last executing test programs: 26m57.703307716s ago: executing program 32 (id=835): socket(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000008100)={0x130, 0xfffffffffffffffe, 0x0, {0x100000000, 0x0, 0x0, '\x00', {0x400, 0x1, 0x8, 0x9, 0x0, 0x0, 0xa000, '\x00', 0x3, 0x57, 0x7, 0x6, {0x7fff, 0x5}, {0x3, 0x6}, {0x5, 0xcd4}, {0x32, 0x7}, 0x3, 0xfff, 0x10000, 0x8}}}, 0x130) setsockopt$inet6_tcp_int(r3, 0x11a, 0x3, &(0x7f0000000100)=0x304, 0x4) sendmsg$key(r2, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x2, 0x18, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x24}, 0xffffcdb0}}, @sadb_address={0x3, 0x5, 0x3c, 0x20, 0x0, @in={0x2, 0x4e23, @multicast2}}]}, 0x50}}, 0x0) r4 = dup(r1) write$UHID_INPUT(r4, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) sendmsg$nl_route_sched(r0, 0x0, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) 26m51.926587002s ago: executing program 33 (id=841): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "c8444943470da91b", "42f3ac0e0b8a32be8fe91c368e60693800000000d6e5394b00", "e7198360", "f7a5c1777af05eaa"}, 0x38) sendto$inet6(r4, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) write$binfmt_aout(r4, 0x0, 0xfdef) sendto$inet6(r4, 0x0, 0x0, 0x8040, 0x0, 0x0) write$binfmt_elf64(r4, 0x0, 0x78) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) 19m44.079405178s ago: executing program 5 (id=1344): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x4008000) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000840)=0x14) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0xfffffffffffffff8, 0x80000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000001c0)={&(0x7f0000000580)=[{0x3, 0x2200, 0x3, &(0x7f0000000140)="a7b89e"}, {0x6a35, 0x1410, 0x1b, &(0x7f0000000180)="47f3e316db296b7ff0db56e9b0eb62660d2b55fefe2457d79dce84"}, {0x22, 0x1000, 0x78, &(0x7f0000000280)="d953766d8a8864abe68dbfe194c961d4f68c9736888659bb51ddfb74a32fd29523a39b2cfddd36063c6f4401e6d3719c0ff0893d4b4900c7f277f6ff77fd6024b2aac17f36f275ca2fa93c8079082dd5e7af5a5f3c4d36e7121448a789d669d73b198093c314044a6e3124ac9d0d30a0128273e4b61e9e17"}, {0x1, 0x2800, 0x97, &(0x7f0000000300)="7f4c1650d1f039ea0663a84de1a55b7ccab7bf33407060e1307d019f15abd4bdce50544b19d31dbb9843e5fb0d8b0f55a0700c8f391c5420cd610116af73dcfcc37e5427e5b9ed0783c7f718b3cffeb751e8db2b642d7f9c2b8b293c880fa25a43700aca4b45811663eda5b0257c6aeab3c00690f756a02a88bba2efefd1c9ae777308739fd097ba923bbf19781fb39418a4320a8c1b81"}, {0x0, 0x4011, 0xcf, &(0x7f00000003c0)="dd8a5daf950c024cc38980d51fd26be8364518d27d9c765d542a563ce9642a58325fc4ed3c9781bb60db2de7e75306845490b13fb3405ff53ccd31f33b6230fede5b5a272c0d2431162d16662cdb5d9ef60c0003f74975003567f46d4817e9a6752f99778273f8ddbb9f8e244a0d0bddecbccfdb8a3c78e99cac2f3a786c74ae271b7776762fba29752f947b1b165c1ac70f705e1b6de40bbdebb8abb6f84e3c626300d96c295b2b615757ed292ba63793fdf7377c84e0e47e7ba81cc4ca66a564494302e207a0f81e5cb0e8fc2f4e"}, {0x800, 0x800, 0x1000, &(0x7f0000000b40)="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"}, {0x1, 0x2000, 0x45, &(0x7f00000004c0)="66a30c7759043934edb369975645cc9d84860fce8cbacaae3010b6ea25f3a015616fcd0c35f374df26980faa45082d2f117f3bdca3f8fe4bcf2a16893eb7d6a198dab6afc8"}], 0x7}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d80080003"], 0x24}], 0x1}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r6, &(0x7f00000004c0)="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", 0x1b0, 0x805, 0x0, 0x0) recvmmsg(r6, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {0x0, 0x12}], 0x4}, 0x2}], 0x2, 0x22, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setfsuid(r7) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x48, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r9, {0xc, 0xfff1}, {}, {0x6, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x18, 0x2, [@TCA_FLOW_EMATCHES={0x14, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_HDR={0x5, 0x1, {0x6}}]}]}}]}, 0x48}}, 0x20040054) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x38, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4800) 19m42.433316566s ago: executing program 5 (id=1348): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/186, 0xba) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) ioctl$MEDIA_IOC_DEVICE_INFO(0xffffffffffffffff, 0xc1007c00, 0x0) r7 = dup3(r1, r2, 0x0) ioctl$MON_IOCG_STATS(r7, 0x40189206, &(0x7f0000000180)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) r10 = syz_open_dev$sg(&(0x7f0000000040), 0x2, 0x80) ioctl$SCSI_IOCTL_SEND_COMMAND(r10, 0x1, &(0x7f0000000080)={0xe1, 0x1, 0x5, "72f8e08bd802af28150c40cab44031a21981d503d622136daa59d19dc6fa77f3bd052717b9d9b572591726a7650f31f6f4cc75006e4c791428e81ae5f9e95d0fa8b8a0268ec815804e05b98c5b370dd6780d1ed81a66de334d75ffc2477ce8c94835f4ce58765022719e3c17865babe8e5f04435d1e9d6833d71c9201acab6c70959f0ad2f346dd2a2c17225b1b4f841b1e8a6e6a15039332629f6a2756e83d95fa213109b15f016534a25ab1d6ff85016cda6e48a37b11aacc4e42e347ac1e3fe22eca0864cbe7a16f280d21da883eed1fe8df53a2b1976a2e7c69c2b3be11ec5"}) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000180)="ca59b928b749d890ac5cd191cc1ca34f2adb5234f45dcf280dba15c95de65da9bcd73281c72d635cd214fdd914808b1e8dbc3d5412b4e4b249428435599982383dd11ad1a86c73f98c4387c26b9e255dee112e11206a8e41b69ce5f36460270a2a5a66a57bc22c476e778fc35929c670930bba8c4ab81440c0ed09eb97fce65a5c24fabd6e1d9217512b8ecb76dbfce362f0908f170de9a4b427aeca0c1632f220a789c7a8fb172eeab15110f93271063c75611683e6a4fb1038e1b8a047", 0xbe}], 0x1) 19m40.703077042s ago: executing program 5 (id=1349): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x31) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x1382, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000340)=0x0, &(0x7f0000000180)) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000100100000a0000002900"], 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x181040, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$USBDEVFS_REAPURBNDELAY(r7, 0x4004550d, 0x0) r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) socket$inet6(0xa, 0x6, 0x4) 19m36.219743525s ago: executing program 5 (id=1352): keyctl$reject(0x13, 0x0, 0x80000000, 0x1856, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0x2bb8}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000200)={0xb7c, 0x2002, 0x5, 0xb, 0xd, "5f730000a9003f00"}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2e8001, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xdf) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) socket$key(0xf, 0x3, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x100113, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0xfffff7fe, 0x3a3}, 0x0, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r5, &(0x7f00000004c0)={{0x6, @null, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) socket(0x2a, 0x2, 0x0) 19m30.850180148s ago: executing program 5 (id=1356): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0xa, 0x4e20, 0x5, @private0, 0x5}, 0x1c, &(0x7f0000000240)}, 0x4044801) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x400005}, 0x1c) r5 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x0) unshare(0x22020400) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none, 0x4, 0x1}, 0x8) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r6, 0x5452, 0x0) listen(r6, 0x0) ioctl$sock_SIOCSPGRP(r6, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) shutdown(r6, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x80, @any, 0x0, 0x2}, 0xe) 19m28.364235133s ago: executing program 5 (id=1359): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x2, 0x80805, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x8000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) r6 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) write$P9_RSTATu(r6, 0x0, 0xe9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r7, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x5, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={r10, 0x3}, 0x8) sendmsg$AUDIT_GET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x3e8, 0x300, 0x70bd29, 0x25dfdbfb, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44005}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 19m12.887409025s ago: executing program 34 (id=1359): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x2, 0x80805, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x8000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) r6 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) write$P9_RSTATu(r6, 0x0, 0xe9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r7, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x5, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={r10, 0x3}, 0x8) sendmsg$AUDIT_GET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x3e8, 0x300, 0x70bd29, 0x25dfdbfb, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44005}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 11m16.447453645s ago: executing program 7 (id=1989): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800010000000000140004800500030007000000050003000100000008000200010000000800020001000000a00008801c000780080085000200000008000600000000000800"], 0xe0}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, 0x0) socket(0xa, 0x3, 0x3a) bind$802154_raw(r3, &(0x7f0000000000)={0x24, @none={0x0, 0xffff}}, 0x14) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008040}, 0x40000) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, r7, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x4, 0x35}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY={0x38, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "6134d2eab4b1c7ff772a924b7c"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "5a5db8d5a0"}]}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "65e31be5467a83a1dbc9ff9f4929"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f7bd096092151e7522280a06cf"}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8}, 0x4000) 11m13.186224571s ago: executing program 7 (id=1995): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1ff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0x8a010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)}, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x1) r6 = socket$nl_crypto(0x10, 0x3, 0x15) connect$netlink(r6, &(0x7f0000000100), 0xc) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r7, 0x1, 0x1}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x3b, 0x3, 0xe, 0x10001, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x20, 0x20, 0x0, 0x3}}) 11m8.81341321s ago: executing program 7 (id=1998): keyctl$reject(0x13, 0x0, 0x80000000, 0x1856, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0x2bb8}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000200)={0xb7c, 0x2002, 0x5, 0xb, 0xd, "5f730000a9003f00"}) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000006c0)=0x5f) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2e8001, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xdf) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) socket$key(0xf, 0x3, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x100113, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0xfffff7fe, 0x3a3}, 0x0, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r5, &(0x7f00000004c0)={{0x6, @null, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) socket(0x2a, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) 11m6.463619247s ago: executing program 7 (id=2002): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791210000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80900) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000380)=0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f000001e640)={0x0}, &(0x7f000001e680)=0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000a00)=ANY=[@ANYBLOB="90000000130701042cbd7000fbdbdf25020000050800fd00", @ANYRES32=r1, @ANYBLOB="0800f98004003c804600c880790881bcfa13f257b35322a5c10e711b58383eebcda0a5a0aa9038eec246329026e8067860efe08f54c1d1c135cbe861479ccce6b2967f924914f03e9db1dd62db9000001c004380060014005b00000008000200", @ANYRES32=r3, @ANYBLOB="08003300e00001020800bc800400e880"], 0x90}, 0x1, 0x0, 0x0, 0xc000}, 0x20000045) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000001e580)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, {0x4}, {0x4}]}, 0x4c}, 0x1, 0x2b1e}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="839f03000000000000250100ecd21825089b255d6b000000180700"/38], 0x2c}}, 0x4) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) pselect6(0x0, 0x0, &(0x7f0000000180)={0x2, 0xff, 0x7, 0xc, 0x8, 0x8001, 0x8, 0xf}, &(0x7f00000001c0)={0x0, 0x1, 0x2, 0x9, 0x7c3, 0x8, 0x1, 0x8}, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x7, 0x7ffc0002}]}) sync() r8 = syz_open_dev$dri(0x0, 0x1, 0x0) add_key$user(&(0x7f0000000440), 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_WAIT_VBLANK(r8, 0xc018643a, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, 0x0) 11m3.182043665s ago: executing program 7 (id=2009): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x8, 0x3, 0x1ff, 0x3d, 0x963, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x26}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="150000000051090000000000007590000000950000e983d7aeff"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r6, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42400) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}, @IFLA_BR_MCAST_MLD_VERSION={0x5}]}}}]}, 0x44}, 0x1, 0xffffffea}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'syztnl1\x00', r7, 0x4, 0x8, 0x0, 0x7ff, 0x0, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x8000, 0x9, 0xb}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r6, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000600)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680), 0x0, 0x64, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x3b, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b00)={&(0x7f0000000900)={0x1c0, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000010) 10m57.120087926s ago: executing program 7 (id=2016): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x22601, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000000)={0x2, "94c492eb0165203d36bec70800890100000000000000e1100a0000005900", 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) socket$inet_udplite(0x2, 0x2, 0x88) r6 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000300)={'pcl711\x00', [0x2f00, 0xd, 0xd09a, 0x3d, 0x3, 0xfffffffe, 0x20000004, 0x9, 0xffe, 0x9, 0xbc7, 0x1, 0x4, 0x4, 0xffff, 0x100006, 0x5, 0x5, 0x830, 0x30000, 0x10000, 0x9, 0x800, 0xe2df, 0x1000002, 0x8001, 0x7, 0x3, 0x4, 0x5, 0x470f]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 10m38.531231585s ago: executing program 35 (id=2016): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x22601, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000000)={0x2, "94c492eb0165203d36bec70800890100000000000000e1100a0000005900", 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) socket$inet_udplite(0x2, 0x2, 0x88) r6 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000300)={'pcl711\x00', [0x2f00, 0xd, 0xd09a, 0x3d, 0x3, 0xfffffffe, 0x20000004, 0x9, 0xffe, 0x9, 0xbc7, 0x1, 0x4, 0x4, 0xffff, 0x100006, 0x5, 0x5, 0x830, 0x30000, 0x10000, 0x9, 0x800, 0xe2df, 0x1000002, 0x8001, 0x7, 0x3, 0x4, 0x5, 0x470f]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 8m42.876054705s ago: executing program 8 (id=2174): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x40, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0x40043d0d, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x22601, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000000)={0x2, "94c492eb0165203d36bec70800890100000000000000e1100a0000005900", 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESTOP(r7, 0x1275, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) socket$inet_udplite(0x2, 0x2, 0x88) r8 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000300)={'pcl711\x00', [0x2f00, 0xd, 0xd09a, 0x3d, 0x3, 0xfffffffe, 0x20000004, 0x9, 0xffe, 0x9, 0xbc7, 0x1, 0x4, 0x4, 0xffff, 0x100006, 0x5, 0x5, 0x830, 0x30000, 0x10000, 0x9, 0x800, 0xe2df, 0x1000002, 0x8001, 0x7, 0x3, 0x4, 0x5, 0x470f]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) 8m31.777078313s ago: executing program 8 (id=2191): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x10d, &(0x7f00000000c0)={0x0, 0x11, 0x2, 0x3, 0x145}, &(0x7f00000002c0), &(0x7f0000000380)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x9, &(0x7f00000001c0)={0x77359400}, 0x1, 0x1, 0x1}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) socket(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x9e74, 0x0, 0x4}, 0x0, &(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r4, 0x0) 8m30.796194369s ago: executing program 8 (id=2194): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000063010600000000009500000000000000f23a7a01924ebc046130943008df6282546a7d26d9ccbea1623103"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff8001}, 0x94) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0xc8) fcntl$notify(r2, 0x402, 0x8000001c) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2) socket(0x15, 0x5, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r3 = gettid() setpriority(0x0, r3, 0x1ff) pselect6(0x40, &(0x7f0000000080)={0x5, 0x0, 0x120000000000, 0x2, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = inotify_init() r5 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000380000000000019078ac1e0001ac1414aa0304907803000000450000000000000000010000000000007f0000010000000000002000eb5bdd472dee388528deb71844e8c5356411e4c2d9c99276828a"], 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x20}}, 0x0) r6 = epoll_create(0x200008) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000000)={0x80000009}) r7 = socket$inet_sctp(0x2, 0x0, 0x84) sendmsg$sock(r7, &(0x7f0000000340)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e41df83fb15600", 0x7}, {&(0x7f0000000100)="2a6dc1e8e9b6a4365fd437b2a6f15bfa7aece53ae9cc38a0e0a82d3ed96ae1430e2127cdd699b062bd0e", 0x2a}, {0x0}, {&(0x7f0000000280)="4693e52720fd07101b939ba6d42c7275e0", 0x11}], 0x4, &(0x7f0000000500)=[@txtime={{0x18, 0x1, 0x3d, 0x70e}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x30}, 0x300000a1) 8m29.525828751s ago: executing program 8 (id=2197): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x7, 0x4}, {0x2, 0x1, 0x8, 0x3}, {0x1, 0x4, 0x4, 0xc}, {0x5, 0x5, 0xa, 0x7}, {0x5, 0x4, 0x0, 0x3}, {0x5, 0x2, 0x5, 0xa}, {0x4, 0x1, 0xe, 0x1}], 0x10, 0x9}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000002140)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000030000005637f880f14ee2dd0000f90e72cd0ea30cee982535"], &(0x7f0000000c40)=""/3, 0x26, 0x3, 0x1, 0x1}, 0x28) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) accept(0xffffffffffffffff, &(0x7f0000002080)=@l2tp6, &(0x7f0000002100)=0x80) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x1000) fanotify_mark(r5, 0x105, 0x5000003a, r4, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r6, 0x4122, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r7 = epoll_create(0x6) r8 = dup3(r3, r7, 0x0) read$FUSE(r8, 0x0, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000000114010025bd7000fedbdf25000000000000a000"], 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x4044080) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VT_RESIZE(r8, 0x5609, &(0x7f0000002180)={0x2, 0x1, 0xefbf}) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="12a74ac76f4585"], 0x34}, 0x1, 0x0, 0x0, 0x2004c010}, 0x4080) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad03010000000000bf000000000000006916a00000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d3001000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9751f008554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a65f78238b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c505000000b8fab4d4d897db2c544c0e0895a9044f50c50b8eac8c63d2b1cd06a39702bd547f5ebaa69520bbb15f4f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564bd98a621483fb2a5ff221e0d831f24759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91e0eb18e21dfdab3c84ec11377fbb00000000848060962bcbc47cefd1a2a7bd3b646614bf7cd3495663de5b63f6b5910daee8ebb7ba84a8b5b6f2d1fbc22a51a500f94c871d5e1d31ab5d7a89965bbdbf355a8544e1688a61f459f3618b3a5416eb143180d3d2c5f4e0b1a556422038801703e109e23944e53f230a3537a5412c7d0bf278c6c1684dd8de90aaa33f47dc2c7b5e4f73784fd31aa2f9d1b1623734f9cf84718b2bad31f651e3607f3ac6c427cb6c0652d21ecd4b29e96c0a3781ee820faab71040768f6b08a69fdfd0b2b7be25f19500c1b8330994efb57a53c1a67bda909630f75738ab40e7ab63d527d6c1e8cf611f05c1b6d0da"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 8m28.253492554s ago: executing program 3 (id=2198): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000004740)={0x38, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0xfa}]}]}, 0x38}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000000)=""/108, &(0x7f0000000080)=0x18) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x48) setresgid(0xee00, 0xee01, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/16, @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, @dev={0xfe, 0x80, '\x00', 0x8}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x0, 0xfffffffc}}) setregid(0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0, r8}, 0x18) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r5}, 0x38) 8m24.399707156s ago: executing program 8 (id=2202): r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x3) r1 = socket$igmp(0x2, 0x3, 0x2) socket$packet(0x11, 0x3, 0x300) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000480)=@broute={'broute\x00', 0x5e04, 0x0, 0x90, [0x0, 0x0, 0x200000000140], 0x2, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3", 0x5}], 0x1}, 0x4048081) connect$can_j1939(r7, &(0x7f0000000000)={0x1d, r8, 0x3, {0x2, 0xff}, 0xfe}, 0x18) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x74, r8, {0xfffd, 0xffeb}, {0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) r9 = syz_create_resource$binfmt(0x0) r10 = openat$binfmt(0xffffffffffffff9c, r9, 0x42, 0x1ff) close(r10) execveat$binfmt(0xffffffffffffff9c, r9, 0x0, 0x0, 0x0) 8m23.726774547s ago: executing program 3 (id=2204): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x2004}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8af, 0x642, 0x0, 0x2, 0xd59f83, 0xc, 0x46, 0x7fffffff, 0x3, 0x7, 0x2800, 0x2800, 0x6, 0x20ba1, 0xd, 0x23, {0xc}, 0x6, 0xb}}) socket$tipc(0x1e, 0x5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_TSC(0x1a, 0x3) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r6, 0xc038563b, &(0x7f00000003c0)={0x0, 0x0, {0x5, 0x800007, 0x4e3c, 0x9d}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0xec25, 0x0, 0x2, 0x40000333}, 0x0, &(0x7f0000000280)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x400000, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2, 0x3}, {0xa, 0x0, 0xd, @remote, 0x7}, r7}}, 0x48) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r7, 0x1c, 0x0, @ib={0x1b, 0x0, 0x9, {"fde328141f852b96b9618255a6066069"}, 0x3, 0x0, 0x8}}}, 0x90) 8m22.554871986s ago: executing program 8 (id=2205): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) openat$uinput(0xffffffffffffff9c, &(0x7f0000000600), 0x802, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) syz_emit_ethernet(0x7e, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x24, 0x0, 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000200)='./file0\x00'}, 0x18) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000340)=0x3) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x800}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r5, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r5, r5, 0x3, 0xfffffffffffffffa, 0x3fff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) socket$can_j1939(0x1d, 0x2, 0x7) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 8m21.474344889s ago: executing program 3 (id=2206): r0 = io_uring_setup(0x6afe, &(0x7f0000000a80)={0x0, 0xa949, 0x1000, 0xfffffffd, 0x179}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) eventfd2(0x65c, 0x80000) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x200a, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x6}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendto$inet6(r5, &(0x7f0000000000)='\x00', 0x1, 0x4044081, 0x0, 0x0) recvfrom(r5, 0x0, 0x0, 0x40000061, 0x0, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100)="738834385b8a630f73567facf7fcbe38a1cdd985453e263d6f56bc574452941934aa008bffa462f6d4346b341f700bd5d1a749f13df2262b7b4036d15619d4d746084d226866e3a7904b1fdb3dbee8ceb1c4342f6267ac0f2e808664217f31", 0x5f}], 0x1) shutdown(r1, 0x0) recvmsg(r5, &(0x7f0000001800)={0x0, 0x0, 0x0}, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000400)=[@enter_looper], 0x0, 0x0, 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000001000)={0x0, 0x20, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r9, @ANYBLOB="0100000000000000000001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb54208000500000000007c0008807800008006000500002000004800098028000080060001000a0000001400020000000000000000000000ffffac1414bb050003000200000000000080010001000200000008000200e00000010500030000000000240001"], 0xd0}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r10 = dup3(r7, r6, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000003c0)={0x45, 0x0, &(0x7f0000000240)=[@acquire], 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r5, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 8m19.671837365s ago: executing program 3 (id=2209): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x2f126000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x82, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa000800450000740000000000019078ac1e000627ce8cd8540c793401ac1414aa05009078e00000e0460000110000ac1414aa00000000830300070300443c0003e000002900000000ac14140000000000ac14140000000000ac1414bb000000000000000000000000ac1414000000000000000000004000"/139], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8) cachestat(r2, 0x0, &(0x7f0000002280), 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) write$UHID_CREATE(r0, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000940)=""/3, 0x3, 0x0, 0x4, 0x34, 0xe, 0xc08}}, 0x120) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r6, &(0x7f0000002f40)=""/4098, 0x1002) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) 8m7.400393534s ago: executing program 36 (id=2205): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) openat$uinput(0xffffffffffffff9c, &(0x7f0000000600), 0x802, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) syz_emit_ethernet(0x7e, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x24, 0x0, 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000200)='./file0\x00'}, 0x18) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000340)=0x3) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x800}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r5, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r5, r5, 0x3, 0xfffffffffffffffa, 0x3fff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) socket$can_j1939(0x1d, 0x2, 0x7) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 8m4.814041762s ago: executing program 3 (id=2223): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2}, 0x94) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000040)={0x6, 0x34324258, 0x3, @discrete={0x3b79f0fc, 0xffffffff}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r5 = fanotify_init(0x0, 0x0) r6 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) timerfd_gettime(0xffffffffffffffff, 0x0) fanotify_mark(r5, 0x641, 0x48001018, r6, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r7, 0x80047456, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r8, 0x0, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x800000) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000045}, 0x20000000) fanotify_mark(r5, 0x441, 0x4800001b, r6, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000200081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) 7m58.438448411s ago: executing program 3 (id=2230): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) socket$netlink(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000300)=@security={'security\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0xf8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x240, 0x240, 0x240, 0xffffffff, 0x4, &(0x7f0000000200), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0x2, 0x4, 0x3, 0x0, 0x4], 0x4, 0x6}, {0x2, [0x4, 0x0, 0x6, 0x6, 0x4, 0x6], 0x6, 0x1}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xb7, 0x28, "8b4339262144083f90283c71f224b2fcee2f47d0d3735bee809d59439ece"}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xfff1, 0xffff, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) clock_adjtime(0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x2000, 0x2, &(0x7f000091e000/0x2000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000b10000000000000000611228000000000095080000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xe}, 0x94) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) rename(0x0, &(0x7f0000000100)='./file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2b03000000000000249c08000000010067656e657665000014000005000a000100"/44], 0x44}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x40) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) accept4$alg(r6, 0x0, 0x0, 0x80800) 7m43.177887203s ago: executing program 37 (id=2230): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) socket$netlink(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000300)=@security={'security\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0xf8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x240, 0x240, 0x240, 0xffffffff, 0x4, &(0x7f0000000200), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0x2, 0x4, 0x3, 0x0, 0x4], 0x4, 0x6}, {0x2, [0x4, 0x0, 0x6, 0x6, 0x4, 0x6], 0x6, 0x1}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xb7, 0x28, "8b4339262144083f90283c71f224b2fcee2f47d0d3735bee809d59439ece"}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xfff1, 0xffff, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) clock_adjtime(0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x2000, 0x2, &(0x7f000091e000/0x2000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000b10000000000000000611228000000000095080000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xe}, 0x94) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) rename(0x0, &(0x7f0000000100)='./file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2b03000000000000249c08000000010067656e657665000014000005000a000100"/44], 0x44}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x40) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) accept4$alg(r6, 0x0, 0x0, 0x80800) 59.122244932s ago: executing program 0 (id=3579): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) write(r0, &(0x7f0000000100)="ff", 0x1) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) write(r1, 0x0, 0x0) 58.847693705s ago: executing program 0 (id=3582): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) r1 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r1, 0x207a98, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 58.207849042s ago: executing program 0 (id=3586): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='contention_end\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r2, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20000004) 57.852306389s ago: executing program 0 (id=3591): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) 57.68791839s ago: executing program 0 (id=3593): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000000)={0x2, 0x100, 0x1, 0x5, 0x100, 0x1bf0, 0x9, 0x46, 0x5, 0x5, 0x81, 0x2, 0x101}) 56.870151763s ago: executing program 0 (id=3595): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x0, 0xea60}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = syz_io_uring_setup(0x9c, &(0x7f00000002c0)={0x0, 0x89ba, 0x80, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r8, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}}) mount$bpf(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x880, &(0x7f0000000800)={[], [{@smackfshat={'smackfshat', 0x3d, '.'}}]}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2e}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x70}}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r10, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f00000000c0)={0x2, @win={{0x2, 0xc, 0x40, 0xe0fd}, 0x9, 0x1, 0x0, 0xc, 0x0, 0x6}}) alarm(0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) 56.063727366s ago: executing program 38 (id=3595): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x0, 0xea60}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = syz_io_uring_setup(0x9c, &(0x7f00000002c0)={0x0, 0x89ba, 0x80, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r8, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}}) mount$bpf(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x880, &(0x7f0000000800)={[], [{@smackfshat={'smackfshat', 0x3d, '.'}}]}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2e}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x70}}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r10, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f00000000c0)={0x2, @win={{0x2, 0xc, 0x40, 0xe0fd}, 0x9, 0x1, 0x0, 0xc, 0x0, 0x6}}) alarm(0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) 4.580273873s ago: executing program 6 (id=3836): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @private=0xa010100}, {0x2, 0x4a24, @local}, {0x2, 0x4e21, @multicast1}, 0x4, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x1ff, 0x9}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 4.277591274s ago: executing program 2 (id=3838): openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(0x0, 0x84480) fstat(r2, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001040)="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", 0x2000, &(0x7f0000000d80)={&(0x7f0000000180)={0x50, 0x0, 0x8, {0x7, 0x2b, 0x2, 0x40101000, 0x101, 0xfff, 0x8, 0x2, 0x0, 0x0, 0x40, 0x9}}, &(0x7f0000000280)={0x18, 0x0, 0x3, {0x4ec8e43c}}, &(0x7f00000002c0)={0x18, 0x0, 0x8001, {0xfffffffffffffffe}}, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0x8000000000000001, {0x101}}, &(0x7f0000000400)={0x18, 0x0, 0x3656, {0xfffff764}}, &(0x7f0000000440)={0x28, 0xfffffffffffffffe, 0x4, {{0xfff, 0xa1a3, 0x2}}}, &(0x7f00000004c0)={0x60, 0xfffffffffffffffe, 0x7fff, {{0x2, 0x9, 0x35189cbf, 0x9, 0x12, 0xaa9d7d6, 0x7, 0x7fffffff}}}, &(0x7f0000000580)={0x18, 0xfffffffffffffffe, 0x4, {0x5}}, &(0x7f00000005c0)={0x11, 0x0, 0xb62, {'\x00'}}, &(0x7f0000000600)={0x20, 0x0, 0x8001, {0x0, 0x8}}, &(0x7f00000007c0)={0x78, 0x0, 0xc, {0x2, 0x8, 0x0, {0x6, 0x9, 0x9, 0x8, 0x5, 0x400000000000000, 0x8, 0x8, 0x8, 0xc000, 0xffffff8f, 0x0, 0x0, 0x0, 0x9}}}, &(0x7f00000008c0)={0x90, 0x0, 0x3, {0x3, 0x0, 0x7, 0x7fffffff, 0x7fff, 0xd, {0x3, 0x794, 0xfff, 0x5, 0x5, 0xb, 0x1, 0x200000, 0x1, 0x4000, 0x1, 0x0, 0x0, 0x9, 0x9}}}, &(0x7f0000000980)={0x48, 0xfffffffffffffffe, 0xe09, [{0x4, 0xc52c, 0x3, 0x3cf, '-{^'}, {0x3, 0x7ff, 0x0, 0x9}]}, &(0x7f0000000a00)={0xc0, 0x0, 0x7, [{{0x3, 0x3, 0x9, 0x8001, 0x9, 0x8, {0x0, 0x6af, 0xd, 0x100000001, 0xd81, 0x4, 0xfffffff8, 0x180, 0x0, 0xc000, 0x8, 0x0, 0x0, 0x0, 0x8}}, {0x0, 0xffffffff, 0x11, 0x0, '/dev/vhost-vsock\x00'}}]}, &(0x7f0000000ac0)={0xa0, 0xfffffffffffffff5, 0x4, {{0x0, 0x3, 0x1, 0x7ff, 0x2, 0xffffff95, {0x3, 0xfffffffffffffffb, 0x54, 0xffffffffffff95a1, 0x5, 0xff, 0x4, 0xc, 0x3, 0xa000, 0x7, 0x0, 0xee01, 0x3, 0xfffffffd}}, {0x0, 0x10}}}, &(0x7f0000000b80)={0x20, 0xfffffffffffffff5, 0x0, {0x6, 0x4, 0x2, 0x1}}, &(0x7f0000000c40)={0x130, 0x0, 0x1, {0x0, 0x8, 0x0, '\x00', {0x8, 0x100, 0xfffffffffffffffe, 0x2, r3, 0xee00, 0xc000, '\x00', 0xfffffffffffffffa, 0x7fffffffffffffff, 0x4, 0x4c1, {0xcb, 0x5}, {0x76, 0x9}, {0x8000000000000000, 0x10001}, {0x7fffffff, 0x6}, 0xfffffffc, 0x7fff, 0x9, 0x3f3e}}}}) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0xffe, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r7, 0x29, 0x30, 0x0, &(0x7f0000001000)) r8 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r8, 0x0, 0xfffffffffffffff2, 0x0, &(0x7f0000000480)={0x23, 0x28, 0xfd, 0x3}, 0x10) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000300)='\x00', 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) 4.265144516s ago: executing program 6 (id=3839): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00', 0x26}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r1, &(0x7f0000002480)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 4.23604716s ago: executing program 1 (id=3840): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x2000) read(r1, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x2bf, @time={0x1, 0x3d}, 0x0, {}, 0x0, 0x0, 0xfe}) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0x40045304, &(0x7f0000000180)={0x2, 0x6, 0x6}) 3.861872242s ago: executing program 1 (id=3842): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f000000a100)={{0x0, 0x0, 0xfffffffffffffcfd}}) 3.252056242s ago: executing program 6 (id=3843): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000800)={0x0, {0x1, 0x0, 0x4, 0x3, 0x3, 0x80000001}}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000900)={'syz1\x00', {0x8000}, 0x37b4, [0xfeff, 0x4, 0x0, 0x0, 0x1, 0x420000, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x3, 0x0, 0x20, 0x3, 0x200, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20007], [0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0xfffffffc, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x20000000, 0x40000000, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x7, 0x8, 0x0, 0xfffffffc, 0x9, 0x8c, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x8000, 0x0, 0x400, 0xfffffffc], [0x3, 0x4, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0xb78, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x3, 0x8000000, 0x520, 0xffffffff, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffc, 0xaf, 0x10001, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000005, 0x0, 0x5, 0x2, 0x6], [0x0, 0xfff, 0x0, 0x4, 0x0, 0x0, 0x6, 0xe, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000001, 0x1, 0x7fff, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x3, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100, 0x0, 0x3, 0x3, 0xfffffffd, 0x53591b27, 0x0, 0x0, 0x0, 0x0, 0x1000008, 0x7, 0x0, 0x0, 0x10000, 0x80000000, 0x1000000, 0x0, 0x0, 0x2]}, 0x45c) 3.062577421s ago: executing program 2 (id=3844): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x28801, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) ioctl$KVM_CHECK_EXTENSION(r0, 0xae01, 0x1) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000100)={0x80a0000, 0x208000, 0x8}) 3.013703534s ago: executing program 6 (id=3845): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)={0x20, 0x8, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.937815305s ago: executing program 1 (id=3847): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f00000001c0)=""/40) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 2.777564426s ago: executing program 1 (id=3848): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="dc05ee057ada978f61034835c9655cc8f5553beda9f730e151772060ac74b31cd73d524a83d2278bcacaf9ccf186df9ce51f99f2e19707bd19279dea3a989ab3c0bcffcfba1b5cdd4eb33ba40f0198d12e4108f58d9942e2a7a2efac7ed3d4a8ba0211be34077582823b52cea03ece14b22f2f5754", @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES8=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) close(r1) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x3, 0x54}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000100000001"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) close(r2) 2.561993411s ago: executing program 4 (id=3851): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x1, 0x0, 0x0}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000200)=0x4) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x57, 0x0, 0x0, {0x8, 0x1}, {0x80, 0x2}}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 2.558731725s ago: executing program 2 (id=3852): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r1, 0x0, 0x9, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) mbind(&(0x7f0000195000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000400)=0xfb, 0x8, 0x3) 2.275684517s ago: executing program 4 (id=3854): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000400)="f3a72666f2c332f6437000f30f30baf86566b82ce6f88b66efbafc0c66ed66b9800000c00f326635010000000f30f30fc7b7547cba4000b096ee660fd2c7660f2b23", 0x42}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.017184901s ago: executing program 2 (id=3856): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 1.737466662s ago: executing program 4 (id=3857): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) shutdown(r0, 0x1) 1.576095544s ago: executing program 2 (id=3858): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) open(0x0, 0x4007e, 0x10) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) fanotify_mark(0xffffffffffffffff, 0x105, 0x40001032, r0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) acct(&(0x7f0000000040)='./file0\x00') 1.425141453s ago: executing program 4 (id=3860): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@lld, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x41}, {0x5}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 1.298985802s ago: executing program 2 (id=3861): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000280)={0x20, 0x14, 0x1, '%'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x40, 0x846503215b16faa2, 0x2, 'LU'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.095814617s ago: executing program 4 (id=3863): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000003c0)={'b', ' *:* ', 'r\x00'}, 0x8) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) write$cgroup_devices(r1, &(0x7f0000000580)={'a', ' *:* ', 'w\x00'}, 0x8) 985.5886ms ago: executing program 9 (id=3864): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r2, 0x11, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @key_params=[@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "bac904fc3c65f1a259e8f0dea5"}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x68}}, 0x0) connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 932.011288ms ago: executing program 4 (id=3865): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffffe5, 0x0, 0x0, 0x11) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000040)=0x3efa, 0x4) 692.472314ms ago: executing program 9 (id=3866): signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0xfffffffffffffff5]}, 0x8, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1, 0x31}, {}, @addr={0x2a, 0x5}}], 0x38) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x3f}], 0x1) 516.015076ms ago: executing program 9 (id=3867): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f00000000c0)="100c0601001000bad775aa1b71ca", 0xe, r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x21) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001f80)={0x2c, 0x2, 0x3, 0xe0d, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2c}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xd}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 442.334514ms ago: executing program 9 (id=3868): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) 323.348949ms ago: executing program 6 (id=3869): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x2000) read(r1, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x2bd, @tick=0x5}) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000180)={0x2, 0x6, 0x6}) 246.554373ms ago: executing program 1 (id=3870): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x25dfdbfd, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x0, 0x4, {@ip4=@broadcast}}}]}, 0x38}}, 0x20044050) 229.576022ms ago: executing program 9 (id=3871): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0x30288000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace(0x10, r2) 88.019277ms ago: executing program 1 (id=3872): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000300)={r2, 0xfff}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) 62.670144ms ago: executing program 6 (id=3873): r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x2) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 0s ago: executing program 9 (id=3874): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000001640)=ANY=[@ANYBLOB="01000000000000002100004000000000ff"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): process `syz.1.2949'. [ 2141.293488][T10552] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 2141.549052][T10552] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 2141.567177][T10552] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2141.618002][T10552] usb 1-1: Product: syz [ 2141.664317][T10552] usb 1-1: Manufacturer: syz [ 2141.669623][T10552] usb 1-1: SerialNumber: syz [ 2141.768320][T10552] usb 1-1: config 0 descriptor?? [ 2141.802971][T10552] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 2141.858423][T19461] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2951'. [ 2142.223574][ T9] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 2142.447252][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 2142.545938][ T9] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2142.651855][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2143.083785][T10552] usb 1-1: USB disconnect, device number 14 [ 2143.152296][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2143.212510][ T9] pvrusb2: ********** [ 2143.243412][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2143.304525][ T9] pvrusb2: Important functionality might not be entirely working. [ 2143.347459][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2143.431813][ T9] pvrusb2: ********** [ 2143.482090][ T2342] pvrusb2: Invalid write control endpoint [ 2143.558975][T19487] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2143.567805][T19487] /dev/nullb0: Can't open blockdev [ 2144.134090][T19463] pvrusb2: Invalid write control endpoint [ 2144.183487][T17000] usb 7-1: USB disconnect, device number 15 [ 2144.497713][ T2342] pvrusb2: Invalid write control endpoint [ 2144.505754][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2144.518442][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2144.526569][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2144.536967][ T2342] pvrusb2: Device being rendered inoperable [ 2144.547664][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 2144.555331][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 2144.561880][T19498] input: syz1 as /devices/virtual/input/input41 [ 2144.623672][T19501] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2144.637811][T19501] cramfs: wrong magic [ 2145.160996][ T2342] pvrusb2: Attached sub-driver cx25840 [ 2145.167058][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2145.178031][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2145.974572][T19513] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2145.987060][T19513] cramfs: wrong magic [ 2147.782709][T19547] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2147.796913][T19547] cramfs: wrong magic [ 2147.806231][T17000] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 2148.118526][T17000] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2148.293289][T17000] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2148.543358][T17000] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2148.557496][T17000] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2148.575463][T17000] usb 2-1: config 0 descriptor?? [ 2149.769016][T17000] steelseries 0003:1038:12B6.000E: unknown main item tag 0x0 [ 2149.859734][T17000] steelseries 0003:1038:12B6.000E: unknown main item tag 0x0 [ 2149.875466][T17000] steelseries 0003:1038:12B6.000E: unknown main item tag 0x0 [ 2149.883677][T17000] steelseries 0003:1038:12B6.000E: unknown main item tag 0x0 [ 2149.891169][T17000] steelseries 0003:1038:12B6.000E: unknown main item tag 0x0 [ 2149.899299][T17000] steelseries 0003:1038:12B6.000E: unknown main item tag 0x0 [ 2149.907454][T17000] steelseries 0003:1038:12B6.000E: unknown main item tag 0x0 [ 2149.925873][T19560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2986'. [ 2149.946006][T17000] steelseries 0003:1038:12B6.000E: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.1-1/input0 [ 2150.426901][T16156] usb 2-1: USB disconnect, device number 23 [ 2150.446246][T17000] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 2150.640238][T17000] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2150.670785][T17000] usb 1-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice=f0.ee [ 2150.671617][T19587] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2991'. [ 2150.712844][T17000] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2150.750284][T19587] binder: 19575:19587 unknown command 0 [ 2150.756299][T17000] usb 1-1: config 0 descriptor?? [ 2150.769552][T19587] binder: 19575:19587 ioctl c0306201 2000000003c0 returned -22 [ 2151.280215][T17000] usb 1-1: USB disconnect, device number 15 [ 2151.513924][T19595] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2996'. [ 2151.523377][T19595] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2996'. [ 2151.984918][T16102] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 2152.033417][T17558] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 2152.145854][T16102] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2152.173829][T16102] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 2152.190097][T16102] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 2152.201146][T16102] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 2152.213384][T17558] usb 5-1: Using ep0 maxpacket: 32 [ 2152.221274][T16102] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 2152.224834][T17558] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 2152.235431][T16102] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2152.264533][T17558] usb 5-1: config 0 has no interface number 0 [ 2152.270835][T16102] usb 2-1: Product: syz [ 2152.293563][T16102] usb 2-1: Manufacturer: syz [ 2152.296220][T17558] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2152.302791][T16102] usb 2-1: SerialNumber: syz [ 2152.330929][T17558] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2152.369412][T17558] usb 5-1: Product: syz [ 2152.369764][T16102] usb 2-1: config 0 descriptor?? [ 2152.390544][T17558] usb 5-1: Manufacturer: syz [ 2152.401428][T17558] usb 5-1: SerialNumber: syz [ 2152.416853][T16102] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 2152.490363][T17558] usb 5-1: config 0 descriptor?? [ 2152.535638][T17558] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2152.625070][T16102] scsi host1: usb-storage 2-1:0.0 [ 2152.751008][T17558] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2152.808681][T17558] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2152.831583][T19622] binder: 19621:19622 unknown command 0 [ 2152.834784][T16102] usb 2-1: USB disconnect, device number 24 [ 2152.843414][T19622] binder: 19621:19622 ioctl c0306201 2000000003c0 returned -22 [ 2153.189726][T19629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3009'. [ 2153.199137][T19629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3009'. [ 2153.565728][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2153.636130][T17000] usb 5-1: USB disconnect, device number 23 [ 2153.759412][T17000] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2153.815751][T17000] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2153.886595][T17000] quatech2 5-1:0.51: device disconnected [ 2154.118540][T19637] netlink: 'syz.9.3014': attribute type 18 has an invalid length. [ 2154.381394][T19641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3013'. [ 2154.391056][T19641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3013'. [ 2154.993656][T19645] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2155.006581][T19645] cramfs: wrong magic [ 2156.105697][T19652] binder: 19650:19652 unknown command 0 [ 2156.120886][T19652] binder: 19650:19652 ioctl c0306201 2000000003c0 returned -22 [ 2156.613027][T19664] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2156.626811][T19664] cramfs: wrong magic [ 2157.660756][T19666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3022'. [ 2157.671089][T19666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3022'. [ 2158.039663][T19671] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 2158.063855][T19671] macvtap1: entered allmulticast mode [ 2158.102403][T19671] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 2158.197959][T19671] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 2158.241918][T19671] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 2159.171500][T19681] tipc: Enabled bearer , priority 24 [ 2159.452180][T19690] binder: 19689:19690 unknown command 0 [ 2159.498867][T19690] binder: 19689:19690 ioctl c0306201 2000000003c0 returned -22 [ 2159.807892][T19703] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2159.824121][T19703] cramfs: wrong magic [ 2160.473703][T19707] binder: 19705:19707 unknown command 0 [ 2160.479500][T19707] binder: 19705:19707 ioctl c0306201 2000000003c0 returned -22 [ 2160.915302][T19723] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2160.929632][T19723] cramfs: wrong magic [ 2162.100150][T19740] binder: 19724:19740 unknown command 0 [ 2162.113527][T19740] binder: 19724:19740 ioctl c0306201 2000000003c0 returned -22 [ 2162.137129][T16156] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 2162.177893][T19745] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3054'. [ 2162.316682][T16156] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 2162.352913][T16156] usb 7-1: config 0 has no interface number 0 [ 2162.372839][T16156] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2162.451480][T19751] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2162.465506][T19751] cramfs: wrong magic [ 2162.823303][T16156] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 2162.835372][T16156] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2162.847165][T16156] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2162.858611][T19754] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2162.866898][T19754] cramfs: wrong magic [ 2162.888630][T16156] usb 7-1: config 0 descriptor?? [ 2162.894983][T19730] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2162.919434][T16156] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2163.097933][T19758] binder: 19749:19758 unknown command 0 [ 2163.142034][T19758] binder: 19749:19758 ioctl c0306201 2000000003c0 returned -22 [ 2163.159576][T10593] usb 7-1: USB disconnect, device number 16 [ 2163.159641][ C0] iowarrior 7-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 2163.758123][T19778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3064'. [ 2163.815001][T19778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3064'. [ 2163.968718][T19780] can0: slcan on ttyS3. [ 2164.153615][T19780] can0 (unregistered): slcan off ttyS3. [ 2164.197019][T19780] Falling back ldisc for ttyS3. [ 2164.409658][T19792] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2164.425830][T19792] cramfs: wrong magic [ 2165.702618][T19801] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3074'. [ 2165.706043][T19803] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3075'. [ 2165.805920][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2166.210522][T19822] binder: 19809:19822 unknown command 0 [ 2166.228475][T19822] binder: 19809:19822 ioctl c0306201 2000000003c0 returned -22 [ 2166.443417][T10593] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 2166.613495][T10593] usb 5-1: Using ep0 maxpacket: 32 [ 2166.650030][T10593] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 2166.675130][T10593] usb 5-1: config 0 has no interface number 0 [ 2166.750134][T19833] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2166.763560][T19833] cramfs: wrong magic [ 2166.820741][T10593] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2166.987258][T10593] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2167.187604][T10593] usb 5-1: Product: syz [ 2167.262833][T17000] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 2167.289211][T10593] usb 5-1: Manufacturer: syz [ 2167.292810][T19831] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3086'. [ 2167.295266][T10593] usb 5-1: SerialNumber: syz [ 2167.308223][T19831] binder: 19830:19831 unknown command 0 [ 2167.331917][T19831] binder: 19830:19831 ioctl c0306201 2000000003c0 returned -22 [ 2167.434057][T10593] usb 5-1: config 0 descriptor?? [ 2167.457017][T10593] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2167.503319][T17000] usb 10-1: Using ep0 maxpacket: 8 [ 2167.579453][T17000] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2167.835659][T17000] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2168.072983][T17000] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2168.084893][T17000] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2168.108714][T10593] usb 5-1: qt2_attach - failed to power on unit: -71 [ 2168.129887][T17000] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2168.139925][T10593] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71 [ 2168.180039][T17000] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2168.195200][T10593] usb 5-1: USB disconnect, device number 24 [ 2168.340431][T19846] loop7: detected capacity change from 0 to 524255231 [ 2168.454571][T19846] loop7: detected capacity change from 524255231 to 524287912 [ 2168.496968][T17000] usb 10-1: GET_CAPABILITIES returned 0 [ 2168.502654][T17000] usbtmc 10-1:16.0: can't read capabilities [ 2168.740817][T17000] usb 10-1: USB disconnect, device number 10 [ 2168.994941][T19862] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2169.002016][T19862] /dev/nullb0: Can't open blockdev [ 2169.113975][T10593] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 2169.273285][T10593] usb 1-1: Using ep0 maxpacket: 32 [ 2169.348440][T10593] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2169.380232][T10593] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2169.416832][T10593] usb 1-1: config 0 descriptor?? [ 2169.678052][T10593] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2169.704374][T10593] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2169.742803][T10593] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2169.762284][T10593] usb 1-1: media controller created [ 2169.855445][T10593] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2169.932668][T10593] az6027: usb out operation failed. (-71) [ 2169.983401][T10593] az6027: usb out operation failed. (-71) [ 2169.989239][T10593] stb0899_attach: Driver disabled by Kconfig [ 2170.015788][T10593] az6027: no front-end attached [ 2170.015788][T10593] [ 2170.048200][T10593] az6027: usb out operation failed. (-71) [ 2170.069624][T10593] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2170.105847][T10593] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input42 [ 2170.308165][T19900] binder: 19886:19900 unknown command 0 [ 2170.326474][T19900] binder: 19886:19900 ioctl c0306201 2000000003c0 returned -22 [ 2170.351581][T10593] dvb-usb: schedule remote query interval to 400 msecs. [ 2170.370929][T10593] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2170.382769][T10593] usb 1-1: USB disconnect, device number 16 [ 2170.415507][T19902] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2170.423539][T19902] cramfs: wrong magic [ 2170.583427][T10593] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2171.035829][T19916] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2171.046295][T19916] cramfs: wrong magic [ 2171.732351][T19926] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3124'. [ 2172.573399][T17000] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 2173.543378][T17000] usb 2-1: Using ep0 maxpacket: 32 [ 2173.556785][T17000] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2173.583588][T17000] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2173.587601][T19963] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 2173.704145][T19960] IPVS: stopping master sync thread 19963 ... [ 2173.811677][T17000] usb 2-1: config 0 descriptor?? [ 2174.197200][T19964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3137'. [ 2174.208559][T19964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3137'. [ 2174.238212][T17000] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2174.274746][T17000] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2174.306933][T17000] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2174.322285][T17000] usb 2-1: media controller created [ 2174.384815][T17000] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2174.504543][T17000] az6027: usb out operation failed. (-71) [ 2174.540991][T17000] az6027: usb out operation failed. (-71) [ 2174.556812][T17000] stb0899_attach: Driver disabled by Kconfig [ 2174.583502][T17000] az6027: no front-end attached [ 2174.583502][T17000] [ 2174.597470][T17000] az6027: usb out operation failed. (-71) [ 2174.606586][T17000] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2174.632149][T17000] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input43 [ 2174.662726][T17000] dvb-usb: schedule remote query interval to 400 msecs. [ 2174.673063][T17000] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2174.900315][T17000] usb 2-1: USB disconnect, device number 25 [ 2175.013450][T19987] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2175.027448][T19987] cramfs: wrong magic [ 2175.571032][T17000] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2178.350693][T20008] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3151'. [ 2178.587861][T17000] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 2178.882042][T20017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3154'. [ 2178.893097][T20017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3154'. [ 2179.046424][T17000] usb 5-1: Using ep0 maxpacket: 8 [ 2179.126033][T17000] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2179.163424][T17000] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2179.213569][T17000] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2179.240294][T17000] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2179.277835][T17000] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2179.324902][T17000] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2179.563629][T17558] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 2179.653620][T17000] usb 5-1: GET_CAPABILITIES returned 0 [ 2179.659262][T17000] usbtmc 5-1:16.0: can't read capabilities [ 2179.727037][T17558] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 2179.746135][T17558] usb 1-1: config 0 has no interface number 0 [ 2179.763904][T17558] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2179.794195][T17558] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 2179.823346][T17558] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2179.854643][T17558] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2179.908631][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2179.944966][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2179.954153][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2179.964971][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2179.974115][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2179.989385][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2180.010279][T17558] usb 1-1: config 0 descriptor?? [ 2180.019535][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2180.028731][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2180.040666][T20026] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2180.040805][T20034] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2180.056764][T20034] cramfs: wrong magic [ 2180.056791][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2180.070015][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2180.079236][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2180.099216][T17558] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 2180.115357][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2180.124545][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2180.133684][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2180.144011][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2180.153176][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2180.174120][T17000] usb 5-1: USB disconnect, device number 25 [ 2180.305015][T17558] usb 1-1: USB disconnect, device number 17 [ 2181.856620][T20053] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3164'. [ 2181.913674][T20053] netlink: 'syz.6.3164': attribute type 7 has an invalid length. [ 2181.921500][T20053] netlink: 'syz.6.3164': attribute type 8 has an invalid length. [ 2181.989491][T20053] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3164'. [ 2182.125697][T17558] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 2182.185359][T20063] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3168'. [ 2182.286732][T17558] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 2182.307331][T17558] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 2182.321618][T17558] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 2182.346503][T17558] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2182.384703][T17558] usb 1-1: Product: syz [ 2182.388964][T17558] usb 1-1: Manufacturer: syz [ 2182.405709][T17558] usb 1-1: SerialNumber: syz [ 2182.426458][T17558] usb 1-1: config 0 descriptor?? [ 2182.434045][T20056] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2182.448047][T20056] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2182.453269][T17000] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 2182.482952][T20072] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3172'. [ 2182.623384][T17000] usb 7-1: Using ep0 maxpacket: 8 [ 2182.664841][T17000] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 2182.692868][T17000] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2182.740287][T20056] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2182.752493][T17000] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2182.772511][T20056] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2182.815626][T17000] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2182.838709][T20078] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2182.846658][T20078] cramfs: wrong magic [ 2182.852128][T17000] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2182.854521][T17000] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 2182.990895][T17000] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2183.005672][T17000] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2183.036158][T17000] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2183.083770][T17000] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2183.104949][T20083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3175'. [ 2183.114193][T20083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3175'. [ 2183.162750][T17000] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 2183.223210][T17000] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2183.234098][T17558] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 2183.242995][T17000] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2183.459176][T17558] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 2183.491533][T17000] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2183.745776][T17558] usb 1-1: USB disconnect, device number 18 [ 2183.765627][T17000] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2183.855675][T17000] usb 7-1: string descriptor 0 read error: -22 [ 2183.862063][T17000] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2183.893462][T17000] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2183.951988][T17000] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2184.210713][T20095] vlan2: entered allmulticast mode [ 2184.230028][T20095] team0: entered allmulticast mode [ 2184.241795][T20095] team_slave_0: entered allmulticast mode [ 2184.269121][T17000] usb 7-1: USB disconnect, device number 17 [ 2184.288823][T20095] team_slave_1: entered allmulticast mode [ 2184.328096][T20095] team0: Device vlan2 is already an upper device of the team interface [ 2184.471114][T20067] adutux: No device or device unplugged -19 [ 2184.788766][T20107] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2184.799284][T20107] cramfs: wrong magic [ 2186.128968][T20126] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2186.137078][T20126] cramfs: wrong magic [ 2186.293263][T10552] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2186.436513][T20128] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3192'. [ 2186.445899][T20128] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3192'. [ 2193.437056][T10552] usb 2-1: Using ep0 maxpacket: 32 [ 2194.962742][T10552] usb 2-1: device descriptor read/all, error -71 [ 2195.273428][T16156] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 2196.295031][T16156] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2196.492061][T16156] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2196.502854][T16156] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2196.518738][T16156] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2196.534549][T16156] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2196.552492][T16156] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2196.562618][T16156] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2196.570979][T16156] usb 10-1: Product: syz [ 2196.576226][T16156] usb 10-1: Manufacturer: syz [ 2196.591631][T16156] cdc_wdm 10-1:1.0: skipping garbage [ 2196.599355][T16156] cdc_wdm 10-1:1.0: skipping garbage [ 2196.812680][T16156] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 2196.821132][T20162] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2196.829048][T20162] cramfs: wrong magic [ 2196.870030][T16156] cdc_wdm 10-1:1.0: Unknown control protocol [ 2197.312962][T20169] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2197.322897][T20169] cramfs: wrong magic [ 2197.723208][ T9] usb 10-1: USB disconnect, device number 11 [ 2198.227937][T20181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3208'. [ 2198.238370][T20181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3208'. [ 2198.642085][T20186] syzkaller1: entered promiscuous mode [ 2198.660611][T20186] syzkaller1: entered allmulticast mode [ 2198.978976][T20192] syzkaller1: entered promiscuous mode [ 2199.043267][T20192] syzkaller1: entered allmulticast mode [ 2199.240091][ T2149] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 2199.463307][ T2149] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2199.476576][ T2149] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2199.488659][ T2149] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2199.498368][ T2149] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2199.506984][ T2149] usb 7-1: Product: syz [ 2199.511424][ T2149] usb 7-1: Manufacturer: syz [ 2199.516750][ T2149] usb 7-1: SerialNumber: syz [ 2199.581122][ T2149] usb 7-1: config 0 descriptor?? [ 2199.612393][ T2149] usb 7-1: selecting invalid altsetting 0 [ 2199.958984][ T2149] usb 7-1: USB disconnect, device number 18 [ 2200.453632][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 2200.623363][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2200.634497][T17000] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 2200.675809][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2200.713304][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2200.743445][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2200.785311][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2200.817448][ T9] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2200.817621][T17000] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2200.843231][ T9] usb 5-1: Manufacturer: syz [ 2200.861621][T17000] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2200.872575][ T9] usb 5-1: config 0 descriptor?? [ 2200.891127][T17000] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2200.917833][T17000] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2200.934829][T17000] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2201.005720][T17000] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2201.019544][T17000] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2201.036975][T17000] usb 1-1: Product: syz [ 2201.057580][T17000] usb 1-1: Manufacturer: syz [ 2201.099455][T17000] cdc_wdm 1-1:1.0: skipping garbage [ 2201.125136][T17000] cdc_wdm 1-1:1.0: skipping garbage [ 2201.151176][T17000] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 2201.184658][T17000] cdc_wdm 1-1:1.0: Unknown control protocol [ 2201.330646][ T9] appleir 0003:05AC:8243.000F: unknown main item tag 0x0 [ 2201.381386][ T9] appleir 0003:05AC:8243.000F: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 2201.556982][ T9] usb 5-1: USB disconnect, device number 26 [ 2201.589691][T20247] fido_id[20247]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 2201.941859][T16156] usb 1-1: USB disconnect, device number 19 [ 2203.478554][T20274] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2203.486457][T20274] cramfs: wrong magic [ 2203.686473][T20283] batadv_slave_1: entered promiscuous mode [ 2203.699144][T20282] batadv_slave_1: left promiscuous mode [ 2204.800613][T20285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3249'. [ 2204.809792][T20285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3249'. [ 2204.970374][T20303] binder: 20302:20303 unknown command 0 [ 2205.005579][T20303] binder: 20302:20303 ioctl c0306201 2000000003c0 returned -22 [ 2206.922728][T20327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3263'. [ 2207.126627][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 2207.223265][ T2149] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 2207.287650][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 2207.307576][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2207.319849][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2207.350895][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2207.376051][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2207.384516][ T2149] usb 7-1: Using ep0 maxpacket: 8 [ 2207.422929][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2207.567171][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2207.732931][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2208.273444][T20347] binder: 20339:20347 unknown command 0 [ 2208.386516][T20347] binder: 20339:20347 ioctl c0306201 2000000003c0 returned -22 [ 2208.399635][ T2149] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2208.407656][ T2149] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2208.427080][ T2149] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2208.442504][ T9] usb 2-1: usb_control_msg returned -32 [ 2208.453233][ T2149] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2208.483289][ T2149] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2208.492415][ T2149] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2208.494713][ T9] usbtmc 2-1:16.0: can't read capabilities [ 2208.742149][ T2149] usb 7-1: GET_CAPABILITIES returned 0 [ 2208.747874][ T2149] usbtmc 7-1:16.0: can't read capabilities [ 2208.786448][T20360] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 2208.796494][ T2149] usb 2-1: USB disconnect, device number 28 [ 2208.813591][T10593] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 2208.903947][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 2208.987145][T17000] usb 7-1: USB disconnect, device number 19 [ 2209.033084][T10593] usb 10-1: Using ep0 maxpacket: 8 [ 2209.120148][T10593] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2209.140631][ T9] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 2209.218745][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2209.236964][T10593] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2209.288915][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2209.357345][T10593] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2209.468590][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2209.541793][T10593] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2209.629853][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2209.747265][T10593] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2209.763844][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2209.787122][T10593] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2209.802071][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2209.870529][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2209.922629][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2209.952472][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2209.963076][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2209.975658][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2209.994913][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2210.053394][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2210.062445][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2210.090901][T10593] usb 10-1: GET_CAPABILITIES returned 0 [ 2210.110851][T10593] usbtmc 10-1:16.0: can't read capabilities [ 2210.120489][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2210.133933][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2210.148350][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2210.162596][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2210.210332][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2210.251650][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2210.304151][T10593] usb 10-1: USB disconnect, device number 12 [ 2210.322813][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2210.346643][T20373] binder: 20363:20373 unknown command 0 [ 2210.359256][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2210.363413][T20373] binder: 20363:20373 ioctl c0306201 2000000003c0 returned -22 [ 2210.376573][T20374] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2210.376869][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2210.384493][T20374] cramfs: wrong magic [ 2210.418470][T20377] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3280'. [ 2210.435766][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2210.459964][ T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2210.479201][ T9] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2210.491216][ T9] usb 1-1: Product: syz [ 2210.496126][ T9] usb 1-1: Manufacturer: syz [ 2210.501092][ T9] usb 1-1: SerialNumber: syz [ 2210.533005][ T9] usb 1-1: config 0 descriptor?? [ 2210.553498][ T9] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 2210.796800][ T2149] usb 1-1: USB disconnect, device number 20 [ 2210.830107][ T2149] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 2211.178693][T20391] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3285'. [ 2211.775162][T20416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3297'. [ 2211.820682][T20422] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3296'. [ 2211.837566][T20420] binder: 20403:20420 unknown command 0 [ 2211.854879][T20420] binder: 20403:20420 ioctl c0306201 2000000003c0 returned -22 [ 2213.263111][T20443] binder: 20434:20443 unknown command 0 [ 2213.269444][T20443] binder: 20434:20443 ioctl c0306201 2000000003c0 returned -22 [ 2213.345415][T20450] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3308'. [ 2213.360413][T20450] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3308'. [ 2213.543597][ T2149] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 2213.731002][ T2149] usb 7-1: Using ep0 maxpacket: 8 [ 2213.777674][ T2149] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 2213.903600][ T2149] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2214.089520][ T2149] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2214.278161][ T2149] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2214.436734][ T2149] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2214.604405][ T2149] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2214.653664][ T2149] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2215.074675][T20474] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2215.081871][T20474] /dev/nullb0: Can't open blockdev [ 2215.086455][ T2149] usb 7-1: usb_control_msg returned -32 [ 2215.323313][ T2149] usbtmc 7-1:16.0: can't read capabilities [ 2219.241838][T17558] usb 7-1: USB disconnect, device number 20 [ 2219.489274][T20494] netlink: 'syz.9.3321': attribute type 39 has an invalid length. [ 2219.509067][T20494] veth0_macvtap: left promiscuous mode [ 2219.979907][T20509] netlink: 'syz.9.3327': attribute type 1 has an invalid length. [ 2220.087864][T20514] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2220.095939][T20514] cramfs: wrong magic [ 2227.334318][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2227.697547][T17558] IPVS: starting estimator thread 0... [ 2227.719489][T20555] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2227.733810][T20555] tipc: Enabled bearer , priority 10 [ 2227.773732][T20558] IPVS: Scheduler module ip_vs_ not found [ 2227.813542][T20556] IPVS: using max 30 ests per chain, 72000 per kthread [ 2227.853487][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2227.987466][T20564] syzkaller1: entered promiscuous mode [ 2228.032424][T20564] syzkaller1: entered allmulticast mode [ 2228.126615][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2228.653509][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2228.661126][ T5909] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 2228.788358][T20588] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3354'. [ 2228.835062][ T5909] usb 7-1: Using ep0 maxpacket: 8 [ 2228.846727][ T5909] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2228.866864][ T5909] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2228.910989][ T5909] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2228.926389][ T9] IPVS: starting estimator thread 0... [ 2228.932728][T20591] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2228.948476][ T5909] pvrusb2: ********** [ 2228.956645][ T5909] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2228.996205][ T5909] pvrusb2: Important functionality might not be entirely working. [ 2229.004702][ T5909] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2229.023225][ T5909] pvrusb2: ********** [ 2229.034425][T20593] IPVS: using max 25 ests per chain, 60000 per kthread [ 2229.109340][ T2342] pvrusb2: Invalid write control endpoint [ 2229.322566][T20578] pvrusb2: Invalid write control endpoint [ 2229.572048][T20606] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2229.580233][T20606] cramfs: wrong magic [ 2229.586199][ T5909] usb 7-1: USB disconnect, device number 21 [ 2229.616112][ T2342] pvrusb2: Invalid write control endpoint [ 2229.642988][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2229.699694][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2229.723217][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2229.782273][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2229.848699][T20609] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2229.855520][ T2342] pvrusb2: Device being rendered inoperable [ 2229.855699][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 2229.855779][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 2229.859080][ T2342] pvrusb2: Attached sub-driver cx25840 [ 2229.865337][T20609] cramfs: wrong magic [ 2229.870678][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2229.898335][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2230.377333][T20613] syzkaller1: entered promiscuous mode [ 2230.382997][T20613] syzkaller1: entered allmulticast mode [ 2230.743466][ T9] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 2230.753323][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2230.925593][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2230.947746][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2230.980241][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2231.003339][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2231.041896][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2231.110759][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2231.129929][ T9] usb 7-1: config 0 descriptor?? [ 2231.793269][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2232.833232][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2233.598359][ T9] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 2233.666473][ T2149] usb 7-1: USB disconnect, device number 22 [ 2233.777163][T20656] fido_id[20656]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 2233.810807][T20662] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3381'. [ 2233.883208][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2233.898191][T20659] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3381'. [ 2233.969947][T20659] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3381'. [ 2234.913224][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2235.206591][T20691] loop6: detected capacity change from 0 to 2560 [ 2235.262614][T20694] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 2235.300958][T20691] Buffer I/O error on dev loop6, logical block 0, async page read [ 2235.316619][T20694] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 2235.399417][T20691] Buffer I/O error on dev loop6, logical block 0, async page read [ 2235.513675][T20691] Buffer I/O error on dev loop6, logical block 0, async page read [ 2235.578539][T20691] Buffer I/O error on dev loop6, logical block 0, async page read [ 2235.619654][T20691] Buffer I/O error on dev loop6, logical block 0, async page read [ 2235.678851][T20691] Buffer I/O error on dev loop6, logical block 0, async page read [ 2235.713062][T20691] Buffer I/O error on dev loop6, logical block 0, async page read [ 2235.768519][T20691] Buffer I/O error on dev loop6, logical block 0, async page read [ 2235.789848][T20691] ldm_validate_partition_table(): Disk read failed. [ 2235.800119][T20691] Buffer I/O error on dev loop6, logical block 0, async page read [ 2235.811829][T20691] Buffer I/O error on dev loop6, logical block 0, async page read [ 2235.842777][T20691] Dev loop6: unable to read RDB block 0 [ 2235.868948][T20691] loop6: unable to read partition table [ 2235.895124][T20691] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 2235.953226][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2236.067050][T20708] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3397'. [ 2236.114894][T20708] binder: 20700:20708 unknown command 0 [ 2236.123705][T20708] binder: 20700:20708 ioctl c0306201 2000000003c0 returned -22 [ 2236.526962][T20720] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2236.535235][T20720] cramfs: wrong magic [ 2236.993249][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2238.033226][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2239.073325][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2240.113216][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2241.153342][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2242.057746][T20773] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3420'. [ 2242.091081][ T9] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 2242.193332][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2242.628855][T20777] binder: 20776:20777 unknown command 0 [ 2242.634691][T20777] binder: 20776:20777 ioctl c0306201 2000000003c0 returned -22 [ 2242.678233][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 2242.707291][ T9] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2242.717643][T20783] input: syz1 as /devices/virtual/input/input45 [ 2242.732318][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2242.796867][ T9] usb 10-1: config 0 descriptor?? [ 2242.956478][T20791] macvlan2: entered promiscuous mode [ 2242.989636][T20791] bridge0: entered promiscuous mode [ 2243.009120][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2243.066748][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2243.115409][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2243.122703][ T9] usb 10-1: media controller created [ 2243.220832][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2243.233247][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2243.554167][T20807] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2243.562005][T20807] cramfs: wrong magic [ 2243.961056][ T9] az6027: usb out operation failed. (-71) [ 2244.068765][ T9] az6027: usb out operation failed. (-71) [ 2244.119673][ T9] stb0899_attach: Driver disabled by Kconfig [ 2244.273198][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2244.330140][ T9] az6027: no front-end attached [ 2244.330140][ T9] [ 2244.338421][ T9] az6027: usb out operation failed. (-71) [ 2244.453817][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2244.517483][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input46 [ 2244.588116][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 2244.646105][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2244.678660][ T9] usb 10-1: USB disconnect, device number 13 [ 2244.882427][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2244.932706][T20826] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3437'. [ 2244.976115][T20826] binder: 20809:20826 unknown command 0 [ 2244.990470][T20826] binder: 20809:20826 ioctl c0306201 2000000003c0 returned -22 [ 2245.313599][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2245.769958][T20849] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3449'. [ 2245.780169][T20849] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3449'. [ 2245.983383][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 2246.176953][ T9] usb 1-1: config index 0 descriptor too short (expected 3133, got 61) [ 2246.201836][ T9] usb 1-1: config 0 has an invalid interface number: 156 but max is 1 [ 2246.224070][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2246.244904][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2246.283394][ T9] usb 1-1: config 0 has no interface number 0 [ 2246.310372][ T9] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 2246.329737][ T9] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2246.353489][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2246.365002][T20866] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2247.292016][ T9] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2247.302217][ T9] usb 1-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2247.315724][ T9] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 2247.324946][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2247.364090][ T9] usb 1-1: config 0 descriptor?? [ 2247.393536][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2247.421210][ T9] gspca_main: spca561-2.14.0 probing abcd:cdee [ 2247.578620][ T9] spca561 1-1:0.156: probe with driver spca561 failed with error -22 [ 2247.612868][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2247.629651][ T9] usb 1-1: MIDIStreaming interface descriptor not found [ 2247.764971][T17000] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 2247.780100][T20876] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3461'. [ 2247.821388][T20876] binder: 20875:20876 unknown command 0 [ 2247.836477][ T9] usb 1-1: USB disconnect, device number 21 [ 2247.847269][T20876] binder: 20875:20876 ioctl c0306201 2000000003c0 returned -22 [ 2247.943210][T17000] usb 2-1: Using ep0 maxpacket: 32 [ 2247.987385][T17000] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 2248.007897][T17000] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2248.047481][T17000] usb 2-1: Product: syz [ 2248.051765][T17000] usb 2-1: Manufacturer: syz [ 2248.088251][T17000] usb 2-1: SerialNumber: syz [ 2248.125222][T17000] usb 2-1: config 0 descriptor?? [ 2248.317841][T20882] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3462'. [ 2248.370474][T20886] binder: 20881:20886 unknown command 0 [ 2248.400238][T20886] binder: 20881:20886 ioctl c0306201 2000000003c0 returned -22 [ 2248.433556][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2248.920473][T17000] peak_usb 2-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 2249.425415][T17000] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 2249.473553][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2249.473648][T17000] usb 2-1: USB disconnect, device number 29 [ 2249.533746][T20888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3464'. [ 2249.542805][T20888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3464'. [ 2250.053280][ T2149] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 2250.513228][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2251.524452][ T2149] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2251.535946][ T2149] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2251.546494][ T2149] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2251.555797][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2251.564449][ T2149] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2251.577547][T20904] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2251.591203][ T2149] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2251.793562][T17000] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 2251.900390][ T2149] usb 1-1: USB disconnect, device number 22 [ 2251.954455][T17000] usb 2-1: Using ep0 maxpacket: 32 [ 2251.964979][T17000] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 2252.000369][T17000] usb 2-1: config 0 has no interface number 0 [ 2252.034004][T17000] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2252.057332][T17000] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2252.080864][T17000] usb 2-1: Product: syz [ 2252.090251][T17000] usb 2-1: Manufacturer: syz [ 2252.102658][T20920] netlink: 'syz.9.3475': attribute type 9 has an invalid length. [ 2252.110738][T17000] usb 2-1: SerialNumber: syz [ 2252.145073][T20920] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3475'. [ 2252.166729][T17000] usb 2-1: config 0 descriptor?? [ 2252.214190][T17000] smsc95xx v2.0.0 [ 2252.227516][T20920] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2252.236710][T20920] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2252.245904][T20920] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2252.254725][T20920] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2252.316510][T20920] netlink: 'syz.9.3475': attribute type 9 has an invalid length. [ 2252.355727][T20920] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3475'. [ 2252.593311][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2252.644499][T20927] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2252.652611][T20927] cramfs: wrong magic [ 2253.633212][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2253.781419][T20933] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3480'. [ 2253.790844][T20933] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3480'. [ 2253.848791][T17000] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 2253.861855][T17000] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 2253.881263][T17000] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 2253.923562][T17000] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 2253.996997][T17000] usb 2-1: USB disconnect, device number 30 [ 2254.673413][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2255.713244][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2256.763246][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2257.793259][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2258.034042][T20958] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2258.833204][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2259.471862][T20973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3493'. [ 2259.481413][T20973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3493'. [ 2259.873194][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2260.218829][T14978] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xa8 [ 2260.331147][T20994] ptrace attach of "./syz-executor exec"[21000] was attempted by "./syz-executor exec"[20994] [ 2260.363675][T17000] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 2260.544135][T17000] usb 2-1: Using ep0 maxpacket: 8 [ 2260.551250][T17000] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2260.568659][T17000] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2260.586084][T17000] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 2260.599164][T17000] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2260.621407][T17000] usb 2-1: Product: syz [ 2260.626231][T17000] usb 2-1: Manufacturer: syz [ 2260.631874][T17000] usb 2-1: SerialNumber: syz [ 2260.650689][T17000] usb 2-1: config 0 descriptor?? [ 2260.913193][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2261.042111][T21013] sctp: [Deprecated]: syz.9.3504 (pid 21013) Use of int in max_burst socket option deprecated. [ 2261.042111][T21013] Use struct sctp_assoc_value instead [ 2261.295532][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807eaac400: rx timeout, send abort [ 2261.329820][ T5909] usb 2-1: USB disconnect, device number 31 [ 2261.430165][T16102] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 2261.698401][T16102] usb 7-1: config 0 has an invalid interface number: 255 but max is 0 [ 2261.745369][T16102] usb 7-1: config 0 has no interface number 0 [ 2261.773824][T16102] usb 7-1: config 0 interface 255 has no altsetting 0 [ 2261.800893][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807eaacc00: rx timeout, send abort [ 2261.809589][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807eaac400: abort rx timeout. Force session deactivation [ 2261.822133][T16102] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2261.963185][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2261.969134][T21022] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3509'. [ 2261.980324][T21022] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3509'. [ 2262.013066][T16102] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2262.034572][T16102] usb 7-1: config 0 descriptor?? [ 2262.075861][T16102] cp210x 7-1:0.255: cp210x converter detected [ 2262.309219][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807eaacc00: abort rx timeout. Force session deactivation [ 2262.423401][ T5895] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 2262.459518][T16102] cp210x 7-1:0.255: failed to get vendor val 0x000e size 3: -32 [ 2262.593582][ T5895] usb 5-1: Using ep0 maxpacket: 8 [ 2262.612126][ T5895] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 2262.637073][ T5895] usb 5-1: config 0 has no interface number 0 [ 2262.653337][ T5895] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2262.676672][ T5895] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2262.687309][T16102] cp210x 7-1:0.255: GPIO initialisation failed: -19 [ 2262.712006][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2262.731651][T16102] usb 7-1: cp210x converter now attached to ttyUSB0 [ 2262.766584][ T5895] usb 5-1: config 0 descriptor?? [ 2262.814215][ T5895] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2262.899951][ T5895] usb 7-1: USB disconnect, device number 23 [ 2262.937118][ T5895] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2262.962780][ T5895] cp210x 7-1:0.255: device disconnected [ 2262.993259][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2263.064559][T16102] usb 5-1: USB disconnect, device number 27 [ 2263.514560][T21047] binder: 21046:21047 ioctl c0306201 2000000003c0 returned -14 [ 2264.033332][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2265.073486][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2265.172894][T21082] loop6: detected capacity change from 0 to 524287999 [ 2265.306579][T20961] buffer_io_error: 11 callbacks suppressed [ 2265.306602][T20961] Buffer I/O error on dev loop6, logical block 65535999, async page read [ 2265.745307][T20961] Buffer I/O error on dev loop6, logical block 65535999, async page read [ 2265.926943][T21096] block nbd1: NBD_DISCONNECT [ 2265.946449][T21096] block nbd1: Send disconnect failed -22 [ 2265.970317][ T5909] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 2266.011892][T21096] block nbd1: Disconnected due to user request. [ 2266.100755][T21096] block nbd1: shutting down sockets [ 2266.113190][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2266.155378][ T5909] usb 10-1: config 0 has an invalid interface number: 128 but max is 0 [ 2266.171961][ T5909] usb 10-1: config 0 has no interface number 0 [ 2266.214526][ T5909] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2266.316792][ T5909] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2266.325733][ T5909] usb 10-1: Product: syz [ 2266.330358][ T5909] usb 10-1: Manufacturer: syz [ 2266.336150][ T5909] usb 10-1: SerialNumber: syz [ 2266.387623][ T5909] usb 10-1: config 0 descriptor?? [ 2267.153213][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2267.448667][ T5909] usb 10-1: non-Atmel transceiver xxxxe3e1 [ 2267.564643][T21115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3541'. [ 2267.574174][T21115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3541'. [ 2267.672164][ T5909] usb 10-1: Firmware version (0.0) predates our first public release. [ 2267.679745][T21116] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2267.688087][T21116] cramfs: wrong magic [ 2267.791453][ T5909] usb 10-1: Please update to version 0.2 or newer [ 2267.889376][ T5895] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 2267.891143][ T5909] usb 10-1: atusb_probe: initialization failed, error = -19 [ 2268.073762][ T5909] usb 10-1: USB disconnect, device number 14 [ 2268.180446][ T5895] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 2268.199495][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2268.201590][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2268.249064][ T5895] usb 2-1: Product: syz [ 2268.263290][ T5895] usb 2-1: Manufacturer: syz [ 2268.278259][ T5895] usb 2-1: SerialNumber: syz [ 2268.298201][ T30] audit: type=1326 audit(1755747882.914:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21121 comm="syz.4.3544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2058ebe9 code=0x7ffc0000 [ 2268.319925][ C0] vkms_vblank_simulate: vblank timer overrun [ 2268.347126][ T5895] usb 2-1: config 0 descriptor?? [ 2268.433990][ T30] audit: type=1326 audit(1755747882.964:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21121 comm="syz.4.3544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc2058ebe9 code=0x7ffc0000 [ 2268.503317][ T30] audit: type=1326 audit(1755747882.974:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21121 comm="syz.4.3544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2058ebe9 code=0x7ffc0000 [ 2268.631519][ T30] audit: type=1326 audit(1755747882.974:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21121 comm="syz.4.3544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2058ebe9 code=0x7ffc0000 [ 2268.653328][ C0] vkms_vblank_simulate: vblank timer overrun [ 2268.854328][ T30] audit: type=1326 audit(1755747882.974:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21121 comm="syz.4.3544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc2058ebe9 code=0x7ffc0000 [ 2268.876655][T16102] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 2268.980651][ T30] audit: type=1326 audit(1755747882.974:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21121 comm="syz.4.3544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2058ebe9 code=0x7ffc0000 [ 2269.002715][ C0] vkms_vblank_simulate: vblank timer overrun [ 2269.081710][T16102] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2269.111649][ T30] audit: type=1326 audit(1755747882.974:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21121 comm="syz.4.3544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2058ebe9 code=0x7ffc0000 [ 2269.133454][ C0] vkms_vblank_simulate: vblank timer overrun [ 2269.142782][T16102] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2269.226789][T16102] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2269.233384][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2269.333258][T16102] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2269.351926][ T30] audit: type=1326 audit(1755747882.974:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21121 comm="syz.4.3544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc2058ebe9 code=0x7ffc0000 [ 2269.415924][T21127] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2269.459723][T16102] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2269.525410][ T30] audit: type=1326 audit(1755747882.974:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21121 comm="syz.4.3544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2058ebe9 code=0x7ffc0000 [ 2269.599504][ T5895] usb 2-1: f81604_read: reg: 100e failed: -EPROTO [ 2269.712267][ T5895] usb 2-1: f81604_read: reg: 200f failed: -EPROTO [ 2269.730611][ T30] audit: type=1326 audit(1755747882.974:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21121 comm="syz.4.3544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2058ebe9 code=0x7ffc0000 [ 2269.752217][ C0] vkms_vblank_simulate: vblank timer overrun [ 2269.835581][ T5895] usb 2-1: USB disconnect, device number 32 [ 2269.882874][T16102] usb 5-1: USB disconnect, device number 28 [ 2270.273454][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2270.407030][ T5895] usb 2-1: f81604_read: reg: 100f failed: -ENODEV [ 2270.754912][ T5895] usb 2-1: f81604_read: reg: 200f failed: -ENODEV [ 2271.216667][T21148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3552'. [ 2271.226977][T21148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3552'. [ 2271.313308][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2271.561078][T21149] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2271.601465][T21149] cramfs: wrong magic [ 2271.721830][T21154] pim6reg1: entered promiscuous mode [ 2271.731135][T21154] pim6reg1: entered allmulticast mode [ 2272.053226][ T5895] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 2272.359956][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2272.454125][ T5895] usb 2-1: Using ep0 maxpacket: 32 [ 2272.470255][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2272.499396][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2272.523275][ T5895] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2272.552943][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2272.594801][ T5895] usb 2-1: config 0 descriptor?? [ 2273.082084][ T5895] savu 0003:1E7D:2D5A.0011: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 2273.137403][T21178] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2273.203661][T21176] binder: 21175:21176 unknown command 0 [ 2273.236715][T21176] binder: 21175:21176 ioctl c0306201 2000000003c0 returned -22 [ 2273.316907][ T5895] usb 2-1: USB disconnect, device number 33 [ 2273.366578][T21179] fido_id[21179]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 2273.393334][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2273.773504][T17000] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 2273.813252][T17558] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 2273.933553][T17000] usb 7-1: Using ep0 maxpacket: 16 [ 2273.952300][T17000] usb 7-1: config 5 has an invalid interface number: 168 but max is 0 [ 2273.973517][T21201] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2273.981375][T21201] cramfs: wrong magic [ 2273.993291][T17000] usb 7-1: config 5 has no interface number 0 [ 2274.059033][T17000] usb 7-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 2274.083665][T17000] usb 7-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2274.094794][T17000] usb 7-1: config 5 interface 168 altsetting 7 bulk endpoint 0x4 has invalid maxpacket 1023 [ 2274.105611][T17000] usb 7-1: config 5 interface 168 has no altsetting 0 [ 2274.113458][T17558] usb 5-1: Using ep0 maxpacket: 32 [ 2274.128895][T17000] usb 7-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 2274.129666][T17558] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 2274.159396][T17000] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2274.162415][T17558] usb 5-1: config 0 has no interface number 0 [ 2274.178712][T17000] usb 7-1: Product: syz [ 2274.179375][T17558] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2274.191303][T17000] usb 7-1: Manufacturer: syz [ 2274.199600][T17558] usb 5-1: config 0 interface 85 has no altsetting 0 [ 2274.210167][T17558] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 2274.215964][T17000] usb 7-1: SerialNumber: syz [ 2274.228286][T17558] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2274.240919][T17558] usb 5-1: Product: syz [ 2274.249654][T17558] usb 5-1: Manufacturer: syz [ 2274.258917][T21186] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2274.261467][T17558] usb 5-1: SerialNumber: syz [ 2274.267325][T21186] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2274.299328][T17558] usb 5-1: config 0 descriptor?? [ 2274.433388][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2274.520023][ C0] usb 7-1: NFC: Urb failure (status -71) [ 2274.532362][ C0] usb 7-1: NFC: Urb failure (status -71) [ 2274.546167][T17000] usb 7-1: NFC: Unable to get FW version [ 2274.569234][T17000] pn533_usb 7-1:5.168: probe with driver pn533_usb failed with error -71 [ 2274.599940][T17000] usb 7-1: USB disconnect, device number 24 [ 2274.921409][T17558] appletouch 5-1:0.85: Geyser mode initialized. [ 2274.980279][T17558] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input47 [ 2275.247405][T17558] usb 5-1: USB disconnect, device number 29 [ 2275.247552][ C0] appletouch 5-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 2275.457203][T17558] appletouch 5-1:0.85: input: appletouch disconnected [ 2275.483295][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2275.659926][T21227] hsr0: entered allmulticast mode [ 2275.690487][T21227] hsr_slave_0: entered allmulticast mode [ 2275.706053][T21227] hsr_slave_1: entered allmulticast mode [ 2275.749610][T21230] hsr_slave_0: left promiscuous mode [ 2275.810691][T21230] hsr_slave_1: left promiscuous mode [ 2275.941549][T21230] hsr0 (unregistering): left allmulticast mode [ 2276.073241][T17558] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 2276.203522][T16102] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 2276.387880][T16102] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 2276.419041][T16102] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2276.466143][T21246] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2276.480131][T21246] cramfs: wrong magic [ 2276.513298][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2276.670316][T16102] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2276.868244][T16102] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2277.012424][T16102] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2277.092379][T16102] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2277.107345][T17558] usb 10-1: Using ep0 maxpacket: 8 [ 2277.116766][T17558] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2277.129232][T17558] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2277.144887][T17558] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2277.152106][T17558] pvrusb2: ********** [ 2277.156462][T17558] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2277.166822][T16102] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2277.180963][T17558] pvrusb2: Important functionality might not be entirely working. [ 2277.186942][T16102] usb 5-1: config 0 descriptor?? [ 2277.189262][T17558] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2277.245008][T17558] pvrusb2: ********** [ 2277.301766][T15319] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2277.323518][T17000] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 2277.347406][ T2342] pvrusb2: Invalid write control endpoint [ 2277.484099][ T2342] pvrusb2: Invalid write control endpoint [ 2277.500443][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2277.510892][T17000] usb 7-1: Using ep0 maxpacket: 32 [ 2277.516695][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2277.525602][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2277.536943][T17000] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 2277.545779][T17000] usb 7-1: config 0 has no interface number 0 [ 2277.552195][T17000] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2277.563203][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2277.563267][ T2342] pvrusb2: Device being rendered inoperable [ 2277.585522][T21234] pvrusb2: Attempted to execute control transfer when device not ok [ 2277.590978][T17000] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 2277.604127][T17000] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2277.612235][T17000] usb 7-1: Product: syz [ 2277.616205][T15319] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2277.619812][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 2277.635735][T17558] usb 10-1: USB disconnect, device number 15 [ 2277.636817][T17000] usb 7-1: Manufacturer: syz [ 2277.652469][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 2277.672980][T16102] plantronics 0003:047F:FFFF.0012: reserved main item tag 0xd [ 2277.685226][T17000] usb 7-1: SerialNumber: syz [ 2277.705218][ T2342] pvrusb2: Attached sub-driver cx25840 [ 2277.712377][T17000] usb 7-1: config 0 descriptor?? [ 2277.728040][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2277.743308][T16102] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 2277.764789][T17000] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 2277.774960][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2277.789131][T17000] em28xx 7-1:0.132: Video interface 132 found: [ 2277.858613][T15319] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2278.002471][ T2149] usb 5-1: USB disconnect, device number 30 [ 2278.108552][T15319] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2278.184548][T17000] em28xx 7-1:0.132: chip ID is em2884 [ 2278.554047][T15319] bridge_slave_1: left allmulticast mode [ 2278.559817][T15319] bridge_slave_1: left promiscuous mode [ 2278.603304][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2278.603465][T15319] bridge0: port 2(bridge_slave_1) entered disabled state [ 2278.700164][T15319] bridge_slave_0: left allmulticast mode [ 2278.726603][T15319] bridge_slave_0: left promiscuous mode [ 2278.732700][T15319] bridge0: port 1(bridge_slave_0) entered disabled state [ 2278.846113][T16999] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2278.857753][T16999] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2278.870707][T16999] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2278.888335][T16999] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2278.896400][T16999] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2278.994086][T17000] em28xx 7-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 2279.018759][T17000] em28xx 7-1:0.132: failed to read eeprom (err=-5) [ 2279.050444][T17000] em28xx 7-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 2279.133717][T17000] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 2279.141770][T17000] em28xx 7-1:0.132: analog set to bulk mode. [ 2279.187311][ T5895] em28xx 7-1:0.132: Registering V4L2 extension [ 2279.208476][T17000] usb 7-1: USB disconnect, device number 25 [ 2279.223655][T17558] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 2279.230084][T17000] em28xx 7-1:0.132: Disconnecting em28xx [ 2279.619211][T21281] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2279.626277][T17558] usb 10-1: Using ep0 maxpacket: 16 [ 2279.627302][T21281] cramfs: wrong magic [ 2279.633966][T17558] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2279.646657][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2279.738376][T17558] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2279.752953][ T5895] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 2279.771579][ T5895] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 2279.810699][ T5895] em28xx 7-1:0.132: No AC97 audio processor [ 2279.813593][T17558] usb 10-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 2279.865979][T17558] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2279.920309][T17558] usb 10-1: config 0 descriptor?? [ 2279.958822][ T5895] usb 7-1: Decoder not found [ 2279.968818][T21283] binder: 21282:21283 unknown command 0 [ 2279.974717][T21283] binder: 21282:21283 ioctl c0306201 2000000003c0 returned -22 [ 2279.979799][ T5895] em28xx 7-1:0.132: failed to create media graph [ 2280.003904][ T5895] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 2280.078795][ T5895] em28xx 7-1:0.132: Remote control support is not available for this card. [ 2280.103921][T17000] em28xx 7-1:0.132: Closing input extension [ 2280.221849][T17000] em28xx 7-1:0.132: Freeing device [ 2280.673272][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2280.782552][T17558] letsketch 0003:6161:4D15.0013: Device info: ఁ [ 2280.893334][ T2149] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 2280.985490][T17558] letsketch 0003:6161:4D15.0013: Device info: 擃 [ 2281.009547][T16999] Bluetooth: hci0: command tx timeout [ 2281.063475][ T2149] usb 5-1: Using ep0 maxpacket: 16 [ 2281.075822][ T2149] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2281.105229][ T2149] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 2281.130987][ T2149] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2281.166414][ T2149] usb 5-1: config 0 descriptor?? [ 2281.208911][ T2149] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input49 [ 2281.324980][T17558] usb 10-1: Max retries (5) exceeded reading string descriptor 202 [ 2281.362430][T17558] letsketch 0003:6161:4D15.0013: probe with driver letsketch failed with error -71 [ 2281.668115][T17558] usb 10-1: USB disconnect, device number 16 [ 2281.713225][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2281.716918][T21302] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3613'. [ 2281.730462][T21302] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3613'. [ 2282.401330][T21308] Bluetooth: MGMT ver 1.23 [ 2282.763185][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2283.443792][T16999] Bluetooth: hci0: command tx timeout [ 2283.544031][T15319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2283.791278][T15319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2283.800037][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2283.988126][T15319] bond0 (unregistering): Released all slaves [ 2284.023704][ T5191] bcm5974 5-1:0.0: could not read from device [ 2284.255023][T21317] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3616'. [ 2284.265106][T21317] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3616'. [ 2284.293290][ T2149] usb 5-1: USB disconnect, device number 31 [ 2284.312015][ T5191] bcm5974 5-1:0.0: could not read from device [ 2284.437655][T21118] udevd[21118]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 2284.522082][T21267] lo speed is unknown, defaulting to 1000 [ 2284.538459][T21118] udevd[21118]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 2284.579024][T21267] lo speed is unknown, defaulting to 1000 [ 2284.677147][T21328] binder: 21319:21328 unknown command 0 [ 2284.682948][T21328] binder: 21319:21328 ioctl c0306201 2000000003c0 returned -22 [ 2284.693303][T15319] tipc: Disabling bearer [ 2284.721664][T15319] tipc: Left network mode [ 2284.833453][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2284.843683][ T2149] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 2285.009142][T17558] kernel read not supported for file /rfkill (pid: 17558 comm: kworker/1:5) [ 2285.020720][ T2149] usb 5-1: config 0 has an invalid interface number: 93 but max is 0 [ 2285.040009][ T2149] usb 5-1: config 0 has no interface number 0 [ 2285.059658][ T2149] usb 5-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 2285.073173][ T2149] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2285.110091][ T2149] usb 5-1: Product: syz [ 2285.116643][ T2149] usb 5-1: Manufacturer: syz [ 2285.131979][ T2149] usb 5-1: SerialNumber: syz [ 2285.150221][ T2149] usb 5-1: config 0 descriptor?? [ 2285.467804][ T2149] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 2285.476333][T14052] Bluetooth: hci0: command tx timeout [ 2285.486280][ T2149] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 2285.495675][ T2149] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 2285.504974][ T2149] usb 5-1: media controller created [ 2285.509222][T21267] dummy0 speed is unknown, defaulting to 1000 [ 2285.515478][ T2149] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2285.618653][ T2149] DVB: Unable to find symbol dib7000p_attach() [ 2285.640095][ T2149] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 2285.651170][ T2149] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 2285.661290][ T2149] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 2285.679862][T21346] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2285.687795][ T2149] usb 5-1: media controller created [ 2285.688086][T21346] cramfs: wrong magic [ 2285.700886][ T2149] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2285.780181][ T2149] dib0700: the master dib7090 has to be initialized first [ 2285.790523][ T2149] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 2285.873196][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2285.997937][ T2149] rc_core: IR keymap rc-dib0700-rc5 not found [ 2286.037456][ T2149] Registered IR keymap rc-empty [ 2286.042843][ T2149] dvb-usb: could not initialize remote control. [ 2286.102874][ T2149] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 2286.317998][ T2149] usb 5-1: USB disconnect, device number 32 [ 2286.518724][ T2149] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 2286.649411][T15319] hsr_slave_0: left promiscuous mode [ 2286.679245][T15319] hsr_slave_1: left promiscuous mode [ 2286.686611][T15319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2286.710254][T15319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2286.719975][T15319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2286.731684][T15319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2286.763542][T15319] veth1_macvtap: left promiscuous mode [ 2286.769206][T15319] veth0_macvtap: left promiscuous mode [ 2286.775862][T15319] veth1_vlan: left promiscuous mode [ 2286.781321][T15319] veth0_vlan: left promiscuous mode [ 2286.923198][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2286.943735][ T2149] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 2287.170471][ T2149] usb 5-1: Using ep0 maxpacket: 32 [ 2287.200115][ T2149] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 2287.209929][ T2149] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2287.235461][ T2149] usb 5-1: config 0 descriptor?? [ 2287.273418][ T2149] gspca_main: sunplus-2.14.0 probing 041e:400b [ 2287.573390][T14052] Bluetooth: hci0: command tx timeout [ 2287.973196][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2288.036478][T15319] team_slave_1 (unregistering): left allmulticast mode [ 2288.055988][T15319] team0 (unregistering): Port device team_slave_1 removed [ 2288.169281][T15319] team_slave_0 (unregistering): left allmulticast mode [ 2288.182342][T15319] team0 (unregistering): Port device team_slave_0 removed [ 2288.282589][ T2149] gspca_sunplus: reg_w_riv err -71 [ 2288.294394][ T2149] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 2288.305244][ T2149] usb 5-1: USB disconnect, device number 33 [ 2288.410487][T21371] binder: 21369:21371 unknown command 0 [ 2288.416391][T21371] binder: 21369:21371 ioctl c0306201 2000000003c0 returned -22 [ 2288.681176][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2288.807234][T20004] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 2289.003215][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2290.043208][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2291.093190][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2291.187291][T21405] "syz.4.3643" (21405) uses obsolete ecb(arc4) skcipher [ 2291.895695][T21267] chnl_net:caif_netlink_parms(): no params data found [ 2292.113250][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2292.696924][T21267] bridge0: port 1(bridge_slave_0) entered blocking state [ 2292.722014][T21267] bridge0: port 1(bridge_slave_0) entered disabled state [ 2292.754279][T21267] bridge_slave_0: entered allmulticast mode [ 2292.771864][T21267] bridge_slave_0: entered promiscuous mode [ 2292.822326][T21267] bridge0: port 2(bridge_slave_1) entered blocking state [ 2292.829704][T10593] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 2292.840347][T21267] bridge0: port 2(bridge_slave_1) entered disabled state [ 2292.862981][T21267] bridge_slave_1: entered allmulticast mode [ 2292.888218][T21267] bridge_slave_1: entered promiscuous mode [ 2292.934477][T21439] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2292.990313][T10593] usb 7-1: Using ep0 maxpacket: 8 [ 2293.004939][T10593] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2293.038552][T21267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2293.065007][T10593] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2293.094198][T10593] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2293.112788][T10593] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2293.132423][T21267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2293.142290][T10593] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2293.153388][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2293.166754][T10593] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2293.432669][T15319] IPVS: stop unused estimator thread 0... [ 2293.502226][T10593] usb 7-1: GET_CAPABILITIES returned 0 [ 2293.512853][T21267] team0: Port device team_slave_0 added [ 2293.531631][T10593] usbtmc 7-1:16.0: can't read capabilities [ 2293.558965][T21267] team0: Port device team_slave_1 added [ 2293.750828][T10593] usb 7-1: USB disconnect, device number 26 [ 2293.858617][T21267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2293.878721][T21267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2293.904758][ C0] vkms_vblank_simulate: vblank timer overrun [ 2293.919838][T21267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2293.992413][T21460] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2294.000543][T21460] cramfs: wrong magic [ 2294.203190][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2294.389578][T21461] syzkaller1: entered promiscuous mode [ 2294.412451][T21461] syzkaller1: entered allmulticast mode [ 2294.482525][T21267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2294.509210][T21267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2294.535265][ C0] vkms_vblank_simulate: vblank timer overrun [ 2294.567487][T21267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2294.727415][T21469] overlay: filesystem on ./bus not supported as upperdir [ 2294.766048][T21267] hsr_slave_0: entered promiscuous mode [ 2294.772977][T21267] hsr_slave_1: entered promiscuous mode [ 2294.816122][T21267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2294.843738][T21267] Cannot create hsr debugfs directory [ 2295.233182][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2295.621626][T21484] input: syz1 as /devices/virtual/input/input51 [ 2296.273186][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2297.323295][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2298.363201][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2299.234290][T21505] binder: 21503:21505 unknown command 0 [ 2299.239927][T21505] binder: 21503:21505 ioctl c0306201 2000000003c0 returned -22 [ 2299.403186][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2300.443314][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2300.702780][T21525] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2300.715616][T21525] cramfs: wrong magic [ 2301.473552][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2301.607781][T21532] syz_tun: entered allmulticast mode [ 2301.622631][T21526] syz_tun: left allmulticast mode [ 2301.653850][ T2149] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 2301.762965][T21541] syz_tun: entered allmulticast mode [ 2301.827546][ T2149] usb 10-1: Using ep0 maxpacket: 16 [ 2301.836257][T21541] team0: Port device syz_tun added [ 2301.849348][ T2149] usb 10-1: config index 0 descriptor too short (expected 16456, got 72) [ 2301.871491][ T2149] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 2301.937353][ T2149] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 2301.956346][ T2149] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 2301.983239][ T2149] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2302.002655][ T2149] usb 10-1: config 0 has no interface number 0 [ 2302.035328][ T2149] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 2302.065077][ T2149] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 2302.086637][ T2149] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2302.098832][ T2149] usb 10-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2302.135268][T21267] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2302.172351][T21267] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2302.177963][T21551] kvm: user requested TSC rate below hardware speed [ 2302.180347][ T2149] usb 10-1: config 0 interface 125 has no altsetting 0 [ 2302.203280][ T2149] usb 10-1: config 0 interface 125 has no altsetting 2 [ 2302.214203][ T2149] usb 10-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 2302.227963][T21551] kvm: user requested TSC rate below hardware speed [ 2302.227974][T21267] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2302.243038][ T2149] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2302.253762][ T2149] usb 10-1: Product: syz [ 2302.258091][ T2149] usb 10-1: Manufacturer: syz [ 2302.265975][ T2149] usb 10-1: SerialNumber: syz [ 2302.274178][ T2149] usb 10-1: config 0 descriptor?? [ 2302.303254][T21267] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2302.318045][ T2149] usb 10-1: selecting invalid altsetting 2 [ 2302.513194][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2302.538508][T21530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2302.574262][T21530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2302.768228][T21567] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2302.780375][T21567] cramfs: wrong magic [ 2303.479082][ T2149] get_1284_register timeout [ 2303.484980][ C1] usb 10-1: async_complete: urb error -104 [ 2303.490909][ T2149] uss720 10-1:0.125: probe with driver uss720 failed with error -5 [ 2303.520196][T10593] usb 10-1: USB disconnect, device number 17 [ 2303.553185][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2303.611600][T21267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2303.725692][T21267] 8021q: adding VLAN 0 to HW filter on device team0 [ 2303.778385][T21571] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2303.786728][T21571] cramfs: wrong magic [ 2303.831513][T11578] bridge0: port 1(bridge_slave_0) entered blocking state [ 2303.838831][T11578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2303.936707][T11578] bridge0: port 2(bridge_slave_1) entered blocking state [ 2303.944024][T11578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2304.099814][T21575] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2304.321920][T21580] block nbd6: not configured, cannot reconfigure [ 2304.593180][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2304.717540][T21267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2305.124518][T21595] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2305.138424][T21595] cramfs: wrong magic [ 2305.600958][T21267] veth0_vlan: entered promiscuous mode [ 2305.633182][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2305.709225][T21267] veth1_vlan: entered promiscuous mode [ 2305.983771][T21602] "syz.4.3701" (21602) uses obsolete ecb(arc4) skcipher [ 2306.057644][T21267] veth0_macvtap: entered promiscuous mode [ 2306.076234][T21267] veth1_macvtap: entered promiscuous mode [ 2306.173999][T21606] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2306.187912][T21606] cramfs: wrong magic [ 2306.370305][T21267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2306.574173][T21267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2306.652065][T21267] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2306.673288][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2306.730884][T21267] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2306.796720][T21267] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2306.823214][T21267] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2307.250852][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2307.302445][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2307.460565][T15319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2307.490658][T15319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2307.713222][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2308.753481][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2309.793182][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2310.843205][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2311.425772][T17558] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 2311.623348][ T2149] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 2311.660524][T17558] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2311.680898][T17558] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2311.700434][T17558] usb 2-1: Product: syz [ 2311.730743][T17558] usb 2-1: Manufacturer: syz [ 2311.743884][T17558] usb 2-1: SerialNumber: syz [ 2311.764228][T17558] usb 2-1: config 0 descriptor?? [ 2311.782591][T17558] ch341 2-1:0.0: ch341-uart converter detected [ 2311.813199][ T2149] usb 3-1: Using ep0 maxpacket: 16 [ 2311.825692][ T2149] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 2311.834759][ T2149] usb 3-1: config 1 has no interface number 0 [ 2311.841001][ T2149] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2311.883179][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2311.911128][ T2149] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2311.956347][ T2149] usb 3-1: config 1 interface 105 has no altsetting 0 [ 2311.976982][ T2149] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 2311.997010][ T2149] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2312.018890][ T2149] usb 3-1: Product: syz [ 2312.029034][ T2149] usb 3-1: Manufacturer: syz [ 2312.044145][ T2149] usb 3-1: SerialNumber: syz [ 2312.076756][T21669] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2312.093679][T21669] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2312.173343][T16102] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 2312.257454][T21686] binder: 21685:21686 ioctl c0306201 200000000640 returned -22 [ 2312.359629][T16102] usb 5-1: Using ep0 maxpacket: 16 [ 2312.382869][T16102] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2312.416470][T16102] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2312.443370][T16102] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2312.452620][T16102] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2312.473482][T10593] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 2312.485258][T16102] usb 5-1: config 0 descriptor?? [ 2312.522267][T21669] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2312.533561][T21669] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2312.633266][T10593] usb 10-1: Using ep0 maxpacket: 32 [ 2312.648894][T10593] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2312.674359][T10593] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 2312.702373][T10593] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2312.740184][T10593] usb 10-1: New USB device strings: Mfr=14, Product=2, SerialNumber=3 [ 2312.773180][T10593] usb 10-1: Product: syz [ 2312.777559][T10593] usb 10-1: Manufacturer: syz [ 2312.782357][T10593] usb 10-1: SerialNumber: syz [ 2312.842174][T17558] ch341-uart ttyUSB0: break control not supported, using simulated break [ 2312.861858][T16102] usbhid 5-1:0.0: can't add hid device: -71 [ 2312.875024][T17558] usb 2-1: ch341-uart converter now attached to ttyUSB0 [ 2312.875818][T16102] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2312.906841][T17558] usb 2-1: USB disconnect, device number 34 [ 2312.918184][T16102] usb 5-1: USB disconnect, device number 34 [ 2312.923406][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2312.965226][ T2149] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 2313.035064][T17558] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 2313.049141][T21684] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 2313.059831][T17558] ch341 2-1:0.0: device disconnected [ 2313.257893][ T2149] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 2313.294992][ T2149] aqc111 3-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, fe:e8:c1:f6:5a:ba [ 2313.314529][ T2149] usb 3-1: USB disconnect, device number 9 [ 2313.330236][ T2149] aqc111 3-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 2313.415486][ T2149] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 2313.441338][ T2149] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 2313.470567][ T2149] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 2313.675855][T21684] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 2313.895066][T21704] input: syz0 as /devices/virtual/input/input52 [ 2313.907323][T10593] cdc_ncm 10-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2313.918441][T10593] cdc_ncm 10-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048 [ 2313.926899][T16102] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2313.953212][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2313.959957][T10593] cdc_ncm 10-1:1.0: setting rx_max = 2048 [ 2313.971504][T21705] loop4: detected capacity change from 0 to 7 [ 2314.006771][T21118] Dev loop4: unable to read RDB block 7 [ 2314.021037][T21118] loop4: unable to read partition table [ 2314.036718][T21118] loop4: partition table beyond EOD, truncated [ 2314.059780][T21705] Dev loop4: unable to read RDB block 7 [ 2314.065690][T21705] loop4: unable to read partition table [ 2314.083749][T21705] loop4: partition table beyond EOD, truncated [ 2314.099048][T21705] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 2314.108585][T16102] usb 2-1: Using ep0 maxpacket: 8 [ 2314.161336][T10593] cdc_ncm 10-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.9-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 2314.173218][T16102] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2314.184166][T16102] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 2314.216929][T10593] usb 10-1: USB disconnect, device number 18 [ 2314.223027][T16102] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 2314.693881][T16102] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2314.807295][T10593] cdc_ncm 10-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.9-1, CDC NCM (NO ZLP) [ 2314.829615][T21712] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3743'. [ 2314.839639][T21712] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3743'. [ 2314.879453][T16102] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2314.907228][T16102] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2314.923211][T16102] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2314.968026][T16102] usb 2-1: Product: syz [ 2314.985741][T16102] usb 2-1: Manufacturer: syz [ 2314.993172][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2315.019592][T16102] usb 2-1: SerialNumber: syz [ 2315.065936][T16102] usb 2-1: config 0 descriptor?? [ 2315.303744][T16102] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 2315.320006][T21724] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2315.332192][T16102] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 2315.381362][T21725] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3747'. [ 2315.391106][T21725] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3747'. [ 2315.506690][T16102] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 2315.525333][T16102] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 2315.612283][T16102] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 2315.722258][T16102] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 2316.033221][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2316.335682][T16102] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 2316.380814][T16102] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 2316.465009][T16102] usb 2-1: USB disconnect, device number 35 [ 2316.807322][T21744] binder: 21741:21744 unknown command 0 [ 2316.848033][T21744] binder: 21741:21744 ioctl c0306201 2000000003c0 returned -22 [ 2317.073190][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2317.761078][T21766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3762'. [ 2317.820522][T21766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3762'. [ 2318.113987][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2318.269944][T21778] fuse: Unknown parameter 'F0' [ 2318.438006][ T5895] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 2318.596052][ T5895] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2318.623239][ T5895] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2318.643324][ T5895] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2318.685929][ T5895] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2318.722296][ T5895] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2318.757899][ T5895] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2318.791291][ T5895] usb 10-1: config 0 descriptor?? [ 2318.795792][T21792] binder: 21785:21792 unknown command 0 [ 2318.820732][T21792] binder: 21785:21792 ioctl c0306201 2000000003c0 returned -22 [ 2318.893577][T21795] input: syz1 as /devices/virtual/input/input55 [ 2319.102670][T21798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3775'. [ 2319.132166][T21798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3775'. [ 2319.153617][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2319.209370][T21802] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2319.251849][T21800] syz.6.3776 (21800): drop_caches: 2 [ 2319.252188][ T5895] plantronics 0003:047F:FFFF.0014: ignoring exceeding usage max [ 2319.306733][ T5895] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 2319.391936][T21800] syz.6.3776 (21800): drop_caches: 2 [ 2319.924930][T21815] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2319.940462][T21815] cramfs: wrong magic [ 2320.193166][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2320.472690][ T2149] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2320.483619][ T2149] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2320.491424][ T2149] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2320.638060][ T2149] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2320.696737][ T2149] rtc rtc0: __rtc_set_alarm: err=-22 [ 2320.986607][T16102] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 2321.153466][T16102] usb 3-1: Using ep0 maxpacket: 32 [ 2321.201368][T16102] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 2321.230868][T16102] usb 3-1: config 0 has no interface number 0 [ 2321.241148][T16102] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2321.243197][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2321.279503][T16102] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 2321.298211][T16102] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2321.309349][T16102] usb 3-1: Product: syz [ 2321.316101][T16102] usb 3-1: Manufacturer: syz [ 2321.331345][T16102] usb 3-1: SerialNumber: syz [ 2321.352404][T16102] usb 3-1: config 0 descriptor?? [ 2321.368104][T21836] binder: 21835:21836 unknown command 0 [ 2321.376880][T21836] binder: 21835:21836 ioctl c0306201 2000000003c0 returned -22 [ 2321.377606][T16102] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 2321.405837][T16102] em28xx 3-1:0.132: Video interface 132 found: [ 2321.443718][T16156] usb 10-1: USB disconnect, device number 19 [ 2321.779681][T16102] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 2322.200970][T21853] binder: 21848:21853 unknown command 0 [ 2322.283173][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2322.410354][T21853] binder: 21848:21853 ioctl c0306201 2000000003c0 returned -22 [ 2322.423943][T16102] em28xx 3-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 2322.483624][T16102] em28xx 3-1:0.132: failed to read eeprom (err=-5) [ 2322.522208][T16102] em28xx 3-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 2322.626198][T16102] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 2322.655148][T16102] em28xx 3-1:0.132: analog set to bulk mode. [ 2322.682021][T10593] em28xx 3-1:0.132: Registering V4L2 extension [ 2322.760935][T16102] usb 3-1: USB disconnect, device number 10 [ 2322.784664][T16102] em28xx 3-1:0.132: Disconnecting em28xx [ 2323.182767][T10593] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 2323.217642][T10593] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 2323.240746][T10593] em28xx 3-1:0.132: No AC97 audio processor [ 2323.299354][T10593] usb 3-1: Decoder not found [ 2323.313209][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2323.317246][T21878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3801'. [ 2323.331314][T21878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3801'. [ 2323.358741][T10593] em28xx 3-1:0.132: failed to create media graph [ 2323.423671][T10593] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 2323.504023][T10593] em28xx 3-1:0.132: Remote control support is not available for this card. [ 2323.575596][T16102] em28xx 3-1:0.132: Closing input extension [ 2323.690691][T16102] em28xx 3-1:0.132: Freeing device [ 2324.013305][T10593] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 2324.203500][T10593] usb 7-1: Using ep0 maxpacket: 8 [ 2324.229808][T10593] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 2324.247696][T10593] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2324.268549][T10593] usb 7-1: config 0 descriptor?? [ 2324.353194][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2324.904918][T10593] asix 7-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 2324.943705][T21898] loop6: detected capacity change from 0 to 63 [ 2324.972727][T21898] Buffer I/O error on dev loop6, logical block 0, async page read [ 2324.996392][T21898] Buffer I/O error on dev loop6, logical block 1, async page read [ 2325.005034][T21898] Buffer I/O error on dev loop6, logical block 2, async page read [ 2325.019030][T21898] Buffer I/O error on dev loop6, logical block 3, async page read [ 2325.031331][T20961] Buffer I/O error on dev loop6, logical block 0, async page read [ 2325.055431][T21902] binder: 21899:21902 unknown command 0 [ 2325.060005][T20961] Buffer I/O error on dev loop6, logical block 1, async page read [ 2325.061179][T21902] binder: 21899:21902 ioctl c0306201 2000000003c0 returned -22 [ 2325.071749][T20961] Buffer I/O error on dev loop6, logical block 2, async page read [ 2325.123514][T20961] Buffer I/O error on dev loop6, logical block 3, async page read [ 2325.176317][T21904] Buffer I/O error on dev loop6, logical block 0, async page read [ 2325.204018][T21904] Buffer I/O error on dev loop6, logical block 1, async page read [ 2325.243490][ T5909] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 2325.403196][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2325.433394][ T5909] usb 10-1: Using ep0 maxpacket: 16 [ 2325.445692][ T5909] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2325.465685][ T5909] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2325.486274][ T5909] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2325.522556][ T5909] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 2325.654436][ T5909] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2325.691689][ T5909] usb 10-1: config 0 descriptor?? [ 2325.911984][T10593] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2325.935334][T10593] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 2325.966763][T10593] asix 7-1:0.0: probe with driver asix failed with error -71 [ 2326.024826][T10593] usb 7-1: USB disconnect, device number 27 [ 2326.138062][ T5909] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 2326.163286][ T2149] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 2326.171230][ T5909] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 2326.192641][ T5909] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 2326.208735][ T5909] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 2326.216553][ T5909] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 2326.262522][ T5909] input: HID 0955:7214 Haptics as /devices/virtual/input/input56 [ 2326.332580][T21901] random: crng reseeded on system resumption [ 2326.374242][ T2149] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2326.433184][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2326.518940][T21924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3819'. [ 2326.529194][T21924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3819'. [ 2326.552146][ T2149] usb 3-1: config 6 has an invalid interface number: 200 but max is 0 [ 2326.609013][T14052] Bluetooth: hci5: command 0x0406 tx timeout [ 2326.618709][ T2149] usb 3-1: config 6 has no interface number 0 [ 2326.681376][ T2149] usb 3-1: config 6 interface 200 has no altsetting 0 [ 2326.795365][ T2149] usb 3-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 2326.827690][ T2149] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2326.874376][ T2149] usb 3-1: Product: syz [ 2326.878951][ T2149] usb 3-1: Manufacturer: syz [ 2326.943360][ T2149] usb 3-1: SerialNumber: syz [ 2327.213904][T21930] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2327.228033][T21930] cramfs: wrong magic [ 2327.473173][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2327.827195][ T5909] shield 0003:0955:7214.0015: Registered Thunderstrike controller [ 2327.839355][ T5909] shield 0003:0955:7214.0015: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.9-1/input0 [ 2328.222342][T10552] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 2328.222899][T16102] usb 10-1: USB disconnect, device number 20 [ 2328.249074][T10552] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2328.273027][ T2149] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 2328.297441][T10552] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2328.467852][ T2149] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2328.509787][ T2149] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 2328.517805][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2328.552446][ T2149] usb 3-1: media controller created [ 2328.620529][ T2149] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2328.697003][ T2149] dvb-usb: bulk message failed: -71 (6/0) [ 2328.734411][ T2149] dvb-usb: bulk message failed: -71 (6/0) [ 2328.748372][ T2149] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 2328.762741][ T2149] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input57 [ 2328.807615][ T2149] dvb-usb: schedule remote query interval to 150 msecs. [ 2328.843415][ T2149] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 2328.865150][ T2149] usb 3-1: USB disconnect, device number 11 [ 2329.050396][ T2149] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 2329.373589][T10593] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 2329.427825][T21970] syzkaller1: entered promiscuous mode [ 2329.433748][T21970] syzkaller1: entered allmulticast mode [ 2329.553183][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2329.558420][T10593] usb 10-1: Using ep0 maxpacket: 32 [ 2329.577139][T10593] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2329.607675][T10593] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2329.654001][T10593] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2329.683435][T10593] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2329.704691][T10593] usb 10-1: config 0 descriptor?? [ 2329.757022][T10593] hub 10-1:0.0: USB hub found [ 2329.844400][T21981] input: syz0 as /devices/virtual/input/input58 [ 2329.932996][T10593] hub 10-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 2330.142800][T21987] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2330.158546][T21987] cramfs: wrong magic [ 2330.593183][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2330.597062][T10593] hid-generic 0003:046D:C31C.0016: item fetching failed at offset 0/1 [ 2330.691645][T10593] hid-generic 0003:046D:C31C.0016: probe with driver hid-generic failed with error -22 [ 2330.743464][T10593] usb 10-1: USB disconnect, device number 21 [ 2331.049992][T22000] netlink: 212240 bytes leftover after parsing attributes in process `syz.1.3847'. [ 2331.253985][T10593] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 2331.367728][T22006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3848'. [ 2331.377006][T22006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3848'. [ 2331.473340][T10593] usb 7-1: Using ep0 maxpacket: 32 [ 2331.494766][T10593] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 2331.513018][T10593] usb 7-1: config 0 has no interface number 0 [ 2331.530252][T10593] usb 7-1: config 0 interface 12 has no altsetting 0 [ 2331.548613][T10593] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2331.564337][T10593] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2331.607043][T10593] usb 7-1: Product: syz [ 2331.627096][T10593] usb 7-1: Manufacturer: syz [ 2331.633648][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2331.647476][T10593] usb 7-1: SerialNumber: syz [ 2331.688342][T10593] usb 7-1: config 0 descriptor?? [ 2332.020115][T22020] syzkaller1: entered promiscuous mode [ 2332.042394][T22022] loop2: detected capacity change from 0 to 7 [ 2332.058836][T22020] syzkaller1: entered allmulticast mode [ 2332.075939][T22022] Dev loop2: unable to read RDB block 7 [ 2332.089268][T22022] loop2: unable to read partition table [ 2332.101595][T22022] loop2: partition table beyond EOD, truncated [ 2332.118560][T22022] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 2332.673269][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2332.989742][T10593] f81534 7-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 2332.998942][ T5895] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 2333.039918][T10593] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 2333.063364][T10593] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2333.080574][T10593] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 2333.107315][T10593] usb 7-1: USB disconnect, device number 28 [ 2333.187643][ T5895] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2333.231331][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2333.270069][ T5895] usb 3-1: config 0 descriptor?? [ 2333.404780][T22048] PKCS7: Unknown OID: [4] 0.0 [ 2333.410216][T22048] PKCS7: Only support pkcs7_signedData type [ 2333.713182][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2333.958213][T22063] [ 2333.960631][T22063] ====================================================== [ 2333.967704][T22063] WARNING: possible circular locking dependency detected [ 2333.974788][T22063] 6.16.0-syzkaller #0 Not tainted [ 2333.979861][T22063] ------------------------------------------------------ [ 2333.986936][T22063] syz.6.3873/22063 is trying to acquire lock: [ 2333.993021][T22063] ffff888025a44188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 2334.004212][T22063] [ 2334.004212][T22063] but task is already holding lock: [ 2334.011598][T22063] ffff888025a44230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x131/0xeb0 [ 2334.020524][T22063] [ 2334.020524][T22063] which lock already depends on the new lock. [ 2334.020524][T22063] [ 2334.030961][T22063] [ 2334.030961][T22063] the existing dependency chain (in reverse order) is: [ 2334.040085][T22063] [ 2334.040085][T22063] -> #2 (&nbd->config_lock){+.+.}-{4:4}: [ 2334.048029][T22063] lock_acquire+0x120/0x360 [ 2334.053089][T22063] __mutex_lock+0x182/0xe80 [ 2334.058135][T22063] refcount_dec_and_mutex_lock+0x30/0xa0 [ 2334.064317][T22063] nbd_config_put+0x2c/0x790 [ 2334.069457][T22063] nbd_release+0xfe/0x140 [ 2334.074326][T22063] bdev_release+0x533/0x650 [ 2334.079385][T22063] blkdev_release+0x15/0x20 [ 2334.084435][T22063] __fput+0x449/0xa70 [ 2334.088967][T22063] fput_close_sync+0x119/0x200 [ 2334.094278][T22063] __x64_sys_close+0x7f/0x110 [ 2334.099520][T22063] do_syscall_64+0xfa/0x3b0 [ 2334.104566][T22063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2334.110996][T22063] [ 2334.110996][T22063] -> #1 (&disk->open_mutex){+.+.}-{4:4}: [ 2334.118854][T22063] lock_acquire+0x120/0x360 [ 2334.123907][T22063] __mutex_lock+0x182/0xe80 [ 2334.128962][T22063] __del_gendisk+0x129/0x9e0 [ 2334.134096][T22063] del_gendisk+0xe8/0x160 [ 2334.138979][T22063] loop_remove+0x42/0xc0 [ 2334.143770][T22063] loop_control_ioctl+0x4ac/0x5a0 [ 2334.149393][T22063] __se_sys_ioctl+0xfc/0x170 [ 2334.154533][T22063] do_syscall_64+0xfa/0x3b0 [ 2334.159579][T22063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2334.166022][T22063] [ 2334.166022][T22063] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 2334.174478][T22063] validate_chain+0xb9b/0x2140 [ 2334.179780][T22063] __lock_acquire+0xab9/0xd20 [ 2334.184996][T22063] lock_acquire+0x120/0x360 [ 2334.190128][T22063] down_write+0x96/0x1f0 [ 2334.194917][T22063] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 2334.201192][T22063] nbd_start_device+0x16c/0xac0 [ 2334.206600][T22063] nbd_ioctl+0x636/0xeb0 [ 2334.211394][T22063] blkdev_ioctl+0x5a8/0x6d0 [ 2334.216440][T22063] __se_sys_ioctl+0xfc/0x170 [ 2334.221578][T22063] do_syscall_64+0xfa/0x3b0 [ 2334.226624][T22063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2334.233058][T22063] [ 2334.233058][T22063] other info that might help us debug this: [ 2334.233058][T22063] [ 2334.243306][T22063] Chain exists of: [ 2334.243306][T22063] &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock [ 2334.243306][T22063] [ 2334.257518][T22063] Possible unsafe locking scenario: [ 2334.257518][T22063] [ 2334.264978][T22063] CPU0 CPU1 [ 2334.270352][T22063] ---- ---- [ 2334.275731][T22063] lock(&nbd->config_lock); [ 2334.280347][T22063] lock(&disk->open_mutex); [ 2334.287483][T22063] lock(&nbd->config_lock); [ 2334.294615][T22063] lock(&set->update_nr_hwq_lock); [ 2334.299841][T22063] [ 2334.299841][T22063] *** DEADLOCK *** [ 2334.299841][T22063] [ 2334.308081][T22063] 1 lock held by syz.6.3873/22063: [ 2334.313221][T22063] #0: ffff888025a44230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x131/0xeb0 [ 2334.322598][T22063] [ 2334.322598][T22063] stack backtrace: [ 2334.328505][T22063] CPU: 1 UID: 0 PID: 22063 Comm: syz.6.3873 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 2334.328529][T22063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2334.328546][T22063] Call Trace: [ 2334.328554][T22063] [ 2334.328562][T22063] dump_stack_lvl+0x189/0x250 [ 2334.328588][T22063] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2334.328609][T22063] ? __pfx__printk+0x10/0x10 [ 2334.328633][T22063] ? print_lock_name+0xde/0x100 [ 2334.328656][T22063] print_circular_bug+0x2ee/0x310 [ 2334.328685][T22063] check_noncircular+0x134/0x160 [ 2334.328709][T22063] validate_chain+0xb9b/0x2140 [ 2334.328729][T22063] ? stack_depot_save_flags+0x40/0x900 [ 2334.328755][T22063] __lock_acquire+0xab9/0xd20 [ 2334.328774][T22063] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 2334.328797][T22063] lock_acquire+0x120/0x360 [ 2334.328815][T22063] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 2334.328842][T22063] ? __mutex_trylock_common+0x153/0x260 [ 2334.328885][T22063] down_write+0x96/0x1f0 [ 2334.328907][T22063] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 2334.328931][T22063] ? __pfx_down_write+0x10/0x10 [ 2334.328951][T22063] ? rcu_is_watching+0x15/0xb0 [ 2334.328976][T22063] ? trace_contention_end+0x39/0x120 [ 2334.328997][T22063] ? __mutex_lock+0x330/0xe80 [ 2334.329018][T22063] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 2334.329044][T22063] ? blkdev_common_ioctl+0xfc3/0x2450 [ 2334.329066][T22063] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2334.329084][T22063] ? nbd_ioctl+0x131/0xeb0 [ 2334.329113][T22063] ? __pfx___mutex_lock+0x10/0x10 [ 2334.329135][T22063] nbd_start_device+0x16c/0xac0 [ 2334.329158][T22063] ? security_capable+0x7e/0x2e0 [ 2334.329184][T22063] nbd_ioctl+0x636/0xeb0 [ 2334.329210][T22063] ? __pfx_nbd_ioctl+0x10/0x10 [ 2334.329233][T22063] ? __asan_memset+0x22/0x50 [ 2334.329261][T22063] ? smack_file_ioctl+0x24a/0x340 [ 2334.329279][T22063] ? __pfx_smack_file_ioctl+0x10/0x10 [ 2334.329296][T22063] ? __pfx_nbd_ioctl+0x10/0x10 [ 2334.329320][T22063] blkdev_ioctl+0x5a8/0x6d0 [ 2334.329341][T22063] ? __pfx_blkdev_ioctl+0x10/0x10 [ 2334.329369][T22063] ? __fget_files+0x2a/0x420 [ 2334.329395][T22063] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2334.329415][T22063] ? __pfx_blkdev_ioctl+0x10/0x10 [ 2334.329436][T22063] __se_sys_ioctl+0xfc/0x170 [ 2334.329464][T22063] do_syscall_64+0xfa/0x3b0 [ 2334.329484][T22063] ? lockdep_hardirqs_on+0x9c/0x150 [ 2334.329503][T22063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2334.329526][T22063] ? clear_bhb_loop+0x60/0xb0 [ 2334.329547][T22063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2334.329564][T22063] RIP: 0033:0x7fd5f358ebe9 [ 2334.329581][T22063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2334.329598][T22063] RSP: 002b:00007fd5f44a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2334.329619][T22063] RAX: ffffffffffffffda RBX: 00007fd5f37b5fa0 RCX: 00007fd5f358ebe9 [ 2334.329633][T22063] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 2334.329647][T22063] RBP: 00007fd5f3611e19 R08: 0000000000000000 R09: 0000000000000000 [ 2334.329661][T22063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2334.329673][T22063] R13: 00007fd5f37b6038 R14: 00007fd5f37b5fa0 R15: 00007fff38317e08 [ 2334.329694][T22063] [ 2334.744899][T22063] nbd6: detected capacity change from 0 to 4 [ 2334.753742][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2334.754474][T22067] block nbd6: shutting down sockets [ 2334.762373][T20961] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2334.775787][T20961] buffer_io_error: 1774 callbacks suppressed [ 2334.775805][T20961] Buffer I/O error on dev nbd6, logical block 0, async page read [ 2334.795249][T12877] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2334.804437][T12877] Buffer I/O error on dev nbd6, logical block 0, async page read [ 2334.812641][T20961] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2334.821795][T20961] Buffer I/O error on dev nbd6, logical block 0, async page read [ 2334.829813][T20961] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2334.839391][T20961] Buffer I/O error on dev nbd6, logical block 0, async page read [ 2334.847443][T20961] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2334.856708][T20961] Buffer I/O error on dev nbd6, logical block 0, async page read [ 2334.864604][T20961] ldm_validate_partition_table(): Disk read failed. [ 2334.871427][T20961] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2334.884001][T20961] Buffer I/O error on dev nbd6, logical block 0, async page read [ 2334.891958][T20961] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2334.901279][T20961] Buffer I/O error on dev nbd6, logical block 0, async page read [ 2334.909262][T20961] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2334.919588][T20961] Buffer I/O error on dev nbd6, logical block 0, async page read [ 2334.927622][T20961] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2334.936771][T20961] Buffer I/O error on dev nbd6, logical block 0, async page read [ 2334.945000][T20961] Dev nbd6: unable to read RDB block 0 [ 2334.950687][T20961] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2334.955537][ T5895] pegasus 3-1:0.0: can't reset MAC [ 2334.959780][T20961] Buffer I/O error on dev nbd6, logical block 0, async page read [ 2334.969119][ T5895] pegasus 3-1:0.0: probe with driver pegasus failed with error -5 [ 2334.972987][T20961] nbd6: unable to read partition table [ 2334.986369][T20961] nbd6: partition table beyond EOD, truncated [ 2335.004494][T20961] ldm_validate_partition_table(): Disk read failed. [ 2335.011686][T20961] Dev nbd6: unable to read RDB block 0 [ 2335.033664][ T5895] usb 3-1: USB disconnect, device number 12 [ 2335.040130][T20961] nbd6: unable to read partition table [ 2335.058657][T20961] nbd6: partition table beyond EOD, truncated [ 2335.803191][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2336.843179][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2337.883204][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2338.923196][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2339.953148][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2340.993185][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2342.033183][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2343.073251][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available