not supported [ 1411.826799][T26687] kvm: pic: single mode not supported [ 1411.843477][T26687] kvm: pic: single mode not supported [ 1411.848974][T26687] kvm: pic: level sensitive irq not supported [ 1411.854941][T26687] kvm: pic: single mode not supported [ 1412.002043][T26695] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5428'. [ 1412.026856][T26695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5428'. [ 1412.413705][T21727] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1412.435922][T21727] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1412.466112][T21727] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1412.515981][T21727] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1412.745507][T26723] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5433'. [ 1413.916934][T26742] netlink: 164 bytes leftover after parsing attributes in process `syz.9.5440'. [ 1414.075277][T26744] could not allocate digest TFM handle sha3-224-ce [ 1414.325699][T23310] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1414.522694][T23310] usb 10-1: config 0 has no interfaces? [ 1414.555314][T23310] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1414.617893][T23310] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.636340][T23310] usb 10-1: Product: syz [ 1414.661450][T23310] usb 10-1: Manufacturer: syz [ 1414.696436][T23310] usb 10-1: SerialNumber: syz [ 1414.714451][T23310] usb 10-1: config 0 descriptor?? [ 1414.728191][T26771] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5446'. [ 1414.766514][T26771] netlink: 51 bytes leftover after parsing attributes in process `syz.8.5446'. [ 1414.883116][T26776] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5446'. [ 1414.885646][T15189] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1414.998861][T23319] usb 10-1: USB disconnect, device number 34 [ 1415.035804][T15189] usb 4-1: Using ep0 maxpacket: 16 [ 1415.059594][T15189] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 211, changing to 7 [ 1415.125867][T15189] usb 4-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 1415.147496][T15189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.177513][T15189] usb 4-1: Product: 좀 [ 1415.190966][T15189] usb 4-1: Manufacturer: 㠊 [ 1415.205704][T15189] usb 4-1: SerialNumber: syz [ 1416.038609][T26790] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5452'. [ 1416.183861][T26790] loop4: detected capacity change from 0 to 7 [ 1416.284929][ C0] blk_print_req_error: 2 callbacks suppressed [ 1416.284947][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1416.315121][T26791] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5452'. [ 1416.352403][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1416.361636][ C1] buffer_io_error: 2 callbacks suppressed [ 1416.361646][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1416.441896][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1416.451148][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1416.465955][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1416.475184][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1416.485151][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1416.494429][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1416.508419][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1416.517639][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1416.631279][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1416.640447][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1416.714293][T26794] FAULT_INJECTION: forcing a failure. [ 1416.714293][T26794] name failslab, interval 1, probability 0, space 0, times 0 [ 1416.777765][T26794] CPU: 1 UID: 0 PID: 26794 Comm: syz.9.5453 Tainted: G L syzkaller #0 PREEMPT(full) [ 1416.777783][T26794] Tainted: [L]=SOFTLOCKUP [ 1416.777787][T26794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1416.777793][T26794] Call Trace: [ 1416.777800][T26794] [ 1416.777806][T26794] dump_stack_lvl+0xe8/0x150 [ 1416.777826][T26794] should_fail_ex+0x412/0x560 [ 1416.777843][T26794] should_failslab+0xa8/0x100 [ 1416.777854][T26794] __kmalloc_noprof+0xe8/0x760 [ 1416.777869][T26794] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1416.777889][T26794] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1416.777905][T26794] ? tomoyo_domain+0xd7/0x130 [ 1416.777916][T26794] ? tomoyo_path_number_perm+0x219/0x630 [ 1416.777929][T26794] tomoyo_path_number_perm+0x246/0x630 [ 1416.777943][T26794] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1416.777955][T26794] ? __lock_acquire+0x6b5/0x2cf0 [ 1416.777974][T26794] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1416.777996][T26794] ? __fget_files+0x2a/0x420 [ 1416.778011][T26794] ? __fget_files+0x2a/0x420 [ 1416.778021][T26794] ? __fget_files+0x3a0/0x420 [ 1416.778032][T26794] ? __fget_files+0x2a/0x420 [ 1416.778045][T26794] security_file_ioctl+0xc3/0x2a0 [ 1416.778060][T26794] __se_sys_ioctl+0x47/0x170 [ 1416.778075][T26794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1416.778086][T26794] do_syscall_64+0x174/0x580 [ 1416.778096][T26794] ? trace_irq_disable+0x3b/0x140 [ 1416.778112][T26794] ? clear_bhb_loop+0x40/0x90 [ 1416.778124][T26794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1416.778133][T26794] RIP: 0033:0x7f993d19ce59 [ 1416.778144][T26794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1416.778152][T26794] RSP: 002b:00007f993b3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1416.778164][T26794] RAX: ffffffffffffffda RBX: 00007f993d415fa0 RCX: 00007f993d19ce59 [ 1416.778170][T26794] RDX: 0000200000000200 RSI: 00000000c018937e RDI: 0000000000000003 [ 1416.778176][T26794] RBP: 00007f993b3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1416.778183][T26794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1416.778188][T26794] R13: 00007f993d416038 R14: 00007f993d415fa0 R15: 00007f993d53fa48 [ 1416.778204][T26794] [ 1416.778238][T26794] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1417.581916][T15189] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1417.613202][T15189] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1417.755780][T23319] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1417.773867][T15189] usb 4-1: USB disconnect, device number 43 [ 1417.886850][T26815] could not allocate digest TFM handle sha3-224-ce [ 1417.930658][T23319] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 1417.966632][T23319] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1418.001092][T26820] netlink: 188 bytes leftover after parsing attributes in process `syz.8.5462'. [ 1418.013110][T23319] usb 8-1: config 220 has no interface number 2 [ 1418.032625][T23319] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1418.058844][T26820] input input104: cannot allocate more than FF_MAX_EFFECTS effects [ 1418.081538][T23319] usb 8-1: config 220 interface 0 has no altsetting 0 [ 1418.173914][T23319] usb 8-1: config 220 interface 76 has no altsetting 0 [ 1418.289555][T23319] usb 8-1: config 220 interface 1 has no altsetting 0 [ 1418.311066][T23319] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1418.321069][T23319] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.329650][T23319] usb 8-1: Product: syz [ 1418.334068][T23319] usb 8-1: Manufacturer: syz [ 1418.339033][T23319] usb 8-1: SerialNumber: syz [ 1418.586560][T23319] uvcvideo 8-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1418.595736][T23319] uvcvideo 8-1:220.0: No valid video chain found. [ 1418.603500][T23319] usb 8-1: selecting invalid altsetting 0 [ 1418.669999][T23319] usb 8-1: selecting invalid altsetting 0 [ 1418.684844][T26835] netlink: 164 bytes leftover after parsing attributes in process `syz.8.5463'. [ 1418.694609][T23319] usbtest 8-1:220.1: probe with driver usbtest failed with error -22 [ 1418.720305][T26334] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1418.743078][T14022] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1418.763059][T23319] usb 8-1: USB disconnect, device number 31 [ 1418.796770][T14022] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1418.815663][T23304] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1418.841947][T14022] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1419.015707][T23304] usb 4-1: Using ep0 maxpacket: 32 [ 1419.038083][T23304] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 1419.067857][T23304] usb 4-1: config 0 has no interface number 0 [ 1419.091896][T23304] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1419.139770][T23304] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1419.179419][T23304] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1419.225284][T23304] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1419.243952][T23304] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.257177][T23304] usb 4-1: Product: syz [ 1419.286541][T23304] usb 4-1: Manufacturer: syz [ 1419.304574][T23304] usb 4-1: SerialNumber: syz [ 1419.348173][T23304] usb 4-1: config 0 descriptor?? [ 1419.372205][T26840] netlink: 'syz.7.5466': attribute type 9 has an invalid length. [ 1419.387143][T26832] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1419.642649][T23304] usb-storage 4-1:0.20: USB Mass Storage device detected [ 1419.713036][T23304] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 1419.740538][T23304] scsi host1: usb-storage 4-1:0.20 [ 1419.905804][T23319] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1420.075640][T23319] usb 10-1: Using ep0 maxpacket: 8 [ 1420.084682][T23319] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 1420.095211][T23319] usb 10-1: config 179 has no interface number 0 [ 1420.103677][T23319] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1420.120323][T23319] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1420.155087][T23319] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1420.210498][T23319] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1420.250623][T23319] usb 10-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1420.280207][T23319] usb 10-1: config 179 interface 65 has no altsetting 0 [ 1420.290356][T23319] usb 10-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1420.299961][T23319] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1420.359102][T23319] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:179.65/input/input105 [ 1420.527613][ T4984] input input105: unable to receive magic message: -110 [ 1420.691582][ T4984] input input105: unable to receive magic message: -32 [ 1420.756808][T22911] usb 10-1: USB disconnect, device number 35 [ 1420.762888][ C0] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1420.762917][ C0] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1421.026072][T23304] usb 8-1: new full-speed USB device number 32 using dummy_hcd [ 1421.147719][T17349] udevd[17349]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1421.172181][T26857] usb 4-1: reset high-speed USB device number 44 using dummy_hcd [ 1421.257917][T23304] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 1421.279638][T23304] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 1421.352458][T23304] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1421.412188][T23304] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1421.454719][T23304] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1421.492705][T23304] usb 8-1: Product: syz [ 1421.517232][T23319] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1421.526849][T23304] usb 8-1: Manufacturer: syz [ 1421.569651][T23304] usb 8-1: SerialNumber: syz [ 1421.603392][T23304] usb 8-1: config 0 descriptor?? [ 1421.656678][T23304] usb 8-1: selecting invalid altsetting 0 [ 1421.707781][T23319] usb 1-1: Using ep0 maxpacket: 16 [ 1421.755679][T23319] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 1421.833897][T23319] usb 1-1: config 1 has no interface number 0 [ 1421.884584][T26865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1421.903596][T26865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1421.904134][T23319] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1422.057655][T23319] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1422.095290][T26881] could not allocate digest TFM handle sha3-224-ce [ 1422.138145][T23319] usb 1-1: config 1 interface 105 has no altsetting 0 [ 1422.145221][T23304] usb 8-1: USB disconnect, device number 32 [ 1422.181979][T15189] usb 4-1: USB disconnect, device number 44 [ 1422.199447][T23319] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1422.271480][T26894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1422.271937][T23319] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1422.330823][T23319] usb 1-1: Product: syz [ 1422.345681][T23319] usb 1-1: Manufacturer: syz [ 1422.350383][T23319] usb 1-1: SerialNumber: syz [ 1422.373210][T26875] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1422.385430][T26894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1422.405759][T17613] udevd[17613]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1422.407460][T26875] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1422.672218][T26875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1422.703485][T26875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1422.736037][T26875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1422.785650][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 1422.785667][ T30] audit: type=1326 audit(1780516418.679:5455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26896 comm="syz.9.5480" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993d19ce59 code=0x7ffc0000 [ 1422.879499][T26875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1422.883979][ T30] audit: type=1326 audit(1780516418.739:5456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26896 comm="syz.9.5480" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993d19ce59 code=0x7ffc0000 [ 1422.889655][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.934167][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.948335][T26875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1422.962328][T26897] netlink: 'syz.9.5480': attribute type 4 has an invalid length. [ 1422.974483][T26875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1423.015689][ T30] audit: type=1326 audit(1780516418.759:5457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26896 comm="syz.9.5480" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f993d19ce59 code=0x7ffc0000 [ 1423.040570][ T30] audit: type=1326 audit(1780516418.759:5458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26896 comm="syz.9.5480" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993d19ce59 code=0x7ffc0000 [ 1423.073765][ T30] audit: type=1326 audit(1780516418.759:5459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26896 comm="syz.9.5480" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993d19ce59 code=0x7ffc0000 [ 1423.125936][ T30] audit: type=1326 audit(1780516418.759:5460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26896 comm="syz.9.5480" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f993d19ce59 code=0x7ffc0000 [ 1423.152671][ T30] audit: type=1326 audit(1780516418.759:5461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26896 comm="syz.9.5480" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993d19ce59 code=0x7ffc0000 [ 1423.155528][T26875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1423.178229][ T30] audit: type=1326 audit(1780516418.759:5462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26896 comm="syz.9.5480" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993d19ce59 code=0x7ffc0000 [ 1423.263262][ T30] audit: type=1326 audit(1780516418.759:5463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26896 comm="syz.9.5480" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f993d19ce59 code=0x7ffc0000 [ 1423.292323][ T30] audit: type=1326 audit(1780516418.759:5464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26896 comm="syz.9.5480" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993d19ce59 code=0x7ffc0000 [ 1423.313631][T26875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1423.362306][T26875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1423.414264][T26875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1423.544994][T26904] could not allocate digest TFM handle sha3-224-ce [ 1423.664359][T23319] aqc111 1-1:1.105: probe with driver aqc111 failed with error -71 [ 1423.732809][T23319] usb 1-1: USB disconnect, device number 108 [ 1424.822481][ T5642] Bluetooth: hci1: Malformed LE Event: 0x0d [ 1425.235876][T22911] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1425.445878][T22911] usb 4-1: Using ep0 maxpacket: 32 [ 1425.461337][T22911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1425.503719][T22911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1425.568842][T22911] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1425.638082][T22911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1425.668519][T22911] usb 4-1: config 0 descriptor?? [ 1425.687838][T22911] hub 4-1:0.0: USB hub found [ 1425.813114][T26941] netlink: 'syz.7.5491': attribute type 21 has an invalid length. [ 1425.888311][T22911] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1426.042028][T26949] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.5492'. [ 1426.056583][T26949] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1426.302668][T22911] hid-generic 0003:046D:C31C.0047: unknown main item tag 0x0 [ 1426.461471][T22911] hid-generic 0003:046D:C31C.0047: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 1426.572215][T26932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5487'. [ 1426.641706][T26932] netlink: 'syz.3.5487': attribute type 2 has an invalid length. [ 1426.839886][T26968] could not allocate digest TFM handle sha3-224-ce [ 1426.874372][T15189] usb 4-1: USB disconnect, device number 45 [ 1427.605176][T26986] [ 1427.607536][T26986] ============================================ [ 1427.613662][T26986] WARNING: possible recursive locking detected [ 1427.619901][T26986] syzkaller #0 Tainted: G L [ 1427.625883][T26986] -------------------------------------------- [ 1427.632038][T26986] syz.3.5499/26986 is trying to acquire lock: [ 1427.638081][T26986] ffffffff8f3d63b0 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 1427.648321][T26986] [ 1427.648321][T26986] but task is already holding lock: [ 1427.655657][T26986] ffffffff8f3d63b0 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 1427.665811][T26986] [ 1427.665811][T26986] other info that might help us debug this: [ 1427.673844][T26986] Possible unsafe locking scenario: [ 1427.673844][T26986] [ 1427.681272][T26986] CPU0 [ 1427.684581][T26986] ---- [ 1427.687834][T26986] lock(qp_broker_list.mutex); [ 1427.692785][T26986] lock(qp_broker_list.mutex); [ 1427.697613][T26986] [ 1427.697613][T26986] *** DEADLOCK *** [ 1427.697613][T26986] [ 1427.705768][T26986] May be due to missing lock nesting notation [ 1427.705768][T26986] [ 1427.714078][T26986] 1 lock held by syz.3.5499/26986: [ 1427.719160][T26986] #0: ffffffff8f3d63b0 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 1427.729753][T26986] [ 1427.729753][T26986] stack backtrace: [ 1427.735620][T26986] CPU: 0 UID: 0 PID: 26986 Comm: syz.3.5499 Tainted: G L syzkaller #0 PREEMPT(full) [ 1427.735635][T26986] Tainted: [L]=SOFTLOCKUP [ 1427.735639][T26986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1427.735646][T26986] Call Trace: [ 1427.735653][T26986] [ 1427.735659][T26986] dump_stack_lvl+0xe8/0x150 [ 1427.735673][T26986] print_deadlock_bug+0x279/0x290 [ 1427.735687][T26986] __lock_acquire+0x253f/0x2cf0 [ 1427.735698][T26986] ? is_bpf_text_address+0x292/0x2b0 [ 1427.735725][T26986] ? is_bpf_text_address+0x26/0x2b0 [ 1427.735735][T26986] ? kernel_text_address+0xa5/0xe0 [ 1427.735748][T26986] ? __kernel_text_address+0xd/0x30 [ 1427.735761][T26986] ? vmci_qp_broker_detach+0x117/0xf20 [ 1427.735774][T26986] lock_acquire+0x106/0x350 [ 1427.735783][T26986] ? vmci_qp_broker_detach+0x117/0xf20 [ 1427.735797][T26986] __mutex_lock+0x1a3/0x1550 [ 1427.735815][T26986] ? vmci_qp_broker_detach+0x117/0xf20 [ 1427.735827][T26986] ? kasan_save_track+0x4f/0x80 [ 1427.735840][T26986] ? kasan_save_track+0x3e/0x80 [ 1427.735852][T26986] ? kasan_save_free_info+0x46/0x50 [ 1427.735861][T26986] ? __kasan_slab_free+0x5c/0x80 [ 1427.735873][T26986] ? kfree+0x1c5/0x640 [ 1427.735883][T26986] ? vmci_ctx_put+0x5ef/0xc40 [ 1427.735891][T26986] ? vmci_ctx_enqueue_datagram+0x3ab/0x420 [ 1427.735900][T26986] ? vmci_datagram_dispatch+0x450/0xc60 [ 1427.735908][T26986] ? vmci_qp_broker_detach+0x8dd/0xf20 [ 1427.735919][T26986] ? vmci_host_close+0x98/0x160 [ 1427.735929][T26986] ? vmci_qp_broker_detach+0x117/0xf20 [ 1427.735940][T26986] ? exit_to_user_mode_loop+0x193/0x680 [ 1427.735949][T26986] ? __pfx___mutex_lock+0x10/0x10 [ 1427.735962][T26986] vmci_qp_broker_detach+0x117/0xf20 [ 1427.735975][T26986] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 1427.735986][T26986] ? kasan_quarantine_put+0xbb/0x1f0 [ 1427.735998][T26986] ? lockdep_hardirqs_on+0x7a/0x110 [ 1427.736007][T26986] ? kfree+0x1c5/0x640 [ 1427.736017][T26986] ? vmci_ctx_put+0x5ef/0xc40 [ 1427.736024][T26986] ? vmci_ctx_put+0x141/0xc40 [ 1427.736033][T26986] vmci_ctx_put+0x64e/0xc40 [ 1427.736041][T26986] ? __pfx___schedule+0x10/0x10 [ 1427.736053][T26986] ? vmci_ctx_put+0x141/0xc40 [ 1427.736062][T26986] ? __pfx_vmci_ctx_put+0x10/0x10 [ 1427.736070][T26986] ? preempt_schedule_thunk+0x16/0x30 [ 1427.736082][T26986] ? preempt_schedule_common+0x82/0xd0 [ 1427.736097][T26986] vmci_ctx_enqueue_datagram+0x3ab/0x420 [ 1427.736107][T26986] vmci_datagram_dispatch+0x450/0xc60 [ 1427.736118][T26986] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 1427.736129][T26986] vmci_qp_broker_detach+0x8dd/0xf20 [ 1427.736143][T26986] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 1427.736154][T26986] ? kasan_quarantine_put+0xbb/0x1f0 [ 1427.736166][T26986] ? kfree+0x1c5/0x640 [ 1427.736176][T26986] ? vmci_ctx_put+0x5ef/0xc40 [ 1427.736184][T26986] ? vmci_ctx_put+0x141/0xc40 [ 1427.736193][T26986] vmci_ctx_put+0x64e/0xc40 [ 1427.736201][T26986] ? vmci_ctx_put+0x141/0xc40 [ 1427.736209][T26986] ? __pfx_vmci_ctx_put+0x10/0x10 [ 1427.736221][T26986] vmci_host_close+0x98/0x160 [ 1427.736232][T26986] ? __pfx_vmci_host_close+0x10/0x10 [ 1427.736243][T26986] __fput+0x44f/0xa60 [ 1427.736255][T26986] task_work_run+0x1d9/0x270 [ 1427.736268][T26986] ? __pfx_task_work_run+0x10/0x10 [ 1427.736281][T26986] exit_to_user_mode_loop+0x193/0x680 [ 1427.736289][T26986] ? rcu_is_watching+0x15/0xb0 [ 1427.736300][T26986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.736310][T26986] do_syscall_64+0x353/0x580 [ 1427.736319][T26986] ? clear_bhb_loop+0x40/0x90 [ 1427.736329][T26986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.736338][T26986] RIP: 0033:0x7f2b9c59ce59 [ 1427.736349][T26986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1427.736357][T26986] RSP: 002b:00007f2b9d3b7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1427.736369][T26986] RAX: 0000000000000000 RBX: 00007f2b9c816090 RCX: 00007f2b9c59ce59 [ 1427.736375][T26986] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000007 [ 1427.736381][T26986] RBP: 00007f2b9c632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1427.736387][T26986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1427.736393][T26986] R13: 00007f2b9c816128 R14: 00007f2b9c816090 R15: 00007f2b9c93fa48 [ 1427.736404][T26986]