last executing test programs: 5m2.483032424s ago: executing program 1 (id=984): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x101, 0x4, 0x2, 0x0, 0x5}) r0 = getpgrp(0xffffffffffffffff) capget(&(0x7f0000000180)={0x20080522, r0}, &(0x7f0000000480)={0x0, 0x2, 0x80, 0x200, 0x4, 0xfffffffd}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x2, 0xd, 0x2, 0xfe, 0x0, 0x8}, 0xe) shutdown(r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_pidfd_open(r0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0xc, &(0x7f0000000100)=0x3e60, 0x48) sendmsg$netlink(r4, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="240000001e00290700000000000000000c000000000000000000", @ANYRES32=r3], 0x24}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) readv(r4, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/17, 0x11}, {&(0x7f0000000380)=""/238, 0xee}, {&(0x7f0000000480)}], 0x3) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x8, 0xffc, 0x8208, 0x4, 0x2, 0x2, 0x3, 0xa, r5}, &(0x7f00000001c0)=0x20) capget(&(0x7f0000000000)={0x20071026, r1}, &(0x7f0000000140)={0x457, 0x6, 0x10000, 0xa, 0x800, 0x1000}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) capset(&(0x7f00000002c0)={0x20080522, r0}, &(0x7f0000000300)={0x8, 0x2, 0x1, 0x3ff, 0x2, 0x8}) 5m2.392232076s ago: executing program 1 (id=985): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@delchain={0x80, 0x65, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffff}, {0xe, 0x4}, {0xfff3, 0xc}}, [@f_rsvp={{0x9}, {0x50, 0x2, [@TCA_RSVP_ACT={0x4c, 0x6, [@m_ct={0x48, 0x1d, 0x0, 0x0, {{0x7}, {0x4}, {0x1d, 0x6, "de302b6fd5b04ab5b9bcb27acb01d4c41e871bcff1cdac8227"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x40881) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000010240)={&(0x7f0000000180), 0xc, &(0x7f0000010200)={&(0x7f00000001c0)={0x10, 0x3f7, 0x0, 0x0, 0x0, {0xffff, 0x453, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0'}}, 0x10020}}, 0x0) recvmmsg(r0, &(0x7f0000010740)=[{{&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000000)=[{&(0x7f0000010280)=""/195, 0xc3}, {&(0x7f0000010380)=""/182, 0xb6}], 0x2, &(0x7f0000010440)=""/243, 0xf3}, 0xff}, {{&(0x7f0000010540)=@ax25={{0x3, @default}, [@remote, @netrom, @remote, @remote, @netrom, @netrom, @rose, @default]}, 0x80, &(0x7f0000000100)=[{&(0x7f00000105c0)=""/114, 0x72}], 0x1, &(0x7f0000010640)=""/238, 0xee}, 0x280000}], 0x2, 0x12042, &(0x7f00000107c0)={0x77359400}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, &(0x7f0000010800)=0x4) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x20000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f00000002c0)={r7, 0xa9ac}, &(0x7f0000000300)=0x8) setsockopt$inet6_int(r5, 0x29, 0x7, &(0x7f0000000140)=0x6, 0x4) recvmmsg$unix(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000680)=""/128, 0x80}], 0x1}}], 0x1, 0x1, 0x0) 5m2.2432918s ago: executing program 1 (id=988): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001640)=ANY=[@ANYBLOB="f0000000100001000000000000000000fe8000000000000000000000000000aaffffffff00000000000000000000000000000000000000000a00200089000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf0}}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0}, 0x1, 0x0, 0x0, 0x404d010}, 0x20040005) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)={0x20, 0x76, 0x31f, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x5, 0x0, 0x0, @pid}]}, 0x20}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)={0x40, 0xa, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x107}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xa6f}}]}]}, 0x40}}, 0x48080) r4 = syz_open_dev$vim2m(&(0x7f0000000200), 0x401, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0xffffffffffffffff}, {0x3}, 0x6}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f14247313060608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[], 0xfe33) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xf4, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xc0}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfff}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x24000000}, 0x404c004) r7 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) getsockopt$inet_mptcp_buf(r7, 0x11c, 0x4, &(0x7f0000000640)=""/4096, &(0x7f0000000000)=0x1000) 5m2.141258233s ago: executing program 1 (id=989): mount$bpf(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080), 0x89, &(0x7f00000001c0)={[{@mode={'mode', 0x3d, 0x4}}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) open(&(0x7f00000000c0)='./cgroup\x00', 0x80000, 0x10) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip6_tables_names\x00') read$FUSE(r0, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000080), 0x57d2, 0x942) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000000)='}\'\x00', &(0x7f0000000040)='./file5\x00', r1) 5m2.057434268s ago: executing program 1 (id=990): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) socket$alg(0x26, 0x5, 0x0) r1 = fanotify_init(0x0, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0/file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r5 = syz_usbip_server_init(0x1) write$usbip_server(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0x35) r6 = memfd_create(&(0x7f0000000080)='-B\xd5\x9appp\xf0\x00\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}\x00\x10\x00\x00\x00\x00\x00\x00\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x11\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) r7 = dup(r6) fanotify_mark(r1, 0x1, 0x8000000, r7, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x10000000080d) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d8000000180081064e81f789db4cb904021d080006007c09e8ee55a10a001500040014260500000008000f0000000401a8001600200008801c000100a0e4e8e702ef52a98516277ce06bba519554e2686715dc86e5c9ce8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9a0000d5d9001901df60e1b6649682e1cace81ed0bffece0b42abf", 0xd8}], 0x1}, 0x4040) 5m0.64636147s ago: executing program 1 (id=999): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="851606"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2f, @string={0x2f, 0x3, "9e4f401f1723272c93bfb5768b69936da11b9a7f3d766f4f4b955569de89ba78fd8af83f1df82e26cb7de283b4"}}, &(0x7f0000000240)={0x0, 0x22, 0xa, {[@local=@item_012={0x1, 0x2, 0x0, '|'}, @global=@item_012={0x2, 0x1, 0x7, "bf28"}, @local=@item_012={0x1, 0x2, 0x4, 'H'}, @global=@item_012={0x2, 0x1, 0x0, "15ae"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0xc, 0x1, {0x22, 0x819}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x0, 0x14, 0x93, "2f0300841b652e0a596869bd875fee848caf54cb318b20a29ded26061c6fa92a87db54e2133fe8c5785324a640425080ef63fab16a7c8ab860bd70b4496baacf8bbc37f71a78751d69cff7929aa81fa545a5f659aac4222702304a5b15faed3a3e9b44454d97621928519bc14da66caf3d9207707f09a2be703c63ee145403178c8f2f78dd2f7948b181142550aeda308e0f4b"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000440)={0x0, 0x8, 0x1}, &(0x7f0000000480)={0x20, 0x1, 0x21, "42addbbdb510307d1ab55fdf2a50b615b5c0cf83bc729af7bdc9922361f3a1b14e"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x4}}) 4m45.127323788s ago: executing program 32 (id=999): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="851606"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2f, @string={0x2f, 0x3, "9e4f401f1723272c93bfb5768b69936da11b9a7f3d766f4f4b955569de89ba78fd8af83f1df82e26cb7de283b4"}}, &(0x7f0000000240)={0x0, 0x22, 0xa, {[@local=@item_012={0x1, 0x2, 0x0, '|'}, @global=@item_012={0x2, 0x1, 0x7, "bf28"}, @local=@item_012={0x1, 0x2, 0x4, 'H'}, @global=@item_012={0x2, 0x1, 0x0, "15ae"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0xc, 0x1, {0x22, 0x819}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x0, 0x14, 0x93, "2f0300841b652e0a596869bd875fee848caf54cb318b20a29ded26061c6fa92a87db54e2133fe8c5785324a640425080ef63fab16a7c8ab860bd70b4496baacf8bbc37f71a78751d69cff7929aa81fa545a5f659aac4222702304a5b15faed3a3e9b44454d97621928519bc14da66caf3d9207707f09a2be703c63ee145403178c8f2f78dd2f7948b181142550aeda308e0f4b"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000440)={0x0, 0x8, 0x1}, &(0x7f0000000480)={0x20, 0x1, 0x21, "42addbbdb510307d1ab55fdf2a50b615b5c0cf83bc729af7bdc9922361f3a1b14e"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x4}}) 3m16.206645037s ago: executing program 4 (id=1601): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x0, 0xfffffffff0000000}) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0xfe33) 3m16.053114035s ago: executing program 4 (id=1603): syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109021b00010000000009047800018fa68d0009058a", @ANYRES8], 0x0) syz_usb_connect$cdc_ncm(0x5, 0x72, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x2, 0x1, 0x1, 0x0, 0xf9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "03394f66"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x818, 0x8, 0x80}, {0x6, 0x24, 0x1a, 0x7, 0x1}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x9, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x280, 0x4, 0xff, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x2, 0x0, 0x5}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x5, 0x1, 0xf9, 0x10, 0x3}, 0x124, &(0x7f0000000100)={0x5, 0xf, 0x124, 0x6, [@generic={0xde, 0x10, 0xb, "85cc8e24d0e9baee7dd823a0066bd4b0cfbe68e3528f8f1be52e33d836aa4307d1fb78ca2b4cc167a19fe0250fac7d87958f6b578d7a15ceeb45ef775a92054f4c8506b267c5f1bf2fea3e3f5e88d78637c37f4a51d87d281e1e43f3327dc01a384b757f8ee04f384c7ee9f6eaf50bc8b38b36bf432f1b6bc55b59aa4c63c33a00ac961dd69e468a928ec50aa14593fdc784159365d899edfcc45033e20777173214ec99457fc9cdea4c120345d10716026ceb65fbd74e5b138e78035f63515712585ab2a6296c2012a519d7601c51af9204952bb7b5214992f364"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0xc, 0x2, 0x7, 0xbd}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0xb}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "15ec7b0367425875051310bcce845b8d"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "150eff4011c7fb0dda2de40f89fbaa9d"}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x6, 0x1}]}, 0x7, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x443}}, {0xb4, &(0x7f00000002c0)=@string={0xb4, 0x3, "de24b11b5e0d4427928cc8979279960758cd8702a2b579f03132d2673d97f6d2a6bd7de338e689f170ef833b61a40dc7b55616f9092275f96986501193ccafa2576d2e89db0a7a68bc0c5a1355e32b9c7ea766bc2eff109ec1a9eea4ecd14c1c997ebe672d980b7ebbd4ce9fc37e817cba2c054d267a5e0aa7b8b1f1d88a5ee29c15a3198a0fa4ff99fa2378b2e0cf09f41a4bbc1f1a64d9fe0583972f988a2c7cf09584ff4fd2eab3c7d190ed8528b9dcc5"}}, {0xf, &(0x7f0000000380)=@string={0xf, 0x3, "b0ef10f6d2761adef05cfa0b0f"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x19}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x804}}]}) 3m14.519592018s ago: executing program 4 (id=1614): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="6e3d0a7878e1405d5835aa17d3e4aee7edba35cf9f0bc4835180b610b008904b14a131652d4b4a5d2094f7374df7ed59904944b4aba9b5b9f6169f1f63adf8c7c23f74228ead", 0x46}, {&(0x7f00000000c0)="3d03188c091c2dfe61692ba1a1d73a8cef219599e3b5c3a6c7a6dbacb1bcaa1daa15f36c3c91fe00382b84dd8196e4e4d7935e8dbd0b1cbae1543d4231a821d5480eee2834c2b91e69f45b", 0x4b}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f0000000340)="2bc7b1468e1baf87a36cc418a626739202e894245854a3d7ca502541a1c9d75f1da01f96eb42c637b52c41188586d6494a223ceec4c05bee2bc7f9d31f568f1cd40f7726523728f58f2dc2a157bca5312e2812b61eee2a8c29e612e87671", 0x5e}, {&(0x7f0000000240)="05f2741f8a316a2147ccdf9a922195d7ba06e7e4995563edb31f4c11aed6a2547fd50e27dd3e9c5d02a088bcd5c0d7cf98853f52e794c8781def95e66b40422dad7d72d860cfffca0dec8d01a176d1bfbd6ea4094e65f576f970592ba30a1b47499d0e0784e0db07a1cde3c8d15b653cc2b338a8e1cc8bb33d71694893f8233b1915c00f0ce542f505177504e6f2bc685de4e41a02bd45be9ea2e1d1aa1b0aff8ace24730072bf1ca3d20409579a2b7cc1529743d2b9d4f3e1b5b549c0a4cec2316626b5b922bcfeeb110c94e0005554", 0xd0}], 0x5}, 0x40000002) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000080)=0xfffffffe) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, 0x0, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='team0\x00', 0x10) (async) listen(r1, 0x2) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) (async) listen(r2, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000094037b40fd080200fdca010203010902120001000000000904"], 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) (async) r5 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r5, 0x0) (async) ioctl$BLKRRPART(r5, 0x125f, 0x0) (async) bind$alg(r5, &(0x7f0000001440)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-serpent-avx2\x00'}, 0x58) 3m14.43830719s ago: executing program 4 (id=1615): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa6820000}, 0xafe6) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r2, 0x1) r3 = accept4(r2, 0x0, 0x0, 0x400) recvfrom$inet_nvme(r3, &(0x7f00000000c0)=""/206, 0xce, 0x42, 0x0, 0x0) setreuid(0xffffffffffffffff, 0xee00) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, &(0x7f0000000080)) 3m14.373081015s ago: executing program 4 (id=1616): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) unshare(0x28000600) r0 = memfd_create(&(0x7f0000000100)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xca', 0x2) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) fcntl$addseals(r0, 0x409, 0x8) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x603, 0xff00, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000019100)=""/162, 0xa2}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x1a3) 3m13.7639691s ago: executing program 4 (id=1619): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x2, 0x80805, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000200)=0x8) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="3c00028038"], 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) getsockopt(r8, 0x111, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) 2m58.575933441s ago: executing program 33 (id=1619): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x2, 0x80805, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000200)=0x8) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="3c00028038"], 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) getsockopt(r8, 0x111, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) 2m50.601552189s ago: executing program 3 (id=1720): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x5, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x2000000, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x1, 0x1, 0xc, "facd1d0b5f120f7fcdfc6fbe43ea62cc01c5a2503dc31c795bb1123997b013099800000080000800dd9098020b00004c516bdd8a0f35000000000000e500", "32d83eb10000c8869cba6408f1560097d37bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc5bce448f11f3fb0559a00", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) (async) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 2m50.489287256s ago: executing program 3 (id=1721): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x144082, 0x0) mlockall(0x2) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') read$FUSE(r3, 0x0, 0x0) shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(0x0, 0xc) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000240)={0x0, 0xfb, r5, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r4, 0xc01864b1, &(0x7f0000000040)={r6, 0x2, 0x8, 0x20000190, &(0x7f0000000100)=[{0x8001, 0x0, 0x10}]}) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x142, &(0x7f0000000680)={0x77359400}) unshare(0x28020480) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) 2m47.446617302s ago: executing program 3 (id=1734): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000800)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x400001, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xe49f, 0xeb36, 0x2, 0x19, 0x76c9, 0x200, 0x3, 0x1, 0x1, 0x5, 0x800009, 0x80000005, 0x9, 0x10, 0x80000000, 0x10, 0xb50, 0x0, 0x7, 0x3, 0xffffffff, 0x3, 0xfffffffe, 0x1, 0x8, 0x24, 0x7ffb, 0x8, 0xfffffffd, 0x20200, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x6, 0x1], [0x66ac, 0xfffffff9, 0x4, 0x3, 0x6, 0x7, 0x13e, 0xd, 0x4, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x5, 0x40, 0x0, 0x7ff, 0x1, 0x9, 0x9, 0x89, 0x7ff, 0x0, 0x1, 0xfffffff7, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x7, 0x0, 0x9, 0x4c, 0x9, 0x8, 0x8000, 0xe66, 0x8, 0x2, 0x81, 0x800004b, 0x583c, 0x6, 0xb, 0x4, 0x400000fc, 0x2, 0x8d1, 0x8fd, 0xfffffffa, 0xe4, 0x8e, 0x10001, 0x4, 0x401, 0xadd, 0x7f, 0xd], [0x8396, 0x7, 0xffff6a0b, 0x9, 0x8000, 0x1, 0x3, 0xe88, 0x28, 0x6, 0x7, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0xb, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x47d8a7f1, 0x2, 0x3, 0xc, 0x4, 0xb0f, 0x22, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xf4, 0x4, 0xe, 0xffffffff, 0x6, 0x2ee, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0xbc0, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0d787d, 0xffffff4e, 0x9, 0x4, 0x7, 0x3, 0x0, 0x6, 0x9, 0x4, 0x3], [0x10000010, 0xb, 0x9, 0x5, 0xa5e, 0xfe, 0x102, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x0, 0xa, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xdaa, 0x2004, 0x7, 0x103, 0x6, 0x4c, 0x6, 0x4000400, 0x1fffe0, 0xfffffffb, 0x40, 0x80000002, 0x4, 0x100000b, 0xfff, 0x3c, 0x9, 0x0, 0x9, 0x1, 0x0, 0x7, 0x8ac1, 0x0, 0x5, 0x80000002, 0x80000002, 0xff, 0x6, 0x3, 0x80000000, 0xffffffff, 0x7, 0xfffffff8, 0xd, 0x7, 0x10, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) (async) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x15) (async, rerun: 32) ioctl$UI_DEV_CREATE(r1, 0x5501) (async, rerun: 32) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a002a000400142603600e120800060000000441a8000800a4001140040000000c5c04613e60a2a6c30942519c6f749229c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a707f4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5dd330d4e1ffffffffc1c9b6278754ca397cc87566388b0dd6e4edef3d9300", 0xd8}], 0x1}, 0x4000) 2m47.19320131s ago: executing program 3 (id=1735): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) close(r0) 2m47.157729157s ago: executing program 3 (id=1736): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x80401, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000001c0), 0x2) creat(&(0x7f0000001380)='./file0\x00', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x88800, 0x12d) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x2000, r2}, 0x0) landlock_restrict_self(r1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r4, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r4, 0x80) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, 0x0) close(r0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x202, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r7, 0xc018aec0, &(0x7f0000000140)={0x10002, 0x1c0, 0x240, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904"], 0x0) 2m45.493290859s ago: executing program 3 (id=1744): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0xc, 0x7, 0xe1e0, 0x6}}}, 0xa) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001240)={'wlan1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) 2m38.448579919s ago: executing program 5 (id=1783): syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$char_usb(r0, &(0x7f0000000a80)=""/188, 0xba) 2m36.310063254s ago: executing program 5 (id=1796): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000007006fbdbc9c99c91000008000300", @ANYRES32=r2, @ANYBLOB="0a0018000303030303030000080026006c09000008009f"], 0x38}, 0x1, 0x0, 0x0, 0x805}, 0x0) 2m35.536335633s ago: executing program 5 (id=1802): open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r0, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r3, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) read$FUSE(r4, &(0x7f0000002480)={0x2020}, 0x2020) 2m35.350260837s ago: executing program 5 (id=1806): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) dup2(r2, r0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000100)=0xfffffff7) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) 2m35.177578236s ago: executing program 5 (id=1807): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84) 2m34.939264043s ago: executing program 5 (id=1809): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$nl_netfilter(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[], 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x4040001) 2m34.651214139s ago: executing program 34 (id=1809): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$nl_netfilter(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[], 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x4040001) 2m30.324989527s ago: executing program 35 (id=1744): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0xc, 0x7, 0xe1e0, 0x6}}}, 0xa) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001240)={'wlan1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) 1m26.101271675s ago: executing program 6 (id=2187): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f00000001c0)={0x20, 0x5, 0x5, "e9a38c46e0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r1) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c64030005c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) r3 = open$dir(&(0x7f0000000080)='./cgroup\x00', 0x24e040, 0x8) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40106614, &(0x7f00000000c0)) (async) mount$bind(&(0x7f0000000480)='./cgroup\x00', &(0x7f00000004c0)='./cgroup\x00', 0x0, 0x1002008, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480), 0x0}) 1m25.203009583s ago: executing program 6 (id=2191): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x594cb000) mknod(&(0x7f0000000140)='./file0\x00', 0x20, 0x10001) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002400)={0x18, 0x3c, 0x73fa7e54e7639a19, 0x0, 0x4000, {0x4, 0x7c}, [@nested={0x4, 0xfc}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='xfs\x00', 0x10003, &(0x7f00000000c0)='norecovery') 1m25.012052027s ago: executing program 6 (id=2192): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000a30a000000000000f8ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000800"/112], 0xb8}}, 0x0) 1m24.916901246s ago: executing program 6 (id=2193): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "52dddc2e0fe0354add9a2c2a028e07598a134fc7080100fb00000017fffff300", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, 0x0) r2 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./file0/file0\x00', 0x1ea) mount$bind(&(0x7f0000000300)='./file1\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2a05004, 0x0) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000e29000/0x1000)=nil, 0x1000) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x110, r5, 0x9) munmap(&(0x7f00007dd000/0x3000)=nil, 0x3000) mremap(&(0x7f0000807000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 1m24.897158834s ago: executing program 6 (id=2194): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) r1 = syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f010008000000000000000424020009058103"], 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000000)=0x8) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000240)=0x9) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e", @ANYRES8=r0], 0x0) syz_usb_disconnect(r1) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x7, 0x1, 0x2, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6e, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x4, 0x7}}}}}]}}]}}, 0x0) 1m23.77844391s ago: executing program 6 (id=2203): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000440)=0x1b) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000100)={r1, 0xf7c8, 0x30, 0x9}, &(0x7f0000000200)=0x18) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) recvmmsg(r2, &(0x7f0000008540)=[{{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/24, 0x18}, {&(0x7f0000001980)=""/184, 0xb8}, {&(0x7f00000016c0)=""/235, 0xeb}, {&(0x7f0000001600)=""/185, 0xb9}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/248, 0xf8}], 0x7}, 0x10001}, {{0x0, 0x0, 0x0}, 0xfff}], 0x2, 0x4022, 0x0) 1m23.525281282s ago: executing program 36 (id=2203): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000440)=0x1b) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000100)={r1, 0xf7c8, 0x30, 0x9}, &(0x7f0000000200)=0x18) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) recvmmsg(r2, &(0x7f0000008540)=[{{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/24, 0x18}, {&(0x7f0000001980)=""/184, 0xb8}, {&(0x7f00000016c0)=""/235, 0xeb}, {&(0x7f0000001600)=""/185, 0xb9}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/248, 0xf8}], 0x7}, 0x10001}, {{0x0, 0x0, 0x0}, 0xfff}], 0x2, 0x4022, 0x0) 6.969097698s ago: executing program 0 (id=2595): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)={0x28, 0x19, 0x15, 0x0, 0xfffffffc, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x00\x00\x00\x00\x00\x00'}, @nested={0xc, 0x9, 0x0, 0x1, [@nested={0x5, 0x79, 0x0, 0x1, [@generic="bd"]}]}]}, 0x28}], 0x1}, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000080), 0x100000001, 0x100) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x11800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004051}, 0x4c044) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x88800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x606}]}) syz_usb_connect$cdc_ecm(0x2, 0x59, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x1, 0x0, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x7, 0xff, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mdlm_detail={0x4, 0x24, 0x13, 0x9}, @acm={0x3, 0x24, 0x2, 0x2}, @mdlm_detail={0x0, 0x24, 0x13, 0x3}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x8c}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0x0, 0x80}}}}}]}}]}}, 0x0) 6.83085168s ago: executing program 7 (id=2597): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x1) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x101, 0xffffffffffffffff}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000400)=[@acquire], 0x0, 0x0, 0x0}) r8 = dup3(r7, r1, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x4c8c1, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f000006b000/0x3000)=nil, 0x3000, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) remap_file_pages(&(0x7f0000521000/0x2000)=nil, 0x2000, 0x1000000, 0x5, 0x40000) getresuid(&(0x7f0000000280), &(0x7f0000000340), &(0x7f00000002c0)) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r11, 0x1, 0x1070bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x8050) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r9, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r11, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0xfffffffa, 0x1d}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0xc0a85320, &(0x7f0000000500)={{0x80}, 'port0\x00', 0x72, 0x9189b, 0x0, 0x8000008, 0x3, 0x4, 0x82, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f00000001c0)={0x800100, 0x3, 0x22, 0xe1d9, 0x1101, 0xff}) 5.461865063s ago: executing program 0 (id=2606): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) (async) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) (async, rerun: 64) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) (rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) (async) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r2, 0x80184151, &(0x7f0000000180)={0x0, &(0x7f0000000200)="aef9b47f7f8771021fe51401be095532e3899f4ec0afd1ebdf4aff492c96d6e78fae8222c46ab797b910f9661c5fb84825f0cbe3836547192063c7b4fe7b9fa4ea43a512d2c06b58fae00c9a11f393202f61c86da30f1babd87723c2882b665a1dd3377ec363ed803fc0fc4cea1f786d51ea27b97da7c67af82f08fc77d9b8211d9f7a05fffae77ceb9f984b13bc55266fa0115983e847afec6eebfdfeb155334108d738ff04fc4b454af507ee0cfce04bc8050af71f32f2c8bbecea2b6adbfb2c9afa071411422871e72c0821b9a482c5694362ee264a5a0ebc768cdbb84fd4d79d069eba5a4bdcf7edc7541d0376", 0xef}) (async, rerun: 32) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x1, 0xfffffdfe, 0x2, 0x8, 0x8000, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x1, 0xfffffffe, 0x2}) (rerun: 32) 5.412530515s ago: executing program 0 (id=2607): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x323, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xc, 0x10, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000000900020073797a32000000006c000480680001800b00010074617267657400005800028040000300cd4b6abe42030763d02899c7e9ee2bcc9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd65080000000000000000000a000100484d41524b00000008000240000000000900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) setsockopt$sock_int(r2, 0x1, 0x31, &(0x7f0000001600)=0xffffffff, 0x4) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000080)={{0x29, @multicast2, 0x4e21, 0x2, 'dh\x00', 0x17, 0x1000, 0xd}, {@remote, 0x4e23, 0x1, 0x6, 0xffffffff, 0x81}}, 0x44) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, 0x0, 0x0) ioctl$HIDIOCGFLAG(r1, 0x8004480e, &(0x7f0000000100)) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000140)={0x20, 0x23, 0x7, {0x7, 0xc, '\t\x00\x00\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 5.013110901s ago: executing program 7 (id=2610): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r1, &(0x7f0000000740)="50fbdf", 0x3, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000240)='}', 0x1) sendto$inet(r1, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3", 0x92, 0x52, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x2, 0x0, 0x40e, 0x3, 0xfffffff8}}) 4.937224074s ago: executing program 7 (id=2611): r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r0, 0x0, 0x45bcd9837daf8e4f, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r1, 0x40044145, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x1d, 0x91, 0x67, 0x20, 0x174f, 0x6a31, 0x263f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x83, 0x3c, 0x8f}}]}}]}}, 0x0) 4.169308506s ago: executing program 8 (id=2615): prctl$PR_MCE_KILL_GET(0x22) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000400304c19700000000000109022400010000300009040000010300000009210000000122070009"], 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f47"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x60080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0xc], 0x8000000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e440b021005"], 0x47) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x801) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003a80)=ANY=[], 0x3888}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$VIDIOC_S_AUDIO(r3, 0x40345622, &(0x7f0000000780)={0xd, "521f5b436b6ac41dc8d18e8cb6df21dfb062bef1edd4e9e88a1fd8d9b1d8d071", 0x2}) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xfe, 0x85, 0x71, 0x8, 0xb48, 0x3007, 0x4f64, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x38, 0x0, 0x0, 0x23, 0x52, 0x26}}]}}]}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 3.734262416s ago: executing program 0 (id=2616): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x6, 0x24, &(0x7f0000000740)=ANY=[], 0x0) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)='\b\x00', 0x2}, {&(0x7f0000000040)="96b414bbbcc9", 0x6}], 0x2}, 0x24048004) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) ioctl$EVIOCRMFF(r1, 0xc0085508, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000001340)={0x40, 0x0, 0x8, {0x8, 0xc, "392cdaab1802"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "030000"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0xe, "ea6aafaabfc5926708627c6c0963"}, 0x0}) 3.628946563s ago: executing program 7 (id=2617): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000ac0)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRES16=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0xee00, @ANYBLOB=',']) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) read$FUSE(r3, &(0x7f00000017c0)={0x2020}, 0x2020) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285629, &(0x7f0000000540)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000740)={0x1, 0x0, 0xe6a, 0xa}) accept4(r4, 0x0, 0x0, 0x800) (async) r5 = accept4(r4, 0x0, 0x0, 0x800) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(r6) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) (async) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3.516222089s ago: executing program 7 (id=2618): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c0400070080000700", 0x33a) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x84000) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}, 0xc) (async) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f00000003c0)={0x3, {{0x2, 0x4e21, @multicast1}}, 0x1, 0x1, [{{0x2, 0x4e20, @multicast1}}]}, 0x110) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) (async) r6 = geteuid() (async) fstat(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1000080, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r5}}, {@cache_fscache}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@uid_eq={'uid', 0x3d, r7}}, {@smackfsroot}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@measure}]}}) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async) rt_sigpending(0x0, 0x1000000) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000540)={0x1, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}}}, 0x88) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x18, 0x8, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x64, 0x0, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) 3.333565504s ago: executing program 8 (id=2619): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x1) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x101, 0xffffffffffffffff}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000400)=[@acquire], 0x0, 0x0, 0x0}) r8 = dup3(r7, r1, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x4c8c1, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f000006b000/0x3000)=nil, 0x3000, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) remap_file_pages(&(0x7f0000521000/0x2000)=nil, 0x2000, 0x1000000, 0x5, 0x40000) getresuid(&(0x7f0000000280), &(0x7f0000000340), &(0x7f00000002c0)) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r11, 0x1, 0x1070bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x8050) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r9, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r11, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0xfffffffa, 0x1d}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0xc0a85320, &(0x7f0000000500)={{0x80}, 'port0\x00', 0x72, 0x9189b, 0x0, 0x8000008, 0x3, 0x4, 0x82, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f00000001c0)={0x800100, 0x3, 0x22, 0xe1d9, 0x1101, 0xff}) 2.804999395s ago: executing program 7 (id=2620): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="240000002e001f0700001a00000000000c00d60001"], 0x24}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) r1 = syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000040)={0x2c, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x8, 0x1, 0x3}, 0x0, 0x0}) 2.297576858s ago: executing program 8 (id=2621): r0 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) read$hidraw(r0, &(0x7f0000000080)=""/210, 0xd2) (async) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0) (async) sendmmsg$inet6(r1, &(0x7f0000000980)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1, @private0, 0x85}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x3}}], 0x28}}], 0x1, 0x4000804) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = getpgid(0x0) sendmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c, 0x1, 0x2, {r4}}}], 0x20}, 0xc0) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) recvmmsg(r3, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/61, 0x3d}}], 0x1, 0x0, 0x0) 2.249757673s ago: executing program 8 (id=2622): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005b40)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)="2bda", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000740)="4c089b", 0x3}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x4000001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/236, 0xec, 0x1, 0x0}, &(0x7f00000005c0)=0x40) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @remote, 'nicvf0\x00'}}, 0x1e) 1.452525022s ago: executing program 2 (id=2624): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0x202, &(0x7f0000000480)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x8, 0x1, 0x0, r1, 0x0}]) r3 = socket$inet6(0xa, 0x2, 0x3a) r4 = dup(r3) bind$unix(r4, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWOBJ={0x6c, 0x12, 0xa, 0x103, 0x0, 0x0, {0x3, 0x0, 0x4}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_DATA={0x58, 0x4, 0x0, 0x1, [@NFTA_CT_TIMEOUT_L4PROTO={0x5, 0x2, 0x2f}, @NFTA_CT_TIMEOUT_L4PROTO={0x5, 0x2, 0x21}, @NFTA_CT_TIMEOUT_L4PROTO={0x5, 0x2, 0x2f}, @NFTA_CT_TIMEOUT_DATA={0x24, 0x3, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5a1}, @CTA_TIMEOUT_GRE_REPLIED={0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFTA_CT_TIMEOUT_L4PROTO={0x5, 0x2, 0x1}, @NFTA_CT_TIMEOUT_L4PROTO={0x5, 0x2, 0x21}, @NFTA_CT_TIMEOUT_L4PROTO={0x5, 0x2, 0x1}]}}], {0x14}}, 0xbc}}, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) (async) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) io_setup(0x202, &(0x7f0000000480)) (async) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x8, 0x1, 0x0, r1, 0x0}]) (async) socket$inet6(0xa, 0x2, 0x3a) (async) dup(r3) (async) bind$unix(r4, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWOBJ={0x6c, 0x12, 0xa, 0x103, 0x0, 0x0, {0x3, 0x0, 0x4}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_DATA={0x58, 0x4, 0x0, 0x1, [@NFTA_CT_TIMEOUT_L4PROTO={0x5, 0x2, 0x2f}, @NFTA_CT_TIMEOUT_L4PROTO={0x5, 0x2, 0x21}, @NFTA_CT_TIMEOUT_L4PROTO={0x5, 0x2, 0x2f}, @NFTA_CT_TIMEOUT_DATA={0x24, 0x3, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5a1}, @CTA_TIMEOUT_GRE_REPLIED={0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFTA_CT_TIMEOUT_L4PROTO={0x5, 0x2, 0x1}, @NFTA_CT_TIMEOUT_L4PROTO={0x5, 0x2, 0x21}, @NFTA_CT_TIMEOUT_L4PROTO={0x5, 0x2, 0x1}]}}], {0x14}}, 0xbc}}, 0x4) (async) 1.397517341s ago: executing program 2 (id=2625): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r1, 0x1, 0xfffffffffffffc49, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r1, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000000)={r1, 0x1, 0x6, @broadcast}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x240, 0x0, 0x350, 0x370, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x6, 0x8004}, 0x8) syz_usb_connect(0x0, 0xb6, &(0x7f0000000280)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7200f2010203010902a400018104004f0904870605a97a37020a24010a0b06020102092403050703020496062404029cfe09050b004000800000072501af82a7ce1932dc70000464040507250103"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1555555555555709}) 1.31295081s ago: executing program 8 (id=2626): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x84, 0x2, 0x2, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xd}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x5}, @CTA_EXPECT_MASTER={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x140c, 0x200, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x0) unshare(0x6a040000) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x0, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) (async) listen(r4, 0x0) (async) r5 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r6 = gettid() timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) (async) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000380)={r6}) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) read$FUSE(r2, &(0x7f00000006c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000002700)={0x0, 0x0}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000002a00)={0x0, &(0x7f0000002840)=[@rdmsr={0x32, 0x18, {0xbe3}}, @uexit={0x0, 0x18, 0x80}, @rdmsr={0x32, 0x18, {0x8c3}}, @code={0xa, 0x4d, {"646542dad3c4417915eac4624d2d45d90fc79c28000000000f01c2410f01ca0fd3390f20c035040000000f22c0c4c1fb12b385639a5d2e64460f01cf"}}, @wr_crn={0x46, 0x20, {0x8, 0xe}}, @rdmsr={0x32, 0x18, {0x8d4}}, @code={0xa, 0x3c, {"0f01c444dbc0c463f15fda0267660f0013410f221ef2420f1b6a6b2667450f78faf3a5f20f323e470f01c4"}}, @wr_crn={0x46, 0x20, {0x8, 0x6976d40d}}, @cpuid={0x14, 0x18, {0x4, 0x3ff}}, @uexit={0x0, 0x18, 0x7c85266}, @in_dx={0x82, 0x20, {0x5828, 0x2}}, @wr_crn={0x46, 0x20, {0x3, 0x2}}], 0x199}) (async) syz_clone3(&(0x7f00000027c0)={0x80, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600), {0x37}, &(0x7f0000000640)=""/31, 0x1f, &(0x7f0000000680)=""/10, &(0x7f0000002780)=[r8, r9, r6, r6, 0x0, r6], 0x6, {r1}}, 0x58) (async) bind$bt_l2cap(r7, &(0x7f00000000c0)={0x1f, 0xfffc, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async) setsockopt$sock_timeval(r5, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10) (async) r10 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r10, 0x0, 0x20, &(0x7f0000000740)={@multicast2, @dev={0xac, 0x14, 0x14, 0xe}}, 0xc) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000300)=0xa6, 0x4) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 1.01648194s ago: executing program 8 (id=2627): r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x0, 0x8000) recvfrom$inet(r0, &(0x7f0000000100)=""/82, 0xfffffe78, 0x10100, &(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async, rerun: 64) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) (rerun: 64) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}], 0x1, 0x0) (async) shutdown(r4, 0x1) setsockopt(r4, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) (async) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @loopback}}}, 0x84) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x64, r6, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0xfffffffffffffe50, 0xb, 0x4}, {0x6, 0x16, 0xb}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x80}, {0x8, 0xb, 0x6}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b14fea7a1316b81525ccf0f8b91fd2eddb851ba62b00d87337407214ea270251"}}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r8, 0x4008ae6a, &(0x7f00000035c0)={0x1, 0x0, [{0x8, 0x2, 0x1, 0x0, @irqchip={0x40175449, 0x6}}]}) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) (async) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io(r9, &(0x7f00000000c0)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="00030201"], 0x0, 0x0, 0x0, 0x0}, 0x0) 788.070083ms ago: executing program 2 (id=2628): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r2, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x0, 0x0, r3}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r3, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) write$cgroup_pid(r1, &(0x7f0000000240), 0xfdef) read$FUSE(r1, &(0x7f0000002540)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x11be) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES16=r5, @ANYRESOCT=r4], &(0x7f0000000300)={0x16, 0x0, 0x0, 0x0, 0x0, [{0x0, &(0x7f0000000040)=@lang_id={0x0, 0x3, 0xf0ff}}, {0x0, &(0x7f0000000100)=@string={0x0, 0x3, "ef2a104f756b2161c8b5cc99967a85253fdc1fe04da8c49f8a7d5061c4de6c60aa34a34af7e2bb067224c1fd908bd7c5"}}, {0x0, &(0x7f0000000140)=@lang_id={0x0, 0x3, 0x419}}, {0x0, &(0x7f0000000280)=@lang_id={0x0, 0x3, 0xc93}}, {0x0, &(0x7f00000001c0)=@lang_id={0x0, 0x3, 0x436}}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x8, r6}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000480)={'tunl0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x7, 0x800f, 0x13b, 0x9, {{0x1c, 0x4, 0x3, 0x5, 0x70, 0x67, 0x0, 0xe, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@timestamp_prespec={0x44, 0x24, 0xdd, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x1}, {@empty, 0x81}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x34, 0x66, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x35}, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@multicast1, 0x8}, {@multicast2, 0x6}, {@empty, 0x4}, {@local, 0x101}]}]}}}}}) r7 = socket$can_raw(0x1d, 0x3, 0x1) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000100)="f257a8ea7bc273dfaeab968586dd", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local}, 0x14) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000000000)={0x1d, r11, 0x0, {0x2, 0x1, 0x1}, 0xff}, 0x18) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000004c0)={'wg1\x00', 0x0}) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000500)={@dev}, &(0x7f0000000540)=0xc) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000800)={0xf0, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x4}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8c0}, 0x10) 625.219948ms ago: executing program 0 (id=2629): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000000)={0x200000, 0x200000, 0x8, 0x0, 0x0, 0xea2}) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00000000c0)={0x7fefffff, 0x2, 'client1\x00', 0x1, "f8ee6e5e2b38b5cc", "b8c5126deca3c384693ba0e2b53b908612ca856de6ac921b579ddca05c6d32b9", 0xfffffffd, 0x3}) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, 0x0) 604.797768ms ago: executing program 0 (id=2630): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x1) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x101, 0xffffffffffffffff}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000400)=[@acquire], 0x0, 0x0, 0x0}) r8 = dup3(r7, r1, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x4c8c1, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f000006b000/0x3000)=nil, 0x3000, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) remap_file_pages(&(0x7f0000521000/0x2000)=nil, 0x2000, 0x1000000, 0x5, 0x40000) getresuid(&(0x7f0000000280), &(0x7f0000000340), &(0x7f00000002c0)) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r11, 0x1, 0x1070bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x8050) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r9, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r11, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0xfffffffa, 0x1d}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0xc0a85320, &(0x7f0000000500)={{0x80}, 'port0\x00', 0x72, 0x9189b, 0x0, 0x8000008, 0x3, 0x4, 0x82, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f00000001c0)={0x800100, 0x3, 0x22, 0xe1d9, 0x1101, 0xff}) 190.060984ms ago: executing program 2 (id=2631): r0 = socket$kcm(0x10, 0x2, 0x0) dup(r0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$SOUND_PCM_READ_BITS(r1, 0x80045005, &(0x7f0000000140)) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@l2={0x1f, 0xf, @any, 0x1, 0x1}, 0x80, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e8030000a80016000a", 0x35}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 21.094946ms ago: executing program 2 (id=2632): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0xa, 0x3, 0x3a) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x2}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32], 0x1ac}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000680)=@flushsa={0x14, 0x1c, 0x4, 0x70bd2b, 0x25dfdbfe, {0x33}}, 0x14}, 0x1, 0x0, 0x0, 0x4c050}, 0x8080) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x38, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@pci={{0xfc2788792d315bee}, {0x11}}, {0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008080}, 0x2200c815) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x160, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x160}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x4008000}, 0x1) 0s ago: executing program 2 (id=2633): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x84801) r1 = syz_open_dev$sndpcmp(&(0x7f00000005c0), 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x1c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20000800) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000180)={0x29}, 0x8) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r6, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000740)=0x3ff) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x6, 0x0, 0x100f, 0x3, 0x0, 0x4, 0x1}}) kernel console output (not intermixed with test programs): 513][ T5940] dvb-usb: error while querying for an remote control event. [ 557.568881][ T5940] m920x_read = error: -19 [ 557.573959][ T5940] dvb-usb: error while querying for an remote control event. [ 557.602358][T12810] usb 1-1: Firmware version (0.0) predates our first public release. [ 557.628782][T12810] usb 1-1: Please update to version 0.2 or newer [ 557.700104][ T5940] m920x_read = error: -19 [ 557.720129][ T5940] dvb-usb: error while querying for an remote control event. [ 557.763848][T12810] usb 1-1: USB disconnect, device number 118 [ 557.858904][ T5940] m920x_read = error: -19 [ 557.863810][ T5940] dvb-usb: error while querying for an remote control event. [ 557.887117][T14190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.920926][T14190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.995016][ T5940] m920x_read = error: -19 [ 558.014519][ T5940] dvb-usb: error while querying for an remote control event. [ 558.138738][ T5922] m920x_read = error: -19 [ 558.145247][T14191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.150521][ T5922] dvb-usb: error while querying for an remote control event. [ 558.185556][T14191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.239874][T14204] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2349'. [ 558.287213][T14206] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2351'. [ 558.288726][ T5940] m920x_read = error: -19 [ 558.301969][T12810] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 558.319627][ T5940] dvb-usb: error while querying for an remote control event. [ 558.438711][ T5940] m920x_read = error: -19 [ 558.443553][ T5940] dvb-usb: error while querying for an remote control event. [ 558.537756][T12810] usb 1-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 558.551548][T12810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.569418][ T5940] m920x_read = error: -19 [ 558.574266][ T5940] dvb-usb: error while querying for an remote control event. [ 558.588743][T12810] usb 1-1: Product: syz [ 558.608079][T12810] usb 1-1: Manufacturer: syz [ 558.624739][T12810] usb 1-1: SerialNumber: syz [ 558.660161][T12810] usb 1-1: config 0 descriptor?? [ 558.708946][ T5940] m920x_read = error: -19 [ 558.713853][ T5940] dvb-usb: error while querying for an remote control event. [ 558.839060][ T5940] m920x_read = error: -19 [ 558.845861][ T5940] dvb-usb: error while querying for an remote control event. [ 558.880799][T12810] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 558.925052][ T5989] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 558.958747][ T5940] m920x_read = error: -19 [ 558.963590][ T5940] dvb-usb: error while querying for an remote control event. [ 559.079214][ T5940] m920x_read = error: -19 [ 559.084158][ T5989] usb 3-1: Using ep0 maxpacket: 16 [ 559.088620][ T5940] dvb-usb: error while querying for an remote control event. [ 559.091827][ T5989] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 559.124719][ T5989] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 559.160925][ T5989] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 559.188325][ T5989] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 559.207144][ T5989] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 559.227664][ T5989] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 559.238526][ T5989] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 559.244585][ T5940] m920x_read = error: -19 [ 559.254992][ T5989] usb 3-1: Manufacturer: syz [ 559.271299][ T5989] usb 3-1: config 0 descriptor?? [ 559.286733][ T5940] dvb-usb: error while querying for an remote control event. [ 559.368415][T14222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.380575][T14222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.408788][ T5940] m920x_read = error: -19 [ 559.413900][ T5940] dvb-usb: error while querying for an remote control event. [ 559.538981][ T5940] m920x_read = error: -19 [ 559.543812][ T5940] dvb-usb: error while querying for an remote control event. [ 559.686236][ T5989] rc_core: IR keymap rc-hauppauge not found [ 559.694644][ T5989] Registered IR keymap rc-empty [ 559.700785][ T5989] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 559.702031][ T5940] m920x_read = error: -19 [ 559.717804][T12810] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware [ 559.726330][ T5940] dvb-usb: error while querying for an remote control event. [ 559.738062][T12810] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 559.746107][ T5989] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 559.747265][ T5922] usb 1-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 559.759912][T14213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.792527][T12810] usb 1-1: USB disconnect, device number 119 [ 559.801617][ T5922] usb 1-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 559.813558][ T5989] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 559.830266][T14213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.837322][ T5922] kobject: kobject_add_internal failed for firmware (error: -2 parent: 1-1) [ 559.843832][ T5989] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input64 [ 559.867460][ T5922] firmware ueagle-atm!eagleII.fw: fw_load_sysfs_fallback: device_register failed [ 559.888824][ T5940] m920x_read = error: -19 [ 559.893886][ T5940] dvb-usb: error while querying for an remote control event. [ 559.903054][ T5922] usb 1-1: [UEAGLE-ATM] firmware is not available [ 559.952168][T14214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.964921][ T5989] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 559.973736][T14214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.998948][ T5989] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 560.018861][ T5989] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 560.028725][ T5922] m920x_read = error: -19 [ 560.033637][ T5922] dvb-usb: error while querying for an remote control event. [ 560.038803][ T5989] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 560.073890][ T5989] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 560.108749][ T5989] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 560.128720][ T5989] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 560.153055][ T5989] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 560.169322][T12810] m920x_read = error: -19 [ 560.174264][T12810] dvb-usb: error while querying for an remote control event. [ 560.193259][ T5989] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 560.249419][ T5989] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 560.254590][ T1073] usb 9-1: Incompatible driver and firmware versions [ 560.292141][ T1073] m920x_read = error: -19 [ 560.300292][ T5989] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 560.308300][ T1073] dvb-usb: error while querying for an remote control event. [ 560.344525][ T5989] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 560.375126][ C1] net_ratelimit: 3 callbacks suppressed [ 560.375143][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 560.413366][T14245] netlink: 'syz.0.2361': attribute type 2 has an invalid length. [ 560.430991][ T5989] usb 3-1: USB disconnect, device number 100 [ 560.433987][T14245] netlink: 'syz.0.2361': attribute type 4 has an invalid length. [ 560.468011][ T1073] m920x_read = error: -19 [ 560.488187][ T1073] dvb-usb: error while querying for an remote control event. [ 560.488413][T14245] syzkaller1: entered promiscuous mode [ 560.504368][T14245] syzkaller1: entered allmulticast mode [ 560.639476][ T1073] m920x_read = error: -19 [ 560.647787][ T1073] dvb-usb: error while querying for an remote control event. [ 560.768698][ T1073] m920x_read = error: -19 [ 560.779509][ T1073] dvb-usb: error while querying for an remote control event. [ 560.898682][ T1073] m920x_read = error: -19 [ 560.907945][ T1073] dvb-usb: error while querying for an remote control event. [ 560.978979][ T5989] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 561.028781][ T1073] m920x_read = error: -19 [ 561.042491][ T1073] dvb-usb: error while querying for an remote control event. [ 561.121779][T14251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2364'. [ 561.168676][ T1073] m920x_read = error: -19 [ 561.173137][ T5989] usb 1-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 561.173482][ T1073] dvb-usb: error while querying for an remote control event. [ 561.193842][ T5989] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.222177][ T5989] usb 1-1: Product: syz [ 561.226907][ T5989] usb 1-1: Manufacturer: syz [ 561.248751][ T5989] usb 1-1: SerialNumber: syz [ 561.328591][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 561.358722][ T1073] m920x_read = error: -19 [ 561.363557][ T1073] dvb-usb: error while querying for an remote control event. [ 561.418041][T14257] comedi comedi3: pcl730: I/O port conflict (0x4f27,4) [ 561.510166][ T5989] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 561.514861][ T1073] m920x_read = error: -19 [ 561.528040][ T5989] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 561.542473][ T1073] dvb-usb: error while querying for an remote control event. [ 561.647630][ T5989] usb 1-1: USB disconnect, device number 120 [ 561.711543][ T7556] udevd[7556]: setting mode of /dev/bus/usb/001/120 to 020664 failed: No such file or directory [ 561.787218][ T7556] udevd[7556]: setting owner of /dev/bus/usb/001/120 to uid=0, gid=0 failed: No such file or directory [ 561.909268][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 561.929107][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 562.049009][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 562.140669][ T1073] m920x_read = error: -19 [ 562.146068][ T1073] dvb-usb: error while querying for an remote control event. [ 562.268705][ T5922] m920x_read = error: -19 [ 562.272135][ T5989] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 562.290036][ T5922] dvb-usb: error while querying for an remote control event. [ 562.399571][ T5922] m920x_read = error: -19 [ 562.404385][ T5922] dvb-usb: error while querying for an remote control event. [ 562.565713][ T5989] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.573617][ T5922] m920x_read = error: -19 [ 562.582983][ T5922] dvb-usb: error while querying for an remote control event. [ 562.585830][ T5989] usb 3-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 562.603295][T14271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.608714][ T5989] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.625239][T14269] comedi comedi3: 8255: I/O port conflict (0x4f27,4) [ 562.632732][T14269] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 562.640823][T14269] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 562.641365][T14271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.647954][T14269] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 562.678777][T14269] comedi comedi3: 8255: I/O port conflict (0xc9,4) [ 562.681145][ T5989] usb 3-1: config 0 descriptor?? [ 562.686116][T14269] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 562.699913][ T5922] m920x_read = error: -19 [ 562.704773][ T5922] dvb-usb: error while querying for an remote control event. [ 562.794793][T14269] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 562.818123][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.819224][T14269] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 562.825416][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.833162][ T5922] m920x_read = error: -19 [ 562.848700][ T5922] dvb-usb: error while querying for an remote control event. [ 562.878016][T14269] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 562.907886][T14269] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 562.918978][T14261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.927702][T14269] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 562.936531][T14261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.945334][T14269] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 562.958618][T14269] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 562.969035][ T5922] m920x_read = error: -19 [ 562.973824][ T5922] dvb-usb: error while querying for an remote control event. [ 562.992821][T14269] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 563.018617][T14269] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 563.032748][T14269] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 563.058686][T14269] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 563.079484][T14269] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 563.098655][ T5922] m920x_read = error: -19 [ 563.103507][ T5922] dvb-usb: error while querying for an remote control event. [ 563.108792][T14269] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 563.124657][T14269] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 563.145858][T14269] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 563.156061][T14269] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 563.218760][ T5922] m920x_read = error: -19 [ 563.223934][ T5922] dvb-usb: error while querying for an remote control event. [ 563.263196][ T5989] hid-rmi 0003:17EF:6085.0045: hidraw0: USB HID vff.fe Device [HID 17ef:6085] on usb-dummy_hcd.2-1/input0 [ 563.348720][ T5922] m920x_read = error: -19 [ 563.353534][ T5922] dvb-usb: error while querying for an remote control event. [ 563.473397][ T5989] usb 3-1: USB disconnect, device number 101 [ 563.489814][ T5922] m920x_read = error: -19 [ 563.501158][T14195] Set syz1 is full, maxelem 65536 reached [ 563.504676][ T5922] dvb-usb: error while querying for an remote control event. [ 563.548643][ T876] usb 1-1: new low-speed USB device number 121 using dummy_hcd [ 563.617905][T14280] netlink: 'syz.7.2377': attribute type 11 has an invalid length. [ 563.629974][ T5922] m920x_read = error: -19 [ 563.635011][ T5922] dvb-usb: error while querying for an remote control event. [ 563.698750][ T876] usb 1-1: Invalid ep0 maxpacket: 16 [ 563.748928][ T5922] m920x_read = error: -19 [ 563.753725][ T5922] dvb-usb: error while querying for an remote control event. [ 563.828631][ T876] usb 1-1: new low-speed USB device number 122 using dummy_hcd [ 563.858632][T13568] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 563.869831][ T5922] m920x_read = error: -19 [ 563.874722][ T5922] dvb-usb: error while querying for an remote control event. [ 563.978648][ T876] usb 1-1: Invalid ep0 maxpacket: 16 [ 563.984823][ T876] usb usb1-port1: attempt power cycle [ 563.991122][T13568] usb 8-1: device descriptor read/64, error -71 [ 564.003357][ T5922] m920x_read = error: -19 [ 564.008155][ T5922] dvb-usb: error while querying for an remote control event. [ 564.079716][ T30] audit: type=1326 audit(1759285696.530:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14283 comm="syz.2.2379" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f59e278eec9 code=0x0 [ 564.115995][T14286] netlink: 'syz.8.2380': attribute type 3 has an invalid length. [ 564.128924][ T5922] m920x_read = error: -19 [ 564.133770][ T5922] dvb-usb: error while querying for an remote control event. [ 564.230239][T13568] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 564.249401][ T1073] m920x_read = error: -19 [ 564.254313][ T1073] dvb-usb: error while querying for an remote control event. [ 564.338670][ T876] usb 1-1: new low-speed USB device number 123 using dummy_hcd [ 564.368666][ T1073] m920x_read = error: -19 [ 564.373991][ T1073] dvb-usb: error while querying for an remote control event. [ 564.377390][ T876] usb 1-1: Invalid ep0 maxpacket: 16 [ 564.388980][T13568] usb 8-1: device descriptor read/64, error -71 [ 564.488934][ T1073] m920x_read = error: -19 [ 564.493842][ T1073] dvb-usb: error while querying for an remote control event. [ 564.508874][T13568] usb usb8-port1: attempt power cycle [ 564.518748][ T876] usb 1-1: new low-speed USB device number 124 using dummy_hcd [ 564.541263][ T876] usb 1-1: Invalid ep0 maxpacket: 16 [ 564.554603][ T876] usb usb1-port1: unable to enumerate USB device [ 564.608789][ T1073] m920x_read = error: -19 [ 564.613621][ T1073] dvb-usb: error while querying for an remote control event. [ 564.739400][ T1073] m920x_read = error: -19 [ 564.744278][ T1073] dvb-usb: error while querying for an remote control event. [ 564.858775][ T1073] m920x_read = error: -19 [ 564.863658][ T1073] dvb-usb: error while querying for an remote control event. [ 564.868626][T13568] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 564.901701][T13568] usb 8-1: device descriptor read/8, error -71 [ 564.978658][ T1073] m920x_read = error: -19 [ 564.983466][ T1073] dvb-usb: error while querying for an remote control event. [ 565.101746][ T1073] m920x_read = error: -19 [ 565.106601][ T1073] dvb-usb: error while querying for an remote control event. [ 565.148657][T13568] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 565.169084][T13568] usb 8-1: device descriptor read/8, error -71 [ 565.220652][ T1073] m920x_read = error: -19 [ 565.225413][ T1073] dvb-usb: error while querying for an remote control event. [ 565.248356][T14302] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 565.255526][T14302] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 565.268890][T14302] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 565.278038][T14302] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 565.285403][T14302] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 565.288875][T13568] usb usb8-port1: unable to enumerate USB device [ 565.303076][T14302] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 565.338771][ T5922] m920x_read = error: -19 [ 565.343603][ T5922] dvb-usb: error while querying for an remote control event. [ 565.365441][T14310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.377334][T14310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.458869][ T5922] m920x_read = error: -19 [ 565.463775][ T5922] dvb-usb: error while querying for an remote control event. [ 565.548776][ T1073] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 565.578713][ T5922] m920x_read = error: -19 [ 565.583485][ T5922] dvb-usb: error while querying for an remote control event. [ 565.709233][ T5922] m920x_read = error: -19 [ 565.714114][ T5922] dvb-usb: error while querying for an remote control event. [ 565.729878][ T1073] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 565.739011][ T1073] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 565.748859][ T1073] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 565.760255][ T1073] usb 3-1: config 220 has no interface number 2 [ 565.767148][ T1073] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 565.781881][ T1073] usb 3-1: config 220 interface 0 has no altsetting 0 [ 565.791734][ T1073] usb 3-1: config 220 interface 76 has no altsetting 0 [ 565.799956][ T1073] usb 3-1: config 220 interface 1 has no altsetting 0 [ 565.809508][ T1073] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 565.819510][ T1073] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.828285][ T1073] usb 3-1: Product: syz [ 565.833063][ T5922] m920x_read = error: -19 [ 565.837823][ T5922] dvb-usb: error while querying for an remote control event. [ 565.846058][ T1073] usb 3-1: Manufacturer: syz [ 565.851210][ T1073] usb 3-1: SerialNumber: syz [ 565.959085][ T5922] m920x_read = error: -19 [ 565.966594][ T5922] dvb-usb: error while querying for an remote control event. [ 566.070901][ T1073] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 566.080179][ T5922] m920x_read = error: -19 [ 566.084963][ T1073] uvcvideo 3-1:220.0: No valid video chain found. [ 566.092754][ T5922] dvb-usb: error while querying for an remote control event. [ 566.103366][ T1073] usb 3-1: selecting invalid altsetting 0 [ 566.128152][ T1073] usb 3-1: selecting invalid altsetting 0 [ 566.134807][ T1073] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 566.153297][ T1073] usb 3-1: USB disconnect, device number 102 [ 566.209482][ T5922] m920x_read = error: -19 [ 566.214327][ T5922] dvb-usb: error while querying for an remote control event. [ 566.329622][ T5922] m920x_read = error: -19 [ 566.334440][ T5922] dvb-usb: error while querying for an remote control event. [ 566.403056][T14327] netlink: 'syz.0.2393': attribute type 40 has an invalid length. [ 566.407510][T14326] netlink: 'syz.8.2392': attribute type 11 has an invalid length. [ 566.459235][ T1073] m920x_read = error: -19 [ 566.464391][ T1073] dvb-usb: error while querying for an remote control event. [ 566.491264][ T5880] Bluetooth: hci2: command 0x0c1a tx timeout [ 566.506428][T14331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.519488][T14331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.591709][ T1073] m920x_read = error: -19 [ 566.596611][ T1073] dvb-usb: error while querying for an remote control event. [ 566.640448][T14333] netlink: 'syz.2.2396': attribute type 5 has an invalid length. [ 566.687719][T14333] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.2396'. [ 566.708307][T14339] Scaler: ================= START STATUS ================= [ 566.719064][ T5922] m920x_read = error: -19 [ 566.723850][ T5922] dvb-usb: error while querying for an remote control event. [ 566.733489][T14339] Scaler: ================== END STATUS ================== [ 566.789282][T14344] tmpfs: Unknown parameter 'tsrquot_block_hardlimit' [ 566.842909][T14348] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2401'. [ 566.848720][T12810] m920x_read = error: -19 [ 566.860696][T12810] dvb-usb: error while querying for an remote control event. [ 566.878717][ T1073] usb 3-1: new low-speed USB device number 103 using dummy_hcd [ 566.979213][T12810] m920x_read = error: -19 [ 566.985271][T12810] dvb-usb: error while querying for an remote control event. [ 567.030687][ T1073] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 567.042999][ T5922] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 567.051558][ T1073] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 567.065447][ T1073] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 567.076103][ T1073] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.091982][T14335] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 567.098737][T12810] m920x_read = error: -19 [ 567.105391][T12810] dvb-usb: error while querying for an remote control event. [ 567.157115][T14354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.169286][T14354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.210910][ T5922] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 567.224301][ T5922] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.236992][T12810] m920x_read = error: -19 [ 567.238809][T13568] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 567.247139][T12810] dvb-usb: error while querying for an remote control event. [ 567.259126][ T5922] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.270307][ T5922] usb 8-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 567.281394][ T5922] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.298813][ T5880] Bluetooth: hci0: command 0x0c1a tx timeout [ 567.299783][ T5922] usb 8-1: config 0 descriptor?? [ 567.324037][ T1073] usb 3-1: string descriptor 0 read error: -71 [ 567.342979][ T1073] hub 3-1:32.0: USB hub found [ 567.356049][ T1073] hub 3-1:32.0: config failed, can't read hub descriptor (err -22) [ 567.380415][T12810] m920x_read = error: -19 [ 567.385222][T12810] dvb-usb: error while querying for an remote control event. [ 567.420584][T13568] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 567.440327][T13568] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 567.468805][T13568] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 567.470185][ T1073] usb 3-1: USB disconnect, device number 103 [ 567.488625][T13568] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 567.503349][T13568] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 567.519427][T13568] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 567.529569][T12810] m920x_read = error: -19 [ 567.529617][T12810] dvb-usb: error while querying for an remote control event. [ 567.544814][T13568] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 567.553679][T13568] usb 1-1: Product: syz [ 567.558468][T13568] usb 1-1: Manufacturer: syz [ 567.570599][T13568] cdc_wdm 1-1:1.0: skipping garbage [ 567.576350][T13568] cdc_wdm 1-1:1.0: skipping garbage [ 567.595179][T13568] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 567.608418][T13568] cdc_wdm 1-1:1.0: Unknown control protocol [ 567.639200][T12810] m920x_read = error: -19 [ 567.644224][T12810] dvb-usb: error while querying for an remote control event. [ 567.738961][ T5922] sony 0003:054C:024B.0046: unknown main item tag 0x0 [ 567.757537][ T5922] sony 0003:054C:024B.0046: unknown main item tag 0x0 [ 567.769818][ T1073] m920x_read = error: -19 [ 567.774631][ T1073] dvb-usb: error while querying for an remote control event. [ 567.783320][ T5922] sony 0003:054C:024B.0046: unknown main item tag 0x0 [ 567.790978][ T5922] sony 0003:054C:024B.0046: unknown main item tag 0x0 [ 567.802610][ T5922] sony 0003:054C:024B.0046: unknown main item tag 0x0 [ 567.812873][ T5922] sony 0003:054C:024B.0046: unknown main item tag 0x0 [ 567.824778][ T5922] sony 0003:054C:024B.0046: unknown main item tag 0x0 [ 567.833048][ T5922] sony 0003:054C:024B.0046: unknown main item tag 0x0 [ 567.843167][ T5922] sony 0003:054C:024B.0046: unknown main item tag 0x0 [ 567.852375][ T5922] sony 0003:054C:024B.0046: unknown main item tag 0x0 [ 567.863855][ T5922] sony 0003:054C:024B.0046: unexpected long global item [ 567.872099][T14357] 9pnet: Unknown protocol version 9 [ 567.872338][ T5922] sony 0003:054C:024B.0046: parse failed [ 567.912339][ T1073] m920x_read = error: -19 [ 567.917171][ T1073] dvb-usb: error while querying for an remote control event. [ 567.941715][T14344] netlink: 244 bytes leftover after parsing attributes in process `syz.7.2399'. [ 567.952507][ T5922] sony 0003:054C:024B.0046: probe with driver sony failed with error -22 [ 567.989106][ C1] cdc_wdm 1-1:1.0: Unexpected error -71 [ 567.996610][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 568.003882][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 568.010980][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 568.018239][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 568.025134][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 568.032393][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 568.039378][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 568.046637][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 568.059065][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 568.059373][ T5922] m920x_read = error: -19 [ 568.066327][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 568.066846][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 568.084993][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 568.092241][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 568.099527][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 568.106442][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 568.113689][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 568.120549][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 568.127808][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 568.134673][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 568.135773][ T5922] dvb-usb: error while querying for an remote control event. [ 568.141920][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 568.145152][T13568] usb 1-1: USB disconnect, device number 125 [ 568.150140][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 568.267006][T14368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.277830][T14368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.301306][T14368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.314811][T14368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.329330][ T5922] m920x_read = error: -19 [ 568.334307][ T5922] dvb-usb: error while querying for an remote control event. [ 568.450326][T14371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.472144][T14371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.489719][ T5989] usb 3-1: new low-speed USB device number 104 using dummy_hcd [ 568.513849][T14371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.528119][T14371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.572369][ T5880] Bluetooth: hci2: command 0x0c1a tx timeout [ 568.584855][ T5940] m920x_read = error: -19 [ 568.596832][ T5940] dvb-usb: error while querying for an remote control event. [ 568.608134][ T5922] usb 8-1: USB disconnect, device number 45 [ 568.628642][ T5989] usb 3-1: device descriptor read/64, error -71 [ 568.719095][ T5940] m920x_read = error: -19 [ 568.723903][ T5940] dvb-usb: error while querying for an remote control event. [ 568.838739][ T5922] m920x_read = error: -19 [ 568.848767][ T5922] dvb-usb: error while querying for an remote control event. [ 568.872839][ T5989] usb 3-1: new low-speed USB device number 105 using dummy_hcd [ 568.985532][ T5922] m920x_read = error: -19 [ 568.997888][ T5922] dvb-usb: error while querying for an remote control event. [ 569.008622][ T5989] usb 3-1: device descriptor read/64, error -71 [ 569.118866][ T5922] m920x_read = error: -19 [ 569.123678][ T5922] dvb-usb: error while querying for an remote control event. [ 569.129230][ T5989] usb usb3-port1: attempt power cycle [ 569.249839][ T5922] m920x_read = error: -19 [ 569.258447][ T5922] dvb-usb: error while querying for an remote control event. [ 569.328822][T13568] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 569.369181][ T5880] Bluetooth: hci0: command 0x0c1a tx timeout [ 569.380545][ T5922] m920x_read = error: -19 [ 569.385874][ T5922] dvb-usb: error while querying for an remote control event. [ 569.398303][T14384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.410388][T14384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.478707][ T5989] usb 3-1: new low-speed USB device number 106 using dummy_hcd [ 569.496500][T13568] usb 1-1: Using ep0 maxpacket: 16 [ 569.504812][T13568] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 569.509031][ T5922] m920x_read = error: -19 [ 569.515964][T13568] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 569.521367][ T5922] dvb-usb: error while querying for an remote control event. [ 569.531818][T13568] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 569.531948][ T5989] usb 3-1: device descriptor read/8, error -71 [ 569.558695][T13568] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 569.568875][T13568] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.577666][T13568] usb 1-1: Product: syz [ 569.582332][T13568] usb 1-1: Manufacturer: syz [ 569.589499][T13568] usb 1-1: SerialNumber: syz [ 569.660698][ T5922] m920x_read = error: -19 [ 569.667441][ T5922] dvb-usb: error while querying for an remote control event. [ 569.788861][ T5989] usb 3-1: new low-speed USB device number 107 using dummy_hcd [ 569.798673][ T5922] m920x_read = error: -19 [ 569.803552][ T5922] dvb-usb: error while querying for an remote control event. [ 569.820489][ T5989] usb 3-1: device descriptor read/8, error -71 [ 569.929016][ T5922] m920x_read = error: -19 [ 569.930590][ T5989] usb usb3-port1: unable to enumerate USB device [ 569.933828][ T5922] dvb-usb: error while querying for an remote control event. [ 569.959258][ T876] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 570.036613][T14403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.050130][ T5922] m920x_read = error: -19 [ 570.056574][ T5922] dvb-usb: error while querying for an remote control event. [ 570.067011][T14403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.130968][ T876] usb 8-1: config index 0 descriptor too short (expected 8028, got 92) [ 570.143550][ T876] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 570.155421][ T876] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.169441][ T5922] m920x_read = error: -19 [ 570.174095][ T876] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 570.182295][ T5922] dvb-usb: error while querying for an remote control event. [ 570.184795][ T876] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.203164][ T876] usb 8-1: Product: syz [ 570.207852][ T876] usb 8-1: Manufacturer: syz [ 570.217500][ T876] usb 8-1: SerialNumber: syz [ 570.318696][ T5922] m920x_read = error: -19 [ 570.323516][ T5922] dvb-usb: error while querying for an remote control event. [ 570.438811][ T5922] m920x_read = error: -19 [ 570.443750][ T5922] dvb-usb: error while querying for an remote control event. [ 570.522388][T13568] usb 1-1: 0:2 : does not exist [ 570.558764][ T5922] m920x_read = error: -19 [ 570.563685][ T5922] dvb-usb: error while querying for an remote control event. [ 570.643334][T14405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.653499][T14405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.658794][ T5880] Bluetooth: hci2: command 0x0c1a tx timeout [ 570.663635][T14405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.678735][ T5922] m920x_read = error: -19 [ 570.683519][ T5922] dvb-usb: error while querying for an remote control event. [ 570.691754][T14405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.810050][ T5989] m920x_read = error: -19 [ 570.815480][ T5989] dvb-usb: error while querying for an remote control event. [ 570.938785][ T5989] m920x_read = error: -19 [ 570.943612][ T5989] dvb-usb: error while querying for an remote control event. [ 571.038952][T14401] netlink: 'syz.7.2415': attribute type 27 has an invalid length. [ 571.048950][ T876] cdc_ncm 8-1:1.0: SET_CRC_MODE failed [ 571.057182][ T876] cdc_ncm 8-1:1.0: SET_NTB_FORMAT failed [ 571.063840][ T5989] m920x_read = error: -19 [ 571.068732][ T5989] dvb-usb: error while querying for an remote control event. [ 571.089073][ T876] cdc_ncm 8-1:1.0: bind() failure [ 571.098988][ T876] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 571.106531][ T876] cdc_ncm 8-1:1.1: bind() failure [ 571.117745][ T876] usb 8-1: USB disconnect, device number 46 [ 571.179043][T13568] m920x_read = error: -19 [ 571.184022][T13568] dvb-usb: error while querying for an remote control event. [ 571.298732][T13568] m920x_read = error: -19 [ 571.304527][T13568] dvb-usb: error while querying for an remote control event. [ 571.339477][T13568] usb 1-1: USB disconnect, device number 126 [ 571.381915][T14412] MTD: Attempt to mount non-MTD device "/dev/nbd2" [ 571.402220][T14413] overlayfs: failed to resolve './file1': -2 [ 571.428667][ T876] m920x_read = error: -19 [ 571.438456][ T876] dvb-usb: error while querying for an remote control event. [ 571.448999][ T5880] Bluetooth: hci0: command 0x0c1a tx timeout [ 571.529628][T14421] netlink: 'syz.2.2422': attribute type 10 has an invalid length. [ 571.539153][T14421] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2422'. [ 571.568840][T13568] m920x_read = error: -19 [ 571.573839][T13568] dvb-usb: error while querying for an remote control event. [ 571.699217][ T876] m920x_read = error: -19 [ 571.707537][ T876] dvb-usb: error while querying for an remote control event. [ 571.838780][T13568] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 571.847366][ T876] m920x_read = error: -19 [ 571.858597][ T876] dvb-usb: error while querying for an remote control event. [ 571.968866][ T876] m920x_read = error: -19 [ 571.973798][ T876] dvb-usb: error while querying for an remote control event. [ 572.014243][T13568] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 572.027260][T13568] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 572.069695][T13568] usb 3-1: Product: syz [ 572.082928][T13568] usb 3-1: Manufacturer: syz [ 572.097224][T13568] usb 3-1: SerialNumber: syz [ 572.102514][ T876] m920x_read = error: -19 [ 572.107284][ T876] dvb-usb: error while querying for an remote control event. [ 572.143561][T13568] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 572.253366][ T5989] m920x_read = error: -19 [ 572.258233][ T5989] dvb-usb: error while querying for an remote control event. [ 572.351155][T14423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.373142][T14423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.377461][T14441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.392627][T14423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.402595][T14441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.408734][ T5989] m920x_read = error: -19 [ 572.416066][ T5989] dvb-usb: error while querying for an remote control event. [ 572.434610][T14423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.448932][T14441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.461198][T14441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.548760][ T5989] m920x_read = error: -19 [ 572.554937][ T5989] dvb-usb: error while querying for an remote control event. [ 572.628643][ T1073] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 572.685389][ T5989] m920x_read = error: -19 [ 572.693542][ T5989] dvb-usb: error while querying for an remote control event. [ 572.727950][T14450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.739439][T14423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.743899][T14450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.750367][T14423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.766152][ T1073] usb 8-1: device descriptor read/64, error -71 [ 572.771134][T14423] binder: 14422:14423 ioctl c0306201 2000000002c0 returned -14 [ 572.819042][ T5989] m920x_read = error: -19 [ 572.823886][ T5989] dvb-usb: error while querying for an remote control event. [ 572.939166][ T5989] m920x_read = error: -19 [ 572.943944][ T5989] dvb-usb: error while querying for an remote control event. [ 572.984188][T13568] vp7045: USB control message 'in' went wrong. [ 572.991043][T13568] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 573.002712][T13568] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 573.018025][T13568] usb 3-1: USB disconnect, device number 108 [ 573.031280][ T1073] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 573.061385][ T5989] m920x_read = error: -19 [ 573.067350][ T5989] dvb-usb: error while querying for an remote control event. [ 573.178648][ T1073] usb 8-1: device descriptor read/64, error -71 [ 573.178711][ T5989] m920x_read = error: -19 [ 573.185582][ T5922] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 573.208725][ T5989] dvb-usb: error while querying for an remote control event. [ 573.289106][ T1073] usb usb8-port1: attempt power cycle [ 573.328681][ T5989] m920x_read = error: -19 [ 573.333551][ T5989] dvb-usb: error while querying for an remote control event. [ 573.381066][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.402419][ T5922] usb 1-1: New USB device found, idVendor=056e, idProduct=019b, bcdDevice= 0.00 [ 573.415611][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.429719][ T5922] usb 1-1: config 0 descriptor?? [ 573.472332][ T5989] m920x_read = error: -19 [ 573.480385][ T5989] dvb-usb: error while querying for an remote control event. [ 573.585054][T14471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.598268][T14471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.599620][ T5989] m920x_read = error: -19 [ 573.615342][ T5989] dvb-usb: error while querying for an remote control event. [ 573.628917][T14471] input: syz0 as /devices/virtual/input/input68 [ 573.649541][ T1073] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 573.664842][T14472] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 573.681344][ T1073] usb 8-1: device descriptor read/8, error -71 [ 573.748798][ T5989] m920x_read = error: -19 [ 573.753615][ T5989] dvb-usb: error while querying for an remote control event. [ 573.853915][ T5922] elecom 0003:056E:019B.0047: unbalanced collection at end of report description [ 573.865179][ T5922] elecom 0003:056E:019B.0047: probe with driver elecom failed with error -22 [ 573.868777][ T5989] m920x_read = error: -19 [ 573.880250][ T5989] dvb-usb: error while querying for an remote control event. [ 573.928781][ T1073] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 573.949175][ T1073] usb 8-1: device descriptor read/8, error -71 [ 573.998774][ T5989] m920x_read = error: -19 [ 574.003634][ T5989] dvb-usb: error while querying for an remote control event. [ 574.038633][ T9] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 574.053249][ T5922] usb 1-1: USB disconnect, device number 127 [ 574.060841][ T1073] usb usb8-port1: unable to enumerate USB device [ 574.120168][ T5989] m920x_read = error: -19 [ 574.124998][ T5989] dvb-usb: error while querying for an remote control event. [ 574.190254][ T9] usb 3-1: config 0 has an invalid interface number: 93 but max is 0 [ 574.199966][ T9] usb 3-1: config 0 has no interface number 0 [ 574.215658][ T9] usb 3-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 574.237763][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.253682][ T9] usb 3-1: Product: syz [ 574.258741][ T9] usb 3-1: Manufacturer: syz [ 574.264494][ T9] usb 3-1: SerialNumber: syz [ 574.284492][ T9] usb 3-1: config 0 descriptor?? [ 574.366229][ T5989] m920x_read = error: -19 [ 574.371141][ T5989] dvb-usb: error while querying for an remote control event. [ 574.421637][T14479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.433804][T14479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.489666][T13567] m920x_read = error: -19 [ 574.494550][T13567] dvb-usb: error while querying for an remote control event. [ 574.506057][ T9] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 574.517158][ T9] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 574.527225][ T9] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 574.536831][ T9] usb 3-1: media controller created [ 574.544570][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 574.584126][ T9] DVB: Unable to find symbol dib7000p_attach() [ 574.590971][ T9] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 574.600568][ T9] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 574.618747][T13567] m920x_read = error: -19 [ 574.619000][ T9] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 574.624564][T13567] dvb-usb: error while querying for an remote control event. [ 574.643697][ T9] usb 3-1: media controller created [ 574.656941][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 574.670843][ T9] dib0700: the master dib7090 has to be initialized first [ 574.682059][ T9] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 574.749411][T13567] m920x_read = error: -19 [ 574.754261][T13567] dvb-usb: error while querying for an remote control event. [ 574.759105][ T9] rc_core: IR keymap rc-dib0700-rc5 not found [ 574.770471][ T9] Registered IR keymap rc-empty [ 574.776084][ T9] dvb-usb: could not initialize remote control. [ 574.783438][ T9] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 574.801556][ T9] usb 3-1: USB disconnect, device number 109 [ 574.833095][ T9] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 574.869674][ T5989] m920x_read = error: -19 [ 574.874815][ T5989] dvb-usb: error while querying for an remote control event. [ 574.988706][ T5989] m920x_read = error: -19 [ 574.991775][T14493] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2444'. [ 574.994444][ T5989] dvb-usb: error while querying for an remote control event. [ 575.048757][T13567] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 575.118676][ T5989] m920x_read = error: -19 [ 575.123493][ T5989] dvb-usb: error while querying for an remote control event. [ 575.195017][T14503] cgroup: Unknown subsys name 'cpuset' [ 575.204182][T14503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.215221][T14503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.230210][T13567] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 575.240381][T13567] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.257841][T13567] usb 1-1: config 0 descriptor?? [ 575.263476][ T5989] m920x_read = error: -19 [ 575.268908][ T5989] dvb-usb: error while querying for an remote control event. [ 575.308419][T14505] netlink: 'syz.2.2448': attribute type 12 has an invalid length. [ 575.317728][T14505] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2448'. [ 575.388687][T13568] m920x_read = error: -19 [ 575.393637][T13568] dvb-usb: error while querying for an remote control event. [ 575.485215][T13567] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 575.509519][T13568] m920x_read = error: -19 [ 575.514335][T13568] dvb-usb: error while querying for an remote control event. [ 575.568638][ T5989] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 575.639371][T13568] m920x_read = error: -19 [ 575.644232][T13568] dvb-usb: error while querying for an remote control event. [ 575.703929][T13567] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 575.711585][T13567] [drm] Initialized udl on minor 2 [ 575.729842][ T5989] usb 3-1: too many configurations: 234, using maximum allowed: 8 [ 575.740537][ T5989] usb 3-1: config index 0 descriptor too short (expected 65089, got 45) [ 575.751735][ T5989] usb 3-1: config index 1 descriptor too short (expected 65089, got 45) [ 575.774690][T13568] m920x_read = error: -19 [ 575.780599][T13568] dvb-usb: error while querying for an remote control event. [ 575.790496][ T5989] usb 3-1: config index 2 descriptor too short (expected 65089, got 45) [ 575.801872][ T5989] usb 3-1: config index 3 descriptor too short (expected 65089, got 45) [ 575.815986][ T5989] usb 3-1: config index 4 descriptor too short (expected 65089, got 45) [ 575.827200][ T5989] usb 3-1: config index 5 descriptor too short (expected 65089, got 45) [ 575.839700][ T5989] usb 3-1: config index 6 descriptor too short (expected 65089, got 45) [ 575.851014][ T5989] usb 3-1: config index 7 descriptor too short (expected 65089, got 45) [ 575.857602][T14509] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2450'. [ 575.863336][ T5989] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 575.880460][ T5989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.889390][ T5989] usb 3-1: Product: syz [ 575.894060][ T5989] usb 3-1: Manufacturer: syz [ 575.899658][ T5989] usb 3-1: SerialNumber: syz [ 575.921159][T13568] m920x_read = error: -19 [ 575.926079][T13568] dvb-usb: error while querying for an remote control event. [ 576.058826][ T5983] m920x_read = error: -19 [ 576.063791][ T5983] dvb-usb: error while querying for an remote control event. [ 576.178944][ T5983] m920x_read = error: -19 [ 576.183810][ T5983] dvb-usb: error while querying for an remote control event. [ 576.198749][T13568] usb 8-1: new full-speed USB device number 51 using dummy_hcd [ 576.308690][ T5983] m920x_read = error: -19 [ 576.313699][ T5983] dvb-usb: error while querying for an remote control event. [ 576.362451][T14513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.372684][T14513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.382940][T14513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.392832][T14513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.403019][T14513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.413072][T14513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.430350][ T5983] m920x_read = error: -19 [ 576.436580][ T5983] dvb-usb: error while querying for an remote control event. [ 576.445680][T13568] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 576.454564][T13568] usb 8-1: can't read configurations, error -71 [ 576.503936][T13567] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 3 failed err ffffffb9 [ 576.518238][T13567] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 576.526449][ T876] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 576.537358][T13567] usb 1-1: USB disconnect, device number 2 [ 576.544351][ T876] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 576.554405][ T5983] m920x_read = error: -19 [ 576.559283][ T5983] dvb-usb: error while querying for an remote control event. [ 576.668776][ T5983] m920x_read = error: -19 [ 576.673997][ T5983] dvb-usb: error while querying for an remote control event. [ 576.695053][T14515] tmpfs: Bad value for 'mpol' [ 576.808830][T13567] m920x_read = error: -19 [ 576.813764][T13567] dvb-usb: error while querying for an remote control event. [ 576.938753][T13567] m920x_read = error: -19 [ 576.943656][T13567] dvb-usb: error while querying for an remote control event. [ 576.990214][T14520] netlink: 'syz.7.2453': attribute type 10 has an invalid length. [ 576.999743][T14520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 577.012524][T14520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 577.027721][T14520] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 577.043352][T14521] netlink: 'syz.7.2453': attribute type 10 has an invalid length. [ 577.060507][T13567] m920x_read = error: -19 [ 577.065343][T13567] dvb-usb: error while querying for an remote control event. [ 577.189967][ T876] m920x_read = error: -19 [ 577.194806][ T876] dvb-usb: error while querying for an remote control event. [ 577.308832][ T876] m920x_read = error: -19 [ 577.313659][ T876] dvb-usb: error while querying for an remote control event. [ 577.356682][T14505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.366499][T14505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.376902][T14505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.386260][T13567] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 577.387502][T14505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.429088][ T876] m920x_read = error: -19 [ 577.433943][ T876] dvb-usb: error while querying for an remote control event. [ 577.546462][T13567] usb 1-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 577.562649][ T876] m920x_read = error: -19 [ 577.567481][ T876] dvb-usb: error while querying for an remote control event. [ 577.578522][T13568] usb 8-1: new full-speed USB device number 52 using dummy_hcd [ 577.594167][T13567] usb 1-1: config 24 has 0 interfaces, different from the descriptor's value: 1 [ 577.613373][T13567] usb 1-1: string descriptor 0 read error: -22 [ 577.621125][T13567] usb 1-1: New USB device found, idVendor=0ace, idProduct=13a1, bcdDevice= 4.44 [ 577.631756][T13567] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.683256][T14534] netlink: 'syz.8.2457': attribute type 1 has an invalid length. [ 577.702161][T14534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.709106][T13567] m920x_read = error: -19 [ 577.712695][T14534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.718324][T13567] dvb-usb: error while querying for an remote control event. [ 577.733179][T13568] usb 8-1: device descriptor read/64, error -71 [ 577.859300][T13568] usb usb8-port1: attempt power cycle [ 577.865391][T13567] m920x_read = error: -19 [ 577.871094][T13567] dvb-usb: error while querying for an remote control event. [ 577.951792][T14536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.963125][T14536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.974704][T14536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.984859][T14536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.993526][T13567] m920x_read = error: -19 [ 577.999109][T13567] dvb-usb: error while querying for an remote control event. [ 578.118701][T13567] m920x_read = error: -19 [ 578.123485][T13567] dvb-usb: error while querying for an remote control event. [ 578.209825][T14536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.220145][T13568] usb 8-1: new full-speed USB device number 53 using dummy_hcd [ 578.220568][T14536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.238708][T13567] m920x_read = error: -19 [ 578.245849][T13567] dvb-usb: error while querying for an remote control event. [ 578.254977][T13568] usb 8-1: device descriptor read/8, error -71 [ 578.361348][T13567] m920x_read = error: -19 [ 578.366192][T13567] dvb-usb: error while querying for an remote control event. [ 578.476893][T14541] binder: Binderfs stats mode cannot be changed during a remount [ 578.488829][T13567] m920x_read = error: -19 [ 578.494151][T13567] dvb-usb: error while querying for an remote control event. [ 578.502554][T13568] usb 8-1: new full-speed USB device number 54 using dummy_hcd [ 578.530272][T13568] usb 8-1: device descriptor read/8, error -71 [ 578.618991][T13567] m920x_read = error: -19 [ 578.623817][T13567] dvb-usb: error while querying for an remote control event. [ 578.649100][T13568] usb usb8-port1: unable to enumerate USB device [ 578.702512][T14543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.713240][T14543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.724695][T14543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.735080][T14543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.743744][T13568] m920x_read = error: -19 [ 578.749854][T13568] dvb-usb: error while querying for an remote control event. [ 578.823500][T14546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.833215][T14546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.858777][T13568] m920x_read = error: -19 [ 578.863736][T13568] dvb-usb: error while querying for an remote control event. [ 578.988743][T13568] m920x_read = error: -19 [ 578.993670][T13568] dvb-usb: error while querying for an remote control event. [ 579.109010][T13568] m920x_read = error: -19 [ 579.113992][T13568] dvb-usb: error while querying for an remote control event. [ 579.238700][T13568] m920x_read = error: -19 [ 579.243535][T13568] dvb-usb: error while querying for an remote control event. [ 579.293173][T14550] netlink: 'syz.8.2463': attribute type 11 has an invalid length. [ 579.302911][T14550] netlink: 'syz.8.2463': attribute type 11 has an invalid length. [ 579.315078][T14550] netlink: 'syz.8.2463': attribute type 11 has an invalid length. [ 579.324896][T14550] netlink: 'syz.8.2463': attribute type 11 has an invalid length. [ 579.334263][T14550] netlink: 'syz.8.2463': attribute type 11 has an invalid length. [ 579.343841][T14550] netlink: 'syz.8.2463': attribute type 11 has an invalid length. [ 579.352796][T14550] netlink: 'syz.8.2463': attribute type 11 has an invalid length. [ 579.370521][T13568] m920x_read = error: -19 [ 579.377434][T13568] dvb-usb: error while querying for an remote control event. [ 579.444824][T14554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.456965][T14554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.457641][T14555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.475466][T14555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.499999][T13568] m920x_read = error: -19 [ 579.504842][T13568] dvb-usb: error while querying for an remote control event. [ 579.618926][T13568] m920x_read = error: -19 [ 579.624375][T13568] dvb-usb: error while querying for an remote control event. [ 579.749800][T13568] m920x_read = error: -19 [ 579.754588][T13568] dvb-usb: error while querying for an remote control event. [ 579.879255][T13568] m920x_read = error: -19 [ 579.884059][T13568] dvb-usb: error while querying for an remote control event. [ 580.003717][T13568] m920x_read = error: -19 [ 580.019506][T13568] dvb-usb: error while querying for an remote control event. [ 580.044856][T14558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.061385][T14558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.064207][T14560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2467'. [ 580.097253][T14558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.107609][T13568] usb 1-1: USB disconnect, device number 3 [ 580.114788][T14558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.139123][T13567] m920x_read = error: -19 [ 580.148120][T13567] dvb-usb: error while querying for an remote control event. [ 580.268698][T13567] m920x_read = error: -19 [ 580.276028][T13567] dvb-usb: error while querying for an remote control event. [ 580.388753][T13568] m920x_read = error: -19 [ 580.393595][T13568] dvb-usb: error while querying for an remote control event. [ 580.509329][T13568] m920x_read = error: -19 [ 580.514438][T13568] dvb-usb: error while querying for an remote control event. [ 580.578638][ T5922] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 580.628723][T13568] m920x_read = error: -19 [ 580.633618][T13568] dvb-usb: error while querying for an remote control event. [ 580.748788][T13567] m920x_read = error: -19 [ 580.749016][ T5922] usb 8-1: Using ep0 maxpacket: 8 [ 580.759770][T13567] dvb-usb: error while querying for an remote control event. [ 580.780893][ T5922] usb 8-1: config 1 interface 0 altsetting 111 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 580.814570][ T5922] usb 8-1: config 1 interface 0 has no altsetting 0 [ 580.834815][ T5922] usb 8-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 580.848995][ T5922] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.870933][ T5922] usb 8-1: Product: syz [ 580.870957][ T5922] usb 8-1: Manufacturer: syz [ 580.870974][ T5922] usb 8-1: SerialNumber: syz [ 580.883319][T13567] m920x_read = error: -19 [ 580.883347][T13567] dvb-usb: error while querying for an remote control event. [ 580.988749][T13567] m920x_read = error: -19 [ 580.993674][T13567] dvb-usb: error while querying for an remote control event. [ 581.091966][T14577] jfs: Unknown parameter 'ws¹34°²Î' [ 581.108706][T13568] m920x_read = error: -19 [ 581.113557][T13568] dvb-usb: error while querying for an remote control event. [ 581.162782][ T5922] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input70 [ 581.207494][ T5226] bcm5974 8-1:1.0: could not read from device [ 581.243947][ T5226] bcm5974 8-1:1.0: could not read from device [ 581.261577][ T5922] usb 8-1: USB disconnect, device number 55 [ 581.262882][ T5983] m920x_read = error: -19 [ 581.275872][ T5226] bcm5974 8-1:1.0: could not read from device [ 581.287513][ T5983] dvb-usb: error while querying for an remote control event. [ 581.288367][T14587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.309392][T14586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.319510][T14587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.335037][T14586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.398803][ T5983] m920x_read = error: -19 [ 581.405085][ T5983] dvb-usb: error while querying for an remote control event. [ 581.429032][T13568] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 581.473859][T14591] bond0: entered promiscuous mode [ 581.518704][ T5983] m920x_read = error: -19 [ 581.528911][ T5983] dvb-usb: error while querying for an remote control event. [ 581.578491][T14597] netlink: 1010 bytes leftover after parsing attributes in process `syz.8.2479'. [ 581.590212][T14597] bridge: RTM_NEWNEIGH with invalid state 0x1d25 [ 581.601219][T13568] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 581.621645][T13568] usb 1-1: config 8 has no interface number 0 [ 581.638741][T13568] usb 1-1: config 8 interface 177 altsetting 9 bulk endpoint 0x87 has invalid maxpacket 64 [ 581.656783][ T5983] m920x_read = error: -19 [ 581.668590][ T5983] dvb-usb: error while querying for an remote control event. [ 581.676824][T13568] usb 1-1: config 8 interface 177 has no altsetting 0 [ 581.697405][T13568] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 581.717628][T13568] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.781071][T14584] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 581.798727][T13567] m920x_read = error: -19 [ 581.803562][T13567] dvb-usb: error while querying for an remote control event. [ 581.938876][T13567] m920x_read = error: -19 [ 581.943792][T13567] dvb-usb: error while querying for an remote control event. [ 582.040946][T13568] usb 1-1: string descriptor 0 read error: -71 [ 582.062025][T14608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.063707][T13568] ir_toy 1-1:8.177: required endpoints not found [ 582.086621][T13567] m920x_read = error: -19 [ 582.089252][T14608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.108634][T13567] dvb-usb: error while querying for an remote control event. [ 582.131872][T13568] usb 1-1: USB disconnect, device number 4 [ 582.138820][ T9] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 582.162733][T14611] netlink: 596 bytes leftover after parsing attributes in process `syz.8.2479'. [ 582.186363][ T5989] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -ETIMEDOUT [ 582.225102][T13567] m920x_read = error: -19 [ 582.231865][T13567] dvb-usb: error while querying for an remote control event. [ 582.240837][ T5989] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 582.260796][ T5989] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPIPE [ 582.279023][ T5989] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 582.299194][ T5989] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 582.327325][ T5989] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 582.338765][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 582.347643][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 582.370723][ T5989] m920x_read = error: -19 [ 582.375656][ T5989] dvb-usb: error while querying for an remote control event. [ 582.384126][ T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 582.413289][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 582.441838][ T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 582.469565][ T9] usb 8-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 582.488726][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.488975][ T5989] m920x_read = error: -19 [ 582.497531][ T9] usb 8-1: Product: syz [ 582.497548][ T9] usb 8-1: Manufacturer: syz [ 582.497563][ T9] usb 8-1: SerialNumber: syz [ 582.532651][ T9] usb 8-1: config 0 descriptor?? [ 582.542533][T14605] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 582.578694][ T5989] dvb-usb: error while querying for an remote control event. [ 582.582090][ C0] port100 8-1:0.0: NFC: Urb failure (status -71) [ 582.619442][ T9] port100 8-1:0.0: NFC: Could not get supported command types [ 582.662940][T14617] validate_nla: 43 callbacks suppressed [ 582.662959][T14617] netlink: 'syz.0.2482': attribute type 83 has an invalid length. [ 582.709803][T13568] m920x_read = error: -19 [ 582.714644][T13568] dvb-usb: error while querying for an remote control event. [ 582.768476][T14622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.780357][T14622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.798270][T13568] usb 8-1: USB disconnect, device number 56 [ 582.817965][T14622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.829692][T14622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.853853][T13567] m920x_read = error: -19 [ 582.858734][T13567] dvb-usb: error while querying for an remote control event. [ 582.983776][T13568] m920x_read = error: -19 [ 582.990951][T13568] dvb-usb: error while querying for an remote control event. [ 583.118971][T13568] m920x_read = error: -19 [ 583.125664][T13568] dvb-usb: error while querying for an remote control event. [ 583.146605][T14635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.164005][T14635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.248695][T13568] m920x_read = error: -19 [ 583.253507][T13568] dvb-usb: error while querying for an remote control event. [ 583.380477][T13568] m920x_read = error: -19 [ 583.387419][T13568] dvb-usb: error while querying for an remote control event. [ 583.499249][T13568] m920x_read = error: -19 [ 583.504065][T13568] dvb-usb: error while querying for an remote control event. [ 583.573009][T14656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.590548][T14656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.648669][T13568] m920x_read = error: -19 [ 583.653482][T13568] dvb-usb: error while querying for an remote control event. [ 583.798867][ T5989] m920x_read = error: -19 [ 583.804877][ T5989] dvb-usb: error while querying for an remote control event. [ 583.932354][ T5989] m920x_read = error: -19 [ 583.937323][ T5989] dvb-usb: error while querying for an remote control event. [ 584.029653][ T1073] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 584.049007][ T5989] m920x_read = error: -19 [ 584.053824][ T5989] dvb-usb: error while querying for an remote control event. [ 584.101069][T14680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.112563][T14680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.178901][ T5989] m920x_read = error: -19 [ 584.183852][ T5989] dvb-usb: error while querying for an remote control event. [ 584.198658][ T1073] usb 8-1: Using ep0 maxpacket: 8 [ 584.209828][ T1073] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 584.220859][ T1073] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 584.232554][ T1073] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 584.246127][ T1073] usb 8-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 584.264731][ T1073] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.273836][ T1073] usb 8-1: Product: syz [ 584.278415][ T1073] usb 8-1: Manufacturer: syz [ 584.284086][ T1073] usb 8-1: SerialNumber: syz [ 584.298840][ T5989] m920x_read = error: -19 [ 584.299684][ T1073] usb 8-1: config 0 descriptor?? [ 584.303632][ T5989] dvb-usb: error while querying for an remote control event. [ 584.322754][ T1073] redrat3 8-1:0.0: Couldn't find all endpoints [ 584.429142][ T5989] m920x_read = error: -19 [ 584.434578][ T5989] dvb-usb: error while querying for an remote control event. [ 584.523338][ T1073] usb 8-1: USB disconnect, device number 57 [ 584.548671][ T5989] m920x_read = error: -19 [ 584.553474][ T5989] dvb-usb: error while querying for an remote control event. [ 584.665483][T14687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.669599][ T5989] m920x_read = error: -19 [ 584.677352][T14687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.680291][ T5989] dvb-usb: error while querying for an remote control event. [ 584.740833][ T67] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 584.799297][ T5989] m920x_read = error: -19 [ 584.804145][ T5989] dvb-usb: error while querying for an remote control event. [ 584.918693][ T5989] m920x_read = error: -19 [ 584.923506][ T5989] dvb-usb: error while querying for an remote control event. [ 585.038681][ T5989] m920x_read = error: -19 [ 585.043502][ T5989] dvb-usb: error while querying for an remote control event. [ 585.085731][ T5880] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 585.106860][T14692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.116737][T14692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.158733][T13567] m920x_read = error: -19 [ 585.163558][T13567] dvb-usb: error while querying for an remote control event. [ 585.245898][T14694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.256949][T14694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.278998][T13567] m920x_read = error: -19 [ 585.283808][T13567] dvb-usb: error while querying for an remote control event. [ 585.320437][ T5989] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 585.399488][T13567] m920x_read = error: -19 [ 585.404271][T13567] dvb-usb: error while querying for an remote control event. [ 585.478638][ T5989] usb 8-1: Using ep0 maxpacket: 32 [ 585.487010][ T5989] usb 8-1: config 0 has no interfaces? [ 585.493160][ T5989] usb 8-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 585.503119][ T5989] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.518292][ T5989] usb 8-1: config 0 descriptor?? [ 585.523934][T13567] m920x_read = error: -19 [ 585.529816][T13567] dvb-usb: error while querying for an remote control event. [ 585.638878][ T5989] m920x_read = error: -19 [ 585.643694][ T5989] dvb-usb: error while querying for an remote control event. [ 585.716424][T14696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.725751][T14698] gfs2: not a GFS2 filesystem [ 585.734766][T14696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.746504][ T5989] usb 8-1: USB disconnect, device number 58 [ 585.772632][T13567] m920x_read = error: -19 [ 585.777629][T13567] dvb-usb: error while querying for an remote control event. [ 585.880150][T14704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.888818][T13567] m920x_read = error: -19 [ 585.895731][T14704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.898915][T13567] dvb-usb: error while querying for an remote control event. [ 586.015371][T14711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.028717][ T5989] m920x_read = error: -19 [ 586.033548][ T5989] dvb-usb: error while querying for an remote control event. [ 586.052336][T14711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.135481][T14711] sctp: [Deprecated]: syz.8.2502 (pid 14711) Use of int in max_burst socket option. [ 586.135481][T14711] Use struct sctp_assoc_value instead [ 586.158868][ T5989] m920x_read = error: -19 [ 586.163671][ T5989] dvb-usb: error while querying for an remote control event. [ 586.379108][ T5989] m920x_read = error: -19 [ 586.405240][ T5989] dvb-usb: error while querying for an remote control event. [ 586.517382][T14734] dlm: no locking on control device [ 586.525604][T14734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.528818][T13567] m920x_read = error: -19 [ 586.541608][T13567] dvb-usb: error while querying for an remote control event. [ 586.542332][T14734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.636152][T14742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.647976][T14742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.668699][T13567] m920x_read = error: -19 [ 586.673631][T13567] dvb-usb: error while querying for an remote control event. [ 586.742578][ T5989] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 586.791527][T13567] m920x_read = error: -19 [ 586.796348][T13567] dvb-usb: error while querying for an remote control event. [ 586.878725][ T5989] usb 1-1: device descriptor read/64, error -71 [ 586.908710][T13567] m920x_read = error: -19 [ 586.913594][T13567] dvb-usb: error while querying for an remote control event. [ 587.031403][T13567] m920x_read = error: -19 [ 587.036242][T13567] dvb-usb: error while querying for an remote control event. [ 587.118655][ T5989] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 587.148700][T13567] m920x_read = error: -19 [ 587.153571][T13567] dvb-usb: error while querying for an remote control event. [ 587.199819][T14758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.209521][T14758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.248627][ T5989] usb 1-1: device descriptor read/64, error -71 [ 587.268742][T13567] m920x_read = error: -19 [ 587.273573][T13567] dvb-usb: error while querying for an remote control event. [ 587.359485][ T5989] usb usb1-port1: attempt power cycle [ 587.403416][T13567] m920x_read = error: -19 [ 587.408280][T13567] dvb-usb: error while querying for an remote control event. [ 587.528828][T13567] m920x_read = error: -19 [ 587.533765][T13567] dvb-usb: error while querying for an remote control event. [ 587.648797][T13567] m920x_read = error: -19 [ 587.653720][T13567] dvb-usb: error while querying for an remote control event. [ 587.698630][ T5989] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 587.719026][ T5989] usb 1-1: device descriptor read/8, error -71 [ 587.770559][T13567] m920x_read = error: -19 [ 587.775461][T13567] dvb-usb: error while querying for an remote control event. [ 587.888796][T13567] m920x_read = error: -19 [ 587.893604][T13567] dvb-usb: error while querying for an remote control event. [ 587.969384][ T5989] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 587.999220][ T5989] usb 1-1: device descriptor read/8, error -71 [ 588.018812][T13567] m920x_read = error: -19 [ 588.023729][T13567] dvb-usb: error while querying for an remote control event. [ 588.109237][ T5989] usb usb1-port1: unable to enumerate USB device [ 588.138794][ T5989] m920x_read = error: -19 [ 588.143628][ T5989] dvb-usb: error while querying for an remote control event. [ 588.168665][ T5876] Bluetooth: hci0: command 0x0c1a tx timeout [ 588.258741][ T5989] m920x_read = error: -19 [ 588.263555][ T5989] dvb-usb: error while querying for an remote control event. [ 588.379164][ T5989] m920x_read = error: -19 [ 588.384059][ T5989] dvb-usb: error while querying for an remote control event. [ 588.499412][T13567] m920x_read = error: -19 [ 588.504228][T13567] dvb-usb: error while querying for an remote control event. [ 588.567177][T14776] binder: 14775:14776 ioctl c018620b 200000000280 returned -14 [ 588.628884][ T5989] m920x_read = error: -19 [ 588.634493][ T5989] dvb-usb: error while querying for an remote control event. [ 588.715145][T14791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.724789][T14791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.743348][T14791] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 588.759069][ T5989] m920x_read = error: -19 [ 588.764237][ T5989] dvb-usb: error while querying for an remote control event. [ 588.879603][ T5989] m920x_read = error: -19 [ 588.884436][ T5989] dvb-usb: error while querying for an remote control event. [ 588.987151][T14797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.998670][T13567] m920x_read = error: -19 [ 588.999795][T14797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.003451][T13567] dvb-usb: error while querying for an remote control event. [ 589.129063][T13567] m920x_read = error: -19 [ 589.133892][T13567] dvb-usb: error while querying for an remote control event. [ 589.248665][T13567] m920x_read = error: -19 [ 589.253632][T13567] dvb-usb: error while querying for an remote control event. [ 589.348969][T14799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.358755][T14799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.368841][T13567] m920x_read = error: -19 [ 589.373629][T13567] dvb-usb: error while querying for an remote control event. [ 589.489130][T13567] m920x_read = error: -19 [ 589.493997][T13567] dvb-usb: error while querying for an remote control event. [ 589.610358][ T5989] m920x_read = error: -19 [ 589.615352][ T5989] dvb-usb: error while querying for an remote control event. [ 589.708256][T14809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.719892][T14809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.728694][ T5989] m920x_read = error: -19 [ 589.733481][T14809] netlink: 'syz.8.2527': attribute type 1 has an invalid length. [ 589.733514][ T5880] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 589.745553][ T5989] dvb-usb: error while querying for an remote control event. [ 589.798661][T13567] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 589.869366][ T5989] m920x_read = error: -19 [ 589.874161][ T5989] dvb-usb: error while querying for an remote control event. [ 589.906638][T14811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.916668][T14811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.930340][T13567] usb 8-1: device descriptor read/64, error -71 [ 589.940397][T14811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.950204][T14811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.988785][ T5989] m920x_read = error: -19 [ 589.988841][ T1073] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 589.993591][ T5989] dvb-usb: error while querying for an remote control event. [ 590.087625][T14816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.097219][T14816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.107387][ T5989] m920x_read = error: -19 [ 590.112114][T14816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.113072][ T5989] dvb-usb: error while querying for an remote control event. [ 590.125689][T14816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.158714][ T1073] usb 1-1: Using ep0 maxpacket: 8 [ 590.165682][ T1073] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 590.168745][T13567] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 590.175987][ T1073] usb 1-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 590.195021][ T1073] usb 1-1: config 0 has no interface number 0 [ 590.203761][ T1073] usb 1-1: New USB device found, idVendor=0403, idProduct=9f80, bcdDevice=af.26 [ 590.213800][ T1073] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.223704][ T1073] usb 1-1: Product: syz [ 590.228276][ T1073] usb 1-1: Manufacturer: syz [ 590.233513][ T1073] usb 1-1: SerialNumber: syz [ 590.241998][ T1073] usb 1-1: config 0 descriptor?? [ 590.248746][ T5989] m920x_read = error: -19 [ 590.253530][ T5989] dvb-usb: error while querying for an remote control event. [ 590.318815][T13567] usb 8-1: device descriptor read/64, error -71 [ 590.355542][T14822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.368388][T14822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.379463][ T5983] m920x_read = error: -19 [ 590.384281][ T5983] dvb-usb: error while querying for an remote control event. [ 590.429891][T13567] usb usb8-port1: attempt power cycle [ 590.453791][ T1073] ftdi_sio 1-1:0.31: FTDI USB Serial Device converter detected [ 590.463177][ T1073] ftdi_sio ttyUSB0: unknown device type: 0xaf26 [ 590.477347][ T1073] usb 1-1: USB disconnect, device number 9 [ 590.485700][ T1073] ftdi_sio 1-1:0.31: device disconnected [ 590.498731][ T5983] m920x_read = error: -19 [ 590.504332][ T5983] dvb-usb: error while querying for an remote control event. [ 590.618739][ T5983] m920x_read = error: -19 [ 590.623548][ T5983] dvb-usb: error while querying for an remote control event. [ 590.748745][ T5983] m920x_read = error: -19 [ 590.753558][ T5983] dvb-usb: error while querying for an remote control event. [ 590.772308][T14831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.778843][T13567] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 590.783451][T14831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.800800][T14831] IPv6: NLM_F_CREATE should be specified when creating new route [ 590.810150][T13567] usb 8-1: device descriptor read/8, error -71 [ 590.871459][T14837] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 590.881375][ T5989] m920x_read = error: -19 [ 590.882786][T14837] cramfs: wrong magic [ 590.886802][ T5989] dvb-usb: error while querying for an remote control event. [ 590.974224][T14840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.999653][T14840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.011979][ T5989] m920x_read = error: -19 [ 591.016810][ T5989] dvb-usb: error while querying for an remote control event. [ 591.068801][T13567] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 591.099946][T13567] usb 8-1: device descriptor read/8, error -71 [ 591.102258][T14842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2537'. [ 591.128807][ T5983] m920x_read = error: -19 [ 591.133665][ T5983] dvb-usb: error while querying for an remote control event. [ 591.209040][T13567] usb usb8-port1: unable to enumerate USB device [ 591.250171][T13567] m920x_read = error: -19 [ 591.255224][T13567] dvb-usb: error while querying for an remote control event. [ 591.368795][T13567] m920x_read = error: -19 [ 591.373614][T13567] dvb-usb: error while querying for an remote control event. [ 591.475911][T14858] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2541'. [ 591.500138][T13567] m920x_read = error: -19 [ 591.505016][T13567] dvb-usb: error while querying for an remote control event. [ 591.629129][T13567] m920x_read = error: -19 [ 591.635747][T13567] dvb-usb: error while querying for an remote control event. [ 591.748760][T13567] m920x_read = error: -19 [ 591.758870][T13567] dvb-usb: error while querying for an remote control event. [ 591.862756][T14866] ipvlan0: entered promiscuous mode [ 591.870795][T14866] ipvlan0: entered allmulticast mode [ 591.876869][T14866] veth0_vlan: entered allmulticast mode [ 591.886167][T13567] m920x_read = error: -19 [ 591.892225][T13567] dvb-usb: error while querying for an remote control event. [ 592.008987][ T5983] m920x_read = error: -19 [ 592.016200][ T5983] dvb-usb: error while querying for an remote control event. [ 592.074116][T14875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2545'. [ 592.097664][T14876] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 592.128882][ T5983] m920x_read = error: -19 [ 592.145618][ T5983] dvb-usb: error while querying for an remote control event. [ 592.240028][T14883] create_pit_timer: 37 callbacks suppressed [ 592.240040][T14883] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 592.260334][T13567] m920x_read = error: -19 [ 592.266598][T13567] dvb-usb: error while querying for an remote control event. [ 592.277866][T14883] kvm: pic: non byte read [ 592.289587][T14883] kvm: pic: level sensitive irq not supported [ 592.289636][T14883] kvm: pic: non byte read [ 592.301624][T14883] kvm: pic: level sensitive irq not supported [ 592.301723][T14883] kvm: pic: non byte read [ 592.317143][T14883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.327686][T14883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.378958][T13567] m920x_read = error: -19 [ 592.383813][T13567] dvb-usb: error while querying for an remote control event. [ 592.500520][T13567] m920x_read = error: -19 [ 592.505351][T13567] dvb-usb: error while querying for an remote control event. [ 592.619602][T13568] m920x_read = error: -19 [ 592.624646][T13568] dvb-usb: error while querying for an remote control event. [ 592.743235][T13567] m920x_read = error: -19 [ 592.754137][T13567] dvb-usb: error while querying for an remote control event. [ 592.892517][T13567] m920x_read = error: -19 [ 592.898488][T13567] dvb-usb: error while querying for an remote control event. [ 592.935915][T14900] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2551'. [ 592.952054][T14900] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2551'. [ 593.043201][T13568] m920x_read = error: -19 [ 593.048169][T13568] dvb-usb: error while querying for an remote control event. [ 593.164248][ T5983] m920x_read = error: -19 [ 593.170168][ T5983] dvb-usb: error while querying for an remote control event. [ 593.254814][T13567] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 593.265080][T14906] nbd0: detected capacity change from 0 to 127 [ 593.274743][ T5880] block nbd0: Receive control failed (result -32) [ 593.277503][ T7556] block nbd0: Send control failed (result -32) [ 593.285817][ T5876] block nbd0: Receive control failed (result -32) [ 593.293274][ T7556] block nbd0: Request send failed, requeueing [ 593.298581][ T5983] m920x_read = error: -19 [ 593.309279][ T5983] dvb-usb: error while querying for an remote control event. [ 593.322755][ T56] block nbd0: Dead connection, failed to find a fallback [ 593.341022][ T7556] block nbd0: Dead connection, failed to find a fallback [ 593.361731][ T7556] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 593.361753][ T56] block nbd0: shutting down sockets [ 593.380527][ T56] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 593.392845][ T56] buffer_io_error: 11 callbacks suppressed [ 593.392862][ T56] Buffer I/O error on dev nbd0, logical block 0, async page read [ 593.412207][ T7556] Buffer I/O error on dev nbd0, logical block 1, async page read [ 593.416395][T13567] usb 8-1: Using ep0 maxpacket: 8 [ 593.422022][ T7556] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 593.436368][ T7556] Buffer I/O error on dev nbd0, logical block 2, async page read [ 593.445013][ T7556] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 593.455834][ T7556] Buffer I/O error on dev nbd0, logical block 3, async page read [ 593.464576][ T7556] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 593.474756][ T7556] Buffer I/O error on dev nbd0, logical block 0, async page read [ 593.474948][T13568] m920x_read = error: -19 [ 593.483803][ T7556] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 593.498155][ T7556] Buffer I/O error on dev nbd0, logical block 1, async page read [ 593.500124][T13567] usb 8-1: New USB device found, idVendor=0b05, idProduct=1837, bcdDevice= 0.00 [ 593.507417][ T7556] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 593.520779][T14909] netlink: 'syz.8.2555': attribute type 75 has an invalid length. [ 593.526573][ T7556] Buffer I/O error on dev nbd0, logical block 2, async page read [ 593.544840][T13568] dvb-usb: error while querying for an remote control event. [ 593.544877][T13567] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.550057][T13567] usb 8-1: config 0 descriptor?? [ 593.563680][ T7556] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 593.588395][ T7556] Buffer I/O error on dev nbd0, logical block 3, async page read [ 593.607467][ T7556] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 593.612488][T14911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.618886][ T7556] Buffer I/O error on dev nbd0, logical block 0, async page read [ 593.637417][ T7556] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 593.648605][T13568] m920x_read = error: -19 [ 593.653949][T13568] dvb-usb: error while querying for an remote control event. [ 593.664955][T14911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.667610][ T7556] Buffer I/O error on dev nbd0, logical block 1, async page read [ 593.678375][T14913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.690589][ T7556] ldm_validate_partition_table(): Disk read failed. [ 593.701726][ T7556] Dev nbd0: unable to read RDB block 0 [ 593.711541][T14913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.721424][ T7556] nbd0: unable to read partition table [ 593.742699][ T7556] ldm_validate_partition_table(): Disk read failed. [ 593.767698][ T7556] Dev nbd0: unable to read RDB block 0 [ 593.776362][ T7556] nbd0: unable to read partition table [ 593.789261][T13568] m920x_read = error: -19 [ 593.794690][T13568] dvb-usb: error while querying for an remote control event. [ 593.901387][T14918] Unsupported ieee802154 address type: 0 [ 593.910280][T13568] m920x_read = error: -19 [ 593.915144][T13568] dvb-usb: error while querying for an remote control event. [ 594.025836][T13567] usbhid 8-1:0.0: can't add hid device: -71 [ 594.039429][T13568] m920x_read = error: -19 [ 594.044710][T13567] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 594.055612][T13568] dvb-usb: error while querying for an remote control event. [ 594.071353][T14924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.075765][T13567] usb 8-1: USB disconnect, device number 63 [ 594.092424][T14924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.173156][T13568] m920x_read = error: -19 [ 594.178419][T13568] dvb-usb: error while querying for an remote control event. [ 594.260042][T14926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.271028][T14926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.282637][T14926] ptrace attach of "./syz-executor exec"[11750] was attempted by ""[14926] [ 594.293563][T13567] m920x_read = error: -19 [ 594.298370][T13567] dvb-usb: error while querying for an remote control event. [ 594.414895][T13567] m920x_read = error: -19 [ 594.419734][T13567] dvb-usb: error while querying for an remote control event. [ 594.447408][T14930] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 594.457777][T14930] overlayfs: missing 'lowerdir' [ 594.545752][T13567] m920x_read = error: -19 [ 594.555549][T13567] dvb-usb: error while querying for an remote control event. [ 594.679518][T14936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.688490][T14936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.699024][T13567] m920x_read = error: -19 [ 594.705020][T14936] netlink: 'syz.8.2564': attribute type 10 has an invalid length. [ 594.705384][T13567] dvb-usb: error while querying for an remote control event. [ 594.714780][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 594.743626][T14936] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 594.770052][T14936] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2564'. [ 594.834038][T13567] m920x_read = error: -19 [ 594.844170][T13567] dvb-usb: error while querying for an remote control event. [ 594.888635][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 594.897069][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.910795][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.922909][ T9] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c1f, bcdDevice= 0.00 [ 594.934081][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.946276][ T9] usb 1-1: config 0 descriptor?? [ 594.968847][T13567] m920x_read = error: -19 [ 594.973656][T13567] dvb-usb: error while querying for an remote control event. [ 595.090870][T13568] m920x_read = error: -19 [ 595.095739][T13568] dvb-usb: error while querying for an remote control event. [ 595.211467][T13568] m920x_read = error: -19 [ 595.216276][T13568] dvb-usb: error while querying for an remote control event. [ 595.311626][T13567] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 595.331776][T13568] m920x_read = error: -19 [ 595.336566][T13568] dvb-usb: error while querying for an remote control event. [ 595.371790][ T9] corsair-psu 0003:1B1C:1C1F.0048: item fetching failed at offset 0/2 [ 595.387540][ T9] corsair-psu 0003:1B1C:1C1F.0048: probe with driver corsair-psu failed with error -22 [ 595.419485][ T30] audit: type=1326 audit(1759286185.845:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14950 comm="syz.8.2569" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbedcb8eec9 code=0x0 [ 595.454268][T13568] m920x_read = error: -19 [ 595.459047][T13568] dvb-usb: error while querying for an remote control event. [ 595.484613][T13567] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 595.496863][T13567] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.508894][T13567] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.520415][T13567] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 595.537148][T13567] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 595.547295][T13567] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 595.556368][T13567] usb 8-1: Manufacturer: syz [ 595.564151][T13567] usb 8-1: config 0 descriptor?? [ 595.573900][T13568] m920x_read = error: -19 [ 595.579313][T13568] dvb-usb: error while querying for an remote control event. [ 595.694873][T13568] m920x_read = error: -19 [ 595.699899][T13568] dvb-usb: error while querying for an remote control event. [ 595.790259][T13568] usb 1-1: USB disconnect, device number 10 [ 595.815785][ T5989] m920x_read = error: -19 [ 595.820632][ T5989] dvb-usb: error while querying for an remote control event. [ 595.936707][ T5989] m920x_read = error: -19 [ 595.941576][ T5989] dvb-usb: error while querying for an remote control event. [ 595.986315][T13567] hid_parser_main: 177 callbacks suppressed [ 595.986331][T13567] appleir 0003:05AC:8243.0049: unknown main item tag 0x0 [ 596.004578][T13567] appleir 0003:05AC:8243.0049: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 596.067649][T13567] m920x_read = error: -19 [ 596.072457][T13567] dvb-usb: error while querying for an remote control event. [ 596.199013][T13567] m920x_read = error: -19 [ 596.203911][T13567] dvb-usb: error while querying for an remote control event. [ 596.299728][T14955] netlink: 'syz.8.2570': attribute type 10 has an invalid length. [ 596.308548][T14955] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2570'. [ 596.319230][T14955] batadv0: entered promiscuous mode [ 596.325472][T14955] batadv0: entered allmulticast mode [ 596.330105][T13567] m920x_read = error: -19 [ 596.332668][T14955] bridge0: port 3(batadv0) entered blocking state [ 596.336221][T13567] dvb-usb: error while querying for an remote control event. [ 596.352785][T14955] bridge0: port 3(batadv0) entered disabled state [ 596.366558][T14955] bridge0: port 3(batadv0) entered blocking state [ 596.373942][T14955] bridge0: port 3(batadv0) entered forwarding state [ 596.442876][ T5989] m920x_read = error: -19 [ 596.458406][ T5989] dvb-usb: error while querying for an remote control event. [ 596.463339][T14960] Invalid source name [ 596.473200][T14960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.482922][T14960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.571749][ T5989] m920x_read = error: -19 [ 596.576666][ T5989] dvb-usb: error while querying for an remote control event. [ 596.652715][T13567] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 596.672897][ T2949] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 596.684197][ T2949] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 596.702707][ T5989] m920x_read = error: -19 [ 596.707625][ T5989] dvb-usb: error while querying for an remote control event. [ 596.803559][T13567] usb 1-1: Using ep0 maxpacket: 32 [ 596.811760][T13567] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 596.820893][T13567] usb 1-1: config 0 has no interface number 0 [ 596.827808][ T5989] m920x_read = error: -19 [ 596.832631][ T5989] dvb-usb: error while querying for an remote control event. [ 596.840820][T13567] usb 1-1: config 0 interface 184 has no altsetting 0 [ 596.850813][T13567] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 596.861618][T13567] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.870749][T13567] usb 1-1: Product: syz [ 596.875438][T13567] usb 1-1: Manufacturer: syz [ 596.880493][T13567] usb 1-1: SerialNumber: syz [ 596.888092][T13567] usb 1-1: config 0 descriptor?? [ 596.896755][T13567] smsc75xx v1.0.0 [ 596.954718][ T5989] m920x_read = error: -19 [ 596.959590][ T5989] dvb-usb: error while querying for an remote control event. [ 597.075649][ T5989] m920x_read = error: -19 [ 597.080521][ T5989] dvb-usb: error while querying for an remote control event. [ 597.196653][ T5989] m920x_read = error: -19 [ 597.201516][ T5989] dvb-usb: error while querying for an remote control event. [ 597.318230][ T5989] m920x_read = error: -19 [ 597.323112][ T5989] dvb-usb: error while querying for an remote control event. [ 597.331502][T14963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.344229][T14963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.438515][T13568] m920x_read = error: -19 [ 597.443342][T13568] dvb-usb: error while querying for an remote control event. [ 597.560287][T13568] m920x_read = error: -19 [ 597.565119][T13568] dvb-usb: error while querying for an remote control event. [ 597.682338][T13568] m920x_read = error: -19 [ 597.687732][T13568] dvb-usb: error while querying for an remote control event. [ 597.708074][T13567] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 597.720133][T13567] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 597.730772][T13567] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 597.742730][T13567] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 597.753464][T13567] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 597.765007][T13567] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 597.775794][T13567] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 597.789471][T13567] usb 1-1: USB disconnect, device number 11 [ 597.801405][T13568] m920x_read = error: -19 [ 597.806232][T13568] dvb-usb: error while querying for an remote control event. [ 597.924426][T13568] m920x_read = error: -19 [ 597.934837][T13568] dvb-usb: error while querying for an remote control event. [ 598.038722][T14973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.048592][T14973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.062979][T14973] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 598.070164][T14973] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 598.079315][T13568] m920x_read = error: -19 [ 598.084968][T13568] dvb-usb: error while querying for an remote control event. [ 598.093373][T14973] vhci_hcd vhci_hcd.0: Device attached [ 598.107736][T14973] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 598.108906][T12810] usb 8-1: USB disconnect, device number 64 [ 598.130508][T14979] overlayfs: failed lookup in lower (newroot/238, name='bus', err=-40): overlapping layers [ 598.196559][T13567] m920x_read = error: -19 [ 598.202069][T13567] dvb-usb: error while querying for an remote control event. [ 598.213561][T14975] vhci_hcd: connection closed [ 598.213814][ T3572] vhci_hcd: stop threads [ 598.228119][ T3572] vhci_hcd: release socket [ 598.233127][ T3572] vhci_hcd: disconnect device [ 598.315279][T13567] m920x_read = error: -19 [ 598.323829][T13567] dvb-usb: error while querying for an remote control event. [ 598.447096][T13568] m920x_read = error: -19 [ 598.451952][T13568] dvb-usb: error while querying for an remote control event. [ 598.567226][ T5989] m920x_read = error: -19 [ 598.572041][ T5989] dvb-usb: error while querying for an remote control event. [ 598.617621][T13567] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 598.688192][ T5989] m920x_read = error: -19 [ 598.693018][ T5989] dvb-usb: error while querying for an remote control event. [ 598.758652][ T9] usb 8-1: new full-speed USB device number 65 using dummy_hcd [ 598.781142][T13567] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 598.795036][T13567] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.809961][T13567] usb 1-1: config 0 descriptor?? [ 598.819600][ T5989] m920x_read = error: -19 [ 598.824741][ T5989] dvb-usb: error while querying for an remote control event. [ 598.857142][ T5989] hid-generic 0000:0000:0000.004A: unknown main item tag 0x0 [ 598.869799][ T5989] hid-generic 0000:0000:0000.004A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 598.890603][ T9] usb 8-1: device descriptor read/64, error -71 [ 598.952180][ T5989] m920x_read = error: -19 [ 598.957021][ T5989] dvb-usb: error while querying for an remote control event. [ 599.019467][T14990] raw_sendmsg: syz.0.2580 forgot to set AF_INET. Fix it! [ 599.081297][ T5989] m920x_read = error: -19 [ 599.086152][ T5989] dvb-usb: error while querying for an remote control event. [ 599.131518][ T9] usb 8-1: new full-speed USB device number 66 using dummy_hcd [ 599.202121][ T5989] m920x_read = error: -19 [ 599.207026][ T5989] dvb-usb: error while querying for an remote control event. [ 599.282613][ T9] usb 8-1: device descriptor read/64, error -71 [ 599.323392][ T5989] m920x_read = error: -19 [ 599.328346][ T5989] dvb-usb: error while querying for an remote control event. [ 599.393977][ T9] usb usb8-port1: attempt power cycle [ 599.443872][T13568] m920x_read = error: -19 [ 599.448734][T13568] dvb-usb: error while querying for an remote control event. [ 599.556952][T15003] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2585'. [ 599.564829][T13568] m920x_read = error: -19 [ 599.567943][T15003] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2585'. [ 599.571987][T13568] dvb-usb: error while querying for an remote control event. [ 599.695803][T13568] m920x_read = error: -19 [ 599.714842][T13568] dvb-usb: error while querying for an remote control event. [ 599.749248][ T9] usb 8-1: new full-speed USB device number 67 using dummy_hcd [ 599.763448][T15010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.774736][T15011] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2587'. [ 599.775696][T15010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.795122][ T9] usb 8-1: device descriptor read/8, error -71 [ 599.837639][T13568] m920x_read = error: -19 [ 599.842439][T13568] dvb-usb: error while querying for an remote control event. [ 599.957840][T13568] m920x_read = error: -19 [ 599.962662][T13568] dvb-usb: error while querying for an remote control event. [ 600.048492][ T9] usb 8-1: new full-speed USB device number 68 using dummy_hcd [ 600.069088][ T9] usb 8-1: device descriptor read/8, error -71 [ 600.078815][T13568] m920x_read = error: -19 [ 600.083646][T13568] dvb-usb: error while querying for an remote control event. [ 600.180426][ T9] usb usb8-port1: unable to enumerate USB device [ 600.209806][T13568] m920x_read = error: -19 [ 600.214744][T13568] dvb-usb: error while querying for an remote control event. [ 600.330675][T13568] m920x_read = error: -19 [ 600.336848][T13568] dvb-usb: error while querying for an remote control event. [ 600.355303][T15014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.365836][T15014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.452304][T13568] m920x_read = error: -19 [ 600.457138][T13568] dvb-usb: error while querying for an remote control event. [ 600.572582][T13568] m920x_read = error: -19 [ 600.595567][T13568] dvb-usb: error while querying for an remote control event. [ 600.600744][T15016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.613699][T15016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.713949][T13568] m920x_read = error: -19 [ 600.718865][T13568] dvb-usb: error while querying for an remote control event. [ 600.834773][T13568] m920x_read = error: -19 [ 600.839580][T13568] dvb-usb: error while querying for an remote control event. [ 600.963384][T15020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.972936][T13568] m920x_read = error: -19 [ 600.973325][T15020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.978310][T13568] dvb-usb: error while querying for an remote control event. [ 600.997918][T15020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.008631][T15020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.106802][T13568] m920x_read = error: -19 [ 601.111709][T13568] dvb-usb: error while querying for an remote control event. [ 601.170221][T15023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.181986][T15023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.227304][T13568] m920x_read = error: -19 [ 601.232215][T13568] dvb-usb: error while querying for an remote control event. [ 601.312877][T15027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.322615][T15027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.334345][T15027] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2594'. [ 601.349265][T13568] m920x_read = error: -19 [ 601.354134][T13568] dvb-usb: error while querying for an remote control event. [ 601.383181][T13567] kaweth 1-1:0.0: Firmware present in device. [ 601.400719][T13567] kaweth 1-1:0.0: Error reading configuration (-71), no net device created [ 601.413614][T13567] kaweth 1-1:0.0: probe with driver kaweth failed with error -5 [ 601.425866][T13567] usb 1-1: USB disconnect, device number 12 [ 601.470886][T13568] m920x_read = error: -19 [ 601.476415][T13568] dvb-usb: error while querying for an remote control event. [ 601.589929][ T5989] m920x_read = error: -19 [ 601.594747][ T5989] dvb-usb: error while querying for an remote control event. [ 601.629861][T15036] trusted_key: encrypted_key: master key parameter 'Iefaç÷ŠÇµÎÒ8ÿk;¥ult' is invalid [ 601.643935][T15035] trusted_key: encrypted_key: master key parameter 'Iefaç÷ŠÇµÎÒ8ÿk;¥ult' is invalid [ 601.726168][ T5989] m920x_read = error: -19 [ 601.731329][ T5989] dvb-usb: error while querying for an remote control event. [ 601.791712][T13567] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 601.838023][T15054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.841847][ T5989] m920x_read = error: -19 [ 601.849118][T15054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.854520][ T5989] dvb-usb: error while querying for an remote control event. [ 601.954309][T13567] usb 1-1: config 1 has an invalid descriptor of length 36, skipping remainder of the config [ 601.965718][T13567] usb 1-1: too many endpoints for config 1 interface 0 altsetting 7: 255, using maximum allowed: 30 [ 601.972733][ T9] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 601.977744][ T5989] m920x_read = error: -19 [ 601.991087][T13567] usb 1-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 602.006481][ T5989] dvb-usb: error while querying for an remote control event. [ 602.014970][T13567] usb 1-1: config 1 interface 0 has no altsetting 0 [ 602.042008][T13567] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 602.052421][T13567] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 602.061277][T13567] usb 1-1: SerialNumber: syz [ 602.078750][T13567] cdc_acm 1-1:1.0: invalid descriptor buffer length [ 602.090184][T13567] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 602.099248][T13567] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 602.107208][T13567] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 602.134002][T13567] m920x_read = error: -19 [ 602.138919][T13567] dvb-usb: error while querying for an remote control event. [ 602.157697][ T9] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 602.178221][ T9] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 602.205037][ T9] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 602.224015][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.256508][T13567] m920x_read = error: -19 [ 602.261319][T13567] dvb-usb: error while querying for an remote control event. [ 602.286598][T15038] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 602.301506][T13567] usb 1-1: USB disconnect, device number 13 [ 602.314862][ T9] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 602.376276][ T5989] m920x_read = error: -19 [ 602.384447][ T5989] dvb-usb: error while querying for an remote control event. [ 602.482624][T15062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.492442][T15062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.509265][T15062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.530865][T13567] m920x_read = error: -19 [ 602.554264][T15062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.556898][T13567] dvb-usb: error while querying for an remote control event. [ 602.589014][ T1073] usb 8-1: USB disconnect, device number 69 [ 602.592026][T15064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.605930][T15064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.690283][T13567] m920x_read = error: -19 [ 602.695078][T13567] dvb-usb: error while querying for an remote control event. [ 602.808756][T13567] m920x_read = error: -19 [ 602.813563][T13567] dvb-usb: error while querying for an remote control event. [ 602.854433][T15038] binder: 15034:15038 ioctl c0a85320 200000000500 returned -22 [ 602.929618][T13567] m920x_read = error: -19 [ 602.934561][T13567] dvb-usb: error while querying for an remote control event. [ 603.050884][T13567] m920x_read = error: -19 [ 603.055751][T13567] dvb-usb: error while querying for an remote control event. [ 603.104800][T15073] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2608'. [ 603.173518][T13567] m920x_read = error: -19 [ 603.178335][T13567] dvb-usb: error while querying for an remote control event. [ 603.203630][T15073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2608'. [ 603.221148][T15073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.230894][T15078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.231230][T15073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.240764][T15078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.259629][ T1073] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 603.312312][T13567] m920x_read = error: -19 [ 603.317086][T13567] dvb-usb: error while querying for an remote control event. [ 603.433213][T13567] m920x_read = error: -19 [ 603.444607][T13567] dvb-usb: error while querying for an remote control event. [ 603.448444][ T1073] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.470026][ T1073] usb 1-1: New USB device found, idVendor=05ac, idProduct=0323, bcdDevice= 0.00 [ 603.483327][ T1073] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.499501][ T1073] usb 1-1: config 0 descriptor?? [ 603.574705][ T5989] m920x_read = error: -19 [ 603.579669][ T5989] dvb-usb: error while querying for an remote control event. [ 603.695151][ T5989] m920x_read = error: -19 [ 603.699961][ T5989] dvb-usb: error while querying for an remote control event. [ 603.715176][T13567] usb 8-1: new high-speed USB device number 70 using dummy_hcd [ 603.815943][ T5989] m920x_read = error: -19 [ 603.820764][ T5989] dvb-usb: error while querying for an remote control event. [ 603.866352][T13567] usb 8-1: Using ep0 maxpacket: 32 [ 603.880470][T13567] usb 8-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 603.890572][T13567] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.902044][T13567] usb 8-1: Product: syz [ 603.918452][T13567] usb 8-1: Manufacturer: syz [ 603.923969][T15071] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:20001 [ 603.934597][T13567] usb 8-1: SerialNumber: syz [ 603.939937][T13568] m920x_read = error: -19 [ 603.944726][T13568] dvb-usb: error while querying for an remote control event. [ 603.948664][ T1073] magicmouse 0003:05AC:0323.004B: unknown main item tag 0x0 [ 603.975245][T13567] usb 8-1: config 0 descriptor?? [ 603.978793][ T1073] magicmouse 0003:05AC:0323.004B: unknown main item tag 0x0 [ 604.002650][T13567] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 604.012234][ T1073] magicmouse 0003:05AC:0323.004B: hidraw0: USB HID v0.0c Device [HID 05ac:0323] on usb-dummy_hcd.0-1/input0 [ 604.044245][T15092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.071219][T15092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.088084][T13568] m920x_read = error: -19 [ 604.092921][T13568] dvb-usb: error while querying for an remote control event. [ 604.155189][ T1073] usb 1-1: USB disconnect, device number 14 [ 604.201590][T13567] gspca_stk1135: reg_w 0x2 err -71 [ 604.222403][T13567] gspca_stk1135: serial bus timeout: status=0x00 [ 604.229600][T13568] m920x_read = error: -19 [ 604.234375][T13568] dvb-usb: error while querying for an remote control event. [ 604.242566][T13567] gspca_stk1135: Sensor write failed [ 604.248403][T13567] gspca_stk1135: serial bus timeout: status=0x00 [ 604.256133][T13567] gspca_stk1135: Sensor write failed [ 604.262661][T13567] gspca_stk1135: serial bus timeout: status=0x00 [ 604.269746][T13567] gspca_stk1135: Sensor read failed [ 604.275522][T13567] gspca_stk1135: serial bus timeout: status=0x00 [ 604.283529][T13567] gspca_stk1135: Sensor read failed [ 604.290339][T13567] gspca_stk1135: Detected sensor type unknown (0x0) [ 604.297632][T13567] gspca_stk1135: serial bus timeout: status=0x00 [ 604.302469][T15097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.304629][T13567] gspca_stk1135: Sensor read failed [ 604.304659][T13567] gspca_stk1135: serial bus timeout: status=0x00 [ 604.320198][T15097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.328558][T13567] gspca_stk1135: Sensor read failed [ 604.342402][T13567] gspca_stk1135: serial bus timeout: status=0x00 [ 604.349371][T13567] gspca_stk1135: Sensor write failed [ 604.355489][T13567] gspca_stk1135: serial bus timeout: status=0x00 [ 604.362905][T13568] m920x_read = error: -19 [ 604.367792][T13568] dvb-usb: error while querying for an remote control event. [ 604.376281][T13567] gspca_stk1135: Sensor write failed [ 604.383242][T13567] stk1135 8-1:0.0: probe with driver stk1135 failed with error -71 [ 604.402510][T13567] usb 8-1: USB disconnect, device number 70 [ 604.423449][ T5880] Bluetooth: hci0: unexpected event for opcode 0x1002 [ 604.428723][T15097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.442554][T15097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.491443][T13568] m920x_read = error: -19 [ 604.496847][T13568] dvb-usb: error while querying for an remote control event. [ 604.611645][T13567] m920x_read = error: -19 [ 604.616541][T13567] dvb-usb: error while querying for an remote control event. [ 604.732501][T13567] m920x_read = error: -19 [ 604.742469][T13567] dvb-usb: error while querying for an remote control event. [ 604.874407][T13567] m920x_read = error: -19 [ 604.879896][T13567] dvb-usb: error while querying for an remote control event. [ 604.912439][T15108] netlink: 666 bytes leftover after parsing attributes in process `syz.7.2618'. [ 604.933916][T13568] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 605.004351][T13567] m920x_read = error: -19 [ 605.014345][T13567] dvb-usb: error while querying for an remote control event. [ 605.101333][T13568] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.120303][T13568] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.123043][T15112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.131896][T13568] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 605.147553][T15112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.166133][ T5989] m920x_read = error: -19 [ 605.170936][ T5989] dvb-usb: error while querying for an remote control event. [ 605.185481][T13568] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.197847][T13568] usb 1-1: config 0 descriptor?? [ 605.296501][ T5989] m920x_read = error: -19 [ 605.305796][ T5989] dvb-usb: error while querying for an remote control event. [ 605.417772][ T5989] m920x_read = error: -19 [ 605.423697][ T5989] dvb-usb: error while querying for an remote control event. [ 605.539136][ T5989] m920x_read = error: -19 [ 605.543974][ T5989] dvb-usb: error while querying for an remote control event. [ 605.689539][ T5989] m920x_read = error: -19 [ 605.694447][ T5989] dvb-usb: error while querying for an remote control event. [ 605.810370][ T5989] m920x_read = error: -19 [ 605.815212][ T5989] dvb-usb: error while querying for an remote control event. [ 605.920654][ T1073] usb 8-1: new high-speed USB device number 71 using dummy_hcd [ 605.930710][ T5989] m920x_read = error: -19 [ 605.935507][ T5989] dvb-usb: error while querying for an remote control event. [ 606.051506][ T1073] usb 8-1: device descriptor read/64, error -71 [ 606.061782][ T5989] m920x_read = error: -19 [ 606.066603][ T5989] dvb-usb: error while querying for an remote control event. [ 606.182671][ T5989] m920x_read = error: -19 [ 606.187930][ T5989] dvb-usb: error while querying for an remote control event. [ 606.291152][T15125] netlink: 14 bytes leftover after parsing attributes in process `syz.8.2622'. [ 606.293266][ T1073] usb 8-1: new high-speed USB device number 72 using dummy_hcd [ 606.336718][ T5989] m920x_read = error: -19 [ 606.341613][ T5989] dvb-usb: error while querying for an remote control event. [ 606.444261][ T1073] usb 8-1: device descriptor read/64, error -71 [ 606.453114][T15125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.462885][ T5989] m920x_read = error: -19 [ 606.468147][ T5989] dvb-usb: error while querying for an remote control event. [ 606.479229][T15125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.493199][T15125] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 606.504210][T15125] bond0 (unregistering): Released all slaves [ 606.555412][ T1073] usb usb8-port1: attempt power cycle [ 606.586782][ T5989] m920x_read = error: -19 [ 606.591610][ T5989] dvb-usb: error while querying for an remote control event. [ 606.716228][ T5989] m920x_read = error: -19 [ 606.721089][ T5989] dvb-usb: error while querying for an remote control event. [ 606.847170][ T5989] m920x_read = error: -19 [ 606.852004][ T5989] dvb-usb: error while querying for an remote control event. [ 606.897352][ T1073] usb 8-1: new high-speed USB device number 73 using dummy_hcd [ 606.919878][T15128] hpfs: Bad magic ... probably not HPFS [ 606.931599][ T1073] usb 8-1: device descriptor read/8, error -71 [ 606.969430][ T5989] m920x_read = error: -19 [ 606.974327][ T5989] dvb-usb: error while querying for an remote control event. [ 607.051566][T15135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.061510][T15135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.089090][ T5989] m920x_read = error: -19 [ 607.098659][ T5989] dvb-usb: error while querying for an remote control event. [ 607.179336][ T1073] usb 8-1: new high-speed USB device number 74 using dummy_hcd [ 607.200363][ T1073] usb 8-1: device descriptor read/8, error -71 [ 607.219820][ T5989] m920x_read = error: -19 [ 607.224606][ T5989] dvb-usb: error while querying for an remote control event. [ 607.311051][ T1073] usb usb8-port1: unable to enumerate USB device [ 607.350686][ T5989] m920x_read = error: -19 [ 607.355562][ T5989] dvb-usb: error while querying for an remote control event. [ 607.481329][ T5989] m920x_read = error: -19 [ 607.486577][T15143] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2627'. [ 607.486865][ T5989] dvb-usb: error while querying for an remote control event. [ 607.622331][ T5989] m920x_read = error: -19 [ 607.627420][ T5989] dvb-usb: error while querying for an remote control event. [ 607.648234][T15147] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 607.666784][T15147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.676792][T15147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.723999][T13568] usbhid 1-1:0.0: can't add hid device: -71 [ 607.739954][T13568] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 607.748855][ T5989] m920x_read = error: -19 [ 607.754171][ T5989] dvb-usb: error while querying for an remote control event. [ 607.767517][T13568] usb 1-1: USB disconnect, device number 15 [ 607.884063][ T5989] m920x_read = error: -19 [ 607.888872][ T5989] dvb-usb: error while querying for an remote control event. [ 608.004845][ T5989] m920x_read = error: -19 [ 608.009690][ T5989] dvb-usb: error while querying for an remote control event. [ 608.105420][T13568] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 608.125687][ T5989] m920x_read = error: -19 [ 608.130487][ T5989] dvb-usb: error while querying for an remote control event. [ 608.238095][T15153] netlink: 'syz.2.2631': attribute type 13 has an invalid length. [ 608.247079][ T5989] m920x_read = error: -19 [ 608.248020][T15153] netlink: 'syz.2.2631': attribute type 15 has an invalid length. [ 608.251860][ T5989] dvb-usb: error while querying for an remote control event. [ 608.263170][T13568] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 608.268983][T15153] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2631'. [ 608.284852][T13568] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 608.302547][T13568] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 608.313675][T13568] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.329246][T15151] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 608.342225][T13568] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 608.357394][ T5989] m920x_read = error: -19 [ 608.362379][ T5989] dvb-usb: error while querying for an remote control event. [ 608.463625][T15157] [ 608.466229][T15157] ====================================================== [ 608.473940][T15157] WARNING: possible circular locking dependency detected [ 608.477919][T13568] m920x_read = error: -19 [ 608.481661][T15157] syzkaller #0 Not tainted [ 608.481674][T15157] ------------------------------------------------------ [ 608.481683][T15157] syz.2.2633/15157 is trying to acquire lock: [ 608.486535][T13568] dvb-usb: error while querying for an remote control event. [ 608.491240][T15157] ffffffff8e645220 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_noprof+0x9c/0x7f0 [ 608.491303][T15157] [ 608.491303][T15157] but task is already holding lock: [ 608.491309][T15157] ffffffff8e3e3a48 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0x9f0/0x1b80 [ 608.541595][T15157] [ 608.541595][T15157] which lock already depends on the new lock. [ 608.541595][T15157] [ 608.553016][T15157] [ 608.553016][T15157] the existing dependency chain (in reverse order) is: [ 608.562903][T15157] [ 608.562903][T15157] -> #8 (wq_pool_mutex){+.+.}-{4:4}: [ 608.571110][T15157] lock_acquire+0x120/0x360 [ 608.576611][T15157] __mutex_lock+0x187/0x1350 [ 608.582230][T15157] __alloc_workqueue+0x9f0/0x1b80 [ 608.588319][T15157] alloc_workqueue_noprof+0xd4/0x210 [ 608.594683][T15157] padata_alloc+0xc1/0x370 [ 608.600113][T15157] pcrypt_init_padata+0x27/0x100 [ 608.606093][T15157] pcrypt_init+0x60/0xc0 [ 608.608827][T13568] m920x_read = error: -19 [ 608.611302][T15157] do_one_initcall+0x236/0x820 [ 608.611325][T15157] do_initcall_level+0x104/0x190 [ 608.616210][T13568] dvb-usb: error while querying for an remote control event. [ 608.621834][T15157] do_initcalls+0x59/0xa0 [ 608.621857][T15157] kernel_init_freeable+0x334/0x4b0 [ 608.621879][T15157] kernel_init+0x1d/0x1d0 [ 608.621902][T15157] ret_from_fork+0x4bc/0x870 [ 608.621922][T15157] ret_from_fork_asm+0x1a/0x30 [ 608.621941][T15157] [ 608.621941][T15157] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 608.621972][T15157] lock_acquire+0x120/0x360 [ 608.621992][T15157] cpus_read_lock+0x42/0x160 [ 608.622013][T15157] static_key_slow_inc+0x12/0x30 [ 608.622040][T15157] setup_udp_tunnel_sock+0x34f/0x550 [ 608.622058][T15157] l2tp_tunnel_register+0xcb6/0x1320 [ 608.622084][T15157] pppol2tp_connect+0x87c/0x1750 [ 608.622112][T15157] __sys_connect+0x316/0x440 [ 608.622131][T15157] __x64_sys_connect+0x7a/0x90 [ 608.719824][T15157] do_syscall_64+0xfa/0xfa0 [ 608.725345][T15157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.732385][T15157] [ 608.732385][T15157] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 608.740780][T15157] lock_acquire+0x120/0x360 [ 608.746289][T15157] lock_sock_nested+0x48/0x100 [ 608.752087][T15157] inet_shutdown+0x6a/0x390 [ 608.757591][T15157] nbd_mark_nsock_dead+0x2e9/0x560 [ 608.763764][T15157] sock_shutdown+0x15e/0x260 [ 608.769378][T15157] nbd_config_put+0x342/0x790 [ 608.775082][T15157] nbd_release+0xfe/0x140 [ 608.780394][T15157] bdev_release+0x536/0x650 [ 608.785903][T15157] blkdev_release+0x15/0x20 [ 608.791414][T15157] __fput+0x44c/0xa70 [ 608.796348][T15157] task_work_run+0x1d4/0x260 [ 608.801945][T15157] exit_to_user_mode_loop+0xe9/0x130 [ 608.808310][T15157] do_syscall_64+0x2bd/0xfa0 [ 608.813914][T15157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.820945][T15157] [ 608.820945][T15157] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 608.829341][T15157] lock_acquire+0x120/0x360 [ 608.834858][T15157] __mutex_lock+0x187/0x1350 [ 608.840472][T15157] nbd_queue_rq+0x257/0xf10 [ 608.845995][T15157] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 608.852656][T15157] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 608.860186][T15157] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 608.867330][T15157] blk_mq_run_hw_queue+0x348/0x4f0 [ 608.873514][T15157] blk_mq_dispatch_list+0xd0c/0xe00 [ 608.879790][T15157] blk_mq_flush_plug_list+0x469/0x550 [ 608.886254][T15157] __blk_flush_plug+0x3d3/0x4b0 [ 608.892144][T15157] __submit_bio+0x2d3/0x5a0 [ 608.897653][T15157] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 608.904404][T15157] block_read_full_folio+0x599/0x830 [ 608.910777][T15157] filemap_read_folio+0x117/0x380 [ 608.916876][T15157] do_read_cache_folio+0x350/0x590 [ 608.923067][T15157] read_part_sector+0xb6/0x2b0 [ 608.928864][T15157] adfspart_check_ICS+0xa4/0xa50 [ 608.934852][T15157] bdev_disk_changed+0x75f/0x14b0 [ 608.940935][T15157] blkdev_get_whole+0x380/0x510 [ 608.946835][T15157] bdev_open+0x31e/0xd30 [ 608.952070][T15157] blkdev_open+0x457/0x600 [ 608.957496][T15157] do_dentry_open+0x953/0x13f0 [ 608.963300][T15157] vfs_open+0x3b/0x340 [ 608.968335][T15157] path_openat+0x2ee5/0x3830 [ 608.973934][T15157] do_filp_open+0x1fa/0x410 [ 608.979438][T15157] do_sys_openat2+0x121/0x1c0 [ 608.985138][T15157] __x64_sys_openat+0x138/0x170 [ 608.991029][T15157] do_syscall_64+0xfa/0xfa0 [ 608.996536][T15157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.003569][T15157] [ 609.003569][T15157] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 609.011482][T15157] lock_acquire+0x120/0x360 [ 609.016998][T15157] __mutex_lock+0x187/0x1350 [ 609.022604][T15157] nbd_queue_rq+0xc8/0xf10 [ 609.028026][T15157] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 609.034682][T15157] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 609.042199][T15157] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 609.049330][T15157] blk_mq_run_hw_queue+0x348/0x4f0 [ 609.055503][T15157] blk_mq_dispatch_list+0xd0c/0xe00 [ 609.061775][T15157] blk_mq_flush_plug_list+0x469/0x550 [ 609.068239][T15157] __blk_flush_plug+0x3d3/0x4b0 [ 609.074124][T15157] __submit_bio+0x2d3/0x5a0 [ 609.079632][T15157] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 609.086381][T15157] block_read_full_folio+0x599/0x830 [ 609.092746][T15157] filemap_read_folio+0x117/0x380 [ 609.098824][T15157] do_read_cache_folio+0x350/0x590 [ 609.104995][T15157] read_part_sector+0xb6/0x2b0 [ 609.110787][T15157] adfspart_check_ICS+0xa4/0xa50 [ 609.116769][T15157] bdev_disk_changed+0x75f/0x14b0 [ 609.122847][T15157] blkdev_get_whole+0x380/0x510 [ 609.128736][T15157] bdev_open+0x31e/0xd30 [ 609.133957][T15157] blkdev_open+0x457/0x600 [ 609.139371][T15157] do_dentry_open+0x953/0x13f0 [ 609.145171][T15157] vfs_open+0x3b/0x340 [ 609.150199][T15157] path_openat+0x2ee5/0x3830 [ 609.155795][T15157] do_filp_open+0x1fa/0x410 [ 609.161293][T15157] do_sys_openat2+0x121/0x1c0 [ 609.167004][T15157] __x64_sys_openat+0x138/0x170 [ 609.172917][T15157] do_syscall_64+0xfa/0xfa0 [ 609.178441][T15157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.185483][T15157] [ 609.185483][T15157] -> #3 (set->srcu){.+.+}-{0:0}: [ 609.193303][T15157] lock_sync+0xba/0x160 [ 609.198434][T15157] __synchronize_srcu+0x96/0x3a0 [ 609.204419][T15157] elevator_switch+0x12b/0x640 [ 609.210212][T15157] elevator_change+0x315/0x4c0 [ 609.216003][T15157] elevator_set_default+0x186/0x260 [ 609.222272][T15157] blk_register_queue+0x34e/0x3f0 [ 609.228352][T15157] __add_disk+0x677/0xd50 [ 609.233685][T15157] add_disk_fwnode+0xfc/0x480 [ 609.239389][T15157] nbd_dev_add+0x717/0xae0 [ 609.244811][T15157] nbd_init+0x168/0x1f0 [ 609.249935][T15157] do_one_initcall+0x236/0x820 [ 609.255727][T15157] do_initcall_level+0x104/0x190 [ 609.261714][T15157] do_initcalls+0x59/0xa0 [ 609.267029][T15157] kernel_init_freeable+0x334/0x4b0 [ 609.273299][T15157] kernel_init+0x1d/0x1d0 [ 609.278618][T15157] ret_from_fork+0x4bc/0x870 [ 609.284219][T15157] ret_from_fork_asm+0x1a/0x30 [ 609.290008][T15157] [ 609.290008][T15157] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 609.298586][T15157] lock_acquire+0x120/0x360 [ 609.304091][T15157] __mutex_lock+0x187/0x1350 [ 609.309693][T15157] elevator_change+0x1e5/0x4c0 [ 609.315496][T15157] elevator_set_none+0x42/0xb0 [ 609.321286][T15157] blk_mq_update_nr_hw_queues+0x598/0x1ab0 [ 609.328231][T15157] nbd_start_device+0x17f/0xb10 [ 609.334125][T15157] nbd_genl_connect+0x135b/0x18f0 [ 609.340210][T15157] genl_family_rcv_msg_doit+0x215/0x300 [ 609.346871][T15157] genl_rcv_msg+0x60e/0x790 [ 609.352384][T15157] netlink_rcv_skb+0x208/0x470 [ 609.358173][T15157] genl_rcv+0x28/0x40 [ 609.363108][T15157] netlink_unicast+0x82f/0x9e0 [ 609.368896][T15157] netlink_sendmsg+0x805/0xb30 [ 609.374690][T15157] __sock_sendmsg+0x21c/0x270 [ 609.380400][T15157] ____sys_sendmsg+0x505/0x830 [ 609.386191][T15157] ___sys_sendmsg+0x21f/0x2a0 [ 609.391891][T15157] __x64_sys_sendmsg+0x19b/0x260 [ 609.397878][T15157] do_syscall_64+0xfa/0xfa0 [ 609.403387][T15157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.410417][T15157] [ 609.410417][T15157] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 609.419862][T15157] lock_acquire+0x120/0x360 [ 609.425376][T15157] blk_alloc_queue+0x538/0x620 [ 609.431170][T15157] __blk_mq_alloc_disk+0x15c/0x340 [ 609.437346][T15157] nbd_dev_add+0x46c/0xae0 [ 609.442787][T15157] nbd_init+0x168/0x1f0 [ 609.447911][T15157] do_one_initcall+0x236/0x820 [ 609.453703][T15157] do_initcall_level+0x104/0x190 [ 609.459688][T15157] do_initcalls+0x59/0xa0 [ 609.465009][T15157] kernel_init_freeable+0x334/0x4b0 [ 609.471281][T15157] kernel_init+0x1d/0x1d0 [ 609.476602][T15157] ret_from_fork+0x4bc/0x870 [ 609.482218][T15157] ret_from_fork_asm+0x1a/0x30 [ 609.488025][T15157] [ 609.488025][T15157] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 609.495948][T15157] validate_chain+0xb9b/0x2140 [ 609.501752][T15157] __lock_acquire+0xab9/0xd20 [ 609.507450][T15157] lock_acquire+0x120/0x360 [ 609.512955][T15157] fs_reclaim_acquire+0x72/0x100 [ 609.518938][T15157] __kmalloc_noprof+0x9c/0x7f0 [ 609.524739][T15157] apply_wqattrs_prepare+0xf6/0xe00 [ 609.531013][T15157] apply_workqueue_attrs_locked+0x65/0x240 [ 609.537957][T15157] __alloc_workqueue+0x10ca/0x1b80 [ 609.544137][T15157] alloc_workqueue_noprof+0xd4/0x210 [ 609.550517][T15157] ceph_osdc_init+0x5b4/0x8d0 [ 609.556222][T15157] ceph_create_client+0x215/0x2c0 [ 609.562304][T15157] ceph_get_tree+0x1cf/0x1820 [ 609.567998][T15157] vfs_get_tree+0x92/0x2b0 [ 609.573407][T15157] vfs_cmd_create+0xa2/0x200 [ 609.579015][T15157] __se_sys_fsconfig+0x78e/0x8d0 [ 609.585003][T15157] do_syscall_64+0xfa/0xfa0 [ 609.590510][T15157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.597543][T15157] [ 609.597543][T15157] other info that might help us debug this: [ 609.597543][T15157] [ 609.608766][T15157] Chain exists of: [ 609.608766][T15157] fs_reclaim --> cpu_hotplug_lock --> wq_pool_mutex [ 609.608766][T15157] [ 609.622510][T15157] Possible unsafe locking scenario: [ 609.622510][T15157] [ 609.630680][T15157] CPU0 CPU1 [ 609.636555][T15157] ---- ---- [ 609.642431][T15157] lock(wq_pool_mutex); [ 609.647075][T15157] lock(cpu_hotplug_lock); [ 609.654783][T15157] lock(wq_pool_mutex); [ 609.662200][T15157] lock(fs_reclaim); [ 609.666562][T15157] [ 609.666562][T15157] *** DEADLOCK *** [ 609.666562][T15157] [ 609.675493][T15157] 2 locks held by syz.2.2633/15157: [ 609.681182][T15157] #0: ffff88803479ec70 (&fc->uapi_mutex){+.+.}-{4:4}, at: __se_sys_fsconfig+0x758/0x8d0 [ 609.691986][T15157] #1: ffffffff8e3e3a48 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0x9f0/0x1b80 [ 609.702697][T15157] [ 609.702697][T15157] stack backtrace: [ 609.709154][T15157] CPU: 0 UID: 0 PID: 15157 Comm: syz.2.2633 Not tainted syzkaller #0 PREEMPT(full) [ 609.709174][T15157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 609.709186][T15157] Call Trace: [ 609.709194][T15157] [ 609.709203][T15157] dump_stack_lvl+0x189/0x250 [ 609.709230][T15157] ? __pfx_dump_stack_lvl+0x10/0x10 [ 609.709255][T15157] ? __pfx__printk+0x10/0x10 [ 609.709279][T15157] ? print_lock_name+0xde/0x100 [ 609.709302][T15157] print_circular_bug+0x2ee/0x310 [ 609.709327][T15157] check_noncircular+0x134/0x160 [ 609.709358][T15157] validate_chain+0xb9b/0x2140 [ 609.709382][T15157] ? lockdep_unlock+0x89/0x120 [ 609.709399][T15157] ? validate_chain+0x897/0x2140 [ 609.709423][T15157] __lock_acquire+0xab9/0xd20 [ 609.709444][T15157] ? __kmalloc_noprof+0x9c/0x7f0 [ 609.709467][T15157] lock_acquire+0x120/0x360 [ 609.709485][T15157] ? __kmalloc_noprof+0x9c/0x7f0 [ 609.709513][T15157] fs_reclaim_acquire+0x72/0x100 [ 609.709529][T15157] ? __kmalloc_noprof+0x9c/0x7f0 [ 609.709552][T15157] __kmalloc_noprof+0x9c/0x7f0 [ 609.709576][T15157] ? apply_wqattrs_prepare+0xf6/0xe00 [ 609.709598][T15157] apply_wqattrs_prepare+0xf6/0xe00 [ 609.709619][T15157] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 609.709640][T15157] ? pcpu_memcg_post_alloc_hook+0xb8/0x520 [ 609.709658][T15157] ? pcpu_alloc_noprof+0xfdd/0x1720 [ 609.709676][T15157] apply_workqueue_attrs_locked+0x65/0x240 [ 609.709704][T15157] __alloc_workqueue+0x10ca/0x1b80 [ 609.709735][T15157] alloc_workqueue_noprof+0xd4/0x210 [ 609.709762][T15157] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 609.709788][T15157] ? __pfx_msgpool_free+0x10/0x10 [ 609.709816][T15157] ? ceph_msgpool_init+0xdd/0x190 [ 609.709841][T15157] ceph_osdc_init+0x5b4/0x8d0 [ 609.709868][T15157] ceph_create_client+0x215/0x2c0 [ 609.709888][T15157] ceph_get_tree+0x1cf/0x1820 [ 609.709906][T15157] ? apparmor_capable+0x137/0x1b0 [ 609.709933][T15157] vfs_get_tree+0x92/0x2b0 [ 609.709952][T15157] vfs_cmd_create+0xa2/0x200 [ 609.709977][T15157] __se_sys_fsconfig+0x78e/0x8d0 [ 609.710004][T15157] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 609.710031][T15157] ? do_syscall_64+0xbe/0xfa0 [ 609.710051][T15157] ? __x64_sys_fsconfig+0x20/0xc0 [ 609.710075][T15157] do_syscall_64+0xfa/0xfa0 [ 609.710094][T15157] ? lockdep_hardirqs_on+0x9c/0x150 [ 609.710113][T15157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.710130][T15157] ? clear_bhb_loop+0x60/0xb0 [ 609.710148][T15157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.710165][T15157] RIP: 0033:0x7f59e278eec9 [ 609.710181][T15157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 609.710197][T15157] RSP: 002b:00007f59e09f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 609.710214][T15157] RAX: ffffffffffffffda RBX: 00007f59e29e5fa0 RCX: 00007f59e278eec9 [ 609.710228][T15157] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 609.710238][T15157] RBP: 00007f59e2811f91 R08: 0000000000000000 R09: 0000000000000000 [ 609.710250][T15157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 609.710260][T15157] R13: 00007f59e29e6038 R14: 00007f59e29e5fa0 R15: 00007fff933193f8 [ 609.710279][T15157] [ 609.713813][T13568] m920x_read = error: -19 [ 609.720674][ C0] vkms_vblank_simulate: vblank timer overrun [ 609.731860][T13568] dvb-usb: error while querying for an remote control event. [ 609.873706][ T1073] libceph: connect (1)[c::]:6789 error -101 [ 609.898077][ T5989] usb 1-1: USB disconnect, device number 16 [ 609.923060][ T1073] libceph: mon0 (1)[c::]:6789 connect error [ 609.939496][T15157] ceph: No mds server is up or the cluster is laggy [ 610.103992][T13568] m920x_read = error: -19 [ 610.109486][T13568] dvb-usb: error while querying for an remote control event. [ 610.160560][T15151] binder: 15150:15151 ioctl c0a85320 200000000500 returned -22 [ 610.219379][T13568] m920x_read = error: -19 [ 610.224193][T13568] dvb-usb: error while querying for an remote control event. [ 610.340122][ T5989] m920x_read = error: -19 [ 610.344903][ T5989] dvb-usb: error while querying for an remote control event. [ 610.462724][ T5989] m920x_read = error: -19 [ 610.467511][ T5989] dvb-usb: error while querying for an remote control event. [ 610.591732][ T5989] m920x_read = error: -19 [ 610.596548][ T5989] dvb-usb: error while querying for an remote control event. [ 610.712501][ T5989] m920x_read = error: -19 [ 610.717318][ T5989] dvb-usb: error while querying for an remote control event. [ 610.843363][ T5989] m920x_read = error: -19 [ 610.848149][ T5989] dvb-usb: error while querying for an remote control event. [ 610.974619][ T5989] m920x_read = error: -19 [ 610.979419][ T5989] dvb-usb: error while querying for an remote control event. [ 611.095423][ T5989] m920x_read = error: -19 [ 611.100198][ T5989] dvb-usb: error while querying for an remote control event. [ 611.215707][ T1073] m920x_read = error: -19 [ 611.220570][ T1073] dvb-usb: error while querying for an remote control event. [ 611.337043][ T1073] m920x_read = error: -19 [ 611.341829][ T1073] dvb-usb: error while querying for an remote control event. [ 611.457417][ T1073] m920x_read = error: -19 [ 611.462214][ T1073] dvb-usb: error while querying for an remote control event. [ 611.578334][ T1073] m920x_read = error: -19 [ 611.583144][ T1073] dvb-usb: error while querying for an remote control event. [ 611.698861][ T1073] m920x_read = error: -19 [ 611.703658][ T1073] dvb-usb: error while querying for an remote control event. [ 611.829882][ T1073] m920x_read = error: -19 [ 611.834701][ T1073] dvb-usb: error while querying for an remote control event. [ 611.950612][ T1073] m920x_read = error: -19 [ 611.955387][ T1073] dvb-usb: error while querying for an remote control event. [ 612.071660][ T1073] m920x_read = error: -19 [ 612.076438][ T1073] dvb-usb: error while querying for an remote control event. [ 612.202559][ T1073] m920x_read = error: -19 [ 612.207352][ T1073] dvb-usb: error while querying for an remote control event. [ 612.322820][ T1073] m920x_read = error: -19 [ 612.327804][ T1073] dvb-usb: error while querying for an remote control event. [ 612.444037][T13568] m920x_read = error: -19 [ 612.448852][T13568] dvb-usb: error while querying for an remote control event. [ 612.564476][T13568] m920x_read = error: -19 [ 612.569263][T13568] dvb-usb: error while querying for an remote control event. [ 612.685434][ T1073] m920x_read = error: -19 [ 612.690226][ T1073] dvb-usb: error while querying for an remote control event. [ 612.805817][ T1073] m920x_read = error: -19 [ 612.810595][ T1073] dvb-usb: error while querying for an remote control event. [ 612.926926][ T1073] m920x_read = error: -19 [ 612.931755][ T1073] dvb-usb: error while querying for an remote control event. [ 613.047889][ T1073] m920x_read = error: -19 [ 613.052906][ T1073] dvb-usb: error while querying for an remote control event. [ 613.168960][T13568] m920x_read = error: -19 [ 613.173739][T13568] dvb-usb: error while querying for an remote control event. [ 613.289156][T13568] m920x_read = error: -19 [ 613.293947][T13568] dvb-usb: error while querying for an remote control event. [ 613.409555][T13568] m920x_read = error: -19 [ 613.414347][T13568] dvb-usb: error while querying for an remote control event. [ 613.530846][T13568] m920x_read = error: -19 [ 613.535620][T13568] dvb-usb: error while querying for an remote control event. [ 613.651076][T13568] m920x_read = error: -19 [ 613.655887][T13568] dvb-usb: error while querying for an remote control event. [ 613.772152][T13568] m920x_read = error: -19 [ 613.776948][T13568] dvb-usb: error while querying for an remote control event. [ 613.892963][T13568] m920x_read = error: -19 [ 613.897772][T13568] dvb-usb: error while querying for an remote control event. [ 614.013839][T13568] m920x_read = error: -19 [ 614.018616][T13568] dvb-usb: error while querying for an remote control event. [ 614.134351][T13568] m920x_read = error: -19 [ 614.139126][T13568] dvb-usb: error while querying for an remote control event. [ 614.255089][T13568] m920x_read = error: -19 [ 614.259898][T13568] dvb-usb: error while querying for an remote control event. [ 614.386618][T13568] m920x_read = error: -19 [ 614.391770][T13568] dvb-usb: error while querying for an remote control event. [ 614.506594][T13568] m920x_read = error: -19 [ 614.511379][T13568] dvb-usb: error while querying for an remote control event. [ 614.627000][T13568] m920x_read = error: -19 [ 614.631788][T13568] dvb-usb: error while querying for an remote control event. [ 614.748173][T13568] m920x_read = error: -19 [ 614.752951][T13568] dvb-usb: error while querying for an remote control event. [ 614.878862][T13568] m920x_read = error: -19 [ 614.883656][T13568] dvb-usb: error while querying for an remote control event. [ 614.999625][T13568] m920x_read = error: -19 [ 615.004430][T13568] dvb-usb: error while querying for an remote control event. [ 615.120027][T13568] m920x_read = error: -19 [ 615.124806][T13568] dvb-usb: error while querying for an remote control event. [ 615.241561][T13568] m920x_read = error: -19 [ 615.246338][T13568] dvb-usb: error while querying for an remote control event. [ 615.361933][T13568] m920x_read = error: -19 [ 615.366710][T13568] dvb-usb: error while querying for an remote control event. [ 615.482197][T13568] m920x_read = error: -19 [ 615.486985][T13568] dvb-usb: error while querying for an remote control event. [ 615.603325][T13568] m920x_read = error: -19 [ 615.608118][T13568] dvb-usb: error while querying for an remote control event. [ 615.723885][T13568] m920x_read = error: -19 [ 615.729095][T13568] dvb-usb: error while querying for an remote control event. [ 615.831119][T10806] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 615.844959][T13568] m920x_read = error: -19 [ 615.849747][T13568] dvb-usb: error while querying for an remote control event. [ 615.965378][T13568] m920x_read = error: -19 [ 615.970153][T13568] dvb-usb: error while querying for an remote control event. [ 616.086031][T13568] m920x_read = error: -19 [ 616.090814][T13568] dvb-usb: error while querying for an remote control event. [ 616.206540][T13568] m920x_read = error: -19 [ 616.211315][T13568] dvb-usb: error while querying for an remote control event. [ 616.328177][ T1073] m920x_read = error: -19 [ 616.332953][ T1073] dvb-usb: error while querying for an remote control event. [ 616.448471][ T1073] m920x_read = error: -19 [ 616.453358][ T1073] dvb-usb: error while querying for an remote control event. [ 616.569115][ T1073] m920x_read = error: -19 [ 616.573887][ T1073] dvb-usb: error while querying for an remote control event. [ 616.689468][ T1073] m920x_read = error: -19 [ 616.694276][ T1073] dvb-usb: error while querying for an remote control event. [ 616.810380][ T1073] m920x_read = error: -19 [ 616.815191][ T1073] dvb-usb: error while querying for an remote control event. [ 616.931226][ T1073] m920x_read = error: -19 [ 616.936024][ T1073] dvb-usb: error while querying for an remote control event. [ 617.062810][ T1073] m920x_read = error: -19 [ 617.067721][ T1073] dvb-usb: error while querying for an remote control event. [ 617.182278][ T1073] m920x_read = error: -19 [ 617.187060][ T1073] dvb-usb: error while querying for an remote control event. [ 617.303354][ T1073] m920x_read = error: -19 [ 617.308284][ T1073] dvb-usb: error while querying for an remote control event. [ 617.424582][T13568] m920x_read = error: -19 [ 617.429360][T13568] dvb-usb: error while querying for an remote control event. [ 617.544462][T13568] m920x_read = error: -19 [ 617.549258][T13568] dvb-usb: error while querying for an remote control event. [ 617.665805][T13568] m920x_read = error: -19 [ 617.670603][T13568] dvb-usb: error while querying for an remote control event. [ 617.786030][T13568] m920x_read = error: -19 [ 617.791236][T13568] dvb-usb: error while querying for an remote control event. [ 617.906806][ T1073] m920x_read = error: -19 [ 617.911603][ T1073] dvb-usb: error while querying for an remote control event. [ 618.027802][ T1073] m920x_read = error: -19 [ 618.032783][ T1073] dvb-usb: error while querying for an remote control event. [ 618.148693][ T1073] m920x_read = error: -19 [ 618.153473][ T1073] dvb-usb: error while querying for an remote control event. [ 618.269359][ T1073] m920x_read = error: -19 [ 618.274139][ T1073] dvb-usb: error while querying for an remote control event. [ 618.389437][ T1073] m920x_read = error: -19 [ 618.394228][ T1073] dvb-usb: error while querying for an remote control event.