last executing test programs: 2m46.866073008s ago: executing program 0 (id=201): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x22) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000103, 0x0, 0x49}]}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r4], 0x5c}, 0x1, 0x0, 0x0, 0x10004002}, 0x90) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mq_open(0x0, 0x1, 0x0, &(0x7f0000000180)={0x2c}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000fdff2dbd70f9ffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="0008000023020000280012800b00010062726964676500001800028006000900000000000a0014"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r8, &(0x7f00000bd000), 0x8000013, 0x20000000) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x45e940) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x20000080) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x1000002d, 0x8001, 0x2, 0xb, 0x1, 0xfffffe0000000001, 0xabf, 0xffffffff}, 0x0) 2m44.513712871s ago: executing program 0 (id=214): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x8d5}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000240)=0xb0000) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x2}}]}, 0x38}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$packet_buf(r3, 0x107, 0x6, &(0x7f0000000000)=""/22, &(0x7f0000000100)=0x16) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f00000002c0)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r2, 0x7a4, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0xfefffffa, 0x141880) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x8d5}) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000240)=0xb0000) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket(0x2a, 0x2, 0x0) (async) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x2}}]}, 0x38}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) getsockopt$packet_buf(r3, 0x107, 0x6, &(0x7f0000000000)=""/22, &(0x7f0000000100)=0x16) (async) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f00000002c0)={@host}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r2, 0x7a4, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000080), 0xfefffffa, 0x141880) (async) 2m41.413479049s ago: executing program 0 (id=233): r0 = socket(0x11, 0x800000003, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8208c007121522300080000109021b0001000000010904080001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) epoll_create(0x80) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) pselect6(0x40, &(0x7f0000000100)={0x7ff, 0xfffffffffffffffc, 0x100005, 0x0, 0x800, 0x0, 0x8000000000000001, 0x10000000}, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) inotify_init() r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, r1, {0x6, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000, 0x3, 0xfffc, 0x0, 0x400, 0x0, 0x0, 0x8001], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}]}}]}, 0x8c}}, 0x0) 2m39.850460427s ago: executing program 0 (id=242): ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000600)=0x20000000) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf6f5, 0x0, 0x0, 0x0, 0x9}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f00000001c0)='GPL\x00', 0x3, 0x91, &(0x7f00000002c0)=""/145, 0x41100, 0xc, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[r4, 0x1], &(0x7f0000000500)=[{0x1, 0x4, 0x4, 0x5}], 0x10, 0x9}, 0x94) socket$unix(0x1, 0x5, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x24dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 2m39.494936915s ago: executing program 0 (id=244): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000380)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x45, 0x0, 0x42, 0x0, 0x2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x3a78, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x3a4c, 0x2, [@TCA_FW_ACT={0x4}, @TCA_FW_ACT={0x1a48, 0x4, [@m_police={0xc8, 0x3, 0x0, 0x0, {{0xb}, {0x4}, {0x99, 0x6, "fe6d860dd84cbb0f361d847bcdf4f1cca1e189ca63b31409d2acc4a678e75e5969d6bbe5a54ecf29b01ab3b4a3b575873b9ace4b4d426436bc19fe437db796f824b3650f50334b10d4b94e2d7d6c31aea3e06975ef3aaa1770d81ceb777a8a733f87a5fd75c8c7aaaf871120b4486a042df4912b9067f5a70de44db7a118c6fc2718a5996c29d9b0aed950a3b4dd45a3ddb7e37f5a"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x130, 0x9, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8000}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0xf}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf}}]}, {0xc1, 0x6, "14337e58be45d60f659754ec12e5d9ab30fcb57981051924d37f4f0fd25a3ef87b4e232d3bfdc9c80e6ee7845cbdd8ea6467a6e4d8f14d4a03a927cf8cd13c4b64426d975ee16c7b9e3ea473e415c230d4a08725de6d4cf8fa0a2ee1d29d4426544a0954a83455c69df54a86f88e23bdfc955eff64c7fb93320b3d431c93a09c51b007f50b01eda77a1d9eecd6c666f112264ca0082163908544f2055aff6b63df294e668556bd859c2aeeed83a0033d335fa628e8c8f83687fc15f992"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_skbmod={0x8c, 0x0, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="584b3d6d9c36"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x2, 0x30000006, 0x5, 0x4}, 0x5}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf167}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0xa4, 0x17, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0xd, 0x20000000, 0x5, 0x95}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x4, 0x2, 0x821, 0x6}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x47, 0x5, 0x3, 0x4}, 0xc341}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x10000000, 0x2, 0x9}, 0x1000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x171c, 0x12, 0x0, 0x0, {{0xb}, {0x1648, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x19c44db1, 0xdcb, 0x1, 0x1, 0x2, 0x1, 0xcd4, 0x7, 0x5, 0x1000, 0x4, 0xfffffffd, 0x1, 0xbb77, 0x1, 0x3, 0x8, 0x2, 0x4, 0xea, 0x2, 0x8b5c, 0x8, 0x34e, 0x8, 0x1, 0x80000001, 0x3, 0x932, 0x7, 0x9, 0x8001, 0x80, 0x2, 0x4, 0x10000, 0x9, 0x200, 0x3, 0x400, 0x4, 0xf, 0x6, 0x1a, 0x5, 0x5, 0x80000000, 0x1bb6, 0x2, 0x9, 0x4, 0x8, 0x6, 0x5, 0x9800, 0x1, 0x356, 0x3, 0x8, 0x1, 0xffffffff, 0xfffffff4, 0x7, 0x6599, 0x4, 0xe931, 0x0, 0x4, 0x5, 0x2, 0x7, 0x1, 0xda, 0x5, 0x75f3c000, 0xa, 0x8c0b, 0x560, 0x7c, 0x100, 0x0, 0xfffffffd, 0x78d7f19a, 0xc, 0x8, 0x7fffffff, 0x3, 0x9, 0x7f, 0x5, 0xffff5c04, 0x8000, 0xdfbe, 0xf6646b3e, 0xffff, 0x2, 0x2e4, 0x400, 0x780f, 0x9, 0x9, 0x9, 0x2, 0x5, 0x4, 0x6, 0x6, 0xd, 0x4, 0xfc, 0x58a6970a, 0x3, 0x1000, 0x12, 0xc, 0x1, 0xff, 0x9, 0x7, 0xe, 0x6, 0x8, 0x7a05cad8, 0x1, 0x84, 0x400, 0xfffffffb, 0x9, 0xe, 0x8, 0x5, 0x4, 0xfffff800, 0x6, 0x7, 0xffffffff, 0x41, 0x6, 0x100, 0xfb67, 0x7, 0xe698, 0x7, 0x4, 0x7, 0x1000, 0xfffffffd, 0x6, 0x9, 0x80000000, 0x0, 0xf, 0xc392, 0xdaa9, 0x7, 0x4, 0x1, 0x9, 0x7fffffff, 0x5d394290, 0x5, 0xd, 0x6, 0x6, 0x200, 0x8, 0x1, 0xa63, 0x5, 0x10001, 0x582, 0x6, 0x6, 0x2, 0x8001, 0x7, 0x8, 0x84c, 0xffff, 0x7, 0xffff, 0x5699, 0xd8fa, 0x7, 0x3, 0x0, 0xb396, 0x7fff, 0x2d3, 0x4, 0x5e73, 0x0, 0x1, 0x18a, 0x3ff, 0x0, 0xc4, 0x2, 0x3ff, 0x3, 0x1ff, 0x8, 0x5fd7000, 0xf3, 0x4, 0x3, 0xd8, 0x1, 0x8, 0x0, 0x8, 0x1, 0xca4a, 0xfffffffe, 0xb, 0x2, 0x3, 0x81, 0x7, 0x6, 0x200, 0x1, 0x39b2, 0x8, 0x1, 0x9, 0x0, 0x9, 0x9, 0x8, 0x4, 0x3, 0x2, 0x446, 0x839, 0x7, 0xea0b, 0x401, 0x1, 0x2, 0xa956, 0x9, 0x7, 0x8, 0x4, 0x1, 0x7f, 0x4d, 0x5, 0xf, 0x800000, 0x35, 0xaa, 0x0, 0x5, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x75}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x8, 0x1, 0x1, 0x3, {0x3, 0x0, 0x1, 0xfff7, 0x9, 0x7}, {0x3, 0x0, 0x6, 0xa8, 0x8, 0x3}, 0x4, 0x6, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x0, 0x7, 0xd3b, 0x2, {0xf6, 0x1, 0x4, 0x200, 0x4597, 0x7fff}, {0x2, 0x2, 0x2, 0xbe, 0x9, 0x40}, 0x6, 0x10001, 0x2}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4ee5a755}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0xffffffffffffffff, 0x101, 0x81, 0x70a2, {0x0, 0x0, 0x7, 0x5, 0xef, 0x8001}, {0x9, 0x2, 0x8, 0xf6, 0xfffc, 0x8001}, 0xae8, 0x2, 0x9c}}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff4, 0x1, 0xcc, 0x6, 0x4e11, 0x7, 0x62d, 0x80000001, 0x3, 0x401, 0x5, 0x6, 0x1, 0x5, 0x7fff, 0x0, 0x97, 0x5, 0x3, 0x301ea6fc, 0x80000000, 0x200, 0x7, 0x10, 0x4, 0x3, 0x8, 0x9, 0x100, 0xc, 0x56, 0x8, 0x8, 0xa, 0x4eee6086, 0x1, 0x5, 0x2, 0x1, 0x4c, 0x2, 0x9, 0x122e, 0x4, 0x1000, 0x2, 0x80000000, 0x9, 0x8001, 0x10001, 0x200, 0x1b, 0x8, 0x7, 0xc000000, 0x1, 0x0, 0x1, 0x0, 0x9, 0x7fffffff, 0x2, 0x7, 0x101, 0x0, 0x10, 0x260, 0x0, 0x7, 0x2, 0x2, 0x3, 0x3, 0x6450, 0x1ff, 0xb2, 0x5, 0x0, 0x0, 0x380000, 0x8000, 0x0, 0x6, 0x80000001, 0x1, 0x5, 0x6, 0x8, 0x9, 0x4, 0x3, 0x7, 0x6, 0x40, 0x813, 0x1, 0x7ff, 0xb, 0x6, 0x9, 0x6, 0x8b, 0x6, 0x0, 0xa06, 0xc33, 0xfffffff9, 0x3, 0xb, 0x3, 0x6, 0x9, 0x0, 0x4, 0x25a, 0x3000000, 0x101, 0xfffffff8, 0x0, 0xfea, 0x20000000, 0x6, 0xd, 0x6, 0x8dd4, 0x7, 0xd, 0xffffffff, 0x163f856e, 0xd6, 0xbb68, 0x9, 0x101, 0x14000, 0x9, 0x7, 0x200, 0x5, 0x1, 0x3, 0x6, 0xdb, 0x71c, 0x7, 0x1000, 0x6, 0xb8, 0x54fa07ca, 0x5, 0x5, 0x4, 0xb, 0x8, 0x6, 0x9, 0x2, 0xa, 0x9f, 0x1000, 0x5, 0xba, 0x3b5, 0x1ff, 0x5, 0x7, 0xfffffffe, 0x5, 0x0, 0x5, 0xb479, 0xfffffffd, 0x8, 0x3, 0x2, 0x3, 0x1, 0x1, 0x3, 0x5, 0x101, 0x800, 0x2, 0x7fffffff, 0xbb5c, 0x4e, 0x6, 0x7, 0x3, 0x1, 0x3, 0x2, 0x5, 0x7f, 0x4, 0x3d6, 0x4, 0x4, 0x2, 0x7, 0x3, 0x60000000, 0x1, 0x40, 0xa6, 0x7, 0x6, 0x6, 0x803, 0x0, 0x8, 0x0, 0x8, 0x90, 0x6, 0x0, 0x4, 0x3, 0x4, 0x0, 0x8, 0x9, 0xa4fb, 0x7f, 0x7f0, 0xffffff80, 0x9, 0xa, 0x40000000, 0x19, 0x6, 0x6428, 0x6, 0x7, 0x1, 0x6, 0x9, 0x5, 0xc2a, 0x80000001, 0x2, 0x0, 0x6, 0x6, 0x7, 0x200, 0x2, 0x400, 0x3, 0xf2, 0x0, 0x0, 0x0, 0x6, 0x373, 0x7f, 0x9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x10}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100000000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7ff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x6068, 0x1000, 0x80000000, {0x3, 0x1, 0x6, 0xfffa, 0x81, 0x6}, {0xe, 0x1, 0x7f, 0xfffa, 0xdb, 0xffffffff}, 0x6, 0x80, 0x2}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x3, 0xf, 0x0, 0x200, {0x45, 0x1, 0xa, 0x4, 0x7, 0x2}, {0x2, 0x0, 0x4, 0x2000, 0x7, 0x1}, 0x8000, 0x7, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000001, 0xf3, 0x2, 0x9, 0x8, 0x0, 0x1, 0x9, 0x7, 0xff, 0x3c79, 0x3, 0xffffff80, 0xff, 0x5, 0x8001, 0x3ff, 0x2, 0x51, 0x1, 0x1, 0xa729, 0xc, 0xffffff54, 0x4, 0x6, 0x101c, 0x7, 0xfa8, 0x9, 0x8001, 0xd7, 0x7fff, 0x7, 0x3, 0x4, 0x5, 0x401, 0xf906, 0x8, 0x2, 0x1ff, 0x100, 0x8, 0x8, 0x5, 0x3, 0x742, 0x3, 0x8, 0x3, 0x2, 0x4, 0x2, 0xffffffff, 0x9, 0x8000, 0x200, 0xdcc, 0x1000, 0xc, 0xffffff76, 0xa2e, 0x1000000, 0x4, 0x5, 0xffff, 0x101, 0x13, 0x5, 0x9a, 0x0, 0x4, 0x0, 0x4, 0x7, 0x6, 0x8, 0x10001, 0x1, 0x101, 0x6, 0x4, 0x903, 0x0, 0x2, 0x8e, 0xfffffc01, 0x0, 0x4b, 0x9, 0xfffffffa, 0x7ff, 0x0, 0x4a8, 0x9, 0x4, 0x9, 0x2, 0x4, 0x9, 0x56, 0xfffffffa, 0x6, 0x7, 0x8, 0x3, 0x0, 0x9b4, 0x0, 0x3, 0x101, 0x9, 0x2, 0x100, 0xfff, 0x5, 0x6, 0x1ff, 0x785, 0xc, 0x4, 0x4, 0x200, 0xa, 0xf4, 0xa9, 0xb4, 0x4, 0xfffffffb, 0x32b, 0x80000000, 0x80000001, 0x8, 0x82, 0x3, 0xfffffff8, 0xb865, 0x7, 0x1, 0x7, 0x7, 0x6, 0x4, 0x0, 0x5, 0x70000000, 0x8, 0x8, 0xe, 0x2, 0x5, 0xc6c, 0x9, 0x10001, 0x3e, 0x6, 0xfffffff8, 0x5, 0x1, 0x40, 0x4, 0x2834, 0x59e37698, 0xcd3d, 0x751, 0x0, 0x5, 0x5, 0xfffffffa, 0x3ff, 0x1, 0x4, 0x80000000, 0xfff, 0xffffffff, 0x8, 0x4, 0x9, 0x6, 0xfffffffa, 0x6, 0x66b, 0x5, 0x5, 0x5, 0x8, 0x6, 0xfffffffb, 0x5, 0xc63, 0x80000000, 0xfffffe01, 0xfffffffe, 0x9, 0x4, 0x4, 0x45be, 0x5, 0x2, 0x5, 0x1, 0x5, 0x6, 0x9, 0x2, 0x82, 0x6a, 0x0, 0x67, 0x3, 0x400, 0x4, 0x3, 0x1, 0x800, 0x3ff, 0x1ff, 0x9, 0x1, 0x8, 0xfffffffa, 0x6, 0x7, 0x5, 0x5, 0x9, 0x7, 0x0, 0x2, 0xff, 0x400, 0xfb, 0x8ee, 0x2, 0x2, 0x22f5e1cb, 0xa11, 0x4, 0x80000000, 0x5, 0x1, 0xffff, 0x5, 0x6, 0x3, 0x1, 0x3, 0x0, 0x7e, 0x9, 0x7, 0x0, 0x80000001, 0x0, 0x4]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x80000000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe, 0xbd, 0xbb11, 0x10000, 0xfffffffc, 0x7, 0x6, 0x8, 0x800000, 0x9, 0x3, 0x342, 0x3, 0x1, 0x80000000, 0xc, 0xfffffffa, 0x1000, 0x5, 0x7, 0xd, 0x7, 0x0, 0x101, 0xad, 0xffffffff, 0xd5, 0x1, 0x3, 0x10000000, 0x1000, 0xff, 0x8, 0x0, 0x3, 0x40000000, 0x1, 0x3ff, 0x9, 0x43c9, 0x2, 0x3f7, 0x9e52, 0x0, 0x40000000, 0xf2, 0x5, 0x7, 0x7, 0x4, 0x8, 0x9, 0x7, 0xbc1, 0x9, 0x3, 0x8, 0xfffffff7, 0x4e, 0x5, 0xfff, 0x5a6, 0x8, 0x0, 0x3b, 0xffff, 0x7f, 0x7ff, 0x1, 0x5b5b, 0x4, 0x100, 0x8, 0x4, 0x8b, 0x4a, 0x8, 0x7f, 0x1, 0x81, 0x6, 0xa43, 0x9f, 0x4, 0x7, 0xfffffffb, 0x4, 0x1c000000, 0x10000, 0x7ff, 0x7, 0x9, 0x6, 0x5, 0x8, 0x1, 0x10001, 0x8, 0x1, 0x10001, 0x8, 0x3, 0x7, 0x100, 0xd93, 0x0, 0x0, 0x5, 0x1, 0x5, 0xe448, 0x400, 0x8, 0x4, 0xe99, 0x5, 0x61, 0x38527528, 0x6, 0x40, 0x8, 0x1, 0x8, 0x1, 0xda9, 0x9, 0xfffffff7, 0x2, 0x5, 0x8, 0x7, 0x8, 0x7, 0xfffffc01, 0xd78e, 0x21, 0x8000, 0x2, 0x6, 0x4fa4, 0x200, 0x4, 0x4, 0x5, 0x81, 0x4, 0x824, 0x9, 0x4, 0x9, 0x0, 0x1, 0xf3f, 0x2, 0x5, 0x2, 0x8, 0x8, 0x9, 0x8, 0x9, 0x3, 0x1, 0x51, 0x6, 0x3, 0x76, 0x4, 0x1ff, 0xfffffffa, 0x8, 0x2, 0x60, 0x6, 0xff, 0x7dd, 0x0, 0x2, 0xe, 0x9, 0x3, 0x2, 0x73c5, 0x400, 0xe4, 0x8, 0xfffffffb, 0x2, 0x4, 0xfffffff9, 0x1, 0x6, 0x5, 0xe, 0x2c10, 0x5, 0xfffffff9, 0x1ff, 0xe03469b6, 0x9, 0x2, 0x9, 0x1, 0x2, 0x101, 0x2, 0x6, 0x60, 0x340, 0xfffffffc, 0x6, 0x2, 0x5, 0x1, 0x1, 0x0, 0x1, 0x0, 0xb1ba, 0x4f84, 0x7, 0x0, 0x1, 0x3, 0x3, 0x9, 0xc6, 0xe, 0x3, 0x2, 0x1ff, 0x4, 0x5, 0x0, 0x0, 0xad, 0x2, 0x40000, 0x0, 0x4, 0x4, 0x7, 0x3, 0x1, 0x401, 0x8, 0x7, 0xffffffff, 0x4, 0x4, 0x2, 0x8, 0x6, 0x3, 0x1c000, 0xe3f]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xd}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6963}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0xe4, 0x34, 0x1, {0x5, 0x1, 0x9, 0x3, 0x80, 0x5}, {0x4, 0x2, 0x200, 0x7, 0x3, 0x200}, 0x0, 0x4, 0x87}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffd, 0x71bb, 0x401, 0x9, 0xfffffffb, 0x1000, 0x0, 0x1, 0xbd, 0xbd, 0x5, 0x5, 0x577, 0x5, 0x3, 0x7, 0x7ff, 0x40, 0x8000, 0x879, 0x2, 0x8c89, 0x13c9, 0x1, 0x5eac, 0x8, 0x8, 0x4, 0x6, 0x6, 0x1, 0x0, 0xfffffffe, 0x6, 0x1, 0x5, 0x100, 0x1, 0x1, 0x74, 0xa6a8, 0x100, 0x80000001, 0x40, 0x4, 0x9, 0x6dd, 0x0, 0x0, 0x3, 0x21, 0xd842, 0x0, 0x8, 0x4df, 0x10001, 0x10001, 0x7, 0x9, 0x8e, 0xff, 0x2, 0x6, 0x2, 0x80000001, 0xb6e9, 0x1, 0x10000, 0x41, 0x200, 0x9, 0x3, 0xa0000, 0xa, 0x8, 0xfffffffb, 0x6, 0x8, 0x4, 0x2, 0x10, 0xe, 0x661f, 0x5, 0xf3, 0x3, 0xbf, 0x800, 0x7, 0x1, 0x3ff, 0x3967, 0x4, 0x0, 0xd8b, 0x8, 0x1, 0x9f0, 0xffffff18, 0x100, 0x40, 0x0, 0x7, 0xa, 0x81, 0x200, 0x6, 0x3, 0xffffffff, 0x1000, 0x6, 0x10, 0x9, 0xcd21, 0x81, 0x7ff, 0x8001, 0x6, 0xffff, 0x4, 0x4, 0xfffffffb, 0x4, 0x2, 0x9, 0xa, 0x5, 0x5, 0x3, 0xb, 0x5, 0x8, 0xa21, 0x9, 0x6, 0x10000, 0x5, 0xcce, 0x4, 0x1c00000, 0x1000, 0x10001, 0x4, 0x7, 0x2, 0x80000000, 0x400, 0x400, 0xfffff5c3, 0x8, 0x0, 0x101, 0x4, 0x7, 0x80000001, 0xe, 0x5, 0x9, 0x40, 0x6, 0x9, 0xffffffff, 0x4, 0xfffff800, 0x0, 0xc1e4, 0x9, 0xa0, 0x7, 0xfff, 0x0, 0x10, 0x8, 0x4, 0x800, 0x821, 0x3, 0x40f539ee, 0x7f, 0x4, 0x0, 0x1, 0xb51, 0x2, 0x2, 0x1, 0x7, 0x1, 0x1, 0x434f, 0x4, 0x4, 0xf, 0x6, 0x4, 0xa, 0x1, 0x31ed, 0x4, 0x179, 0x9, 0x5, 0xa, 0x2a, 0x9, 0x6, 0x8, 0x5, 0x4, 0x9, 0x9, 0x2000, 0x5, 0x80000001, 0xa, 0x0, 0x9, 0x3, 0x6, 0x1, 0x0, 0x8, 0x401, 0x6, 0x7fff, 0x9, 0x5, 0x2, 0xfffffff5, 0x8, 0x7, 0x7fff, 0x7, 0xfffff3d2, 0xb2c, 0x1a9, 0x4, 0x0, 0x687, 0x80, 0x80000001, 0xdbe8, 0x8, 0x7188f37f, 0x2, 0x400, 0x90, 0x2, 0x2b6, 0x4b3d, 0xfffffffa, 0x1, 0x3, 0x7ff, 0x5, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xf11}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1000}]]}, {0xa9, 0x6, "e4513679a2a987fd6afd93f9f7809739a798e4986a9d0d819ddafae5dc53af09b1e1886c21b22c6098cde951cf89def0e9d9956829a518b85ec649294a00d2af006ae2ef4036d37b9fb4c6c599d69ef091f1a8c51c68bc1e2dbf38a0e7de6b31836b283597c3511a43cad6c5ba3be7853d41ce908aed40ffe7143f389467f795a653166618ea2aaafd39994a9938f17191b1165e9efe7c261b41036e316280d7059cc7ddbc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_FW_ACT={0x1ffc, 0x4, [@m_xt={0x170, 0x18, 0x0, 0x0, {{0x7}, {0xbc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x3d, 0x6, {0xd, 'security\x00', 0xff, 0x1b, "3901bae1b2c90dec01349be3ac5bab1aa98106"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0xb}, @TCA_IPT_INDEX={0x8, 0x3, 0x3ff}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}]}, {0x8d, 0x6, "c62e9a687eed868051eb651c24304d274e8629de1b50d16051064435fc24ec70771d17f6fcdc9e9ee75e25d0f91438203e64eefedecde132008eeb0431ab391ca0bf5a7765d9d88867fb095fac2a9c7739fdc611b922111ed0c5abbfcc78d191c3703f0604da38e930080de9aa271e5f8e9da2c50a80ed7034f68c77939dbe86fb46c18e845a89f584"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0x48, 0x13, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x7f, 0x5, 0x10001, 0x6}}]}, {0x4}, {0xc, 0x7, {0xb07c3f3708729d04}}, {0xc, 0x8, {0x3}}}}, @m_pedit={0x1e40, 0x4, 0x0, 0x0, {{0xa}, {0x1e14, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_KEYS_EX={0x4c, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0x78, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x60e, 0x3, 0x10000000, 0x4, 0xdf7e}, 0x4, 0xa}, [{0x7, 0x4, 0x392, 0x6, 0x1000, 0x5}, {0x7, 0xfffeffff, 0xf, 0x6a5b, 0xfffffffd, 0x1000}, {0x37a0, 0x5, 0xcd0, 0xfffffff7, 0x40, 0x6}, {0x6, 0xd2a3, 0x0, 0xfffffffc, 0xcf, 0x3}, {0xffff0001, 0x2, 0x8000000, 0x4, 0x2, 0x320}, {0x7, 0x695967f0, 0xffff, 0x0, 0x8, 0x33}, {0x7b9c60c0, 0x7, 0x5, 0x0, 0x7, 0x1}, {0x7fff, 0xd, 0xb, 0x0, 0x4, 0x9}, {0x800, 0x6, 0xaa, 0x1, 0xfa609cae, 0x8}, {0x7d, 0x3, 0x3, 0x6, 0x0, 0x20000}, {0xfffffff7, 0x200, 0x6, 0x1ff, 0x87, 0x4}, {0x9, 0x8, 0x5, 0x8, 0x80000000, 0x7ff}, {0x5, 0x6, 0x8, 0x2, 0x80, 0x10001}, {0x0, 0x8, 0x0, 0x7, 0xfffff4d2, 0x1000}, {0x3, 0x6, 0x2, 0x0, 0xc, 0xbb1f}, {0x8, 0x218, 0x10000, 0x3, 0x6, 0x10001}, {0x5, 0x9, 0xa, 0x13, 0x6ab32164, 0x400}, {0x7, 0x8, 0x4c94, 0x2, 0xc5, 0xcd}, {0xd133, 0xf244, 0xfffffff6, 0x9, 0x5}, {0xe9e, 0x0, 0xffffc170, 0x64d, 0xffffffff, 0x4}, {0x1800000, 0x1, 0x80000001, 0x3, 0x280, 0x3}, {0x9, 0xcc7, 0x6, 0xfffffff7, 0xb, 0xb}, {0x800, 0x9, 0x9, 0xfffffffe, 0x0, 0xc}, {0xfd, 0x6, 0x6, 0x3, 0x8, 0x3}, {0x32d2, 0x7, 0x5, 0x6, 0x10000, 0x4696}, {0x7f, 0xb9cf, 0x4, 0x2, 0x64f8, 0xfffffffa}, {0x4, 0x7, 0x0, 0x7, 0x0, 0x4e49}, {0x6, 0x1ff, 0x5, 0xfffffeff, 0x9b63}, {0x1, 0x4, 0x6, 0xffffffff, 0x7fff, 0xf}, {0x2, 0x7, 0x4, 0x8000, 0x0, 0x80000001}, {0x8000, 0xd613, 0x6, 0x7ff, 0x200, 0x6}, {0x6, 0x7f0b, 0x9, 0x1, 0x4, 0x4}, {0x80, 0x2, 0x7fffffff, 0x5fb, 0xffff, 0x2}, {0x10000, 0x8000, 0x101, 0x5, 0x6, 0x2}, {0x7, 0xdbff, 0x2, 0x1, 0x6, 0x4}, {0x1, 0x7dc1, 0xfffffeff, 0xf8, 0xfffffffb, 0x4}, {0x6, 0xa8, 0x9, 0xb, 0x2, 0x81}, {0x3, 0xc2, 0x3, 0x9, 0xf4, 0x10000}, {0x4, 0x6, 0xff, 0x6, 0x6f, 0x100}, {0x7, 0x7, 0x6, 0x66e, 0xffff8001, 0x8000}, {0x72, 0x9845, 0x4, 0x900, 0xffffffff, 0x1}, {0x101, 0x9, 0x3, 0x10001, 0x5}, {0x0, 0x2, 0xafc, 0x3, 0x4, 0x6}, {0x7, 0x8, 0x1, 0x0, 0x1, 0xdb}, {0xfffffffe, 0x40, 0x23a, 0x2}, {0x1, 0x7, 0x7, 0x0, 0xb, 0x7}, {0xfffffff7, 0xa, 0x4d, 0x2, 0x6, 0x9}, {0xee, 0x2, 0x3, 0xefe, 0x2, 0xd12}, {0x200, 0xe, 0x6, 0x9, 0x80000001, 0x4}, {0x400, 0x0, 0x4, 0x4, 0x200}, {0x9, 0x7, 0x5, 0x1, 0x3, 0x32a}, {0xc50d, 0x8, 0x5, 0x4f, 0x0, 0x8}, {0xfffffff0, 0x9, 0x7, 0x1, 0x8, 0x5}, {0x0, 0x7fffffff, 0x4, 0x3, 0x6, 0x6}, {0x18ed, 0x8, 0x7, 0x9, 0x5181441a}, {0x1, 0x6, 0x4, 0x5, 0x5, 0xc}, {0xffffffff, 0x1ff, 0xb, 0x3, 0x7, 0x3}, {0x9, 0x5, 0xfffffffd, 0x2, 0x3fe, 0x8}, {0xd4, 0x7, 0x7, 0x6, 0x7}, {0xd4fc572, 0x8, 0x1, 0xe, 0xc3, 0x10000}, {0x6b7, 0x8, 0x8000, 0x5fc, 0x4, 0xffff}, {0x4, 0x7, 0x2, 0x5, 0x400, 0x7}, {0x7, 0x8, 0x8ce5, 0x6, 0x32}, {0x8, 0x13, 0x8, 0x3ff, 0x3, 0x3}, {0x6, 0x80000000, 0x5, 0x9, 0x80000001, 0x2}, {0x6, 0xff34, 0x3, 0x5, 0x6, 0x4}, {0x7, 0x6, 0xa4e, 0x10, 0x2, 0x8ac}, {0x6, 0xffffff00, 0x5, 0x80000000, 0x8, 0x3}, {0xfffffffa, 0x94, 0x5452, 0x400, 0x401, 0x9}, {0x80000001, 0x4fbd, 0x80000000, 0x7, 0x0, 0x401}, {0x7, 0x1000, 0x1, 0x8, 0x4, 0xfffff0d4}, {0x7, 0x9, 0xe3, 0x2, 0x3, 0x8}, {0x5f7, 0x4, 0x7f, 0xc8cc, 0x6, 0x10000}, {0x1e, 0xffffffff, 0xb84, 0x7066, 0x9, 0xfff}, {0xb, 0x1, 0x0, 0xffff, 0x4, 0x5}, {0x6, 0x241, 0x7, 0xa8, 0xa445, 0x7f}, {0x2, 0x5, 0x8, 0x2, 0x3, 0xffff8000}, {0x10001, 0x2f, 0x5f87, 0x8b, 0x80000000, 0x2}, {0x6, 0xffffff00, 0x4af17099, 0x7, 0xd, 0xfa31}, {0x2, 0x7ff, 0x2, 0x3, 0x0, 0x40}, {0x9, 0x2, 0x4, 0x2, 0x9, 0x4}, {0x3, 0xd4, 0xf0, 0x0, 0x100, 0xff}, {0x100, 0x10001, 0x100, 0xa, 0x831d, 0x7fffffff}, {0x8, 0x238, 0x8, 0x9, 0x8, 0xfb}, {0x16, 0xd8, 0x400, 0x7, 0x100, 0x5}, {0x9, 0x1aa0, 0x2, 0xa8f, 0x3, 0x10000}, {0x44f, 0x7fff, 0xfeb, 0x7, 0x7, 0x80000001}, {0x8, 0x2d065fec, 0x8, 0x3ba, 0x6, 0x5fa3}, {0xfffffffb, 0xb34c, 0x8, 0xa, 0xffff, 0x1}, {0x4, 0x3, 0x0, 0x8, 0x4, 0x6}, {0x1, 0x80, 0x5, 0xfffffff8, 0x9, 0x9}, {0x9, 0x2, 0x80000000, 0xff, 0x81, 0xb}, {0x8, 0x7, 0x2, 0x0, 0x9, 0x4}, {0x1, 0x800, 0x0, 0x3, 0x5, 0x10000}, {0x2e1, 0x9, 0x7, 0x0, 0x9, 0x5b875ee4}, {0xff, 0x0, 0x7ea, 0x7b, 0x8, 0xfffffffc}, {0x2a, 0xffffffff, 0x80, 0x7fff, 0x2, 0x7}, {0x10, 0x6, 0x5, 0x4, 0x4, 0x33}, {0x3, 0xc, 0x6, 0x6, 0x9, 0x6}, {0x4, 0x5, 0x101, 0x4, 0x353e, 0x4}, {0x8, 0xc, 0x7fffffff, 0x2, 0x5, 0x7}, {0xfffffffa, 0x9, 0x7, 0x42baad39, 0x6, 0x6}, {0x7, 0xfffffff1, 0x1, 0xd, 0xb26e, 0x1}, {0x1, 0x94, 0x5, 0x5, 0x7, 0xfffffff9}, {0x9, 0xbfa3, 0x5, 0x7, 0x6, 0x3}, {0x10001, 0x0, 0x1, 0x7, 0x2, 0xb1}, {0x7fffffff, 0xfffff5be, 0x8, 0x3, 0x2c, 0x9}, {0xffd, 0x7f, 0x40, 0x0, 0x6, 0x3}, {0x2a9, 0x0, 0x6, 0x4, 0xb04, 0xd}, {0x957b, 0x0, 0x24a3, 0x7, 0x3, 0x1}, {0x4, 0x3, 0x7, 0x0, 0x91, 0x6}, {0x1, 0x3800000, 0x6, 0x8, 0x2, 0xffffffff}, {0x5, 0x8, 0x2, 0x10001, 0x5}, {0xb34, 0x6, 0x8, 0x7, 0x5, 0x4}, {0x1, 0x1, 0x42, 0x7fff, 0x8, 0x9}, {0x401, 0x9, 0x8, 0x1}, {0x2, 0x8, 0x6a, 0x0, 0x1, 0xffffffff}, {0x7fffffff, 0x7, 0x2, 0x10, 0x4, 0xf}, {0xfffffff2, 0x1, 0x9, 0xd, 0x3, 0x1}, {0x0, 0x1, 0xffffffff, 0xff, 0x2c4, 0x4}, {0x4, 0x86f6, 0x4, 0x3, 0x9, 0x6}, {0x7, 0x9, 0x3, 0x3, 0x7, 0x67cf108b}, {0x0, 0x2, 0x4, 0x7, 0x5, 0xffffffff}, {0x8, 0xd8, 0x3, 0x4, 0x3ff, 0x8}, {0x6, 0x7fff, 0x100, 0x4, 0x2, 0x8}, {0x8, 0xe041, 0x4, 0x8, 0x5, 0x5e1}, {0x6, 0x3, 0x8, 0x1000, 0x5, 0xcb31}, {0x1, 0xd223, 0x8, 0x0, 0x4, 0x5}], [{0x2, 0x1}, {0x5, 0x1}, {0x2}, {0xaa699aae85504618, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x3}, {0x2}, {0x2, 0x1}, {0x0, 0x43e94edb6b16b030}, {}, {0x5, 0x1}, {0x4}, {}, {0x3}, {0x1}, {0xc770d970940cffe5, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x4}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x1, 0x1489d857e77e70bb}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x5}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x5}, {0x6, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x90, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}, @TCA_PEDIT_PARMS_EX={0xe98, 0x4, {{{0x22000000, 0x7237, 0x20000000, 0x2, 0x6}, 0x4c, 0x6, [{0x3, 0x4, 0x4, 0x1, 0x6}, {0x3055, 0x93000000, 0x3, 0x2130000, 0x2, 0xffff}, {0x0, 0x1, 0x7, 0x80000000, 0x0, 0xda2}, {0x200, 0xf, 0xa3, 0x3, 0x3, 0x7ff}, {0x1, 0x0, 0x1, 0x9, 0x0, 0x6}]}, [{0xfffffff2, 0x200, 0x0, 0x6, 0x9, 0x9}, {0xa, 0x7, 0x8, 0x5, 0x3, 0xfffffffb}, {0x7, 0x80000001, 0x8, 0xdf, 0x7, 0x7}, {0x2, 0x9, 0xf, 0x10001, 0xc, 0x4}, {0x472c, 0x6, 0x800, 0x6, 0xc, 0x7}, {0x6, 0x466, 0x8f37, 0x8, 0x4, 0x7fffffff}, {0x9, 0xfffffff0, 0xff, 0x7, 0x1, 0x10}, {0x6, 0x2, 0x3, 0x2, 0x3, 0x401}, {0x6, 0x1, 0x5, 0xcc, 0x3}, {0x3c, 0x401, 0xf996, 0xffff6756, 0x4, 0x7}, {0x5, 0xffffffff, 0x0, 0x8, 0x1eb6, 0x754}, {0x5, 0x8, 0xc, 0x6, 0x3, 0x8001}, {0x5, 0x7, 0x0, 0x7, 0xfffffffc, 0xf}, {0x0, 0x401, 0x8, 0x9ef, 0xffff, 0x600}, {0x4040, 0x800, 0x8, 0x1, 0x1, 0x8}, {0x69b7, 0x4, 0x8001, 0x9, 0x7f, 0x55}, {0xfff00000, 0x1, 0x8, 0x4, 0x4, 0xfffffff8}, {0xe11, 0x9, 0x400, 0x0, 0xfffffffc, 0xeb3}, {0xfff, 0xff, 0x8001, 0xa757, 0x8, 0x10000}, {0x7ff, 0x6cb6, 0x6cf9, 0x3a, 0x8, 0x4a246224}, {0x1d, 0x0, 0x100, 0x782, 0x8, 0x9}, {0x80, 0x5c, 0x3ff, 0x0, 0xc1f, 0x5}, {0x9, 0x1000, 0xfffffffe, 0xca, 0x51}, {0xffff, 0x53, 0x3, 0x0, 0xf8, 0x7}, {0x3, 0xbe89, 0x5, 0x7, 0xd230, 0x7ff}, {0x4df6, 0x9, 0x81, 0x8, 0x5, 0x8}, {0x40, 0x5, 0x4, 0x4, 0x4, 0x8000}, {0x2, 0x5, 0x6, 0x97, 0xc2a2, 0x10}, {0xaf9, 0x7f, 0x0, 0x5, 0x3, 0x8}, {0x6, 0xffffffff, 0x98, 0x1, 0x8, 0xffff}, {0x699, 0xe32d, 0x3, 0xf2e6, 0x8, 0x2}, {0x7fffffff, 0xfff, 0x0, 0x3d8c, 0x7, 0x60000000}, {0x200, 0x5, 0xc, 0x1, 0x4, 0x10001}, {0x4, 0x2, 0x0, 0x3, 0x8001, 0x6}, {0x8, 0x2, 0x1, 0xf, 0x7e, 0x81}, {0x0, 0x85b7, 0x4, 0x2, 0x4, 0x5}, {0x3, 0x5, 0x7fff, 0x8, 0x7, 0x119}, {0x9, 0xc, 0xe041, 0x5, 0x40, 0x1}, {0x10000, 0x9, 0x7fffffff, 0x4, 0x9, 0xe}, {0xe33, 0x4, 0x1, 0xa075, 0x424814b6, 0x9}, {0x0, 0x1, 0x4, 0x6, 0xb2b, 0x400}, {0x7, 0x8, 0xe, 0x401, 0x5a5, 0x1000}, {0xdcf, 0x2, 0xb55c0, 0x80000000, 0x7, 0x39099503}, {0x1, 0x0, 0xfffff9cb, 0x9, 0xc}, {0x5, 0x1ff, 0x4, 0x3ff, 0x8, 0x8}, {0x3d, 0xc5, 0x4, 0x8001, 0x561, 0xf}, {0xfffffff7, 0x7fffffff, 0x7c0d, 0xe, 0x3, 0x3}, {0xffffff12, 0x1e, 0x2b, 0x7, 0xe, 0x8}, {0x1, 0xb2, 0x2, 0xcf95, 0x5, 0x4}, {0x10000, 0x3ff, 0x1, 0x1, 0x5, 0xb}, {0x0, 0x10000, 0x3, 0x80, 0x80000001, 0x7}, {0x8, 0x3, 0x9, 0x9, 0x30000000, 0x2}, {0x0, 0x1, 0x5, 0x5, 0x4, 0x7}, {0x8e6, 0x10001, 0x6, 0x1, 0x4, 0x5}, {0x0, 0xc4, 0x1, 0x6470764c, 0x7, 0xb92}, {0x4, 0x9, 0x401, 0x7, 0x3, 0xd6}, {0xfa, 0x3f4, 0x7ff, 0x73, 0x7}, {0x2, 0x1, 0x1, 0x0, 0x6}, {0x1, 0x1, 0x3, 0x7dc, 0x0, 0x2}, {0x1, 0xfffffffd, 0x2, 0x8, 0x0, 0xe}, {0x7, 0x40, 0x4, 0xad, 0xe58, 0x400}, {0xfffffff6, 0x9, 0x2, 0x3, 0x81}, {0x7876, 0xfffff001, 0x7, 0x97, 0x4, 0x2}, {0x7, 0xd, 0x4, 0x87, 0x9, 0x6}, {0x6, 0x2, 0x8, 0xd, 0x200, 0x7fffffff}, {0x13, 0x3, 0x0, 0x1, 0xffffffff, 0x1c2}, {0x7, 0x4, 0x1, 0x6, 0x1, 0x7}, {0x4, 0x1, 0x6, 0x1, 0x3}, {0xe6, 0x5, 0x6, 0xffc3, 0x9, 0xffffffff}, {0x6, 0x0, 0x8000, 0x5, 0x0, 0x40}, {0x7ff, 0x4, 0x8, 0x8, 0x81f, 0x40}, {0xf, 0x4, 0x78a, 0xf, 0x4, 0x876}, {0x1, 0x8, 0x400, 0x8, 0x9, 0xa}, {0x10000, 0xffffffff, 0x9, 0x1, 0x5ef9, 0x81}, {0x7, 0xdf, 0x0, 0x4, 0xfffffffd, 0x5}, {0x0, 0xfffffffb, 0x3, 0xb60, 0x6, 0x9}, {0x3, 0xfffffff3, 0x45f, 0x5, 0x8, 0x2}, {0x4, 0x7, 0xffffffff, 0x7e0b, 0x7, 0xd}, {0xc, 0x4b4a, 0x4, 0x7fff, 0xffff, 0x80}, {0x3, 0x4, 0x7, 0x5, 0x6, 0x7}, {0x8, 0x1, 0x80000001, 0x5, 0x2, 0x3}, {0x0, 0xe993, 0x10001, 0xfffff800, 0xff, 0x100}, {0x8, 0xffff, 0x2, 0x1, 0x2, 0x744}, {0x30, 0x2, 0x2, 0x0, 0x7, 0xc}, {0x528c, 0xd, 0x1c83780, 0x401, 0xf07, 0xfff}, {0x40, 0xc, 0x3, 0x1000, 0xbc41, 0xdf60}, {0xfffffffb, 0x4, 0x7fff, 0x4, 0x88fc, 0x3ff}, {0xfffffffb, 0x80800000, 0x9, 0x0, 0x10001, 0x2}, {0xfc2, 0x53, 0xfffffffc, 0x0, 0x6, 0xb3d}, {0xfff, 0x101, 0x8, 0x8, 0xee, 0x1327fd2e}, {0x3, 0x3, 0x2, 0x0, 0xee, 0x5}, {0x4, 0xfffffff8, 0x5, 0xff, 0x5, 0x8}, {0xfffffffa, 0xfffffff9, 0x6, 0x7, 0x8, 0x2}, {0x4, 0x738, 0x3, 0xe001, 0x6, 0xda}, {0xff, 0xf, 0x0, 0x0, 0x0, 0xfffffffc}, {0x4, 0x9, 0x6, 0x4, 0x5415, 0x7}, {0x6, 0x0, 0x3ad9, 0x5, 0xb, 0x3ff}, {0x6, 0x96, 0x8, 0x0, 0x94, 0x2}, {0x7, 0x4, 0x6cc7a110, 0x10000, 0x40}, {0x4, 0x961, 0x6, 0x0, 0xf, 0x101}, {0x4, 0xd, 0x7f, 0xed3f, 0xfffffffb, 0x6}, {0x1ff, 0x4, 0x6, 0x2a520, 0xb, 0x6}, {0x0, 0x8, 0x3, 0x2, 0x200, 0x72}, {0x8, 0xd, 0x2, 0x5, 0x3, 0x5000}, {0xa, 0x6, 0x4, 0x64, 0xfff, 0x5}, {0x10001, 0x0, 0x2, 0x7, 0x8, 0x7}, {0x9, 0x4, 0x80000, 0x2, 0x7f, 0x81f}, {0xe02, 0xfffffff8, 0x3, 0x79, 0x0, 0x3}, {0x6fe00000, 0x5, 0x10001, 0x8, 0x1c00, 0xdf}, {0xfffffffc, 0x3, 0x81, 0x80, 0x3, 0xa1f3}, {0x7, 0x80000000, 0xffffff01, 0xdc3, 0x80000001, 0xdb2}, {0x7, 0xf, 0xd, 0x9, 0xd, 0x8}, {0x2, 0x7, 0x6, 0x8, 0xff}, {0xfffffdca, 0x9, 0x7, 0x9bf, 0x0, 0x7fffffff}, {0x6, 0x0, 0x1, 0x6, 0xfffffffc, 0x5}, {0x2, 0x3, 0x7, 0x5ad, 0xfff}, {0xfffffffa, 0x1, 0x8, 0x6b, 0xd, 0x200}, {0x5, 0x5, 0x1, 0x4, 0x1, 0x1}, {0x6, 0x1, 0x8, 0x7, 0x0, 0x7}, {0x1, 0x0, 0x40, 0x7, 0x101, 0x3}, {0x2, 0x40, 0x7, 0xfe7f930c, 0x5, 0x8}, {0x3, 0x1, 0x9ce5, 0x3, 0x803, 0xfff}, {0x7f, 0x0, 0x80000001, 0x3, 0x800, 0x4}, {0x1, 0x2722, 0x3, 0x8, 0x2, 0x9}, {0x0, 0xa5, 0x9, 0x3, 0x0, 0x8}, {0x7fffffff, 0x5, 0x8001, 0x8, 0x100, 0x4e7}, {0x0, 0x7, 0x7, 0x5, 0x7, 0x2}, {0x80000000, 0x1, 0x40, 0x3, 0x1, 0x6}], [{0x2}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {}, {}, {0x2, 0x1}, {0x1}, {}, {0x4}, {0x4}, {0x3, 0x1}, {0x3}, {0x4}, {0x4}, {0x5, 0x1}, {0x4}, {0x2}, {0x3}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x7}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x5}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x3}, {0x3}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x6}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x3a78}}, 0x0) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 2m38.524307833s ago: executing program 0 (id=247): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000340)={&(0x7f0000000140)=[{0x76de, 0x4000, 0x0, 0x0}, {0x0, 0xb000, 0x0, 0x0}], 0x2}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000540)={0xa, @raw_data="5d542f5cee57bb0367bcff367003bb8e250b036fd9ee1f5a22a32063d91764760c8bdf78bfd83e1f140362244ed1c33eb57be72914ed1b8454ad18ebe81d8518ad2e6617b538d4487bc73b8a8114991d93f3e3d9a1943a96af622ef0f832539da0681cc5fb6ee4c4511d7e2e239bc74f40b3a3ce3dde861d5a57acd868b1d553211589052db455de878a6da378f7e9f01137262ac3a7f30f1257f11bba829c80e58d42bd5f0b0fbd112a2b3550f6cb54a53407b15140c2f1eb6cfc0a5ec909d41e97c9a29a7e99d5"}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) sendmsg$nl_xfrm(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc000000000000000000000000000000fe88000000000000000000000000000100000000000000000000002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b'], 0xd8}, 0x1, 0x0, 0x0, 0x24040001}, 0x0) r6 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)=0x0) timer_settime(r9, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x5, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[], 0x50}}, 0x4000801) socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r11, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "ec9fe44d4dbe56a60274fcffffffffffffff14e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ede1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e006204df635e731a5bfcf142f4529517454618de595cd179b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd400cfdfe756bc00d08e36655c00"}) socket$netlink(0x10, 0x3, 0x0) 2m22.983308923s ago: executing program 32 (id=247): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000340)={&(0x7f0000000140)=[{0x76de, 0x4000, 0x0, 0x0}, {0x0, 0xb000, 0x0, 0x0}], 0x2}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000540)={0xa, @raw_data="5d542f5cee57bb0367bcff367003bb8e250b036fd9ee1f5a22a32063d91764760c8bdf78bfd83e1f140362244ed1c33eb57be72914ed1b8454ad18ebe81d8518ad2e6617b538d4487bc73b8a8114991d93f3e3d9a1943a96af622ef0f832539da0681cc5fb6ee4c4511d7e2e239bc74f40b3a3ce3dde861d5a57acd868b1d553211589052db455de878a6da378f7e9f01137262ac3a7f30f1257f11bba829c80e58d42bd5f0b0fbd112a2b3550f6cb54a53407b15140c2f1eb6cfc0a5ec909d41e97c9a29a7e99d5"}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) sendmsg$nl_xfrm(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc000000000000000000000000000000fe88000000000000000000000000000100000000000000000000002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b'], 0xd8}, 0x1, 0x0, 0x0, 0x24040001}, 0x0) r6 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)=0x0) timer_settime(r9, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x5, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[], 0x50}}, 0x4000801) socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r11, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "ec9fe44d4dbe56a60274fcffffffffffffff14e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ede1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e006204df635e731a5bfcf142f4529517454618de595cd179b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd400cfdfe756bc00d08e36655c00"}) socket$netlink(0x10, 0x3, 0x0) 10.014881315s ago: executing program 1 (id=876): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x202, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x10010) (fail_nth: 37) 9.975087549s ago: executing program 4 (id=877): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x7) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000000)={0x0, r2}) close_range(r1, r1, 0x0) timerfd_create(0x8, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x8000, 0x700, 0x6, 0x2, {{0xe, 0x4, 0x0, 0x3e, 0x38, 0x68, 0x0, 0x88, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @remote, {[@timestamp={0x44, 0x8, 0x85, 0x0, 0x5, [0x7ff]}, @timestamp={0x44, 0x18, 0xca, 0x0, 0xd, [0x1e, 0x3, 0x4c, 0x8, 0x1]}, @ra={0x94, 0x4}]}}}}}) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, &(0x7f0000000700)={{0x4, 0x8}, {0x4, 0x9}, 0x9, 0x5}) getuid() openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x800, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x1000007, 0x6361, 0x5, 0xffffffed, 0x26}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x170b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@ipv6_newroute={0x5c, 0x18, 0x800, 0x70bd26, 0x25dfdbff, {0xa, 0x0, 0x80, 0x2, 0xfd, 0x2, 0xfd, 0x4, 0x1a00}, [@RTA_IIF={0x8, 0x3, r3}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_PREF={0x5, 0x14, 0x9}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x10, 0xb, r7}}, @RTA_MULTIPATH={0xc, 0x9, {0x2, 0x1, 0x2, r3}}, @RTA_PRIORITY={0x8, 0x6, 0x4}, @RTA_MARK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x201e631437d3c7eb}, 0x12) 9.093749653s ago: executing program 1 (id=878): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x10002, 0x0) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @local}, 0x3, 0x0, 0x4, 0x1}}, 0x26) (async) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x6, 0x0, 0x4}) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000001c0)={0x60, 0x1, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x4, &(0x7f0000000100)=[{0x3, 0x2, 0x90fb}, {0x6, 0x1, 0x7}, {0x9, 0x1ff, 0x8000}, {0x9, 0x2, 0x1}, {0x36, 0xc0a, 0x5}, {0xffffffffffffffff, 0x200000000, 0x10000}], 0x6, 0x2, 0x2, 0x3d, 0x25, 0xe}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7ff}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000002c0)={r3}, 0x8) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000300)={r3, 0x6}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000380)={0x200, 0x20a, 0x6, 0x619, r5}, 0x10) (async) bpf$LINK_DETACH(0x22, &(0x7f00000003c0)=r0, 0x4) (async) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb0, 0x12, 0x8, 0x70bd27, 0x25dfdbfc, {0x2a, 0x6, 0x30, 0x10, {0x4e21, 0x4e22, [0xff, 0x8, 0x7], [0x7, 0x4, 0xffffffc0, 0xfb], 0x0, [0xffffffff, 0xe24]}, 0x2, 0x4626}, [@INET_DIAG_REQ_BYTECODE={0x64, 0x1, "e0dfcfc2399e7ccc70da4b6c4452dc5770183c20cba32457247f0604241d3365fcdb8c7c20af9a448167a7530b566d634698ea2414c85dc2b0c2caa2ad61dc946c61c78cd7dff9aff9d5d01963e359a40e2fdd681e0197a527d131997272bfc2"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x44004) (async) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000580)={@loopback, @rand_addr=0x64010101, 0x9, 0xf}}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r6, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000740)={0x30, 0x5, 0x0, {0x0, 0x1, 0x401, 0xd0a6}}, 0x30) (async) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000840)={&(0x7f0000000780), &(0x7f00000007c0)=""/117, 0x75}) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x4c, r7, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x2, 0x8}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xff}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x3}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000000}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000a80)={'batadv_slave_0\x00', 0x0}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @initdev, @loopback}, &(0x7f0000000b00)=0xc) (async) getsockname$packet(r1, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000b80)=0x14) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000c80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x80, r6, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x24}, 0x40840) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) sendmsg$nl_route_sched(r1, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)=@getqdisc={0x30, 0x26, 0x300, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xffe0, 0xd}, {0x10, 0xfff1}, {0x5, 0x15}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0xc040}, 0x4000) (async) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000dc0)=""/126) setsockopt$sock_int(r4, 0x1, 0x2d, &(0x7f0000000e40)=0xa, 0x4) (async) socket(0x1f, 0x3, 0xd54) 8.967644388s ago: executing program 1 (id=879): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x52) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000000c0)=""/2, 0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f00000001c0)={0x4}, 0x4) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x2}, 0x8) sendto$inet6(r3, &(0x7f0000000180)='8', 0x1, 0x2004c054, &(0x7f0000000380)={0xa, 0x4e23, 0x8000000, @loopback, 0xffffffff}, 0x1c) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000000)=[{{&(0x7f0000000500)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f0000001780)=""/170, 0xaa}], 0x2, &(0x7f0000000780)=""/4096, 0x1000}, 0x6}], 0x1, 0x22, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3a) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_mr_vif\x00') lseek(r5, 0x92, 0x1) write$tun(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="4d870084006400008e2190780a010101ffffffff0703de01442450f30a01010000000007ac1414bb800000016401010100000200ffffffff000000078606000000008630000000020004a037000205108b791a526a4501df3fce215e97c4070201076c5846f5ff07048d550107556c28f58f00004e244e2004a19078c0aa3ebf9274b0f437f4b99167a9f61d86964f17921757f268b4fc5def8b815f4415aac6ae460ec4cbc1fd63bc6c24f249b3bc2eec679649831cc1ef0b017345d6ecdd953eda19"], 0x84) r6 = syz_usb_connect(0x1, 0x24, &(0x7f00000001c0)=ANY=[@ANYRES8=r4], 0x0) syz_usb_control_io$lan78xx(r6, 0x0, &(0x7f0000000440)={0x49, &(0x7f00000004c0)=ANY=[@ANYRES16=r3, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[], 0xb8}}, 0x4) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f00000003c0)={0x0, 0x0, {0xffff, 0x204, 0x2024, 0x1, 0x5, 0x3, 0x0, 0x4}}) socket$nl_xfrm(0x10, 0x3, 0x6) 8.727711533s ago: executing program 4 (id=880): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x107734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2d, 0x0, 0x0, 0x6}]}, 0xfffffffffffffeea) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0xfac7, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0xf, &(0x7f0000000380)) io_setup(0x7, &(0x7f0000000780)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x272, 0xb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe, 0xfffffffc, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb10, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x3, 0x0, 0x10, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80003, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x800004, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x31, 0x0, 0x0, 0xfffd, 0x0, 0x6}, {0xff, 0x2, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 7.922375493s ago: executing program 5 (id=882): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0x6e66, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x6}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r4, 0x0, 0x0, 0x8}]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r1, 0x2afd, 0x308b, 0xc, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000280)='3', 0x1}], 0x1) 7.837707435s ago: executing program 5 (id=884): pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x3f, 0x0, &(0x7f0000000340)="e30080670000ec67838717bd86dde148f0630962bb87dd44fe42904bcee14db4241544716b9ea42231ed3373a3e29953e3bb017d9c1fd05dacf5bb80b4b7ee", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xc}, 0x50) r4 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000040)=0x85) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r5 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x1, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$kcm(0x29, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f00000d9000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0xfffffffffffffe70) close_range(r0, 0xffffffffffffffff, 0x0) 7.585844773s ago: executing program 2 (id=885): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) openat$vsock(0xffffffffffffff9c, 0x0, 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) fsopen(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(0x0, 0x0, 0x9) setitimer(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xb4, 0x516e}, &(0x7f0000000180)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2c}]}, 0x24}}, 0x8800) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="01980000031300001c0012800900010069706970000083000c00028008000300e00000015c413394c2cd647ccea14a0fa72abaaded37e53e987e722424214f79ed6432be46dbbcbf8bc3039a06c208aa6c7b8658e45d6d0c"], 0x3c}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 6.937172804s ago: executing program 5 (id=886): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x10) r1 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/fs/binfmt_misc/syz2\x00', 0x2, 0x0) readv(r1, &(0x7f0000000540)=[{&(0x7f0000000340)=""/247, 0xf7}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @time={0x0, 0x80000001}, {}, {}, @raw32}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000140)={0x1e6, @tick=0x9}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x38, r7, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x1c, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x100000a, 0x2010, r5, 0x8000000) syz_io_uring_submit(r10, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x484}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/udplite\x00') ioctl$VHOST_SET_LOG_FD(r11, 0x4004af07, 0x0) prctl$PR_SET_NAME(0x4, 0x0) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f00000006c0)={{r5}, "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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, 0x0) 6.534952951s ago: executing program 3 (id=887): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x20, 0xffffffff}, 0x0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(0x0, 0x3) ftruncate(r1, 0xffff) close(0x3) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000001c0)={r1, 0x1, 0x0, 0x8000}) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0xbfdfffbc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r2, 0x32d7, 0x0, 0x46, 0x0, 0x0) 5.835825859s ago: executing program 1 (id=888): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0xe472, 0x20, 0x0, 0x25a}, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r3, 0x0, &(0x7f0000002280)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) unshare(0x22020600) r4 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r4, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$revoke(0x3, r5) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) r6 = syz_io_uring_setup(0x4aa, &(0x7f0000000380)={0x0, 0xfffffffa, 0x10100, 0x10000000, 0x138}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8126}}) io_uring_enter(r6, 0x38c5, 0x2000000, 0x0, 0x0, 0x0) keyctl$join(0x1, &(0x7f00000004c0)={'syz', 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000200)={0xea, 0x2, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES64=r0], 0x50) unshare(0x62040200) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 5.764983467s ago: executing program 3 (id=889): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x202, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x10010) (fail_nth: 38) 5.755266561s ago: executing program 5 (id=890): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x40401c0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='+io+net'], 0x9) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x202, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x10010) 5.146052949s ago: executing program 4 (id=891): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "00001bbbad5e00", "a4a29fc056ff9a20f4a86004353069db721b0f7962cba47da6a163ed9db4e6f1", "235883a9", "db03265fc16fbbe1"}, 0x38) write$binfmt_elf64(r1, &(0x7f0000000740)=ANY=[], 0x4a2) r2 = syz_io_uring_setup(0x64a, &(0x7f0000000400)={0x0, 0x69f0, 0x0, 0x1, 0x284, 0x0, r1}, &(0x7f0000000040)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0xf23, 0x0, 0xc, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x8000) r7 = syz_io_uring_setup(0x1106, &(0x7f0000000140)={0x0, 0x5881, 0x0, 0x4, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x6) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000140)={0x53, 0xfffffffffffffffc, 0x5, 0x20, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0)="5a274c199f", 0x0, 0x1000000c, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r5, 0x0, 0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) 5.022399029s ago: executing program 2 (id=892): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.current\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000040), 0xe09) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x40000) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000001200", "f4bd00000080190000000000000800", [0x0, 0x2000000000001]}}) 4.822851153s ago: executing program 3 (id=893): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xdaec4000) (async) r0 = socket(0x10, 0x3, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') write$binfmt_elf32(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x8}, {0xfff2}, {0xfff1, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_vlan={0x30, 0x9, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x70}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r6, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=""/161, 0xa1, 0x0, &(0x7f0000000240)=""/147, 0x93}}, 0x10) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, 0x0, 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, r8, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 4.729968862s ago: executing program 5 (id=894): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) unshare(0x66000080) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x4004510d, &(0x7f0000000000)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0xe08c2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x8080) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f00000000c0)=0x3) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001480), 0x121142, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r4) request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, r4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = syz_io_uring_setup(0x690e, &(0x7f0000000440)={0x0, 0xe2b6, 0x10100, 0x2001}, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1b67, &(0x7f00000003c0)={0x0, 0x3b2a}, &(0x7f0000000240)=0x0, &(0x7f0000000180)) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0a00010000b40100290d128009000100626f6e64000000000c0002800500210004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) syz_io_uring_submit(r8, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x8}) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000080)={{r2}, 0xffffffffffffbffd, 0x22c, 0x8}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r10) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) rmdir(&(0x7f0000000040)='./file0\x00') io_uring_enter(r6, 0x184c, 0x0, 0x0, 0x0, 0x0) 4.509624076s ago: executing program 2 (id=895): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000040)={0x9, 0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000280)={0x0, 0x1, 0xe, 0xb, 0x1d7, &(0x7f0000000580)="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"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xff2e) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0xa04d, 0x3, 0x1, 0x8, 0x13, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"}) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) (async) eventfd2(0x1, 0x1) (async) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) (async) syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) (async) ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000040)={0x9, 0x0}) (async) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) (async) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000280)={0x0, 0x1, 0xe, 0xb, 0x1d7, &(0x7f0000000580)="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"}) (async) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xff2e) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0xa04d, 0x3, 0x1, 0x8, 0x13, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"}) (async) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) (async) 4.050006421s ago: executing program 2 (id=896): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @empty, 0x2}, 0x1c) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003ee9f09022400013b07800609048d06087d64f88109050d03100001fb0309050c034000a009ffe822136da5b42db94c493d47e400"/67], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) 3.982609489s ago: executing program 1 (id=897): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000a00)={0x40, 0x15, 0x2, "0d0f"}, 0x0, 0x0, 0x0, 0x0}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000140)="d8000000190081054e81f782db4cb9040a1d080006007c02e8fe55a10a0015000900142603600e1208000f4f1b000401a8001600200005400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000000c0)={0x1c, &(0x7f0000000140)={0x0, 0x0, 0x2, '\x00\v'}, 0x0, 0x0}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) semop(0x0, &(0x7f00000000c0)=[{0x4, 0x0, 0x1800}, {0x2}], 0x2) semop(0x0, &(0x7f0000000200)=[{0x0, 0xffff, 0x1000}], 0x1) semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0xffac}], 0x1, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x1]) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE(r2, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000100)=""/18, 0x12, 0x5, 0xb8, 0x8, 0x9, 0xb3c}}, 0x120) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000008c0)={0x2c, &(0x7f0000000680)={0x20, 0x18, 0x1, '\"'}, 0x0, 0x0, 0x0, 0x0}) 3.557302566s ago: executing program 3 (id=898): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x0, 0x8, 0x5, 0x5, 0x3, 0xfffffffffffffffd, 0xffff, 0xfa11, 0x9}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc0000", @ANYRES32=r2, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x2000c055}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000002c0), 0x4) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/schedstat\x00', 0x0, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1000000000000286, 0xf2, 0x207fff) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002c80)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETA(r7, 0x5405, &(0x7f0000000000)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r9, 0x0, 0x0, 0x4000001) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c0000000406010100000000000000000000000005000100070000001c7d7ea68548faf18b31f64370bbd04bf3adf3", @ANYRES16, @ANYRES16, @ANYBLOB="d979db0536cfa63979bb9088c94ce00b52ca43f290594380f9600f5e0452", @ANYRESDEC=r0, @ANYRES8=r7], 0x1c}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) madvise(&(0x7f0000bdb000/0x4000)=nil, 0x4000, 0x72) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000f8580)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f00000f8780)={0x9, [{}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {r10}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {r10}, {}, {}, {}, {0x0, r12}], 0x6, "3c141ab4715c30"}) 3.472476878s ago: executing program 5 (id=899): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r2, 0x0, 0x97, 0x8000000}) setrlimit(0x8, &(0x7f0000000380)={0x404}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r2, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r2}) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x7, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x36, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc, 0x2, 0xe}}}}}]}}]}}, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009"], 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r4, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085000000854eb1"], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_pgetevents(0x0, 0x0, 0xffffffffffffff76, 0x0, 0x0, 0xfffffffffffffffd) syz_usb_control_io(r3, 0x0, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x0, 0x0) read$char_usb(r8, &(0x7f0000000000)=""/74, 0x4a) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r9, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00', 0x5a, r9}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES8, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRESHEX=r10], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 2.275237567s ago: executing program 4 (id=900): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001a, '\x00', 0x0, @fallback=0x2}, 0x94) 1.917308328s ago: executing program 4 (id=901): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000019c0)={'#! ', './file1/../file0', [{}, {0x20, '/dev/nbd#\x00'}]}, 0x20) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000000000000000000000ffefffffff", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) 1.726538965s ago: executing program 1 (id=902): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) read$FUSE(r0, 0x0, 0x5a) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000000c0)=[0x2a, 0xf2]) 1.632769168s ago: executing program 3 (id=903): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x202, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x10010) (fail_nth: 39) 1.245706179s ago: executing program 4 (id=904): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r3, 0x0, 0x61, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x28) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) (async) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000140)={0x5, 0x1, 0x80, "3bd9d3fe337649c318d3b5710fe89a0d9ec9b50e98bc2e00", 0x30395056}) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)={0x40, 0x0, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)={0x40, 0x0, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.189209787s ago: executing program 3 (id=905): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfffffffffffffe3e) prctl$PR_SCHED_CORE(0x3e, 0x5, 0x0, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000240)=[0x0, 0x0]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x1) writev(0xffffffffffffffff, &(0x7f00000005c0), 0x10000000000000ab) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000240)={0x2, 0x4e21, @multicast1}, 0x10) close(r3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_emit_ethernet(0x2c, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008902450c001e0064000004029078e0000001e0cb5a180fff1ffee6"], 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) 898.4335ms ago: executing program 2 (id=906): socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x20, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653930303030303030303030303030303030303130303030302c75736572dabfb612", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x0000000000001000,allow_other,default_permissions,default_permissions,allow_other,blksize=0x0000000000000800,blksize=0x0000000000000400,default_permissions,nomand,smackfshat=)+:(,smackfsroot=,dont_measure,subj_type='], 0x1, 0x0, &(0x7f0000000200)="2745a7c0a7261c2cf2c7deea445e273af225") fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000080)='/\x00', &(0x7f00000000c0)='./file0\x00', r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x400201, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000240), 0x4) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r2, 0x7b2, &(0x7f0000000580)={&(0x7f00000012c0)=[0x4, 0x0, 0x5, 0x4, 0x0, 0x907, 0x10, 0x8000, 0x6, 0x1, 0x4, 0xfffff315, 0x5, 0x3502, 0x9, 0xfffffff2, 0x6, 0x3, 0x4, 0x5, 0x6, 0x4, 0x101, 0x2, 0x663, 0x5, 0x7fffffff, 0x5, 0x4, 0x3, 0xff, 0xdd0, 0x965, 0x1, 0x1, 0x100, 0x401, 0xfff, 0xffffffff, 0x1ff, 0x3ff, 0x0, 0xb4, 0x200, 0x1, 0x534c, 0x10000, 0x4, 0x1, 0x7ff, 0x0, 0x5, 0x8, 0x9, 0x800, 0x8, 0xffffff3e, 0x1ff, 0x40, 0x1000, 0xa5, 0x18, 0x800, 0x400, 0x2, 0x3, 0x9, 0x8, 0x1, 0x0, 0x800, 0xd091, 0x8, 0xfffffffa, 0x5, 0x5, 0x3, 0x40000000, 0x80000001, 0x1ff, 0x2a93, 0x0, 0x7, 0x6, 0x6fcb, 0x3, 0x3, 0xdae, 0x4, 0x5, 0x81, 0x6, 0x4, 0x200, 0x165, 0x8, 0x7f, 0x7f, 0x6, 0x9, 0x0, 0x4, 0x0, 0x3e, 0x5, 0x8, 0x4, 0x8, 0x85bc, 0xa, 0x3, 0x7, 0x4, 0x100, 0x8, 0x10001, 0x0, 0x1, 0x0, 0x40, 0xcf7, 0x4, 0x3, 0x10, 0x8, 0x8, 0x0, 0x6, 0x6, 0x10, 0xffffffff, 0xdd59, 0x1, 0xbe, 0x4000, 0xc, 0xfffff801, 0x6, 0x1, 0x3, 0xff, 0x0, 0x1, 0x2, 0x3, 0x1000, 0xffffffff, 0x6, 0x457, 0x65ec, 0x8, 0x25, 0x5, 0x0, 0x9, 0xffffff81, 0x5, 0x8, 0xffffffff, 0x8, 0x8525, 0x3, 0x2, 0x6, 0x8, 0x100, 0x7ff, 0x200, 0x5, 0x4, 0x43ed, 0x7fffffff, 0x1, 0xf327, 0x6, 0x8001, 0x330e, 0x3, 0x7fff, 0xa05, 0xc, 0xc, 0x1, 0x1, 0x99a, 0x3, 0x8c58, 0x5, 0xc, 0xc, 0x7, 0x3, 0x2, 0xff, 0xff, 0x4, 0x8fe, 0x401, 0x2, 0xada, 0x5, 0x3, 0x1, 0x0, 0x1, 0x7b7, 0xfffffff7, 0x1, 0x7, 0xa, 0x8, 0x800, 0x8000, 0x47e, 0x1, 0xffffffff, 0x8, 0x9c01, 0x1, 0x2, 0xa77, 0xfffffffe, 0x100, 0x0, 0x9, 0x9, 0x8, 0x8, 0x4, 0x9, 0x8, 0x7, 0x4, 0x5, 0x9, 0x2, 0x1b7c17bc, 0xfd, 0x0, 0x8, 0x4, 0x10, 0x1, 0x6, 0x7fff, 0x1, 0x7f, 0x5e, 0x16, 0xe26, 0x9, 0x7, 0x40, 0x7, 0x9427, 0x4, 0xa, 0x400, 0x9, 0x5ad, 0xc212, 0xfffffbff, 0x2, 0x3, 0xfffffff7, 0x7ff, 0x2e1, 0x0, 0x1, 0x8, 0x7, 0x442, 0x5a, 0x7, 0x1, 0x2, 0x4, 0x10, 0x7, 0x8001, 0x9, 0xec, 0xffffff7f, 0x80000, 0x8, 0xe2, 0xed0, 0xac24, 0x9, 0x74, 0x3, 0x4, 0x2, 0x2, 0x0, 0x14, 0x3b, 0x1, 0x7fff, 0x8, 0x5, 0x2, 0x8e, 0xd, 0x479, 0x9, 0x88a2, 0xbb7, 0x4, 0xaf6, 0xc52, 0x8, 0x5, 0xe64a, 0x7, 0x10000, 0x1, 0xe6c, 0x0, 0x4, 0x10000, 0x6, 0xd, 0x200, 0xdfd6, 0x7, 0x10, 0xd0e2, 0x3, 0x10, 0x4, 0xc, 0x5, 0x2, 0x5, 0x4, 0x4, 0x404000, 0x3, 0xb4, 0x54, 0x1, 0x800, 0xf4, 0x9, 0x713, 0x800, 0xffffffff, 0xe, 0x3, 0x3, 0xfffffff5, 0x2, 0x7, 0x1, 0x6, 0x471a8415, 0x6, 0x7, 0x7, 0x1ff, 0x800, 0x100, 0xffff, 0xa, 0xfa4e, 0x5, 0x29aa9ce8, 0x9, 0x5, 0x5, 0x8, 0xfffff8b0, 0x0, 0x0, 0x7ff, 0x9, 0x0, 0x7ff, 0xc1, 0xc, 0x3, 0x4, 0x3, 0x1, 0x2, 0x8, 0xff3, 0x7, 0x1, 0x5, 0x2, 0x6f8c, 0x9, 0x4, 0x8, 0x4, 0x400, 0x7ff, 0x5, 0x8, 0xfff, 0xc, 0x4d9, 0x1ff, 0x9c20, 0x8000, 0x0, 0x6, 0x1, 0x1, 0x0, 0x4, 0x81, 0x4, 0x6, 0x9, 0x7, 0xfffffffb, 0xf448, 0x4, 0x2d4, 0x8000, 0x0, 0x8, 0x7, 0xfff, 0x8, 0x4, 0x7, 0x3ff, 0x3, 0x5, 0x2, 0xd6bd, 0xf, 0xa, 0x4, 0x1, 0x3, 0x4, 0x8000, 0x6, 0x9bb7, 0x1, 0x9174, 0x400, 0x7, 0x10001, 0x6, 0xe, 0x40, 0x9, 0x6, 0x4, 0x80000000, 0x7, 0x82, 0x8, 0x9, 0x6, 0xff, 0x0, 0x1, 0x7fffffff, 0x222, 0xfffffffc, 0x48f, 0x0, 0x0, 0xf5c, 0x5, 0x45aa9532, 0x2, 0x9, 0x4, 0x9ec9, 0x0, 0x959d, 0x1, 0x6, 0x78, 0x40, 0x6, 0x2, 0x9, 0x9, 0x5, 0x64c, 0xa55a, 0x9, 0x6, 0x7, 0x8, 0x6, 0x6, 0x2, 0x2, 0x1, 0x2000000, 0x6, 0x2, 0x5, 0x9384, 0x2, 0x4, 0x69, 0x75d, 0x7fffffff, 0x2, 0x0, 0xd8, 0x1, 0x80000000, 0xda, 0x101, 0x7f, 0x8, 0x1000, 0x2b6, 0x7, 0x200, 0x6, 0x3, 0x1, 0x8001, 0x6, 0xffffffff, 0x6, 0x8, 0x4, 0x100, 0x4, 0x0, 0x0, 0xc6b2, 0x3, 0x1, 0x4, 0x9, 0x7, 0x9, 0x5, 0x40, 0x6, 0x7c, 0xff, 0x7f, 0x3, 0x4, 0x6e, 0x0, 0x1, 0x3, 0x4, 0x1ff, 0xffff, 0x6b09, 0x9, 0x9, 0x308ce718, 0x7, 0x0, 0x6, 0x4a, 0x0, 0xc, 0x5, 0x6, 0x800, 0xffffff40, 0xd, 0x1000, 0xb18, 0x8, 0x2d00, 0x6, 0x2, 0x8, 0xfffffffe, 0xfff, 0x4, 0x5, 0xfff, 0x100, 0x1, 0x6, 0x80, 0x5, 0x6, 0x1, 0x8, 0x80000001, 0x9, 0xe2, 0x3, 0x4, 0xfff, 0x2, 0x8, 0x8, 0xffffffd2, 0x8, 0x1, 0x2, 0x6, 0x3, 0xa, 0x3, 0x3, 0x0, 0xe2, 0x1ed, 0x3fd3, 0x3, 0x8000, 0xa6, 0x80000001, 0x64ab, 0xfffffffd, 0x5, 0x401, 0x6, 0x7, 0x9, 0xe, 0x7cb, 0x8, 0x2, 0x2, 0x3, 0x9, 0x7, 0x3, 0x76a, 0x300, 0x800, 0x7, 0x100, 0xfffffffc, 0xfc9f, 0x1, 0x8, 0x3, 0x1, 0x36, 0xffffac70, 0x4, 0x81, 0x80000001, 0x89d, 0xdc, 0x5e64, 0x5b, 0x7, 0x7, 0x1, 0x6, 0xe46, 0x7ff, 0x480, 0x1, 0x5, 0x2, 0x200, 0x8001, 0x3, 0x3d2, 0x800, 0x8, 0x2, 0x8000, 0xffff, 0x3, 0x6c, 0x80, 0x5, 0xfffe0, 0x2, 0x8, 0x5, 0xe, 0x2, 0xa24a, 0x7, 0x3, 0x8001, 0x2, 0x7f, 0x2, 0x9, 0x3, 0x3, 0xab5a, 0x4, 0x3, 0x0, 0x7ff, 0x8, 0x5, 0x80000001, 0xffff, 0x7, 0x7, 0x59, 0x7, 0xf, 0x80000000, 0xfffffffd, 0x4, 0xbf1, 0x7, 0x3, 0xfffffffd, 0x3ff, 0x3, 0x0, 0x7, 0x9d41, 0x6, 0x400, 0x6, 0x0, 0xb, 0x7, 0x7ff, 0x7, 0xa09, 0x2, 0x1, 0x8, 0x7fffffff, 0x2bcf, 0x101, 0x4d2, 0xc, 0x6, 0x7, 0x3, 0xfffffff5, 0x4, 0xb2, 0x81, 0x5, 0x0, 0x4, 0x8000, 0x80000000, 0xad8, 0x12dd, 0x81, 0x2, 0xee, 0xff, 0x1, 0x3, 0x3, 0x7, 0x9cd1, 0x0, 0x9, 0x3, 0x6, 0x800, 0x7, 0x6, 0x7, 0xf, 0x7fff, 0xf, 0x1, 0x9, 0x4, 0x3, 0x7ff, 0x0, 0x6, 0x2, 0x4, 0x7, 0x6, 0x4, 0x6, 0xffff2191, 0x9, 0xf3a, 0x55, 0x82c, 0x3, 0x2, 0x9, 0xc1c, 0x3, 0x6, 0x100, 0x7, 0x5, 0x7, 0x1, 0x1, 0x3, 0x7f, 0x10, 0x6, 0xf, 0x4, 0x3, 0x0, 0x3, 0x9bc, 0xfd, 0x0, 0x0, 0x1, 0xfffffff9, 0x0, 0xc963, 0x7, 0x76c00000, 0x7, 0x1, 0xe2, 0x81, 0x4, 0x401, 0x4, 0x2, 0x2d3, 0x6, 0x2, 0xb75b, 0x4a, 0x1, 0x6, 0xb60c, 0xf5, 0x1, 0xf9f, 0x7, 0xfffffff7, 0xba, 0x4, 0x1, 0x8, 0xb14e, 0xba, 0x7ff, 0x5, 0x6, 0xc, 0x246, 0x2, 0x3, 0x9, 0xd9bd, 0xffffff02, 0x4, 0x3, 0x7, 0xffff6e3d, 0x6, 0x0, 0xe00, 0x0, 0x4, 0x9, 0xde, 0x1000, 0x0, 0x9, 0x9, 0x5, 0x4, 0xa0000000, 0x6, 0x6, 0x9, 0x5, 0x9, 0x9, 0x1, 0x1965f81f, 0xa5, 0x6, 0x2, 0x7fff, 0xffffffff, 0x675, 0xe, 0x5, 0xfffff368, 0x7, 0x4, 0x401, 0x9, 0x80000001, 0x3, 0x81, 0x9, 0x1c, 0x1ff, 0x5, 0x0, 0x8b2d, 0x2, 0x4, 0x7, 0x90, 0x1, 0xc, 0x2, 0x8, 0x0, 0x5, 0xc8f, 0x5, 0x2, 0x1f, 0x2, 0xd, 0x32988, 0x530, 0xd, 0xfffffff9, 0x1, 0x6, 0xe, 0x200, 0x4, 0xb64, 0xfffffffb, 0x0, 0x1, 0x5, 0x6, 0x5b, 0x80000000, 0x6, 0x8000, 0x800, 0x7, 0xfffffffc, 0x7ff, 0x7fffffff, 0x587205e4, 0x7fffffff, 0x3, 0x9, 0x2, 0x4, 0xd, 0xb683, 0x8, 0x8, 0x6, 0x8, 0x1ff, 0xfffff801, 0xab8, 0x8, 0x10000, 0x9, 0x7fffffff, 0x86df, 0xffff, 0x2, 0xc, 0x2, 0xf, 0x6759, 0x3, 0x10001, 0x732da955, 0xeffa, 0x6, 0xfff, 0x8, 0x3, 0x4, 0x6, 0x7, 0x8, 0x81, 0x2, 0x4, 0x2, 0xfffffff8, 0x80, 0x2, 0x2236, 0x0, 0x2, 0x4, 0xf, 0x7fff, 0xffffffff, 0xffffff7f, 0x777, 0xff, 0x0, 0x101, 0x71a, 0x9, 0xe12, 0x4, 0x1, 0x2, 0x3, 0x44c, 0x8000, 0x0, 0x2, 0x8, 0x30, 0x8, 0x3ff, 0x200, 0x9, 0x9, 0x4, 0x1, 0xb, 0x2, 0x605], 0x6, 0x400, 0x4}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000480)={0x1, 0x0, [{0x486, 0x0, 0x2}]}) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[&(0x7f00000003c0)='\x00', &(0x7f0000000040)='\x00']}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000a, 0x204031, 0xffffffffffffffff, 0xbdd8000) r5 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @loopback, 0x100009}, {0xa, 0x4e22, 0xfffffffc, @mcast1}, r6}}, 0x48) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0xffffffff, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x44}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0xfd}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 0s ago: executing program 2 (id=907): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) (async) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000480)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x40) (async) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000180)) r3 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f00000002c0)={'broute\x00', 0x0, 0x3, 0x0, [0x7fff, 0x56d0, 0x0, 0x8, 0xdec, 0x1], 0x0, 0x0, 0x0}, &(0x7f0000000340)=0xa8) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) (async) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v3={0x3000000, [{0x8}, {0x0, 0x4}]}, 0x18, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) (async) clock_gettime(0x0, &(0x7f0000000080)) syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) (async) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') ioctl$BTRFS_IOC_RM_DEV(r5, 0x8008b705, 0x0) kernel console output (not intermixed with test programs): r?? [ 233.862806][ T5915] cdc_phonet 6-1:0.0: skipping garbage [ 233.868410][ T5915] cdc_phonet 6-1:0.0: invalid descriptor buffer length [ 233.877362][ T5915] cdc_phonet 6-1:0.0: probe with driver cdc_phonet failed with error -22 [ 233.885912][ T5908] m920x_read = error: -19 [ 233.890555][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 233.954315][ T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 234.054327][ T5908] m920x_read = error: -19 [ 234.058759][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 234.071331][ T5908] usb 6-1: USB disconnect, device number 19 [ 234.094427][ T9] usb 2-1: device descriptor read/64, error -71 [ 234.204636][ T9] usb usb2-port1: attempt power cycle [ 234.224329][ T799] m920x_read = error: -19 [ 234.228677][ T799] dvb-usb: error -19 while querying for an remote control event. [ 234.394323][ T5908] m920x_read = error: -19 [ 234.398696][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 234.554255][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 234.564675][ T5908] m920x_read = error: -19 [ 234.569221][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 234.577704][ T9] usb 2-1: device descriptor read/8, error -71 [ 234.734845][ T5908] m920x_read = error: -19 [ 234.741507][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 234.824262][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 234.844857][ T9] usb 2-1: device descriptor read/8, error -71 [ 234.904955][ T5908] m920x_read = error: -19 [ 234.909317][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 234.954514][ T9] usb usb2-port1: unable to enumerate USB device [ 235.074311][ T9] m920x_read = error: -19 [ 235.078704][ T9] dvb-usb: error -19 while querying for an remote control event. [ 235.245485][ T5908] m920x_read = error: -19 [ 235.249864][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 235.417276][ T5908] m920x_read = error: -19 [ 235.421677][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 235.586072][ T8363] syzkaller0: entered promiscuous mode [ 235.591563][ T8363] syzkaller0: entered allmulticast mode [ 235.598715][ T9] m920x_read = error: -19 [ 235.606868][ T8363] netlink: 48 bytes leftover after parsing attributes in process `syz.4.664'. [ 235.651505][ T9] dvb-usb: error -19 while querying for an remote control event. [ 235.834395][ T5901] m920x_read = error: -19 [ 235.839568][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 235.894398][ T9] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 235.914316][ T5908] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 236.004347][ T5901] m920x_read = error: -19 [ 236.008870][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 236.044256][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 236.051206][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.062658][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 236.071820][ T5908] usb 6-1: Using ep0 maxpacket: 8 [ 236.077247][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.086996][ T5908] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 236.097633][ T5908] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 236.108523][ T9] usb 4-1: config 0 descriptor?? [ 236.113803][ T5908] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 236.128003][ T5908] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 236.138413][ T5908] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.151754][ T5908] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 236.160833][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.184412][ T5901] m920x_read = error: -19 [ 236.188853][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 236.343441][ T8372] netlink: 36 bytes leftover after parsing attributes in process `syz.1.667'. [ 236.354453][ T5901] m920x_read = error: -19 [ 236.364349][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 236.403508][ T5908] usb 6-1: GET_CAPABILITIES returned 0 [ 236.416330][ T5908] usbtmc 6-1:16.0: can't read capabilities [ 236.439220][ T8374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.668'. [ 236.467688][ T8374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.668'. [ 236.544296][ T5908] m920x_read = error: -19 [ 236.564326][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 236.600585][ T5935] usb 6-1: USB disconnect, device number 20 [ 236.618476][ T9] magicmouse 0003:05AC:0324.000B: item fetching failed at offset 3/5 [ 236.640956][ T9] magicmouse 0003:05AC:0324.000B: magicmouse hid parse failed [ 236.650508][ T9] magicmouse 0003:05AC:0324.000B: probe with driver magicmouse failed with error -22 [ 236.724378][ T9] m920x_read = error: -19 [ 236.729048][ T9] dvb-usb: error -19 while querying for an remote control event. [ 236.894349][ T9] m920x_read = error: -19 [ 236.914901][ T8388] loop8: detected capacity change from 0 to 7 [ 236.926346][ T9] dvb-usb: error -19 while querying for an remote control event. [ 236.945127][ T8388] Dev loop8: unable to read RDB block 7 [ 236.950748][ T8388] loop8: unable to read partition table [ 236.990300][ T8388] loop8: partition table beyond EOD, truncated [ 237.021313][ T8388] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 237.124859][ T9] m920x_read = error: -19 [ 237.129798][ T9] dvb-usb: error -19 while querying for an remote control event. [ 237.241695][ T8392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.672'. [ 237.396095][ T8399] netlink: 'syz.4.675': attribute type 3 has an invalid length. [ 237.444356][ T9] m920x_read = error: -19 [ 237.448842][ T9] dvb-usb: error -19 while querying for an remote control event. [ 237.546487][ T5935] usb 4-1: USB disconnect, device number 47 [ 237.663437][ T5833] Bluetooth: hci3: unexpected subevent 0x06 length: 18 > 10 [ 237.675898][ T5908] m920x_read = error: -19 [ 237.680280][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 238.043582][ T9] m920x_read = error: -19 [ 238.067218][ T9] dvb-usb: error -19 while querying for an remote control event. [ 238.125936][ T8416] fuse: Bad value for 'fd' [ 238.315561][ T5908] m920x_read = error: -19 [ 238.320072][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 238.340559][ T8421] FAULT_INJECTION: forcing a failure. [ 238.340559][ T8421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.363600][ T8421] CPU: 0 UID: 0 PID: 8421 Comm: syz.5.681 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.363628][ T8421] Tainted: [L]=SOFTLOCKUP [ 238.363633][ T8421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 238.363643][ T8421] Call Trace: [ 238.363650][ T8421] [ 238.363657][ T8421] dump_stack_lvl+0xe8/0x150 [ 238.363683][ T8421] should_fail_ex+0x412/0x560 [ 238.363707][ T8421] _copy_from_iter+0x1d3/0x1670 [ 238.363737][ T8421] ? do_raw_spin_lock+0x12b/0x2f0 [ 238.363756][ T8421] ? __pfx__copy_from_iter+0x10/0x10 [ 238.363783][ T8421] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 238.363804][ T8421] write_pool_user+0x101/0x310 [ 238.363828][ T8421] ? __pfx_write_pool_user+0x10/0x10 [ 238.363853][ T8421] ? bpf_lsm_file_permission+0x9/0x20 [ 238.363871][ T8421] ? security_file_permission+0x75/0x260 [ 238.363895][ T8421] vfs_write+0x61d/0xb90 [ 238.363923][ T8421] ? __pfx_vfs_write+0x10/0x10 [ 238.363951][ T8421] ? __fget_files+0x2a/0x420 [ 238.363975][ T8421] ksys_write+0x150/0x270 [ 238.363998][ T8421] ? __pfx_ksys_write+0x10/0x10 [ 238.364028][ T8421] do_syscall_64+0xe2/0xf80 [ 238.364045][ T8421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.364060][ T8421] ? trace_irq_disable+0x37/0x100 [ 238.364075][ T8421] ? clear_bhb_loop+0x60/0xb0 [ 238.364094][ T8421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.364109][ T8421] RIP: 0033:0x7f60be59af79 [ 238.364125][ T8421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.364139][ T8421] RSP: 002b:00007f60bf4aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 238.364158][ T8421] RAX: ffffffffffffffda RBX: 00007f60be815fa0 RCX: 00007f60be59af79 [ 238.364168][ T8421] RDX: 0000000000010010 RSI: 0000200000000040 RDI: 0000000000000004 [ 238.364177][ T8421] RBP: 00007f60bf4aa090 R08: 0000000000000000 R09: 0000000000000000 [ 238.364186][ T8421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 238.364195][ T8421] R13: 00007f60be816038 R14: 00007f60be815fa0 R15: 00007f60be93fa48 [ 238.364222][ T8421] [ 238.771029][ T5908] m920x_read = error: -19 [ 238.775486][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 238.936634][ T9] m920x_read = error: -19 [ 238.941025][ T9] dvb-usb: error -19 while querying for an remote control event. [ 238.977511][ T8423] netlink: 44 bytes leftover after parsing attributes in process `syz.5.682'. [ 239.017830][ T8426] loop8: detected capacity change from 0 to 7 [ 239.040173][ T7212] Dev loop8: unable to read RDB block 7 [ 239.041371][ T8425] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 239.098527][ T7212] loop8: unable to read partition table [ 239.108811][ T9] m920x_read = error: -19 [ 239.113145][ T9] dvb-usb: error -19 while querying for an remote control event. [ 239.139729][ T7212] loop8: partition table beyond EOD, truncated [ 239.159526][ T8426] Dev loop8: unable to read RDB block 7 [ 239.188970][ T8426] loop8: unable to read partition table [ 239.245998][ T8426] loop8: partition table beyond EOD, truncated [ 239.269127][ T8426] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 239.304287][ T5901] m920x_read = error: -19 [ 239.308635][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 239.382404][ T30] audit: type=1326 audit(1770669776.375:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.5.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60be59af79 code=0x7ffc0000 [ 239.504330][ T5901] m920x_read = error: -19 [ 239.514319][ T30] audit: type=1326 audit(1770669776.375:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.5.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60be59af79 code=0x7ffc0000 [ 239.514329][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 239.514360][ T30] audit: type=1326 audit(1770669776.375:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.5.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f60be59af79 code=0x7ffc0000 [ 239.715731][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 239.742298][ T30] audit: type=1326 audit(1770669776.375:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.5.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60be59af79 code=0x7ffc0000 [ 239.826577][ T5901] m920x_read = error: -19 [ 239.830967][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 239.904587][ T30] audit: type=1326 audit(1770669776.425:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.5.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f60be59af79 code=0x7ffc0000 [ 239.955538][ T30] audit: type=1326 audit(1770669776.425:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.5.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60be59af79 code=0x7ffc0000 [ 240.004729][ T9] m920x_read = error: -19 [ 240.009113][ T9] dvb-usb: error -19 while querying for an remote control event. [ 240.044252][ T30] audit: type=1326 audit(1770669776.425:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.5.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60be59af79 code=0x7ffc0000 [ 240.044327][ T5901] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 240.114586][ T8456] netlink: 28 bytes leftover after parsing attributes in process `syz.3.691'. [ 240.190129][ T5908] m920x_read = error: -19 [ 240.200526][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 240.244439][ T9] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 240.394326][ T5908] m920x_read = error: -19 [ 240.398704][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 240.413001][ T9] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 240.422619][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 240.433552][ T5901] usb 3-1: Using ep0 maxpacket: 16 [ 240.461009][ T5901] usb 3-1: config 0 has an invalid interface number: 24 but max is 0 [ 240.474597][ T9] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 240.507140][ T5901] usb 3-1: config 0 has no interface number 0 [ 240.524451][ T5901] usb 3-1: config 0 interface 24 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.536621][ T5901] usb 3-1: config 0 interface 24 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.548056][ T5901] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 240.558146][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 240.567754][ T5908] m920x_read = error: -19 [ 240.572213][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.580806][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 240.589520][ T9] usb 5-1: Product: syz [ 240.593840][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.604207][ T9] usb 5-1: Manufacturer: syz [ 240.609100][ T9] usb 5-1: SerialNumber: syz [ 240.620344][ T5901] usb 3-1: config 0 descriptor?? [ 240.754479][ T5900] m920x_read = error: -19 [ 240.759023][ T5900] dvb-usb: error -19 while querying for an remote control event. [ 240.835143][ T8452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.849091][ T8452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.048878][ T5908] m920x_read = error: -19 [ 241.053312][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 241.094424][ T5900] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 241.152515][ T8468] xt_TPROXY: Can be used only with -p tcp or -p udp [ 241.277885][ T5901] m920x_read = error: -19 [ 241.281595][ T8450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.283900][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 241.293478][ T8450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.344852][ T5900] usb 6-1: device descriptor read/64, error -71 [ 241.350090][ T5886] usb 3-1: USB disconnect, device number 45 [ 241.494351][ T5901] m920x_read = error: -19 [ 241.498774][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 241.526347][ T30] audit: type=1326 audit(1770669778.535:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8475 comm="syz.1.695" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff87f19af79 code=0x0 [ 241.644247][ T5900] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 241.714477][ T5901] m920x_read = error: -19 [ 241.718883][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 241.814282][ T5900] usb 6-1: device descriptor read/64, error -71 [ 241.894317][ T5901] m920x_read = error: -19 [ 241.914326][ T30] audit: type=1326 audit(1770669778.915:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8482 comm="syz.2.696" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde7ad9af79 code=0x0 [ 241.918653][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 241.961796][ T5900] usb usb6-port1: attempt power cycle [ 242.120261][ T5886] IPVS: starting estimator thread 0... [ 242.130025][ T8493] IPVS: set_ctl: invalid protocol: 98 172.20.20.187:20000 [ 242.164375][ T5901] m920x_read = error: -19 [ 242.168766][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 242.214309][ T8494] IPVS: using max 38 ests per chain, 91200 per kthread [ 242.334374][ T5900] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 242.344605][ T5901] m920x_read = error: -19 [ 242.349263][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 242.374866][ T5900] usb 6-1: device descriptor read/8, error -71 [ 242.514397][ T5908] m920x_read = error: -19 [ 242.519031][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 242.645923][ T5900] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 242.704339][ T5908] m920x_read = error: -19 [ 242.708713][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 242.722673][ T5900] usb 6-1: device descriptor read/8, error -71 [ 242.834781][ T5900] usb usb6-port1: unable to enumerate USB device [ 242.842281][ T8499] loop8: detected capacity change from 0 to 7 [ 242.851666][ T8499] Dev loop8: unable to read RDB block 7 [ 242.858053][ T8499] loop8: unable to read partition table [ 242.864135][ T8499] loop8: partition table beyond EOD, truncated [ 242.874729][ T8499] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 242.914612][ T5900] m920x_read = error: -19 [ 242.919333][ T5900] dvb-usb: error -19 while querying for an remote control event. [ 243.114678][ T5900] m920x_read = error: -19 [ 243.119730][ T5900] dvb-usb: error -19 while querying for an remote control event. [ 243.206358][ T5915] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 243.277828][ T798] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 243.314530][ T5900] m920x_read = error: -19 [ 243.319247][ T5900] dvb-usb: error -19 while querying for an remote control event. [ 243.370990][ T5915] usb 2-1: Using ep0 maxpacket: 32 [ 243.401097][ T5915] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 243.434897][ T798] usb 4-1: Using ep0 maxpacket: 16 [ 243.482337][ T5915] usb 2-1: config 0 has no interface number 0 [ 243.493708][ T798] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 243.494291][ T5900] m920x_read = error: -19 [ 243.513022][ T798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 243.526628][ T5915] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 243.536661][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.548963][ T5900] dvb-usb: error -19 while querying for an remote control event. [ 243.549055][ T5915] usb 2-1: Product: syz [ 243.570747][ T798] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 243.580723][ T798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.589421][ T5915] usb 2-1: Manufacturer: syz [ 243.602268][ T798] usb 4-1: Product: syz [ 243.635868][ T5915] usb 2-1: SerialNumber: syz [ 243.684692][ T798] usb 4-1: Manufacturer: syz [ 243.692602][ T5915] usb 2-1: config 0 descriptor?? [ 243.699551][ T798] usb 4-1: SerialNumber: syz [ 243.726054][ T5915] asix 2-1:0.188: probe with driver asix failed with error -22 [ 243.736816][ T5900] m920x_read = error: -19 [ 243.741472][ T9] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 243.749512][ T5900] dvb-usb: error -19 while querying for an remote control event. [ 243.774388][ T9] usb 5-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 243.780141][ T798] usb 4-1: config 0 descriptor?? [ 243.806934][ T9] usb 5-1: found format II with max.bitrate = 128, frame size=0 [ 243.834044][ T9] usb 5-1: 2:1: All rates were zero [ 243.839035][ T798] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 243.944010][ T5908] m920x_read = error: -19 [ 243.955793][ T798] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 244.029737][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 244.214230][ T5908] m920x_read = error: -19 [ 244.218622][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 244.421818][ T9] usb 5-1: USB disconnect, device number 36 [ 244.441015][ T5908] m920x_read = error: -19 [ 244.445796][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 244.592207][ T798] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 244.605136][ T798] em28xx 4-1:0.0: Config register raw data: 0x00 [ 244.616855][ T5908] m920x_read = error: -19 [ 244.624955][ T8521] netlink: 56 bytes leftover after parsing attributes in process `syz.4.704'. [ 244.665710][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 244.778946][ T8524] FAULT_INJECTION: forcing a failure. [ 244.778946][ T8524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.844307][ T8524] CPU: 0 UID: 0 PID: 8524 Comm: syz.5.705 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.844336][ T8524] Tainted: [L]=SOFTLOCKUP [ 244.844342][ T8524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 244.844351][ T8524] Call Trace: [ 244.844358][ T8524] [ 244.844365][ T8524] dump_stack_lvl+0xe8/0x150 [ 244.844390][ T8524] should_fail_ex+0x412/0x560 [ 244.844412][ T8524] _copy_from_iter+0x1d3/0x1670 [ 244.844441][ T8524] ? do_raw_spin_lock+0x12b/0x2f0 [ 244.844458][ T8524] ? __pfx__copy_from_iter+0x10/0x10 [ 244.844486][ T8524] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 244.844506][ T8524] write_pool_user+0x101/0x310 [ 244.844525][ T8524] ? __pfx_write_pool_user+0x10/0x10 [ 244.844539][ T8524] ? bpf_lsm_file_permission+0x9/0x20 [ 244.844550][ T8524] ? security_file_permission+0x75/0x260 [ 244.844563][ T8524] vfs_write+0x61d/0xb90 [ 244.844581][ T8524] ? __pfx_vfs_write+0x10/0x10 [ 244.844605][ T8524] ? __fget_files+0x2a/0x420 [ 244.844622][ T8524] ksys_write+0x150/0x270 [ 244.844636][ T8524] ? __pfx_ksys_write+0x10/0x10 [ 244.844653][ T8524] do_syscall_64+0xe2/0xf80 [ 244.844663][ T8524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.844671][ T8524] ? trace_irq_disable+0x37/0x100 [ 244.844680][ T8524] ? clear_bhb_loop+0x60/0xb0 [ 244.844691][ T8524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.844700][ T8524] RIP: 0033:0x7f60be59af79 [ 244.844710][ T8524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.844718][ T8524] RSP: 002b:00007f60bf4aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 244.844728][ T8524] RAX: ffffffffffffffda RBX: 00007f60be815fa0 RCX: 00007f60be59af79 [ 244.844735][ T8524] RDX: 0000000000010010 RSI: 0000200000000040 RDI: 0000000000000004 [ 244.844741][ T8524] RBP: 00007f60bf4aa090 R08: 0000000000000000 R09: 0000000000000000 [ 244.844747][ T8524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 244.844752][ T8524] R13: 00007f60be816038 R14: 00007f60be815fa0 R15: 00007f60be93fa48 [ 244.844766][ T8524] [ 245.064554][ T9] m920x_read = error: -19 [ 245.069005][ T9] dvb-usb: error -19 while querying for an remote control event. [ 245.234326][ T5908] m920x_read = error: -19 [ 245.238767][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 245.407596][ T5908] m920x_read = error: -19 [ 245.416915][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 245.582176][ T5935] usb 4-1: USB disconnect, device number 48 [ 245.589059][ T5935] em28xx 4-1:0.0: Disconnecting em28xx [ 245.598223][ T5908] m920x_read = error: -19 [ 245.606842][ T5935] em28xx 4-1:0.0: Freeing device [ 245.632961][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 245.730415][ T8542] binfmt_misc: register: failed to install interpreter file ./file0 [ 245.798273][ T8542] 8021q: adding VLAN 0 to HW filter on device bond4 [ 245.876225][ T5908] m920x_read = error: -19 [ 245.881294][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 246.084390][ T5908] m920x_read = error: -19 [ 246.088777][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 246.276295][ T5908] m920x_read = error: -19 [ 246.280685][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 246.467942][ T5900] m920x_read = error: -19 [ 246.472623][ T5900] dvb-usb: error -19 while querying for an remote control event. [ 246.613066][ T5935] usb 2-1: USB disconnect, device number 42 [ 246.644278][ T5900] m920x_read = error: -19 [ 246.648649][ T5900] dvb-usb: error -19 while querying for an remote control event. [ 246.666729][ T798] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 246.854303][ T5900] m920x_read = error: -19 [ 246.858689][ T5900] dvb-usb: error -19 while querying for an remote control event. [ 246.903839][ T5886] hid_parser_main: 55 callbacks suppressed [ 246.903854][ T5886] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 246.954466][ T798] usb 5-1: Using ep0 maxpacket: 16 [ 246.964739][ T5886] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 247.000437][ T5886] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 247.022247][ T5886] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 247.044719][ T5908] m920x_read = error: -19 [ 247.050327][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 247.064464][ T5886] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 247.090182][ T5886] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 247.111504][ T5886] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 247.119056][ T5915] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 247.138697][ T798] usb 5-1: config 0 has no interfaces? [ 247.194335][ T5886] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 247.206192][ T5886] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 247.222339][ T5886] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 247.271080][ T798] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 247.281211][ T5915] usb 4-1: Using ep0 maxpacket: 32 [ 247.289799][ T798] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 247.307489][ T5915] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 247.318076][ T5886] hid-generic 0001:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 247.327877][ T5915] usb 4-1: config 0 has no interface number 0 [ 247.338833][ T798] usb 5-1: Manufacturer: syz [ 247.345676][ T5915] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 247.414910][ T798] usb 5-1: config 0 descriptor?? [ 247.440164][ T5915] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 247.467121][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.502458][ T5915] usb 4-1: Product: syz [ 247.571223][ T5915] usb 4-1: Manufacturer: syz [ 247.583816][ T5915] usb 4-1: SerialNumber: syz [ 247.594823][ T5915] usb 4-1: config 0 descriptor?? [ 247.610666][ T8561] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 247.727303][ T5900] m920x_read = error: -19 [ 247.732428][ T5900] dvb-usb: error -19 while querying for an remote control event. [ 247.821292][ T8572] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 247.834261][ T5886] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 247.887156][ T5915] asix 4-1:0.188: probe with driver asix failed with error -71 [ 247.905896][ T5900] m920x_read = error: -19 [ 247.920506][ T5900] dvb-usb: error -19 while querying for an remote control event. [ 247.938831][ T5915] usb 4-1: USB disconnect, device number 49 [ 247.986866][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.001789][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.022604][ T5886] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 248.054502][ T5886] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 248.107973][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.114948][ T5900] m920x_read = error: -19 [ 248.121026][ T5900] dvb-usb: error -19 while querying for an remote control event. [ 248.140032][ T5886] usb 2-1: config 0 descriptor?? [ 248.287958][ T5908] m920x_read = error: -19 [ 248.292771][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 248.303551][ T8578] netlink: 28 bytes leftover after parsing attributes in process `syz.3.716'. [ 248.466096][ T5900] m920x_read = error: -19 [ 248.470962][ T5900] dvb-usb: error -19 while querying for an remote control event. [ 248.573097][ T5886] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 248.645385][ T9] m920x_read = error: -19 [ 248.650124][ T9] dvb-usb: error -19 while querying for an remote control event. [ 248.848926][ T9] m920x_read = error: -19 [ 248.853401][ T9] dvb-usb: error -19 while querying for an remote control event. [ 249.003161][ T5886] usb 5-1: USB disconnect, device number 37 [ 249.074391][ T9] m920x_read = error: -19 [ 249.078798][ T9] dvb-usb: error -19 while querying for an remote control event. [ 249.189716][ T8599] loop8: detected capacity change from 0 to 7 [ 249.214898][ T8599] Dev loop8: unable to read RDB block 7 [ 249.220523][ T8599] loop8: unable to read partition table [ 249.227497][ T8599] loop8: partition table beyond EOD, truncated [ 249.251141][ T8599] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 249.346622][ T9] m920x_read = error: -19 [ 249.360248][ T9] dvb-usb: error -19 while querying for an remote control event. [ 249.554454][ T9] m920x_read = error: -19 [ 249.561321][ T9] dvb-usb: error -19 while querying for an remote control event. [ 249.734308][ T9] m920x_read = error: -19 [ 249.758736][ T9] dvb-usb: error -19 while querying for an remote control event. [ 249.944304][ T5900] m920x_read = error: -19 [ 249.948766][ T5900] dvb-usb: error -19 while querying for an remote control event. [ 250.134312][ T5908] m920x_read = error: -19 [ 250.142948][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 250.316197][ T5900] m920x_read = error: -19 [ 250.322945][ T5900] dvb-usb: error -19 while querying for an remote control event. [ 250.514576][ T5900] m920x_read = error: -19 [ 250.531366][ T8629] IPv6: NLM_F_CREATE should be specified when creating new route [ 250.539315][ T5900] dvb-usb: error -19 while querying for an remote control event. [ 250.644612][ T9] usb 2-1: USB disconnect, device number 43 [ 250.714369][ T5900] m920x_read = error: -19 [ 250.718957][ T5900] dvb-usb: error -19 while querying for an remote control event. [ 250.741947][ T8637] fuse: Unknown parameter 'rootmzYode' [ 250.914317][ T9] m920x_read = error: -19 [ 250.919124][ T9] dvb-usb: error -19 while querying for an remote control event. [ 250.989553][ T8642] netlink: 28 bytes leftover after parsing attributes in process `syz.2.731'. [ 251.128710][ T9] m920x_read = error: -19 [ 251.170024][ T9] dvb-usb: error -19 while querying for an remote control event. [ 251.210482][ T8650] loop8: detected capacity change from 0 to 7 [ 251.231223][ T8650] Dev loop8: unable to read RDB block 7 [ 251.263402][ T8650] loop8: unable to read partition table [ 251.302211][ T8650] loop8: partition table beyond EOD, truncated [ 251.335079][ T8650] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 251.375601][ T9] m920x_read = error: -19 [ 251.382467][ T9] dvb-usb: error -19 while querying for an remote control event. [ 251.557396][ T9] m920x_read = error: -19 [ 251.562309][ T9] dvb-usb: error -19 while querying for an remote control event. [ 251.772582][ T9] m920x_read = error: -19 [ 251.777071][ T9] dvb-usb: error -19 while querying for an remote control event. [ 251.844455][ T5908] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 252.034392][ T9] m920x_read = error: -19 [ 252.047233][ T9] dvb-usb: error -19 while querying for an remote control event. [ 252.063238][ T5908] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 252.091356][ T5908] usb 6-1: config 1 interface 0 altsetting 181 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 252.135770][ T5908] usb 6-1: config 1 interface 0 has no altsetting 0 [ 252.171612][ T5908] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 252.198306][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.483336][ T9] m920x_read = error: -19 [ 252.488114][ T9] dvb-usb: error -19 while querying for an remote control event. [ 252.504270][ T5908] usb 6-1: Product: ˝斒㑆ఠ㷆乖䢋듖略鲈䘈苬㿓鈓ꊐݜㄿ↦裌莡ꉳ咆纥㉸從ழ讧걿⨔亓뉭얄슀葋䤝빗馿㞘톷注栴享┄◧報ꓨ莏藷⢞덥ﯕ좢Ƹ [ 252.561151][ T5908] usb 6-1: SerialNumber: syz [ 252.757322][ T5901] m920x_read = error: -19 [ 252.781329][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 252.954439][ T5901] m920x_read = error: -19 [ 252.958893][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 253.134890][ T5901] m920x_read = error: -19 [ 253.139322][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 253.334313][ T5901] m920x_read = error: -19 [ 253.339091][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 253.478992][ T8687] loop8: detected capacity change from 0 to 7 [ 253.504360][ T9] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 253.506484][ T8687] Dev loop8: unable to read RDB block 7 [ 253.529211][ T8687] loop8: unable to read partition table [ 253.537396][ T8687] loop8: partition table beyond EOD, truncated [ 253.544456][ T5901] m920x_read = error: -19 [ 253.545030][ T8687] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 253.559546][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 253.666568][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 253.678013][ T9] usb 5-1: config 8 has an invalid interface number: 39 but max is 0 [ 253.686526][ T9] usb 5-1: config 8 has no interface number 0 [ 253.692959][ T9] usb 5-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 253.727449][ T9] usb 5-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 253.742030][ T9] usb 5-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 253.752802][ T5918] m920x_read = error: -19 [ 253.760268][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 253.769016][ T9] usb 5-1: config 8 interface 39 has no altsetting 0 [ 253.783391][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 253.795119][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.803254][ T9] usb 5-1: Product: syz [ 253.808378][ T9] usb 5-1: Manufacturer: syz [ 253.813038][ T9] usb 5-1: SerialNumber: syz [ 253.934923][ T5918] m920x_read = error: -19 [ 253.939372][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 253.985197][ T5942] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 254.034396][ T5915] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 254.105056][ T5918] m920x_read = error: -19 [ 254.109542][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 254.144434][ T5942] usb 2-1: Using ep0 maxpacket: 8 [ 254.150225][ T5942] usb 2-1: no configurations [ 254.156221][ T5942] usb 2-1: can't read configurations, error -22 [ 254.164303][ T5915] usb 4-1: device descriptor read/64, error -71 [ 254.223943][ T9] ipheth 5-1:8.39: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 254.233953][ T9] ipheth 5-1:8.39: probe with driver ipheth failed with error -22 [ 254.274319][ T5918] m920x_read = error: -19 [ 254.280278][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 254.299357][ T5942] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 254.316777][ T8694] loop8: detected capacity change from 0 to 7 [ 254.326870][ T8694] Dev loop8: unable to read RDB block 7 [ 254.333763][ T8694] loop8: unable to read partition table [ 254.341101][ T8694] loop8: partition table beyond EOD, truncated [ 254.349097][ T8694] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 254.404289][ T5915] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 254.444356][ T5918] m920x_read = error: -19 [ 254.457334][ T8683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.466088][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 254.475211][ T8683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.475264][ T5942] usb 2-1: Using ep0 maxpacket: 8 [ 254.504930][ T5942] usb 2-1: no configurations [ 254.509442][ T5918] usb 5-1: USB disconnect, device number 38 [ 254.514534][ T5942] usb 2-1: can't read configurations, error -22 [ 254.544511][ T5942] usb usb2-port1: attempt power cycle [ 254.555251][ T5915] usb 4-1: device descriptor read/64, error -71 [ 254.587894][ T5908] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 254.624587][ T9] m920x_read = error: -19 [ 254.630061][ T9] dvb-usb: error -19 while querying for an remote control event. [ 254.642317][ T5908] usb 6-1: USB disconnect, device number 25 [ 254.675674][ T5915] usb usb4-port1: attempt power cycle [ 254.830996][ T5918] m920x_read = error: -19 [ 254.841896][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 254.914276][ T5942] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 254.956988][ T5942] usb 2-1: Using ep0 maxpacket: 8 [ 254.964081][ T5942] usb 2-1: no configurations [ 254.970637][ T5942] usb 2-1: can't read configurations, error -22 [ 255.004367][ T5918] m920x_read = error: -19 [ 255.008871][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 255.064383][ T5915] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 255.107149][ T5942] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 255.138024][ T5915] usb 4-1: device descriptor read/8, error -71 [ 255.157435][ T5942] usb 2-1: Using ep0 maxpacket: 8 [ 255.163030][ T5942] usb 2-1: no configurations [ 255.185222][ T5918] m920x_read = error: -19 [ 255.192072][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 255.206518][ T5942] usb 2-1: can't read configurations, error -22 [ 255.225271][ T5942] usb usb2-port1: unable to enumerate USB device [ 255.374292][ T5918] m920x_read = error: -19 [ 255.378855][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 255.384285][ T5915] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 255.427480][ T5915] usb 4-1: device descriptor read/8, error -71 [ 255.548300][ T5918] m920x_read = error: -19 [ 255.556598][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 255.563193][ T5915] usb usb4-port1: unable to enumerate USB device [ 255.744845][ T5918] m920x_read = error: -19 [ 255.751219][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 255.858481][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.868181][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.944333][ T5918] m920x_read = error: -19 [ 255.970431][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 255.984914][ T8726] netlink: 28 bytes leftover after parsing attributes in process `syz.4.750'. [ 256.174309][ T5918] m920x_read = error: -19 [ 256.178725][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 256.344358][ T5908] m920x_read = error: -19 [ 256.348797][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 256.374410][ T5918] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 256.467852][ T8734] loop8: detected capacity change from 0 to 7 [ 256.513827][ T8734] Dev loop8: unable to read RDB block 7 [ 256.519760][ T5908] m920x_read = error: -19 [ 256.524494][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 256.533155][ T8734] loop8: unable to read partition table [ 256.539077][ T8734] loop8: partition table beyond EOD, truncated [ 256.561639][ T5918] usb 3-1: config 0 has an invalid interface number: 224 but max is 0 [ 256.569945][ T5918] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.582657][ T8734] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 256.593845][ T5918] usb 3-1: config 0 has no interface number 0 [ 256.600349][ T5918] usb 3-1: config 0 interface 224 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 256.701250][ T5901] m920x_read = error: -19 [ 256.708889][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 256.734746][ T5918] usb 3-1: config 0 interface 224 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 256.769810][ T5918] usb 3-1: config 0 interface 224 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 256.861098][ T5918] usb 3-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=c7.bc [ 256.874992][ T5901] m920x_read = error: -19 [ 256.881367][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 256.926653][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.957593][ T5918] usb 3-1: Product: syz [ 256.962307][ T5918] usb 3-1: Manufacturer: syz [ 256.976081][ T5918] usb 3-1: SerialNumber: syz [ 257.033869][ T5918] usb 3-1: config 0 descriptor?? [ 257.040786][ T8740] loop8: detected capacity change from 0 to 7 [ 257.074298][ T5901] m920x_read = error: -19 [ 257.079064][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 257.123856][ T8740] Dev loop8: unable to read RDB block 7 [ 257.131331][ T5918] ldusb 3-1:0.224: Interrupt in endpoint not found [ 257.141690][ T8740] loop8: unable to read partition table [ 257.155283][ T8742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.166105][ T8740] loop8: partition table beyond EOD, truncated [ 257.196452][ T8740] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 257.247593][ T30] audit: type=1804 audit(1770669794.235:561): pid=8742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.753" name="bus" dev="ramfs" ino=27358 res=1 errno=0 [ 257.280078][ T5918] usb 3-1: USB disconnect, device number 46 [ 257.333902][ T5908] m920x_read = error: -19 [ 257.347043][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 257.584334][ T5918] m920x_read = error: -19 [ 257.589032][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 257.638055][ T8752] netlink: 36 bytes leftover after parsing attributes in process `syz.3.759'. [ 257.755325][ T5918] m920x_read = error: -19 [ 257.790517][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 257.966818][ T5918] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 257.986770][ T5908] m920x_read = error: -19 [ 257.991751][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 258.157574][ T5901] m920x_read = error: -19 [ 258.169366][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 258.196462][ T5918] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 258.208456][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.224315][ T5908] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 258.239419][ T5918] usb 4-1: Product: syz [ 258.252268][ T5918] usb 4-1: Manufacturer: syz [ 258.263758][ T5918] usb 4-1: SerialNumber: syz [ 258.285899][ T5918] usb 4-1: config 0 descriptor?? [ 258.309634][ T5918] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 258.348964][ T5901] m920x_read = error: -19 [ 258.353467][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 258.417509][ T5908] usb 5-1: config 0 has an invalid interface number: 33 but max is 0 [ 258.437711][ T5908] usb 5-1: config 0 has no interface number 0 [ 258.443915][ T5908] usb 5-1: New USB device found, idVendor=24cf, idProduct=59e4, bcdDevice= 9.43 [ 258.489231][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.520192][ T5908] usb 5-1: config 0 descriptor?? [ 258.522189][ T8752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.545025][ T5901] m920x_read = error: -19 [ 258.549536][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 258.556122][ T8752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.581015][ T5908] usb-storage 5-1:0.33: USB Mass Storage device detected [ 258.591830][ T5918] gspca_sunplus: reg_r err -71 [ 258.604973][ T8765] loop8: detected capacity change from 0 to 7 [ 258.624851][ T5918] usb 4-1: USB disconnect, device number 54 [ 258.638250][ T8765] Dev loop8: unable to read RDB block 7 [ 258.643874][ T8765] loop8: unable to read partition table [ 258.660624][ T8765] loop8: partition table beyond EOD, truncated [ 258.687517][ T8765] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 258.764388][ T5908] m920x_read = error: -19 [ 258.769214][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 258.820517][ T5908] usb 5-1: USB disconnect, device number 40 [ 258.934318][ T5918] m920x_read = error: -19 [ 258.952547][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 259.154919][ T5908] m920x_read = error: -19 [ 259.172082][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 259.334021][ T8784] loop8: detected capacity change from 0 to 7 [ 259.344364][ T5918] m920x_read = error: -19 [ 259.349800][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 259.368952][ T8786] netlink: 'syz.4.769': attribute type 5 has an invalid length. [ 259.389723][ T8784] Dev loop8: unable to read RDB block 7 [ 259.407451][ T8786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.769'. [ 259.416952][ T8784] loop8: unable to read partition table [ 259.437381][ T8784] loop8: partition table beyond EOD, truncated [ 259.465587][ T8784] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 259.493801][ T8793] netlink: 'syz.4.769': attribute type 5 has an invalid length. [ 259.544642][ T5908] m920x_read = error: -19 [ 259.549289][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 259.654252][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.769'. [ 259.734320][ T5918] m920x_read = error: -19 [ 259.804620][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 259.847320][ T5915] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 259.849619][ T8786] bond1: down delay (48426) is not a multiple of miimon (2558), value rounded to 46044 ms [ 259.883364][ T8800] netlink: 28 bytes leftover after parsing attributes in process `syz.3.773'. [ 259.892976][ T8786] bond1: peer notification delay (2365) is not a multiple of miimon (2558), value rounded to 0 ms [ 259.907528][ T8793] bond1: down delay (48426) is not a multiple of miimon (2558), value rounded to 46044 ms [ 259.985644][ T5908] m920x_read = error: -19 [ 259.990058][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 259.998586][ T8793] bond1: peer notification delay (2365) is not a multiple of miimon (2558), value rounded to 0 ms [ 260.041972][ T5915] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 260.097374][ T5915] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.133872][ T8800] fuse: root generation should be zero [ 260.149479][ T5915] usb 6-1: config 0 interface 0 has no altsetting 0 [ 260.164351][ T5908] m920x_read = error: -19 [ 260.170261][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 260.224340][ T5942] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 260.232579][ T5915] usb 6-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 260.289274][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.316835][ T5915] usb 6-1: config 0 descriptor?? [ 260.374372][ T5908] m920x_read = error: -19 [ 260.380256][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 260.431637][ T5942] usb 3-1: config 2 has an invalid interface number: 211 but max is 0 [ 260.504781][ T5942] usb 3-1: config 2 has no interface number 0 [ 260.529491][ T5942] usb 3-1: config 2 interface 211 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 260.567483][ T5908] m920x_read = error: -19 [ 260.575687][ T8819] FAULT_INJECTION: forcing a failure. [ 260.575687][ T8819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.589918][ T5942] usb 3-1: config 2 interface 211 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 260.594324][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 260.644571][ T8819] CPU: 1 UID: 0 PID: 8819 Comm: syz.1.780 Tainted: G L syzkaller #0 PREEMPT(full) [ 260.644599][ T8819] Tainted: [L]=SOFTLOCKUP [ 260.644605][ T8819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 260.644616][ T8819] Call Trace: [ 260.644623][ T8819] [ 260.644630][ T8819] dump_stack_lvl+0xe8/0x150 [ 260.644660][ T8819] should_fail_ex+0x412/0x560 [ 260.644684][ T8819] _copy_from_iter+0x1d3/0x1670 [ 260.644714][ T8819] ? do_raw_spin_lock+0x12b/0x2f0 [ 260.644732][ T8819] ? __pfx__copy_from_iter+0x10/0x10 [ 260.644760][ T8819] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 260.644780][ T8819] write_pool_user+0x101/0x310 [ 260.644805][ T8819] ? __pfx_write_pool_user+0x10/0x10 [ 260.644829][ T8819] ? bpf_lsm_file_permission+0x9/0x20 [ 260.644847][ T8819] ? security_file_permission+0x75/0x260 [ 260.644872][ T8819] vfs_write+0x61d/0xb90 [ 260.644900][ T8819] ? __pfx_vfs_write+0x10/0x10 [ 260.644928][ T8819] ? __fget_files+0x2a/0x420 [ 260.644952][ T8819] ksys_write+0x150/0x270 [ 260.644976][ T8819] ? __pfx_ksys_write+0x10/0x10 [ 260.645013][ T8819] do_syscall_64+0xe2/0xf80 [ 260.645030][ T8819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.645045][ T8819] ? trace_irq_disable+0x37/0x100 [ 260.645060][ T8819] ? clear_bhb_loop+0x60/0xb0 [ 260.645078][ T8819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.645094][ T8819] RIP: 0033:0x7ff87f19af79 [ 260.645109][ T8819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.645122][ T8819] RSP: 002b:00007ff87ffef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 260.645140][ T8819] RAX: ffffffffffffffda RBX: 00007ff87f415fa0 RCX: 00007ff87f19af79 [ 260.645151][ T8819] RDX: 0000000000010010 RSI: 0000200000000040 RDI: 0000000000000004 [ 260.645160][ T8819] RBP: 00007ff87ffef090 R08: 0000000000000000 R09: 0000000000000000 [ 260.645170][ T8819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 260.645179][ T8819] R13: 00007ff87f416038 R14: 00007ff87f415fa0 R15: 00007ff87f53fa48 [ 260.645206][ T8819] [ 260.895406][ T5908] m920x_read = error: -19 [ 260.900237][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 261.004100][ T5918] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 261.029838][ T5915] usbhid 6-1:0.0: can't add hid device: -71 [ 261.037767][ T5915] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 261.049911][ T5942] usb 3-1: New USB device found, idVendor=2040, idProduct=8268, bcdDevice=27.95 [ 261.063170][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.078312][ T5942] usb 3-1: Product: syz [ 261.083658][ T5942] usb 3-1: Manufacturer: syz [ 261.088375][ T5908] m920x_read = error: -19 [ 261.089893][ T5942] usb 3-1: SerialNumber: syz [ 261.105446][ T5915] usb 6-1: USB disconnect, device number 26 [ 261.113040][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 261.124098][ T8825] loop8: detected capacity change from 0 to 7 [ 261.131375][ T8795] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 261.159976][ T8825] Dev loop8: unable to read RDB block 7 [ 261.173133][ T8825] loop8: unable to read partition table [ 261.175535][ T5942] em28xx 3-1:2.211: New device syz syz @ 12 Mbps (2040:8268, interface 211, class 211) [ 261.194511][ T5942] em28xx 3-1:2.211: Device initialization failed. [ 261.194840][ T8825] loop8: partition table beyond EOD, [ 261.203905][ T5942] em28xx 3-1:2.211: Device must be connected to a high-speed USB 2.0 port. [ 261.223776][ T8825] truncated [ 261.228143][ T8825] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 261.275741][ T5918] usb 4-1: unable to get BOS descriptor or descriptor too short [ 261.308310][ T5918] usb 4-1: not running at top speed; connect to a high speed hub [ 261.317681][ T5908] m920x_read = error: -19 [ 261.322464][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 261.346801][ T5918] usb 4-1: config 188 has an invalid interface number: 3 but max is 1 [ 261.389646][ T5918] usb 4-1: config 188 has an invalid interface number: 9 but max is 1 [ 261.410540][ T5918] usb 4-1: config 188 has no interface number 0 [ 261.418860][ T5918] usb 4-1: config 188 has no interface number 1 [ 261.430818][ T5918] usb 4-1: config 188 interface 3 has no altsetting 0 [ 261.458711][ T5918] usb 4-1: config 188 interface 9 has no altsetting 0 [ 261.488835][ T5918] usb 4-1: New USB device found, idVendor=1410, idProduct=a002, bcdDevice=86.a0 [ 261.501283][ T5908] m920x_read = error: -19 [ 261.506343][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 261.516282][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.553744][ T5918] usb 4-1: Product: syz [ 261.564530][ T5918] usb 4-1: Manufacturer: syz [ 261.575260][ T5918] usb 4-1: SerialNumber: syz [ 261.695004][ T5908] m920x_read = error: -19 [ 261.708266][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 261.850621][ T8813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.884331][ T8813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.884340][ T5908] m920x_read = error: -19 [ 261.961278][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 262.155444][ T5918] usb 4-1: unknown number of interfaces: 2 [ 262.179556][ T5918] usb 4-1: USB disconnect, device number 55 [ 262.324288][ T5908] m920x_read = error: -19 [ 262.344302][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 262.522799][ T5918] m920x_read = error: -19 [ 262.529822][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 262.592098][ T8849] pim6reg: entered allmulticast mode [ 262.611730][ T8849] pim6reg: left allmulticast mode [ 262.704455][ T5918] m920x_read = error: -19 [ 262.709335][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 262.808082][ T8852] syzkaller0: mtu greater than device maximum [ 262.852106][ T5918] usb 3-1: USB disconnect, device number 47 [ 262.897518][ T5908] m920x_read = error: -19 [ 262.923781][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 263.168787][ T5918] m920x_read = error: -19 [ 263.176239][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 263.185927][ T8858] warning: `syz.3.790' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 263.237263][ T30] audit: type=1326 audit(1770669800.235:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.2.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7ad9af79 code=0x7ffc0000 [ 263.282752][ T30] audit: type=1326 audit(1770669800.235:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.2.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7ad9af79 code=0x7ffc0000 [ 263.318841][ T30] audit: type=1326 audit(1770669800.235:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.2.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fde7ad9af79 code=0x7ffc0000 [ 263.374393][ T8862] openvswitch: netlink: IP tunnel dst address not specified [ 263.409166][ T5918] m920x_read = error: -19 [ 263.413911][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 263.548243][ T8864] FAULT_INJECTION: forcing a failure. [ 263.548243][ T8864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.598654][ T30] audit: type=1326 audit(1770669800.235:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.2.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7ad9af79 code=0x7ffc0000 [ 263.604922][ T8864] CPU: 0 UID: 0 PID: 8864 Comm: syz.4.791 Tainted: G L syzkaller #0 PREEMPT(full) [ 263.604952][ T8864] Tainted: [L]=SOFTLOCKUP [ 263.604958][ T8864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 263.604968][ T8864] Call Trace: [ 263.604976][ T8864] [ 263.604983][ T8864] dump_stack_lvl+0xe8/0x150 [ 263.605007][ T8864] should_fail_ex+0x412/0x560 [ 263.605030][ T8864] _copy_from_iter+0x1d3/0x1670 [ 263.605060][ T8864] ? do_raw_spin_lock+0x12b/0x2f0 [ 263.605077][ T8864] ? __pfx__copy_from_iter+0x10/0x10 [ 263.605104][ T8864] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 263.605122][ T8864] write_pool_user+0x101/0x310 [ 263.605146][ T8864] ? __pfx_write_pool_user+0x10/0x10 [ 263.605169][ T8864] ? bpf_lsm_file_permission+0x9/0x20 [ 263.605187][ T8864] ? security_file_permission+0x75/0x260 [ 263.605216][ T8864] vfs_write+0x61d/0xb90 [ 263.605250][ T8864] ? __pfx_vfs_write+0x10/0x10 [ 263.605279][ T8864] ? __fget_files+0x2a/0x420 [ 263.605303][ T8864] ksys_write+0x150/0x270 [ 263.605326][ T8864] ? __pfx_ksys_write+0x10/0x10 [ 263.605356][ T8864] do_syscall_64+0xe2/0xf80 [ 263.605381][ T8864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.605404][ T8864] ? trace_irq_disable+0x37/0x100 [ 263.605419][ T8864] ? clear_bhb_loop+0x60/0xb0 [ 263.605437][ T8864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.605456][ T8864] RIP: 0033:0x7f4b9819af79 [ 263.605477][ T8864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.605490][ T8864] RSP: 002b:00007f4b99040028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 263.605508][ T8864] RAX: ffffffffffffffda RBX: 00007f4b98415fa0 RCX: 00007f4b9819af79 [ 263.605522][ T8864] RDX: 0000000000010010 RSI: 0000200000000040 RDI: 0000000000000004 [ 263.605532][ T8864] RBP: 00007f4b99040090 R08: 0000000000000000 R09: 0000000000000000 [ 263.605545][ T8864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 263.605555][ T8864] R13: 00007f4b98416038 R14: 00007f4b98415fa0 R15: 00007f4b9853fa48 [ 263.605580][ T8864] [ 263.878343][ T5942] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 264.018448][ T5918] m920x_read = error: -19 [ 264.023637][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 264.125515][ T5942] usb 4-1: Using ep0 maxpacket: 16 [ 264.145624][ T5942] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.192708][ T30] audit: type=1326 audit(1770669800.235:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.2.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fde7ad9af79 code=0x7ffc0000 [ 264.224481][ T5942] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 264.226965][ T5918] m920x_read = error: -19 [ 264.245686][ T8869] loop7: detected capacity change from 0 to 1 [ 264.268346][ T5942] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 264.284346][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.293193][ T8868] loop8: detected capacity change from 0 to 7 [ 264.303443][ T5942] usb 4-1: Product: syz [ 264.308349][ T5942] usb 4-1: Manufacturer: syz [ 264.315537][ T5942] usb 4-1: SerialNumber: syz [ 264.322345][ T30] audit: type=1326 audit(1770669800.235:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.2.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7ad9af79 code=0x7ffc0000 [ 264.355906][ T7212] Dev loop8: unable to read RDB block 7 [ 264.356340][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 264.373163][ T5942] usb 4-1: config 0 descriptor?? [ 264.434046][ T7212] loop8: unable to read partition table [ 264.441282][ T8873] netlink: 'syz.4.795': attribute type 10 has an invalid length. [ 264.450835][ T7212] loop8: partition table beyond EOD, truncated [ 264.489998][ T5972] Dev loop7: unable to read RDB block 1 [ 264.496850][ T5972] loop7: unable to read partition table [ 264.515407][ T30] audit: type=1326 audit(1770669800.235:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.2.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fde7ad9af79 code=0x7ffc0000 [ 264.545479][ T5972] loop7: partition table beyond EOD, truncated [ 264.553523][ T8876] netlink: 'syz.4.795': attribute type 10 has an invalid length. [ 264.584442][ T8868] Dev loop8: unable to read RDB block 7 [ 264.591352][ T5918] m920x_read = error: -19 [ 264.596477][ T8873] team0: Port device dummy0 added [ 264.603593][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 264.626490][ T8868] loop8: unable to read partition table [ 264.634816][ T8868] loop8: partition table beyond EOD, truncated [ 264.636040][ T8869] Dev loop7: unable to read RDB block 1 [ 264.641905][ T8868] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 264.647835][ T8869] loop7: unable to read partition table [ 264.674506][ T5942] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 264.683803][ T30] audit: type=1326 audit(1770669800.235:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.2.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7ad9af79 code=0x7ffc0000 [ 264.733978][ T8876] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 264.762170][ T30] audit: type=1326 audit(1770669800.235:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.2.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fde7ad9af79 code=0x7ffc0000 [ 264.762445][ T8869] loop7: partition table beyond EOD, [ 264.794266][ T9] m920x_read = error: -19 [ 264.833586][ T30] audit: type=1326 audit(1770669800.235:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.2.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7ad9af79 code=0x7ffc0000 [ 264.834255][ T9] dvb-usb: error -19 while querying for an remote control event. [ 264.881488][ T8876] team0: Failed to send options change via netlink (err -105) [ 265.074663][ T8876] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 265.087252][ T5942] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.111413][ T8876] team0: Port device dummy0 removed [ 265.118223][ T5942] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 265.119078][ T8882] netlink: 20 bytes leftover after parsing attributes in process `syz.1.797'. [ 265.135652][ T5942] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 265.141076][ T8869] truncated [ 265.178443][ T8876] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 265.196863][ T5942] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 265.207485][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.223651][ T8869] loop_reread_partitions: partition scan of loop7 (ݷU@:B${Wɴ) failed (rc=-5) [ 265.230145][ T5942] usb 3-1: Product: syz [ 265.307810][ T5942] usb 3-1: Manufacturer: syz [ 265.328893][ T9] m920x_read = error: -19 [ 265.337850][ T9] dvb-usb: error -19 while querying for an remote control event. [ 265.349109][ T5942] usb 3-1: SerialNumber: syz [ 265.386749][ T5942] cdc_ncm 3-1:1.0: skipping garbage [ 265.399532][ T5942] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 265.452526][ T5942] cdc_ncm 3-1:1.0: bind() failure [ 265.472018][ T8893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.495178][ T8893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.535051][ T9] m920x_read = error: -19 [ 265.541833][ T9] dvb-usb: error -19 while querying for an remote control event. [ 265.613866][ T5915] usb 3-1: USB disconnect, device number 48 [ 265.699918][ T5918] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 265.712915][ T5908] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 265.734347][ T9] m920x_read = error: -19 [ 265.739609][ T9] dvb-usb: error -19 while querying for an remote control event. [ 265.884278][ T5908] usb 5-1: device descriptor read/64, error -71 [ 265.905050][ T5901] m920x_read = error: -19 [ 265.910007][ T5918] usb 2-1: Using ep0 maxpacket: 32 [ 265.915867][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 265.925550][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 265.939121][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 265.951655][ T5918] usb 2-1: New USB device found, idVendor=046d, idProduct=c713, bcdDevice= 0.00 [ 265.987297][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.018372][ T5918] usb 2-1: config 0 descriptor?? [ 266.084506][ T5901] m920x_read = error: -19 [ 266.090067][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 266.124257][ T5908] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 266.257030][ T9] m920x_read = error: -19 [ 266.261760][ T9] dvb-usb: error -19 while querying for an remote control event. [ 266.270094][ T5908] usb 5-1: device descriptor read/64, error -71 [ 266.384481][ T5908] usb usb5-port1: attempt power cycle [ 266.457651][ T9] m920x_read = error: -19 [ 266.471684][ T5918] logitech-djreceiver 0003:046D:C713.000F: collection stack underflow [ 266.482516][ T9] dvb-usb: error -19 while querying for an remote control event. [ 266.501368][ T5918] logitech-djreceiver 0003:046D:C713.000F: item 0 1 0 12 parsing failed [ 266.514779][ T5918] logitech-djreceiver 0003:046D:C713.000F: logi_dj_probe: parse failed [ 266.527112][ T5918] logitech-djreceiver 0003:046D:C713.000F: probe with driver logitech-djreceiver failed with error -22 [ 266.666828][ T5915] usb 4-1: USB disconnect, device number 56 [ 266.676727][ T5918] m920x_read = error: -19 [ 266.709893][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 266.723328][ T5901] usb 2-1: USB disconnect, device number 48 [ 266.734642][ T5908] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 266.765052][ T5908] usb 5-1: device descriptor read/8, error -71 [ 266.860489][ T8908] libceph: resolve '0' (ret=-3): failed [ 266.927913][ T9] m920x_read = error: -19 [ 266.946032][ T9] dvb-usb: error -19 while querying for an remote control event. [ 267.034585][ T5908] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 267.080717][ T5908] usb 5-1: device descriptor read/8, error -71 [ 267.145659][ T9] m920x_read = error: -19 [ 267.157537][ T9] dvb-usb: error -19 while querying for an remote control event. [ 267.225751][ T5908] usb usb5-port1: unable to enumerate USB device [ 267.404297][ T5908] m920x_read = error: -19 [ 267.427145][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 267.466676][ T8920] loop8: detected capacity change from 0 to 7 [ 267.506690][ T8920] Dev loop8: unable to read RDB block 7 [ 267.547713][ T8920] loop8: unable to read partition table [ 267.582894][ T8920] loop8: partition table beyond EOD, truncated [ 267.624337][ T8920] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 267.654587][ T5908] m920x_read = error: -19 [ 267.660428][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 267.864752][ T5908] m920x_read = error: -19 [ 267.884375][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 268.064980][ T5918] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 268.094578][ T5901] m920x_read = error: -19 [ 268.100820][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 268.144483][ T5908] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 268.234372][ T5918] usb 3-1: device descriptor read/64, error -71 [ 268.242038][ T9] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 268.266379][ T5900] m920x_read = error: -19 [ 268.271736][ T5900] dvb-usb: error -19 while querying for an remote control event. [ 268.315917][ T5908] usb 2-1: not running at top speed; connect to a high speed hub [ 268.324947][ T5908] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 268.334009][ T5908] usb 2-1: config 1 has no interface number 1 [ 268.341576][ T5908] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 268.358499][ T5908] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 268.370453][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.390512][ T5908] usb 2-1: Product: syz [ 268.395704][ T5908] usb 2-1: Manufacturer: syz [ 268.401488][ T5908] usb 2-1: SerialNumber: syz [ 268.424801][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 268.433247][ T9] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 268.451117][ T5900] m920x_read = error: -19 [ 268.458559][ T5900] dvb-usb: error -19 while querying for an remote control event. [ 268.468854][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.480866][ T9] usb 6-1: config 0 has no interface number 0 [ 268.500435][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 268.522025][ T5918] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 268.532567][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.543345][ T9] usb 6-1: Product: syz [ 268.560470][ T9] usb 6-1: Manufacturer: syz [ 268.565869][ T9] usb 6-1: SerialNumber: syz [ 268.582139][ T9] usb 6-1: config 0 descriptor?? [ 268.596304][ T9] uvcvideo 6-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 268.605696][ T9] uvcvideo 6-1:0.105: No valid video chain found. [ 268.634364][ T9] m920x_read = error: -19 [ 268.639439][ T9] dvb-usb: error -19 while querying for an remote control event. [ 268.642510][ T8926] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode 802.3ad(4) [ 268.674567][ T5918] usb 3-1: device descriptor read/64, error -71 [ 268.700330][ T8926] bond1 (unregistering): Released all slaves [ 268.805756][ T5918] usb usb3-port1: attempt power cycle [ 268.818798][ T9] m920x_read = error: -19 [ 268.823870][ T9] dvb-usb: error -19 while querying for an remote control event. [ 268.872972][ T5908] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 269.000701][ T5908] usb 2-1: failed to enable PITCH for EP 0x82 [ 269.010202][ T9] m920x_read = error: -19 [ 269.127085][ T9] dvb-usb: error -19 while querying for an remote control event. [ 269.162776][ T5901] IPVS: starting estimator thread 0... [ 269.213844][ T5918] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 269.276028][ T5918] usb 3-1: device descriptor read/8, error -71 [ 269.292035][ T5908] usb 2-1: USB disconnect, device number 49 [ 269.304652][ T8946] IPVS: using max 38 ests per chain, 91200 per kthread [ 269.331210][ T9] m920x_read = error: -19 [ 269.341253][ T9] dvb-usb: error -19 while querying for an remote control event. [ 269.534655][ T9] m920x_read = error: -19 [ 269.560465][ T9] dvb-usb: error -19 while querying for an remote control event. [ 269.576809][ T5918] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 269.615176][ T5918] usb 3-1: device descriptor read/8, error -71 [ 269.731180][ T5918] usb usb3-port1: unable to enumerate USB device [ 269.754291][ T5918] m920x_read = error: -19 [ 269.758766][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 269.906584][ T5942] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 269.962942][ T5918] m920x_read = error: -19 [ 269.973023][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 269.986115][ T5886] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 270.114776][ T5942] usb 5-1: Using ep0 maxpacket: 8 [ 270.144044][ T5942] usb 5-1: config 53 has an invalid interface number: 101 but max is 0 [ 270.180597][ T5942] usb 5-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config [ 270.193238][ T5886] usb 2-1: device descriptor read/64, error -71 [ 270.228488][ T5942] usb 5-1: config 53 has no interface number 0 [ 270.277165][ T9] m920x_read = error: -19 [ 270.293854][ T5942] usb 5-1: config 53 interface 101 altsetting 0 has an endpoint descriptor with address 0xC2, changing to 0x82 [ 270.307711][ T9] dvb-usb: error -19 while querying for an remote control event. [ 270.320443][ T5942] usb 5-1: config 53 interface 101 altsetting 0 endpoint 0x82 has invalid maxpacket 33307, setting to 1024 [ 270.349408][ T5942] usb 5-1: config 53 interface 101 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 270.364078][ T5942] usb 5-1: config 53 interface 101 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 270.392448][ T5942] usb 5-1: config 53 interface 101 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 270.440360][ T5942] usb 5-1: New USB device found, idVendor=0bfd, idProduct=011b, bcdDevice=33.a1 [ 270.451724][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.471433][ T5942] usb 5-1: Product: syz [ 270.478075][ T5886] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 270.500267][ T5942] usb 5-1: Manufacturer: syz [ 270.512292][ T5942] usb 5-1: SerialNumber: syz [ 270.525446][ T5918] m920x_read = error: -19 [ 270.533662][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 270.545706][ T8953] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 270.614373][ T5886] usb 2-1: device descriptor read/64, error -71 [ 270.694547][ T5918] m920x_read = error: -19 [ 270.712837][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 270.726061][ T5886] usb usb2-port1: attempt power cycle [ 270.917041][ T5918] m920x_read = error: -19 [ 270.924830][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 270.941192][ T8958] netlink: 'syz.2.818': attribute type 1 has an invalid length. [ 270.952311][ T8958] netlink: 'syz.2.818': attribute type 1 has an invalid length. [ 271.074293][ T5886] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 271.095685][ T5918] m920x_read = error: -19 [ 271.102412][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 271.105931][ T5886] usb 2-1: device descriptor read/8, error -71 [ 271.235452][ T8961] loop8: detected capacity change from 0 to 8 [ 271.275717][ T9] m920x_read = error: -19 [ 271.281824][ T9] dvb-usb: error -19 while querying for an remote control event. [ 271.329745][ T8961] Dev loop8: unable to read RDB block 8 [ 271.364533][ T5886] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 271.398539][ T8961] loop8: unable to read partition table [ 271.418320][ T5886] usb 2-1: device descriptor read/8, error -71 [ 271.464582][ T9] m920x_read = error: -19 [ 271.471493][ T9] dvb-usb: error -19 while querying for an remote control event. [ 271.491575][ T8961] loop8: partition table beyond EOD, truncated [ 271.567287][ T8961] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 271.626199][ T5886] usb usb2-port1: unable to enumerate USB device [ 271.666340][ T9] m920x_read = error: -19 [ 271.671534][ T9] dvb-usb: error -19 while querying for an remote control event. [ 271.834370][ T9] m920x_read = error: -19 [ 271.839385][ T9] dvb-usb: error -19 while querying for an remote control event. [ 272.000589][ T9] usb 6-1: USB disconnect, device number 27 [ 272.054431][ T5918] m920x_read = error: -19 [ 272.061337][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 272.184489][ T5886] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 272.248376][ T5918] m920x_read = error: -19 [ 272.267710][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 272.345150][ T5886] usb 3-1: Using ep0 maxpacket: 16 [ 272.353776][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.369474][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.383198][ T5886] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 272.410008][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.452468][ T5886] usb 3-1: config 0 descriptor?? [ 272.454313][ T5918] m920x_read = error: -19 [ 272.474540][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 272.490230][ T5886] usbhid 3-1:0.0: fixing wrong optional hid class descriptors count [ 272.511909][ T5886] usbhid 3-1:0.0: can't add hid device: -22 [ 272.524405][ T5886] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 272.594498][ T9] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 272.634354][ T5918] m920x_read = error: -19 [ 272.639717][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 272.697389][ T5918] usb 3-1: USB disconnect, device number 53 [ 272.785054][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 272.798615][ T9] usb 6-1: config 127 has an invalid interface number: 171 but max is 1 [ 272.800015][ T5942] kvaser_usb 5-1:53.101: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 272.825718][ T5908] m920x_read = error: -19 [ 272.837018][ T5942] kvaser_usb 5-1:53.101: error -EMSGSIZE: Failed to initialize card [ 272.853204][ T5942] kvaser_usb 5-1:53.101: probe with driver kvaser_usb failed with error -90 [ 272.854978][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 272.873829][ T9] usb 6-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 272.904517][ T9] usb 6-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 272.935517][ T9] usb 6-1: config 127 has no interface number 0 [ 272.956635][ T9] usb 6-1: config 127 interface 171 has no altsetting 0 [ 272.994645][ T5942] usb 5-1: USB disconnect, device number 45 [ 273.009266][ T9] usb 6-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 273.063783][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.081278][ T9] usb 6-1: Product: syz [ 273.087296][ T5918] m920x_read = error: -19 [ 273.093266][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 273.107129][ T9] usb 6-1: Manufacturer: syz [ 273.114110][ T9] usb 6-1: SerialNumber: syz [ 273.195122][ T8972] netlink: 20 bytes leftover after parsing attributes in process `syz.4.822'. [ 273.283946][ T5918] m920x_read = error: -19 [ 273.293192][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 273.336449][ T8966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.363550][ T8966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.455651][ T5918] m920x_read = error: -19 [ 273.476722][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 273.504658][ T9] usb 6-1: USB disconnect, device number 28 [ 273.751781][ T5918] m920x_read = error: -19 [ 273.771592][ T8980] : renamed from vlan0 (while UP) [ 273.812715][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 274.086023][ T5935] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 274.104299][ T9] m920x_read = error: -19 [ 274.108694][ T9] dvb-usb: error -19 while querying for an remote control event. [ 274.263847][ T5935] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.274315][ T9] m920x_read = error: -19 [ 274.274344][ T9] dvb-usb: error -19 while querying for an remote control event. [ 274.292153][ T5935] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 274.305416][ T5935] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 274.324323][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 274.335259][ T5935] usb 2-1: SerialNumber: syz [ 274.434270][ T9] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 274.443378][ T5918] m920x_read = error: -19 [ 274.448830][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 274.464855][ T5942] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 274.546272][ T8991] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 274.569929][ T5935] usb 2-1: 0:2 : does not exist [ 274.588902][ T5935] usb 2-1: unit 5 not found! [ 274.605687][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 274.615374][ T5918] m920x_read = error: -19 [ 274.622082][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 274.632405][ T5942] usb 3-1: Using ep0 maxpacket: 16 [ 274.633139][ T9] usb 6-1: config 3 has an invalid interface number: 171 but max is 29 [ 274.640002][ T5935] usb 2-1: USB disconnect, device number 54 [ 274.648509][ T9] usb 6-1: config 3 has 1 interface, different from the descriptor's value: 30 [ 274.664480][ T5942] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 274.678703][ T9] usb 6-1: config 3 has no interface number 0 [ 274.687134][ T9] usb 6-1: config 3 interface 171 altsetting 108 endpoint 0x1 has invalid wMaxPacketSize 0 [ 274.698824][ T5942] usb 3-1: config 0 has no interface number 0 [ 274.698874][ T5942] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.698895][ T5942] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.698926][ T5942] usb 3-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 274.777895][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.826175][ T5918] m920x_read = error: -19 [ 274.832673][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 274.857958][ T9] usb 6-1: config 3 interface 171 has no altsetting 0 [ 274.858362][ T5942] usb 3-1: config 0 descriptor?? [ 274.960723][ T9] usb 6-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice= c.e5 [ 274.972479][ T9] usb 6-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 274.987606][ T9] usb 6-1: Product: syz [ 274.992855][ T9] usb 6-1: Manufacturer: syz [ 275.001108][ T9] usb 6-1: SerialNumber: syz [ 275.028054][ T5918] m920x_read = error: -19 [ 275.034211][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 275.204907][ T5918] m920x_read = error: -19 [ 275.216284][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 275.228665][ T8996] loop8: detected capacity change from 0 to 8 [ 275.233025][ T8986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.335328][ T8986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.409316][ T8996] Dev loop8: unable to read RDB block 8 [ 275.417269][ T5942] holtek_mouse 0003:04D9:A081.0010: unbalanced collection at end of report description [ 275.439322][ T8996] loop8: unable to read partition table [ 275.440343][ T5942] holtek_mouse 0003:04D9:A081.0010: hid parse failed: -22 [ 275.462627][ T5942] holtek_mouse 0003:04D9:A081.0010: probe with driver holtek_mouse failed with error -22 [ 275.486426][ T9] as10x_usb: device has been detected [ 275.497464][ T8996] loop8: partition table beyond EOD, truncated [ 275.505732][ T9] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 275.520652][ T8996] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 275.553729][ T9] usb 6-1: DVB: registering adapter 2 frontend 0 (Sky IT Digital Key (green led))... [ 275.608732][ T5918] m920x_read = error: -19 [ 275.613672][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 275.649685][ T5886] usb 3-1: USB disconnect, device number 54 [ 275.678931][ T9] as10x_usb: error during firmware upload part1 [ 275.688629][ T9] Registered device Sky IT Digital Key (green led) [ 275.729381][ T9] usb 6-1: USB disconnect, device number 29 [ 275.816960][ T5908] m920x_read = error: -19 [ 275.834861][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 275.847284][ T9] Unregistered device Sky IT Digital Key (green led) [ 275.853515][ T9] as10x_usb: device has been disconnected [ 275.944302][ T5918] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 276.004352][ T5901] m920x_read = error: -19 [ 276.014548][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 276.116090][ T5918] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.142919][ T5918] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 276.157870][ T5918] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 276.180022][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 276.212501][ T5918] usb 2-1: SerialNumber: syz [ 276.224365][ T9] m920x_read = error: -19 [ 276.229112][ T9] dvb-usb: error -19 while querying for an remote control event. [ 276.465858][ T5908] m920x_read = error: -19 [ 276.489968][ T5918] usb 2-1: 0:2 : does not exist [ 276.504306][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 276.548931][ T5918] usb 2-1: USB disconnect, device number 55 [ 276.632482][ T9022] loop8: detected capacity change from 0 to 7 [ 276.658484][ T7212] Dev loop8: unable to read RDB block 7 [ 276.665803][ T7212] loop8: unable to read partition table [ 276.685076][ T7212] loop8: partition table beyond EOD, truncated [ 276.694332][ T5908] m920x_read = error: -19 [ 276.699521][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 276.723733][ T9022] Dev loop8: unable to read RDB block 7 [ 276.739150][ T9022] loop8: unable to read partition table [ 276.750261][ T9022] loop8: partition table beyond EOD, truncated [ 276.764344][ T9022] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 276.815767][ T5942] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 276.874303][ T5918] m920x_read = error: -19 [ 276.880194][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 277.006557][ T5942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.033090][ T5942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.046022][ T5942] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 277.060101][ T5942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.075122][ T5918] m920x_read = error: -19 [ 277.080220][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 277.154862][ T5942] usb 5-1: config 0 descriptor?? [ 277.184296][ T5901] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 277.185532][ T9033] netlink: 68 bytes leftover after parsing attributes in process `syz.1.841'. [ 277.240995][ T9033] netlink: 16 bytes leftover after parsing attributes in process `syz.1.841'. [ 277.254314][ T5918] m920x_read = error: -19 [ 277.259414][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 277.310005][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 277.310021][ T30] audit: type=1326 audit(1770669814.315:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9035 comm="syz.3.843" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f30ec59af79 code=0x0 [ 277.438654][ T5918] m920x_read = error: -19 [ 277.443326][ T5901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.462110][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 277.476716][ T5901] usb 6-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 277.478444][ T9020] bond2: down delay (8) is not a multiple of miimon (5), value rounded to 5 ms [ 277.508003][ T9020] bond2 (unregistering): Released all slaves [ 277.520049][ T5901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.654443][ T9] m920x_read = error: -19 [ 277.660065][ T9] dvb-usb: error -19 while querying for an remote control event. [ 277.693502][ T5901] usb 6-1: config 0 descriptor?? [ 277.765709][ T5918] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 277.844484][ T9] m920x_read = error: -19 [ 277.848928][ T9] dvb-usb: error -19 while querying for an remote control event. [ 277.913590][ T5942] usb 5-1: language id specifier not provided by device, defaulting to English [ 277.937555][ T5918] usb 2-1: Using ep0 maxpacket: 8 [ 277.952031][ T5918] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 277.965764][ T5918] usb 2-1: config 0 interface 0 has no altsetting 0 [ 277.985349][ T5918] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 277.999216][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.014536][ T9] m920x_read = error: -19 [ 278.020568][ T9] dvb-usb: error -19 while querying for an remote control event. [ 278.036872][ T5918] usb 2-1: Product: syz [ 278.042028][ T5918] usb 2-1: Manufacturer: syz [ 278.047979][ T5918] usb 2-1: SerialNumber: syz [ 278.069962][ T5918] usb 2-1: config 0 descriptor?? [ 278.219576][ T9] m920x_read = error: -19 [ 278.220640][ T9026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.273565][ T9026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.273875][ T9] dvb-usb: error -19 while querying for an remote control event. [ 278.302804][ T5918] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 278.323629][ T5942] uclogic 0003:256C:006D.0011: interface is invalid, ignoring [ 278.355210][ T5901] hid_parser_main: 33 callbacks suppressed [ 278.355234][ T5901] hid_mf 0003:0079:1846.0012: unknown main item tag 0x0 [ 278.396824][ T5901] hid_mf 0003:0079:1846.0012: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.5-1/input0 [ 278.410348][ T5901] hid_mf 0003:0079:1846.0012: Invalid report, this should never happen! [ 278.415293][ T5835] Bluetooth: hci5: command 0x0406 tx timeout [ 278.474289][ T9] m920x_read = error: -19 [ 278.478892][ T9] dvb-usb: error -19 while querying for an remote control event. [ 278.496837][ T5901] hid_mf 0003:0079:1846.0012: Force feedback init failed. [ 278.519176][ T5918] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 278.531327][ T9] usb 5-1: USB disconnect, device number 46 [ 278.559476][ T5918] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 278.560274][ T5942] usb 6-1: USB disconnect, device number 30 [ 278.684773][ T5918] m920x_read = error: -19 [ 278.690181][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 278.730683][ T9041] Option '[y$ [ 278.730683][ T9041] >ڎTkS@SVfhJ' to dns_resolver key: bad/missing value [ 278.745528][ T5886] usb 2-1: USB disconnect, device number 56 [ 278.798706][ T9061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.845'. [ 278.864435][ T9] m920x_read = error: -19 [ 278.869533][ T9] dvb-usb: error -19 while querying for an remote control event. [ 279.084398][ T9] m920x_read = error: -19 [ 279.089826][ T9] dvb-usb: error -19 while querying for an remote control event. [ 279.264693][ T9] m920x_read = error: -19 [ 279.298918][ T9] dvb-usb: error -19 while querying for an remote control event. [ 279.417076][ T9072] fuse: Bad value for 'fd' [ 279.434260][ T5918] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 279.474396][ T9] m920x_read = error: -19 [ 279.481708][ T9] dvb-usb: error -19 while querying for an remote control event. [ 279.644374][ T5901] m920x_read = error: -19 [ 279.653372][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 279.668014][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.683455][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.711862][ T5918] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 279.740084][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.766000][ T5918] usb 5-1: config 0 descriptor?? [ 279.844966][ T5901] m920x_read = error: -19 [ 279.849435][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 280.028049][ T5901] m920x_read = error: -19 [ 280.032729][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 280.249507][ T5901] m920x_read = error: -19 [ 280.258067][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 280.451368][ T9081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.461271][ T5901] m920x_read = error: -19 [ 280.480875][ T9081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.489476][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 280.752498][ T9090] usb usb8: usbfs: process 9090 (syz.3.852) did not claim interface 0 before use [ 280.762788][ T5901] m920x_read = error: -19 [ 280.777466][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 280.857710][ T5918] usbhid 5-1:0.0: can't add hid device: -71 [ 280.887060][ T5918] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 280.905706][ T5918] usb 5-1: USB disconnect, device number 47 [ 281.051145][ T5901] m920x_read = error: -19 [ 281.073918][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 281.136463][ T9095] netlink: 56 bytes leftover after parsing attributes in process `syz.4.853'. [ 281.264846][ T5901] m920x_read = error: -19 [ 281.270675][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 281.434812][ T5918] m920x_read = error: -19 [ 281.439382][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 281.604583][ T5918] m920x_read = error: -19 [ 281.609020][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 281.744326][ T5900] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 281.784306][ T5918] m920x_read = error: -19 [ 281.788684][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 281.934486][ T5900] usb 5-1: Using ep0 maxpacket: 8 [ 281.944031][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 122, changing to 10 [ 281.961560][ T9109] netlink: 'syz.3.858': attribute type 46 has an invalid length. [ 281.974252][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 24801, setting to 1024 [ 282.003623][ T9109] netlink: 'syz.3.858': attribute type 19 has an invalid length. [ 282.014463][ T5918] m920x_read = error: -19 [ 282.019300][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 282.031168][ T5900] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 282.054829][ T9109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.858'. [ 282.070368][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.087495][ T5900] usb 5-1: config 0 descriptor?? [ 282.176175][ T9] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 282.210160][ T5918] m920x_read = error: -19 [ 282.214816][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 282.245476][ T5901] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 282.300825][ T5900] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 282.354284][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 282.361228][ T9] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 282.370340][ T9] usb 2-1: config 0 has no interface number 0 [ 282.386940][ T9] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 282.398522][ T5900] m920x_read = error: -19 [ 282.403011][ T5900] dvb-usb: error -19 while querying for an remote control event. [ 282.413368][ T9] usb 2-1: config 0 interface 85 has no altsetting 0 [ 282.423540][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 282.433857][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.442903][ T5901] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 282.452561][ T9] usb 2-1: Product: syz [ 282.457415][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.465640][ T9] usb 2-1: Manufacturer: syz [ 282.470398][ T9] usb 2-1: SerialNumber: syz [ 282.475055][ T5901] usb 4-1: Product: syz [ 282.481351][ T5901] usb 4-1: Manufacturer: syz [ 282.487201][ T9] usb 2-1: config 0 descriptor?? [ 282.492494][ T5901] usb 4-1: SerialNumber: syz [ 282.503805][ T5942] usb 5-1: USB disconnect, device number 48 [ 282.504336][ T5901] usb 4-1: config 0 descriptor?? [ 282.565398][ T5935] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 282.575539][ T5900] m920x_read = error: -19 [ 282.581747][ T5900] dvb-usb: error -19 while querying for an remote control event. [ 282.714219][ T5935] usb 6-1: Using ep0 maxpacket: 32 [ 282.722298][ T5935] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 282.725034][ T5901] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 282.737074][ T5935] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 282.764850][ T5900] m920x_read = error: -19 [ 282.769773][ T5900] dvb-usb: error -19 while querying for an remote control event. [ 282.777622][ T5935] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 282.777662][ T5935] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 282.804649][ T5901] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 282.816968][ T5935] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 282.820778][ T5901] usb 4-1: USB disconnect, device number 57 [ 282.843632][ T5935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.857434][ T5935] usb 6-1: Product: syz [ 282.861644][ T5935] usb 6-1: Manufacturer: syz [ 282.867156][ T5935] usb 6-1: SerialNumber: syz [ 282.893661][ C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 282.905987][ T9106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.917193][ T9106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.930975][ T5935] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input23 [ 282.954365][ T5900] m920x_read = error: -19 [ 282.958465][ T9106] loop6: detected capacity change from 0 to 7 [ 282.958855][ T5900] dvb-usb: error -19 while querying for an remote control event. [ 282.973537][ T7212] Dev loop6: unable to read RDB block 7 [ 282.987173][ T7212] loop6: unable to read partition table [ 283.002136][ T7212] loop6: partition table beyond EOD, truncated [ 283.019785][ T9122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.029575][ T9106] Dev loop6: unable to read RDB block 7 [ 283.073178][ T9122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.082401][ T9106] loop6: unable to read partition table [ 283.145068][ T5901] m920x_read = error: -19 [ 283.149591][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 283.155915][ T5935] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 283.202906][ T9106] loop6: partition table beyond EOD, truncated [ 283.209854][ T5935] (id 0x00) [ 283.315764][ T9106] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 283.375623][ T5901] m920x_read = error: -19 [ 283.381918][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 283.395556][ T5935] rc_core: IR keymap rc-imon-pad not found [ 283.409639][ T5935] Registered IR keymap rc-empty [ 283.422281][ T5935] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 283.564334][ T5901] m920x_read = error: -19 [ 283.568943][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 283.577112][ T9] appletouch 2-1:0.85: Failed to request geyser raw mode [ 283.585515][ T9] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 283.597937][ T5935] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 283.630195][ T9129] bond1: Removing last ns target with arp_interval on [ 283.651484][ T9129] x_tables: ip_tables: osf match: only valid for protocol 6 [ 283.712905][ T5935] rc rc1: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc1 [ 283.734082][ T5935] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc1/input24 [ 283.766695][ T5935] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:31> initialized [ 283.817855][ T5901] m920x_read = error: -19 [ 283.844503][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 283.904962][ T9] usb 2-1: USB disconnect, device number 57 [ 284.074473][ T5901] m920x_read = error: -19 [ 284.081028][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 284.439261][ T5901] m920x_read = error: -19 [ 284.444062][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 284.754702][ T9] m920x_read = error: -19 [ 284.759622][ T9] dvb-usb: error -19 while querying for an remote control event. [ 284.768201][ T5901] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 284.934279][ T9] m920x_read = error: -19 [ 284.940167][ T9] dvb-usb: error -19 while querying for an remote control event. [ 284.950228][ T5901] usb 5-1: Using ep0 maxpacket: 32 [ 284.969126][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 285.001431][ T5901] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 285.036440][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.088325][ T5901] usb 5-1: config 0 descriptor?? [ 285.114334][ T9] m920x_read = error: -19 [ 285.118768][ T9] dvb-usb: error -19 while querying for an remote control event. [ 285.214521][ T9150] netlink: 88 bytes leftover after parsing attributes in process `syz.3.868'. [ 285.284396][ T9] m920x_read = error: -19 [ 285.288922][ T9] dvb-usb: error -19 while querying for an remote control event. [ 285.564641][ T9] m920x_read = error: -19 [ 285.569274][ T9] dvb-usb: error -19 while querying for an remote control event. [ 285.578910][ T5901] hkems 0003:2006:0118.0013: item fetching failed at offset 0/2 [ 285.612703][ T5901] hkems 0003:2006:0118.0013: parse failed [ 285.648670][ T5901] hkems 0003:2006:0118.0013: probe with driver hkems failed with error -22 [ 285.675086][ T9] usb 6-1: USB disconnect, device number 31 [ 285.754470][ T5908] m920x_read = error: -19 [ 285.759627][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 285.806306][ T5901] usb 5-1: USB disconnect, device number 49 [ 285.824672][ T5900] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 285.944366][ T5918] m920x_read = error: -19 [ 285.954278][ T5918] dvb-usb: error -19 while querying for an remote control event. [ 285.999879][ T9162] netlink: 'syz.5.870': attribute type 10 has an invalid length. [ 286.015047][ T5900] usb 3-1: Using ep0 maxpacket: 16 [ 286.019123][ T9162] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.028127][ T9162] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.088532][ T9162] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.095840][ T9162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.103483][ T9162] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.110748][ T9162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.139915][ T5900] usb 3-1: config 0 has no interfaces? [ 286.145758][ T5901] m920x_read = error: -19 [ 286.150431][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 286.176521][ T5900] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 286.196325][ T5900] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 286.217834][ T5900] usb 3-1: Manufacturer: syz [ 286.228721][ T5900] usb 3-1: config 0 descriptor?? [ 286.245501][ T9162] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 286.374315][ T5901] m920x_read = error: -19 [ 286.378710][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 286.624448][ T5901] m920x_read = error: -19 [ 286.674205][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 286.907374][ T5900] m920x_read = error: -19 [ 286.942187][ T5900] dvb-usb: error -19 while querying for an remote control event. [ 287.030902][ T9184] FAULT_INJECTION: forcing a failure. [ 287.030902][ T9184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.117812][ T9184] CPU: 0 UID: 0 PID: 9184 Comm: syz.1.876 Tainted: G L syzkaller #0 PREEMPT(full) [ 287.117841][ T9184] Tainted: [L]=SOFTLOCKUP [ 287.117847][ T9184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 287.117857][ T9184] Call Trace: [ 287.117864][ T9184] [ 287.117872][ T9184] dump_stack_lvl+0xe8/0x150 [ 287.117896][ T9184] should_fail_ex+0x412/0x560 [ 287.117919][ T9184] _copy_from_iter+0x1d3/0x1670 [ 287.117948][ T9184] ? do_raw_spin_lock+0x12b/0x2f0 [ 287.117966][ T9184] ? __pfx__copy_from_iter+0x10/0x10 [ 287.117994][ T9184] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 287.118015][ T9184] write_pool_user+0x101/0x310 [ 287.118039][ T9184] ? __pfx_write_pool_user+0x10/0x10 [ 287.118063][ T9184] ? bpf_lsm_file_permission+0x9/0x20 [ 287.118091][ T9184] ? security_file_permission+0x75/0x260 [ 287.118116][ T9184] vfs_write+0x61d/0xb90 [ 287.118148][ T9184] ? __pfx_vfs_write+0x10/0x10 [ 287.118177][ T9184] ? __fget_files+0x2a/0x420 [ 287.118202][ T9184] ksys_write+0x150/0x270 [ 287.118224][ T9184] ? __pfx_ksys_write+0x10/0x10 [ 287.118258][ T9184] do_syscall_64+0xe2/0xf80 [ 287.118275][ T9184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.118290][ T9184] ? trace_irq_disable+0x37/0x100 [ 287.118308][ T9184] ? clear_bhb_loop+0x60/0xb0 [ 287.118326][ T9184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.118342][ T9184] RIP: 0033:0x7ff87f19af79 [ 287.118356][ T9184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.118368][ T9184] RSP: 002b:00007ff87ffef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 287.118386][ T9184] RAX: ffffffffffffffda RBX: 00007ff87f415fa0 RCX: 00007ff87f19af79 [ 287.118397][ T9184] RDX: 0000000000010010 RSI: 0000200000000040 RDI: 0000000000000004 [ 287.118407][ T9184] RBP: 00007ff87ffef090 R08: 0000000000000000 R09: 0000000000000000 [ 287.118416][ T9184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 287.118425][ T9184] R13: 00007ff87f416038 R14: 00007ff87f415fa0 R15: 00007ff87f53fa48 [ 287.118451][ T9184] [ 287.417918][ T9] m920x_read = error: -19 [ 287.422325][ T9] dvb-usb: error -19 while querying for an remote control event. [ 287.618699][ T5900] m920x_read = error: -19 [ 287.623117][ T5900] dvb-usb: error -19 while querying for an remote control event. [ 287.829621][ T5900] m920x_read = error: -19 [ 287.844990][ T5900] dvb-usb: error -19 while querying for an remote control event. [ 288.022546][ T5901] m920x_read = error: -19 [ 288.027132][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 288.254322][ T5935] usb 2-1: new low-speed USB device number 58 using dummy_hcd [ 288.264895][ T5901] m920x_read = error: -19 [ 288.275252][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 288.384595][ T5935] usb 2-1: device descriptor read/64, error -71 [ 288.466677][ T5901] m920x_read = error: -19 [ 288.472394][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 288.547397][ T9200] loop8: detected capacity change from 0 to 7 [ 288.583676][ T9200] Dev loop8: unable to read RDB block 7 [ 288.611116][ T9200] loop8: unable to read partition table [ 288.634296][ T5901] m920x_read = error: -19 [ 288.637222][ T5935] usb 2-1: new low-speed USB device number 59 using dummy_hcd [ 288.638885][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 288.646982][ T9200] loop8: partition table beyond EOD, truncated [ 288.719473][ T9200] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 288.799293][ T5935] usb 2-1: device descriptor read/64, error -71 [ 288.824540][ T5901] m920x_read = error: -19 [ 288.832671][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 288.926283][ T5935] usb usb2-port1: attempt power cycle [ 289.010621][ T5901] m920x_read = error: -19 [ 289.025208][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 289.121165][ T5900] usb 3-1: USB disconnect, device number 55 [ 289.171590][ T9204] program syz.5.884 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 289.254323][ T9] m920x_read = error: -19 [ 289.262461][ T9] dvb-usb: error -19 while querying for an remote control event. [ 289.288196][ T9204] loop5: detected capacity change from 0 to 3 [ 289.324595][ T5935] usb 2-1: new low-speed USB device number 60 using dummy_hcd [ 289.355407][ T9204] loop5: p1 < > p4 [ 289.359288][ T9204] loop5: partition table partially beyond EOD, truncated [ 289.408690][ T5935] usb 2-1: device descriptor read/8, error -71 [ 289.454303][ T5900] m920x_read = error: -19 [ 289.489907][ T9204] loop5: p1 start 4 is beyond EOD, truncated [ 289.493265][ T5900] dvb-usb: error -19 while querying for an remote control event. [ 289.724646][ T5935] usb 2-1: new low-speed USB device number 61 using dummy_hcd [ 289.754657][ T9] m920x_read = error: -19 [ 289.766362][ T5935] usb 2-1: device descriptor read/8, error -71 [ 289.777749][ T9] dvb-usb: error -19 while querying for an remote control event. [ 289.815978][ T7212] udevd[7212]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 289.923632][ T5935] usb usb2-port1: unable to enumerate USB device [ 289.964493][ T9] m920x_read = error: -19 [ 289.970813][ T9] dvb-usb: error -19 while querying for an remote control event. [ 290.330149][ T9] m920x_read = error: -19 [ 290.363857][ T9] dvb-usb: error -19 while querying for an remote control event. [ 290.595875][ T9] m920x_read = error: -19 [ 290.619104][ T9] dvb-usb: error -19 while querying for an remote control event. [ 290.902080][ T9] m920x_read = error: -19 [ 290.907420][ T9] dvb-usb: error -19 while querying for an remote control event. [ 291.084605][ T9] m920x_read = error: -19 [ 291.090177][ T9] dvb-usb: error -19 while querying for an remote control event. [ 291.349234][ T9] m920x_read = error: -19 [ 291.365447][ T9] dvb-usb: error -19 while querying for an remote control event. [ 291.432653][ T9236] FAULT_INJECTION: forcing a failure. [ 291.432653][ T9236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.496528][ T9236] CPU: 0 UID: 0 PID: 9236 Comm: syz.3.889 Tainted: G L syzkaller #0 PREEMPT(full) [ 291.496556][ T9236] Tainted: [L]=SOFTLOCKUP [ 291.496562][ T9236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 291.496572][ T9236] Call Trace: [ 291.496578][ T9236] [ 291.496585][ T9236] dump_stack_lvl+0xe8/0x150 [ 291.496613][ T9236] should_fail_ex+0x412/0x560 [ 291.496633][ T9236] _copy_from_iter+0x1d3/0x1670 [ 291.496662][ T9236] ? do_raw_spin_lock+0x12b/0x2f0 [ 291.496679][ T9236] ? __pfx__copy_from_iter+0x10/0x10 [ 291.496706][ T9236] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 291.496727][ T9236] write_pool_user+0x101/0x310 [ 291.496751][ T9236] ? __pfx_write_pool_user+0x10/0x10 [ 291.496781][ T9236] ? bpf_lsm_file_permission+0x9/0x20 [ 291.496803][ T9236] ? security_file_permission+0x75/0x260 [ 291.496827][ T9236] vfs_write+0x61d/0xb90 [ 291.496854][ T9236] ? __pfx_vfs_write+0x10/0x10 [ 291.496884][ T9236] ? __fget_files+0x2a/0x420 [ 291.496908][ T9236] ksys_write+0x150/0x270 [ 291.496935][ T9236] ? __pfx_ksys_write+0x10/0x10 [ 291.496965][ T9236] do_syscall_64+0xe2/0xf80 [ 291.496986][ T9236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.497000][ T9236] ? trace_irq_disable+0x37/0x100 [ 291.497015][ T9236] ? clear_bhb_loop+0x60/0xb0 [ 291.497033][ T9236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.497049][ T9236] RIP: 0033:0x7f30ec59af79 [ 291.497068][ T9236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.497082][ T9236] RSP: 002b:00007f30ed4aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 291.497099][ T9236] RAX: ffffffffffffffda RBX: 00007f30ec815fa0 RCX: 00007f30ec59af79 [ 291.497111][ T9236] RDX: 0000000000010010 RSI: 0000200000000040 RDI: 0000000000000004 [ 291.497121][ T9236] RBP: 00007f30ed4aa090 R08: 0000000000000000 R09: 0000000000000000 [ 291.497131][ T9236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 291.497140][ T9236] R13: 00007f30ec816038 R14: 00007f30ec815fa0 R15: 00007f30ec93fa48 [ 291.497166][ T9236] [ 291.954497][ T9] m920x_read = error: -19 [ 291.959020][ T9] dvb-usb: error -19 while querying for an remote control event. [ 292.139357][ T9] m920x_read = error: -19 [ 292.143776][ T9] dvb-usb: error -19 while querying for an remote control event. [ 292.384894][ T9] m920x_read = error: -19 [ 292.393147][ T9] dvb-usb: error -19 while querying for an remote control event. [ 292.599157][ T5901] m920x_read = error: -19 [ 292.630735][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 292.812088][ T5901] m920x_read = error: -19 [ 292.824554][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 292.989471][ T9252] netlink: 28 bytes leftover after parsing attributes in process `syz.5.894'. [ 293.014257][ T9] m920x_read = error: -19 [ 293.018796][ T9] dvb-usb: error -19 while querying for an remote control event. [ 293.035100][ T9243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.893'. [ 293.138901][ T5935] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 293.184710][ T5886] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 293.194288][ T9] m920x_read = error: -19 [ 293.201701][ T9] dvb-usb: error -19 while querying for an remote control event. [ 293.295184][ T5935] usb 3-1: device descriptor read/64, error -71 [ 293.349338][ T5886] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 293.364411][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.372680][ T5886] usb 2-1: Product: syz [ 293.384574][ T5886] usb 2-1: Manufacturer: syz [ 293.385218][ T9] m920x_read = error: -19 [ 293.389205][ T5886] usb 2-1: SerialNumber: syz [ 293.423376][ T9269] netlink: 24 bytes leftover after parsing attributes in process `syz.3.898'. [ 293.435970][ T9269] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 293.474638][ T9] dvb-usb: error -19 while querying for an remote control event. [ 293.493366][ T5886] usb 2-1: config 0 descriptor?? [ 293.534795][ T5935] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 293.756091][ T9] m920x_read = error: -19 [ 293.768474][ T9] dvb-usb: error -19 while querying for an remote control event. [ 293.804328][ T5935] usb 3-1: device descriptor read/64, error -71 [ 293.839036][ T9273] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 293.914618][ T5935] usb usb3-port1: attempt power cycle [ 293.944375][ T9] m920x_read = error: -19 [ 293.959211][ T9] dvb-usb: error -19 while querying for an remote control event. [ 294.134323][ T5908] m920x_read = error: -19 [ 294.139370][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 294.147648][ T9] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 294.194588][ T9257] netlink: 'syz.1.897': attribute type 21 has an invalid length. [ 294.280113][ T5935] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 294.312649][ T5935] usb 3-1: device descriptor read/8, error -71 [ 294.324371][ T5901] m920x_read = error: -19 [ 294.328759][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 294.344319][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 294.364389][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 294.391704][ T9] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 294.411123][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.430470][ T9] usb 6-1: config 0 descriptor?? [ 294.443696][ T9274] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 294.504089][ T5886] usb 2-1: Firmware version (0.0) predates our first public release. [ 294.524433][ T5901] m920x_read = error: -19 [ 294.528865][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 294.535095][ T5886] usb 2-1: Please update to version 0.2 or newer [ 294.563933][ T5935] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 294.629181][ T5935] usb 3-1: device descriptor read/8, error -71 [ 294.725909][ T9273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.752732][ T5886] usb 2-1: USB disconnect, device number 62 [ 294.769237][ T5935] usb usb3-port1: unable to enumerate USB device [ 294.778586][ T5901] m920x_read = error: -19 [ 294.801299][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 294.801331][ T9273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.992543][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 295.018674][ T5901] m920x_read = error: -19 [ 295.023120][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 295.032381][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 295.049778][ T9] usb 6-1: USB disconnect, device number 32 [ 295.087331][ T9282] loop8: detected capacity change from 0 to 7 [ 295.115276][ T9282] Dev loop8: unable to read RDB block 7 [ 295.158451][ T9282] loop8: unable to read partition table [ 295.194967][ T9282] loop8: partition table beyond EOD, truncated [ 295.225350][ T5901] m920x_read = error: -19 [ 295.232391][ T9282] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 295.246035][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 295.296479][ T9286] FAULT_INJECTION: forcing a failure. [ 295.296479][ T9286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.353183][ T9286] CPU: 0 UID: 0 PID: 9286 Comm: syz.3.903 Tainted: G L syzkaller #0 PREEMPT(full) [ 295.353213][ T9286] Tainted: [L]=SOFTLOCKUP [ 295.353219][ T9286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 295.353229][ T9286] Call Trace: [ 295.353236][ T9286] [ 295.353243][ T9286] dump_stack_lvl+0xe8/0x150 [ 295.353269][ T9286] should_fail_ex+0x412/0x560 [ 295.353300][ T9286] _copy_from_iter+0x1d3/0x1670 [ 295.353331][ T9286] ? do_raw_spin_lock+0x12b/0x2f0 [ 295.353348][ T9286] ? __pfx__copy_from_iter+0x10/0x10 [ 295.353375][ T9286] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 295.353396][ T9286] write_pool_user+0x101/0x310 [ 295.353421][ T9286] ? __pfx_write_pool_user+0x10/0x10 [ 295.353445][ T9286] ? bpf_lsm_file_permission+0x9/0x20 [ 295.353463][ T9286] ? security_file_permission+0x75/0x260 [ 295.353488][ T9286] vfs_write+0x61d/0xb90 [ 295.353517][ T9286] ? __pfx_vfs_write+0x10/0x10 [ 295.353545][ T9286] ? __fget_files+0x2a/0x420 [ 295.353570][ T9286] ksys_write+0x150/0x270 [ 295.353593][ T9286] ? __pfx_ksys_write+0x10/0x10 [ 295.353623][ T9286] do_syscall_64+0xe2/0xf80 [ 295.353644][ T9286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.353663][ T9286] ? trace_irq_disable+0x37/0x100 [ 295.353678][ T9286] ? clear_bhb_loop+0x60/0xb0 [ 295.353696][ T9286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.353711][ T9286] RIP: 0033:0x7f30ec59af79 [ 295.353726][ T9286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.353739][ T9286] RSP: 002b:00007f30ed4aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 295.353756][ T9286] RAX: ffffffffffffffda RBX: 00007f30ec815fa0 RCX: 00007f30ec59af79 [ 295.353768][ T9286] RDX: 0000000000010010 RSI: 0000200000000040 RDI: 0000000000000004 [ 295.353777][ T9286] RBP: 00007f30ed4aa090 R08: 0000000000000000 R09: 0000000000000000 [ 295.353787][ T9286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 295.353797][ T9286] R13: 00007f30ec816038 R14: 00007f30ec815fa0 R15: 00007f30ec93fa48 [ 295.353823][ T9286] [ 295.579838][ T5908] m920x_read = error: -19 [ 295.585993][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 295.664592][ T5886] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 295.757510][ T9291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.829488][ T5908] m920x_read = error: -19 [ 295.833891][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 295.866757][ T9291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.901742][ T5886] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 295.954230][ T9] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 295.956399][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.994240][ T5942] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 296.024348][ T5901] m920x_read = error: -19 [ 296.030783][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 296.067418][ T5886] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 296.100459][ T5886] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 296.114669][ T5886] usb 2-1: Manufacturer: syz [ 296.151517][ T5886] usb 2-1: config 0 descriptor?? [ 296.197441][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 296.197712][ T5942] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 296.218555][ T5901] m920x_read = error: -19 [ 296.225159][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 296.239854][ T5942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.240477][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 296.268596][ T9] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 296.292164][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.313616][ T5942] usb 5-1: config 0 descriptor?? [ 296.314805][ T9] usb 6-1: config 0 descriptor?? [ 296.318859][ T5886] rc_core: IR keymap rc-hauppauge not found [ 296.333785][ T5886] Registered IR keymap rc-empty [ 296.342544][ T9] hub 6-1:0.0: USB hub found [ 296.356432][ T5942] cp210x 5-1:0.0: cp210x converter detected [ 296.367669][ T5886] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 296.427938][ T5886] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input25 [ 296.445265][ T5901] m920x_read = error: -19 [ 296.450720][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 296.571016][ T5886] usb 2-1: USB disconnect, device number 63 [ 296.587125][ T5942] usb 5-1: cp210x converter now attached to ttyUSB0 [ 296.674362][ T9] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 296.694356][ T5908] m920x_read = error: -19 [ 296.698863][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 296.739210][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 296.752671][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 296.795538][ T9] usb 6-1: USB disconnect, device number 33 [ 296.816377][ T31] INFO: task kworker/1:3:5827 blocked for more than 143 seconds. [ 296.826240][ T31] Tainted: G L syzkaller #0 [ 296.844854][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 296.884907][ T31] task:kworker/1:3 state:D stack:21824 pid:5827 tgid:5827 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 296.904337][ T5908] m920x_read = error: -19 [ 296.908873][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 296.911938][ T31] Workqueue: usb_hub_wq hub_event [ 296.957306][ T31] Call Trace: [ 296.964520][ T31] [ 296.968360][ T31] __schedule+0x1522/0x51d0 [ 296.982959][ T31] ? driver_probe_device+0x4f/0x240 [ 297.010054][ T31] ? bus_for_each_drv+0x258/0x2f0 [ 297.027214][ T31] ? usb_probe_device+0x1c4/0x3b0 [ 297.042946][ T31] ? __driver_probe_device+0x18c/0x320 [ 297.065880][ T31] ? look_up_lock_class+0x57/0x110 [ 297.084417][ T5908] m920x_read = error: -19 [ 297.087925][ T31] ? __pfx___schedule+0x10/0x10 [ 297.088813][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 297.117724][ T31] ? schedule+0x90/0x360 [ 297.133783][ T31] schedule+0x164/0x360 [ 297.143864][ T31] schedule_timeout+0xc3/0x2c0 [ 297.161078][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 297.181544][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 297.206395][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 297.226859][ T31] ? wait_for_completion+0x274/0x5e0 [ 297.243948][ T31] wait_for_completion+0x2cc/0x5e0 [ 297.262645][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 297.277585][ T31] i2c_del_adapter+0x5c0/0x790 [ 297.284296][ T5908] m920x_read = error: -19 [ 297.288908][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 297.289877][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 297.334455][ T31] ? rcu_is_watching+0x15/0xb0 [ 297.364604][ T31] ? dvb_usb_adapter_exit+0xd7/0x240 [ 297.388356][ T31] ? kfree+0x4d/0x650 [ 297.404417][ T31] dvb_usb_i2c_exit+0x64/0xb0 [ 297.409257][ T31] dvb_usb_device_exit+0x1cb/0x360 [ 297.430069][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 297.441814][ T31] cxusb_probe+0x60f/0x710 [ 297.452080][ T31] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 297.466259][ T31] ? __pfx_cxusb_probe+0x10/0x10 [ 297.471348][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 297.486549][ T5908] m920x_read = error: -19 [ 297.491370][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 297.514224][ T31] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 297.521021][ T31] usb_probe_interface+0x668/0xc90 [ 297.536135][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 297.543619][ T31] really_probe+0x267/0xaf0 [ 297.553261][ T31] __driver_probe_device+0x18c/0x320 [ 297.566512][ T31] driver_probe_device+0x4f/0x240 [ 297.571767][ T31] __device_attach_driver+0x279/0x430 [ 297.593343][ T31] bus_for_each_drv+0x258/0x2f0 [ 297.604284][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 297.612565][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 297.624260][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 297.640696][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 297.653097][ T31] __device_attach+0x2c5/0x450 [ 297.667641][ T31] ? __pfx___device_attach+0x10/0x10 [ 297.674514][ T31] ? _raw_spin_unlock+0x28/0x50 [ 297.679634][ T31] device_initial_probe+0xa1/0xd0 [ 297.684377][ T5908] m920x_read = error: -19 [ 297.685551][ T31] bus_probe_device+0x12a/0x220 [ 297.689288][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 297.694614][ T31] ? device_add+0x726/0xb70 [ 297.714579][ T31] device_add+0x7b6/0xb70 [ 297.721341][ T31] usb_set_configuration+0x1a87/0x2110 [ 297.749643][ T31] usb_generic_driver_probe+0x8d/0x150 [ 297.764342][ T31] usb_probe_device+0x1c4/0x3b0 [ 297.772970][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 297.794308][ T31] really_probe+0x267/0xaf0 [ 297.799058][ T31] __driver_probe_device+0x18c/0x320 [ 297.814218][ T31] driver_probe_device+0x4f/0x240 [ 297.820441][ T31] __device_attach_driver+0x279/0x430 [ 297.826540][ T31] bus_for_each_drv+0x258/0x2f0 [ 297.831627][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 297.838882][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 297.844612][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 297.850004][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 297.856811][ T31] __device_attach+0x2c5/0x450 [ 297.861918][ T31] ? __pfx___device_attach+0x10/0x10 [ 297.869683][ T31] ? _raw_spin_unlock+0x28/0x50 [ 297.875067][ T31] device_initial_probe+0xa1/0xd0 [ 297.880395][ T31] bus_probe_device+0x12a/0x220 [ 297.886653][ T31] ? device_add+0x726/0xb70 [ 297.891987][ T31] device_add+0x7b6/0xb70 [ 297.897701][ T31] usb_new_device+0xa08/0x16f0 [ 297.903174][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 297.909295][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 297.916516][ T31] hub_event+0x2a1c/0x4f30 [ 297.922276][ T31] ? __pfx_hub_event+0x10/0x10 [ 297.924280][ T5901] m920x_read = error: -19 [ 297.929507][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 297.941345][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 297.945708][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 297.947543][ T31] ? lock_acquire+0x221/0x330 [ 297.960870][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 297.967344][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 297.973903][ T31] process_scheduled_works+0xaec/0x17a0 [ 297.980180][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 297.986691][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 297.991847][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 297.998525][ T31] ? schedule+0x90/0x360 [ 298.003088][ T31] worker_thread+0xda6/0x1360 [ 298.008334][ T31] ? __kthread_parkme+0x19c/0x1f0 [ 298.013568][ T31] kthread+0x726/0x8b0 [ 298.018510][ T31] ? __pfx_worker_thread+0x10/0x10 [ 298.034236][ T31] ? __pfx_kthread+0x10/0x10 [ 298.044418][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 298.054354][ T31] ? __pfx_kthread+0x10/0x10 [ 298.059202][ T31] ret_from_fork+0x51b/0xa40 [ 298.074444][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 298.080052][ T31] ? __switch_to+0xc82/0x1410 [ 298.104568][ T31] ? __pfx_kthread+0x10/0x10 [ 298.109762][ T31] ret_from_fork_asm+0x1a/0x30 [ 298.115407][ T31] [ 298.118724][ T31] INFO: task syz.0.247:6820 blocked for more than 144 seconds. [ 298.127945][ T31] Tainted: G L syzkaller #0 [ 298.151849][ T5901] m920x_read = error: -19 [ 298.156951][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 298.166942][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 298.181411][ T31] task:syz.0.247 state:D stack:24600 pid:6820 tgid:6818 ppid:5844 task_flags:0x400040 flags:0x00080002 [ 298.195526][ T31] Call Trace: [ 298.199536][ T31] [ 298.203435][ T31] __schedule+0x1522/0x51d0 [ 298.210170][ T31] ? __pfx___schedule+0x10/0x10 [ 298.215594][ T31] ? schedule+0x90/0x360 [ 298.220187][ T31] schedule+0x164/0x360 [ 298.225019][ T31] schedule_preempt_disabled+0x13/0x30 [ 298.230671][ T31] __mutex_lock+0x7fe/0x1300 [ 298.235757][ T31] ? __mutex_lock+0x5ac/0x1300 [ 298.240865][ T31] ? usbdev_open+0x182/0x770 [ 298.246031][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 298.252090][ T31] ? bus_find_device+0x27d/0x2d0 [ 298.263253][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 298.268967][ T31] ? __pfx_kobject_get_unless_zero+0x10/0x10 [ 298.275465][ T31] ? usbdev_open+0xa7/0x770 [ 298.280098][ T31] usbdev_open+0x182/0x770 [ 298.285155][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 298.290377][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 298.296339][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 298.298733][ T5915] usb 5-1: USB disconnect, device number 50 [ 298.310200][ T31] chrdev_open+0x4cd/0x5e0 [ 298.315991][ T5915] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 298.325406][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 298.325536][ T5915] cp210x 5-1:0.0: device disconnected [ 298.336823][ T5901] m920x_read = error: -19 [ 298.341707][ T31] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 298.348605][ T5901] dvb-usb: error -19 while querying for an remote control event. [ 298.357401][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 298.362484][ T31] do_dentry_open+0x7ce/0x1420 [ 298.367544][ T31] vfs_open+0x3b/0x340 [ 298.372245][ T31] ? path_openat+0x346e/0x3e20 [ 298.377525][ T31] path_openat+0x3486/0x3e20 [ 298.382510][ T31] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 298.404193][ T31] ? getname_flags+0xb7/0x540 [ 298.408945][ T31] ? __pfx_path_openat+0x10/0x10 [ 298.414008][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 298.420324][ T31] do_filp_open+0x22d/0x490 [ 298.425146][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 298.430732][ T31] ? _raw_spin_unlock+0x28/0x50 [ 298.436572][ T31] ? alloc_fd+0x64b/0x6c0 [ 298.441414][ T31] do_sys_openat2+0x12f/0x220 [ 298.446401][ T31] ? __se_sys_futex+0x3a8/0x450 [ 298.453190][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 298.458673][ T31] ? rcu_is_watching+0x15/0xb0 [ 298.463683][ T31] __x64_sys_openat+0x138/0x170 [ 298.468993][ T31] do_syscall_64+0xe2/0xf80 [ 298.474897][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.481456][ T31] ? trace_irq_disable+0x37/0x100 [ 298.487045][ T31] ? clear_bhb_loop+0x60/0xb0 [ 298.492076][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.500590][ T31] RIP: 0033:0x7f99ef35b84e [ 298.506115][ T31] RSP: 002b:00007f99f02c0b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 298.515245][ T31] RAX: ffffffffffffffda RBX: 00007f99f02c16c0 RCX: 00007f99ef35b84e [ 298.523614][ T31] RDX: 000000000000a401 RSI: 00007f99f02c0c00 RDI: ffffffffffffff9c [ 298.531893][ T5908] m920x_read = error: -19 [ 298.536482][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 298.544302][ T31] RBP: 00007f99f02c0c00 R08: 0000000000000000 R09: 0000000000000000 [ 298.552609][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 298.561491][ T31] R13: 00007f99ef616038 R14: 00007f99ef615fa0 R15: 00007f99ef73fa48 [ 298.569562][ T31] [ 298.573201][ T31] [ 298.573201][ T31] Showing all locks held in the system: [ 298.581021][ T31] 1 lock held by khungtaskd/31: [ 298.586162][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 298.596135][ T31] 5 locks held by kworker/u8:11/3544: [ 298.601637][ T31] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa9/0x140 [ 298.611627][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 298.634265][ T31] #2: ffff8880b87260d8 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 298.643436][ T31] #3: ffffffff9a2c5af0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x83/0x580 [ 298.655403][ T31] #4: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x23c0 [ 298.670359][ T31] 2 locks held by getty/5585: [ 298.675416][ T31] #0: ffff8880345100a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 298.693734][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 298.704360][ T31] 5 locks held by kworker/1:3/5827: [ 298.709711][ T31] #0: ffff88801fad8548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 298.714320][ T5908] m920x_read = error: -19 [ 298.725515][ T31] #1: ffffc9000430fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 298.725733][ T5908] dvb-usb: error -19 while querying for an remote control event. [ 298.745984][ T31] #2: ffff888028c65198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 298.755244][ T31] #3: ffff888033ddf198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 298.766186][ T31] #4: ffff888077912160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 298.777203][ T31] 4 locks held by udevd/5828: [ 298.781883][ T31] #0: ffff88807db7b790 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 298.791106][ T31] #1: ffff8880565a6488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 298.801004][ T31] #2: ffff88804abd5b48 (kn->active#31){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 298.811644][ T31] #3: ffff888033ddf198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 298.823601][ T31] 1 lock held by syz.0.247/6820: [ 298.829759][ T31] #0: ffff888028c65198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 298.840044][ T31] [ 298.842486][ T31] ============================================= [ 298.842486][ T31] [ 298.854949][ T31] NMI backtrace for cpu 1 [ 298.854974][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 298.854993][ T31] Tainted: [L]=SOFTLOCKUP [ 298.854998][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 298.855004][ T31] Call Trace: [ 298.855010][ T31] [ 298.855016][ T31] dump_stack_lvl+0xe8/0x150 [ 298.855036][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 298.855055][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 298.855074][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 298.855092][ T31] sys_info+0x135/0x170 [ 298.855106][ T31] watchdog+0xf90/0xfe0 [ 298.855123][ T31] ? watchdog+0x209/0xfe0 [ 298.855139][ T31] kthread+0x726/0x8b0 [ 298.855161][ T31] ? __pfx_watchdog+0x10/0x10 [ 298.855179][ T31] ? __pfx_kthread+0x10/0x10 [ 298.855194][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 298.855205][ T31] ? __pfx_kthread+0x10/0x10 [ 298.855218][ T31] ret_from_fork+0x51b/0xa40 [ 298.855231][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 298.855241][ T31] ? __switch_to+0xc82/0x1410 [ 298.855260][ T31] ? __pfx_kthread+0x10/0x10 [ 298.855273][ T31] ret_from_fork_asm+0x1a/0x30 [ 298.855298][ T31] [ 298.855306][ T31] Sending NMI from CPU 1 to CPUs 0: [ 298.904361][ T5908] m920x_read = error: -19 [ 298.910156][ C0] NMI backtrace for cpu 0 [ 298.910177][ C0] CPU: 0 UID: 0 PID: 5908 Comm: kworker/0:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 298.910200][ C0] Tainted: [L]=SOFTLOCKUP [ 298.910205][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 298.910216][ C0] Workqueue: events dvb_usb_read_remote_control [ 298.910241][ C0] RIP: 0010:console_unlock+0x6b/0x1c0 [ 298.910259][ C0] Code: c7 44 24 30 60 2b a3 81 4c 8d 6c 24 20 49 c1 ed 03 48 b8 f1 f1 f1 f1 f8 f2 f8 f3 49 be 00 00 00 00 00 fc ff df 4b 89 44 35 00 50 4e 21 00 43 c6 44 35 06 04 c7 44 24 50 00 00 00 00 48 89 df [ 298.910273][ C0] RSP: 0018:ffffc900053e77a0 EFLAGS: 00000a02 [ 298.910332][ C0] RAX: f3f8f2f8f1f1f1f1 RBX: ffffc900053e77f0 RCX: 0000000000000001 [ 298.910349][ C0] RDX: 00000000ce130fc9 RSI: ffffffff8df35112 RDI: ffffffff8c073b00 [ 298.910361][ C0] RBP: ffffc900053e7850 R08: ffffffff81a32fff R09: ffffffff8e54c760 [ 298.910373][ C0] R10: dffffc0000000000 R11: fffffbfff1fde40f R12: 0000000000000000 [ 298.910384][ C0] R13: 1ffff92000a7cef8 R14: dffffc0000000000 R15: 1ffff92000a7cf10 [ 298.910396][ C0] FS: 0000000000000000(0000) GS:ffff8881256f3000(0000) knlGS:0000000000000000 [ 298.910409][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 298.910420][ C0] CR2: 0000563f4be7b3b8 CR3: 000000007675e000 CR4: 00000000003526f0 [ 298.910435][ C0] Call Trace: [ 298.910444][ C0] [ 298.910452][ C0] ? vprintk_emit+0x2cf/0x560 [ 298.910471][ C0] ? __pfx_console_unlock+0x10/0x10 [ 298.910485][ C0] ? vprintk_emit+0x2cf/0x560 [ 298.910500][ C0] ? vprintk_emit+0x455/0x560 [ 298.910515][ C0] ? vprintk_emit+0x2cf/0x560 [ 298.910528][ C0] ? vprintk_emit+0x2cf/0x560 [ 298.910543][ C0] vprintk_emit+0x485/0x560 [ 298.910560][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 298.910579][ C0] _printk+0xdd/0x130 [ 298.910600][ C0] ? usb_control_msg+0x2bf/0x3e0 [ 298.910619][ C0] ? __pfx__printk+0x10/0x10 [ 298.910640][ C0] ? usb_control_msg+0x2bf/0x3e0 [ 298.910660][ C0] m920x_rc_core_query+0x2c5/0x540 [ 298.910679][ C0] dvb_usb_read_remote_control+0xb4/0x1a0 [ 298.910696][ C0] ? process_scheduled_works+0xa0f/0x17a0 [ 298.910719][ C0] process_scheduled_works+0xaec/0x17a0 [ 298.910753][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 298.910774][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 298.910793][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 298.910808][ C0] ? schedule+0x90/0x360 [ 298.910827][ C0] worker_thread+0xda6/0x1360 [ 298.910861][ C0] kthread+0x726/0x8b0 [ 298.910879][ C0] ? __pfx_worker_thread+0x10/0x10 [ 298.910901][ C0] ? __pfx_kthread+0x10/0x10 [ 298.910918][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 298.910930][ C0] ? __pfx_kthread+0x10/0x10 [ 298.910945][ C0] ret_from_fork+0x51b/0xa40 [ 298.910961][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 298.910974][ C0] ? __switch_to+0xc82/0x1410 [ 298.911001][ C0] ? __pfx_kthread+0x10/0x10 [ 298.911018][ C0] ret_from_fork_asm+0x1a/0x30 [ 298.911046][ C0] [ 298.911287][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 298.911304][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 298.911327][ T31] Tainted: [L]=SOFTLOCKUP [ 298.911334][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 298.911344][ T31] Call Trace: [ 298.911352][ T31] [ 298.911359][ T31] vpanic+0x1e0/0x670 [ 298.911383][ T31] panic+0xc5/0xd0 [ 298.911401][ T31] ? __pfx_panic+0x10/0x10 [ 298.911421][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 298.911447][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 298.911472][ T31] watchdog+0xfda/0xfe0 [ 298.911494][ T31] ? watchdog+0x209/0xfe0 [ 298.911516][ T31] kthread+0x726/0x8b0 [ 298.911536][ T31] ? __pfx_watchdog+0x10/0x10 [ 298.911551][ T31] ? __pfx_kthread+0x10/0x10 [ 298.911571][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 298.911590][ T31] ? __pfx_kthread+0x10/0x10 [ 298.911608][ T31] ret_from_fork+0x51b/0xa40 [ 298.911625][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 298.911640][ T31] ? __switch_to+0xc82/0x1410 [ 298.911671][ T31] ? __pfx_kthread+0x10/0x10 [ 298.911690][ T31] ret_from_fork_asm+0x1a/0x30 [ 298.911722][ T31] [ 298.917446][ T31] Kernel Offset: disabled