last executing test programs: 21m8.751568419s ago: executing program 32 (id=1579): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc0009058502"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x184, r1, 0x103, 0x70bd2a, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x9}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x80}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xfffffffe}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0xfeff, 0x16, 0x4}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x401}, {0x6, 0x16, 0x5}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x2}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6}, {0x5}}]}, 0x184}, 0x1, 0x0, 0x0, 0x35}, 0x4000800) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r2 = gettid() r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0, 0xfec00000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, 0x0, 0x4000}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000240)=0x0) (async) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000240)=0x0) timer_create(0x1, &(0x7f0000000800)={0x0, 0x2c, 0x4, @tid=r2}, &(0x7f0000000380)) (async) timer_create(0x1, &(0x7f0000000800)={0x0, 0x2c, 0x4, @tid=r2}, &(0x7f0000000380)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) timer_delete(r4) gettid() (async) r5 = gettid() tkill(r5, 0x16) (async) tkill(r5, 0x16) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000000090500000000000000000007000001200002001400018008000100ac1e010108000200ffffffe4060003400003000008000340000000bd08000340ffddfffa0800034000000033380002002c00018014002400ff010000000000000000000000000001140004000000000000000000000000000000000106000340000200000800064000000001"], 0x8c}, 0x1, 0x0, 0x0, 0xc087}, 0x2000d840) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000000090500000000000000000007000001200002001400018008000100ac1e010108000200ffffffe4060003400003000008000340000000bd08000340ffddfffa0800034000000033380002002c00018014002400ff010000000000000000000000000001140004000000000000000000000000000000000106000340000200000800064000000001"], 0x8c}, 0x1, 0x0, 0x0, 0xc087}, 0x2000d840) 15m19.405969976s ago: executing program 33 (id=3116): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0x400004, 0xa0363159, 0x3, 0x0, [{0x8, 0xf}, {0xb, 0x7fffffff}, {0xd, 0x8}, {0x5, 0x2000008}, {0x2, 0x3}, {0x5, 0x3}, {0x6, 0x409}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x3, 0x3}]}]}, 0xfc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@rand_addr=0x64010102, @in=@local, @in6=@remote, 0x3c, 0x3, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000680)=0x1, 0x4) r6 = syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001180000000904"], 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="600001000000624bea9373d715d06e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r10, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000bac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, r8, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x38}}, 0x46) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0a009000bbbbbbbbbbbbffffffffffff08060305891706000002aaaaaaaaaa41bbbbbbbbbb05"], 0x26) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x7, 0x8, 0x4700, 0x1, @empty, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x8000, 0x8, 0xf, 0x8001}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x334, r1, 0x7, 0x0, 0x2, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xd902}, @ETHTOOL_A_LINKMODES_OURS={0x2d8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x62, 0x4, "b5bbdfdf2297767961e1ebd18e84563f76ea2506406c3505a72944ff338dfa967d8537cf443abd8d6ac24b47f3d8e30357a3de2a3d2d4ca5bb6cbd1949c99f5b65ddc64884719d26fe89f3807c533544cd4173900fb833237587193569ec"}, @ETHTOOL_A_BITSET_VALUE={0xf5, 0x4, "85dbbf1252986c1128dc8c1cdc5b12a0482b3ff667ca104e2226e9dea6e03f9aca23cd3cb274e1cee2016f55d6f92f03bc81913e734717ba62c702f92006c320c7980614d6c731778a8350258f92da27911cb2976bf5641064c39f1a6cd549e827ce1eb937513d8b7220d5da29fcc3d24e27573d02ef5e85196fc92d5e590bb98e6c1e4532e6506f032a58fc17c0dd5fe219bc6799e888ee0a13868fce5866fdffffff7d9f8bd2b50db1fafaf7e4e825f5a34b40919019ee15814f3585de1ab232c25390dae11eb596b0efc311f46372f92bd406c85246e3c35c1ce2428a573f32788cf0d1e9d9e2a29fc5ab7e5a9827a8"}, @ETHTOOL_A_BITSET_MASK={0x11, 0x5, "dbe31dc598a58d13dacbe22005"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5c2}, @ETHTOOL_A_BITSET_MASK={0x80, 0x5, "7a0143ab14821e8cbe42139eeabe8f9e5fd09e55d42a6c20273869ed59d3bdc6d25cdec50931e3731f40e4b91a92f4ec0b2fb002f3b047cf2e5e36ad918fb298ac2b58485e1c482fc0b57c1d7cb6ce6e524615d210ea42f617a858ef45aa790721c60d28430d1ab4337cf5f9b97fd6b6cff1c6d30e09fa277971e6f5"}, @ETHTOOL_A_BITSET_VALUE={0xd7, 0x4, "0bf27246c3cf859c81802b0e9452a4a66bf45b52221e17b157dcc4ab4dbc5627ddd45445b98ff998cc907dc014139758383eb3e0ac3f65542fb942e7a3b2787c2b4ab9a2294c9887b8d1d3848b2e4db1bd9f497d72fc66d8abd79ed2cc925283c56795bb9dbbba697a4d4e09a861f811ac66f274d1247d23594a2421b79e55b866320bcf1a006ba87f6f7cfe56f9314ee009bd9b98b08acbb20d41644aaa05f6b53ebfb0a1f6f69d7400664ca08f4a1b6b2ee7d6c5226a025f528aae5f6e700309cb6b38f2e7b0bcfcc319f11cc955105a0bd4"}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x8}, @ETHTOOL_A_LINKMODES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xb}]}, 0x334}, 0x1, 0x0, 0x0, 0x8004}, 0x4000010) 13m36.878753077s ago: executing program 34 (id=3587): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="400104000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000c40)={0x1c, &(0x7f0000000100)={0x2d42cb7295cc100e, 0x3, 0x86, "16040000f20050a8edcf457da129e36aeb000034d58013369bf284762b515fcc6c49da975317dd4527f34a3da28d486d69c5c27275c7768d1d074958955b9505c08191af205da6f89eea0132c52622aa520592607ab6b035ce2926f5d4e040142d047a8d66ef4d6030c5a7010d7faf59601d76130b04aac8dff4c1d05418242cbe5063bd6bcb"}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 13m28.222554116s ago: executing program 6 (id=3684): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x100000000, &(0x7f0000ffc000/0x2000)=nil, 0x5) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a475000000", @ANYRES16=r1, @ANYBLOB="cf0426bd7000fcdbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="0600100048070000"], 0x24}, 0x1, 0x0, 0x0, 0x44880}, 0x2000a88a) 13m27.991969933s ago: executing program 6 (id=3720): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ppoll(&(0x7f0000000740)=[{r1, 0x104}], 0x1, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000000)=0x8000000000000001) ioctl$VT_DISALLOCATE(r0, 0x5608) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) ppoll(&(0x7f0000000740)=[{r1, 0x104}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000000)=0x8000000000000001) (async) ioctl$VT_DISALLOCATE(r0, 0x5608) (async) 13m27.360296579s ago: executing program 6 (id=3723): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') (async) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x39) (async) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x39) syz_usb_connect(0x3, 0x8c6, &(0x7f0000000300)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a2401010080020102081305052f"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x44, &(0x7f0000000340)=@string={0x44, 0x3, "381eb403e2557d19917fd81c4795da484965481977cfb8db4e8b454c5101d4b71e50892b6a43eda010cd7f09bf418d36b473379d378df5ef5f2e349001feb15b3784"}}]}) 13m25.878331448s ago: executing program 6 (id=3734): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async, rerun: 32) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) (rerun: 32) ioctl$FE_DISHNETWORK_SEND_LEGACY_CMD(r1, 0x6f50, 0x8) (async) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x800000000000000, 0x0, 0x1) 13m10.879559928s ago: executing program 35 (id=3734): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async, rerun: 32) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) (rerun: 32) ioctl$FE_DISHNETWORK_SEND_LEGACY_CMD(r1, 0x6f50, 0x8) (async) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x800000000000000, 0x0, 0x1) 6m47.54593927s ago: executing program 4 (id=5937): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x103042, 0x47) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) sendto$unix(r0, &(0x7f0000000080)="eff29f9ddc91336ac7b775dbc05425af949ba7c408c3cf984f2cfcf57c1a3aefa2fc24d155e9af578578e79399d48ba3bdc78d671ab0f5d1fdfffb32a59b303bc8c4f3d73f3cc012d600a33a6dd5ec92ed1f201fa3fdf1294a2abd6f1716573a7ca7e56aeda3941a9f0eebbaf5ace314dc526df590a1e5c045f0", 0x7a, 0x24000001, &(0x7f0000000100)=@abs={0xc65090612fb00040, 0x0, 0x4e21}, 0x6e) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 6m47.543670427s ago: executing program 4 (id=5938): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee20009058217a7d6ac0e7c190ac3ab29a7b9ea739eaded9240d7d01b286da1c96a09364309e1b847c4da67f7ca89ebb3f14fdda5303e89d83b034492d4624cefa839ba12eba329e1e2a2d360b8e284cf5304dbe61ab1f1e24899f1c8d91fd394778366e7f18031"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xa, 0x10, 0x1, [{{0x9, 0x4, 0x0, 0x1d, 0x1, 0x7, 0x1, 0x2, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0xf3, 0xf8, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x5f, 0x6, 0x2}}]}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0xed, 0xfb, 0x9, 0x20, 0x6}, 0x2c, &(0x7f0000000080)={0x5, 0xf, 0x2c, 0x5, [@wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x6, 0x85, 0xeef, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0xc, 0x1, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x5, 0xb, 0x2}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0xe, 0x7, 0x0, 0x100, 0x81}]}, 0xa, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x838ac2fd0d7fd138}}, {0x60, &(0x7f00000001c0)=@string={0x60, 0x3, "daab494ecf0de5271d6844f52493313462a0603456f170232f6e038a9bfa27d627216e247e49c84025a901d57cf8d23a00944e737741a0deb842240ae08b252e9bcecbdbedf308ace59b0f0529a48f37d063f1037345169571f1c14a4daf"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x439}}, {0x8c, &(0x7f0000000280)=@string={0x8c, 0x3, "cd5804becbec524f4441b5dd66c12872fc43013157c9331b8429bfba5645c8d045e32ca1be4a227967b020fdbbdf04a95accc35fc1e9dc48d048b04d4b7b01dca667d45b801f2696d42e9c86288b5934ba512cc197abd73454b4bf4e2ff92e0fe0e5f3ec32f4df64cbecd5e54049813b7bede596cfdb9083ceeb07e4d70491564d2263d896879aee51d1"}}, {0x6e, &(0x7f0000000340)=@string={0x6e, 0x3, "358be4213d9e797ccb3291cc1ea95a48a26aeb3a9580eb368dd86560082db24b7a2e6f639942561b5db3aab8d84f71b826c32975cd030277b8d3cfb6df3fecde29591e42a018cfb06dfd03e05e8c8725ad020ff271a4387618c29ab52b740df552d17e959a7cf51f838244b9"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1c01}}, {0x57, &(0x7f0000000400)=@string={0x57, 0x3, "3225b79971e6d86f89b862e0d85543794bdf997810f3e97f980abb020935ea8f16bab108a801675544786314ab81a9a9ffd195d1c3b8f6d7049df3d92231166d51f448bc38320e63c9a4871013f8d4212edfdcd76c"}}, {0xe0, &(0x7f0000000480)=@string={0xe0, 0x3, "e05743685a2ae6f353fcc888bb10871f4dc477221c5e35d836d4cdb7ec4916e493df25e9946cb34007b70335aac6cc5dbb2183dabcc43bb153f349f16ec6778a7a87ce63da76b07e4ac5b310d269553ca7911a3305eb37cba260da5c0cf8ff7bc73a36c6aa61468feebc460e6f0b33e593b7c175bf9653d048069556438547a079bc3cdaf0cde08a61b857da07508c220ff25bf6dc1b132262106ac3109c2b5d97c7a329ccb158c0e4b79bab9a23530ecdec313a50ee9a5493db18baaf189433ba385cd0277e79df2d0cef5194c838da2fc5e2955b192be4858cf59b0913"}}, {0xcf, &(0x7f0000000580)=@string={0xcf, 0x3, "5010e07a62c2994408ce8c49f55f3e27d2500ade3bc9b01f0a7e661e97fc8ccfdee42671732192b5d31594a15618e2889a328e456b1d12b61fcd83e0cd027a66356d3fd79d8856d18996f0f270b0573ee6d370b48389b8044eb1aba273c4907c03fae25a0fdfef79727cc8fa32dba648650fb1ab05330a14e209017935229a7e4c28e45003b877461ba68d347a68acd006a13ae4147af6a01d1201618108f78f57fd5984a4a1bd3e10574abbd3849af9da546d99131c2dd7013550f3f60d4a87dce113a8eb87c31998765c165a"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x1007}}]}) syz_usb_connect$uac1(0x387de91507cacc49, 0xf0, &(0x7f0000000f80)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xde, 0x3, 0x1, 0x3, 0xf0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x6}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x201, 0x6, 0x1, 0x99, 0x10, 0xb}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x1ff, 0x2, 0x3, 0x81, 0x4, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x0, 0x4, 0xfd, 0x1, "6a91", "b9c43d"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x0, 0x3, 0x6, 0xcb, "f1d4cf450a66366d"}, @as_header={0x7, 0x24, 0x1, 0x7, 0x81, 0x4}, @as_header={0x7, 0x24, 0x1, 0xfd, 0x3, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x7, 0x0, 0xd, {0x7, 0x25, 0x1, 0x83, 0x7, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xff, 0xc0, 0x3}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x9, "8a86f12dd3b80c3dd6"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x2, 0xc, 0x1, "feea5bf8a10933"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xa9, 0x3, 0xa0, 0x2}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x6, 0x1, 0x1, 0x24, "55fd42", 'R'}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x8, 0x8, 0x6, {0x7, 0x25, 0x1, 0x3, 0x7, 0x3}}}}}}}]}}, &(0x7f0000001440)={0xa, &(0x7f0000001080)={0xa, 0x6, 0x200, 0x9, 0x0, 0x11, 0x10, 0xa8}, 0x10, &(0x7f00000010c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x7, 0x0, 0x7f, 0x4}]}, 0x8, [{0xf6, &(0x7f0000001100)=@string={0xf6, 0x3, "63419467b228ffee8152b047fd891f01c79308de377e742b8ef74cbcf24719fe17d38ec6895cd1420a6d9fd113a4f4a12df63c4a9b5c4244271e6cc4a95db7feca3314aeedfab1b0afb63c4e84ed414f48128ed13b20c5d4a36852cb0d8b7e720e0394eba5616685b489d94bc9285877df61617dcf881bf9e8949f6dd9594f7021079c78e08edc2fb3a4a36d6d63e717e66441245e7bdb8dad82fad331817fefa48c5e0b3bbbdbb9d57752577ddd6c82606df9e66a24209f6a6b6d1ff2ba32db2fa9232d6dfe4e7e718ee0133ea4f21cdca6a5af1b7f1e9bd83ad2e60915d843caf59a8957504fed01db39984f5400bbd8fa08ee"}}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x820}}, {0x93, &(0x7f0000001240)=@string={0x93, 0x3, "a77a86cbe64e7e977d291390ce9c5038d1a03924a3fc3ead61b77aa7a53e325ce4446a65230c1538650f49af3044d7c3df1ed0cceb577434a9779d73f5cd949ba4f39889c63010cc2185810d01f522abca31c97c434e2229ca195a0ab9ec0e8b3266ec8f1405e5e8bc4845d984563d2aeeae487cf95d476b1fb50c626abcb6f773a369e852aba2412837bfa47947f8605c"}}, {0x17, &(0x7f0000001300)=@string={0x17, 0x3, "9a9c9db60496d16c57bfdfb9f0989781a73e913e37"}}, {0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000001380)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f00000013c0)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x2009}}]}) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x90, 0x6, [{{0x9, 0x4, 0x0, 0xfb, 0x1, 0x7, 0x1, 0x3, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x0, 0x3, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x4, 0xb, 0x4}}]}}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x250, 0x3, 0x6, 0x4, 0x40, 0x1}, 0x1d, &(0x7f0000000800)={0x5, 0xf, 0x1d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x1, 0x41, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x6, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x6, 0x7}]}, 0x6, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x2c0a}}, {0xf2, &(0x7f0000000880)=@string={0xf2, 0x3, "8d9b88287d8cc719df4a4c611f269175d7de9403c00b46c677fdc8b1abfff54f38ddcffab879cc8f98ee73b9a0fedeee2ebbaa8dd7c94380624d303be872cc65dc852d451814a2e1f394fee9ffc806d55cfdd40145d16b9ef048b441275d68817d2496bed9b72ddfd7c372edf546100e3bd9b8d4a50891d1103316db831a678b88ce223ab7738b542dce8369621d31b0f182ae1ffe0bf059cfd406b355dd54a991ee2472a4d96032602ead5fcc6979d0124cb553b66d77969ce4ca9c1f5879422cb6be11b84131d561c310b81b6052d35e234160ce2adb82fb46dca80fc524562c231f98746ad527d804a4d0cdddf786"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x40c}}, {0xae, &(0x7f00000009c0)=@string={0xae, 0x3, "eac7125e2b75d100afdca3b80d86fc0a20eeedb247abe4bfaf360775a571171c97c2927dc5b3c6f0408a650a62462bdaf2f368cfbe0057d040d55e52b6d2503439acb1c9f74899c1b356a4682b37dc947e7b073c1dc3c05cead0b521fa284acc7a58178175241d2f29f735e7c5b97aaa5be5442c44b0b299b66750f41680d34dfb0d2d459cd452fc8cd5914945e17d49f34081575dd4ddc772f159c18544bd41ac0a3cd20b1c97be509fb2da"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x422}}]}) syz_usb_control_io$printer(r1, &(0x7f0000000c80)={0x14, &(0x7f0000000b80)={0x40, 0x10, 0xb4, {0xb4, 0x1d, "503b7206199e84d8d684e18a7accd58924d690724e1840d13c70ae96ecf06a92eb707061b23d77f5a8eec8903a2318c690e47f5847b0d6fa366fb4f4f1ad2f370af8ff0113ac8aceeb4748032bfa0b1c81bca6d9ccabba49f3a320042f9df41ef1c6e182258e4ace21ca7db6c117a6701fb4b39d5f7573cca7aa6eeedd28cc245b5ea0c51dd01c065479b93024c16d4eb9b1a7a7505be4124d42e813079519dc773e12ebfcfbc42cb8412d8b3077730c9044"}}, &(0x7f0000000c40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x405}}}, &(0x7f0000000f40)={0x34, &(0x7f0000000cc0)={0x20, 0x31, 0x8d, "38523f950905d9e079959351e58346e32c9c0bb778265f04cacfebdc6743dec833543b235d8b6655ad71095ec7a0f8dfaeb1b8639a6ba3fe8ee8c1bf90491036b748503eeb42084164d1c660cf48600865c0f61de8c8c51af3a061e99a814efbf068d07793f95e506b94662ab1a4e74b91d577cc566272412dc96b9b862d781d64ef0ac337e10f7a37efec1b18"}, &(0x7f0000000d80)={0x0, 0xa, 0x1}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000e00)={0x20, 0x0, 0xb2, {0xb0, "a48ec6bc773dfcab39f08223925c72d9e437c8f0df8287d471c6ccacc0be61ffb63b44af5a01005d8b670092eb87f3b300309f58ac593df1d8db3c8629371b875866226adcdb4e457a652965c602d69c11da526f727ea474bd4cb5644b83d993695ac247816b46b7e31e9a33a9d90495ae33b2aa57177f29f60fa28cc938aa3cc08e87824fe4bcd6129d80363cd17ec4b2152f616868f95fb9513a479ba80c817628a2f139baf74080c600d91a81158e"}}, &(0x7f0000000ec0)={0x20, 0x1, 0x1, 0x5}, &(0x7f0000000f00)={0x20, 0x0, 0x1, 0x81}}) 6m46.95166171s ago: executing program 4 (id=5940): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x14040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) syz_usb_connect(0x5, 0x346, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x49, 0x34, 0xbf, 0xff, 0x1bc7, 0x21, 0xadce, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x334, 0x1, 0x7, 0xd8, 0x0, 0x4c, [{{0x9, 0x4, 0x46, 0x2, 0x5, 0xf7, 0x3a, 0xa2, 0x3, [@uac_as, @hid_hid={0x9, 0x21, 0x9, 0x1, 0x1, {0x22, 0x94d}}], [{{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x8, 0x0, 0x2, [@generic={0xe0, 0x22, "60abdea6a65032bff4a16505bdb3a69ad6d8a231e7489c24ad998276a3171af585fc6c8dc4c9927872d742dea77a1a28393a76b0353c46ae8d708b72b8a7a9f51680027eeb0299645486e29af163e2eb062ec7bcf4098eeef273f14fe8d1a564a3136102881efab14beee2e256280392d1a216978c2e7fa466b40960a4439e45574862fd912670d32a216a22d04a22ebec80974d94df56e70890f3fb4fa7b87207f69f920f6960d13f2f10a1dd5ab597b4f96e782c6bd6413efa4d4d8c954a378dd35e7b9c0f315abdff085f7eb2521ae871a7055ab0d70102c143194553"}, @generic={0x25, 0x10, "89bcbc6da6033a23c4488be4ad9556ad1780ff0f7ac32740ad0100ddbd7079329f2cb8"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x40, 0x4, 0xfa, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xb}, @generic={0xc1, 0x26, "c5bd52e514862889dc0e48b2a5c0e9d2cdf2ab50f55abcd673e64fdbbdfc1ef9874e335b1b3b86a0e06186debbf5b1f6fdb5ccaf14e4f064ae69d7b4025abcb9aef3eb9769b5c787562536e2ed4efd22b191f6901545762587034831d0dddf67c7b31eab9218d7870d5678e2635b48243f70869b13fac9aae0a28e8951a44ac24c8c92ba3a4ddc127ed121e3076c0fc7e39c5f87feb5ba8ac0c7fa095a8bcd1db31c88a749d4448b4c90223e41e42ee51de5f9240ad0e1429e14e7e3cb21cc"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x200, 0x8, 0x7, 0x6b}}, {{0x9, 0x5, 0x7, 0x1, 0x0, 0x6, 0x80, 0xe, [@generic={0x97, 0x1d, "d1a53249a475915e7a22102a3fa7f05bcc0a4feaf93e943585783278d051f6458d7bca154b549971a2b9d05ff1654364d7aa4e79e3fd82d310a77cfa225a74de7668d785acb65c7c75e5f3e9699bcca5fc7615c6b1a99b94f8f2393294747c18deda790ee6e22234bfca6df67ada9f9ca6c6798048c7ca3501acc752d2892331f57af5ce8571e07aa7dc94efa32a4668cd817933da"}, @generic={0x81, 0x23, "5c1825268eb5e2311ddaa4aeb80933b3d53b282a2c93dc841d8de89da1ed14858b337430b281ce2489c026d663f08a0b4352ef6795746df96228faf1c36bc3712a83c9d04bbf0cb2e99df17100d191731f3ad0f979465be4f47a2b2154eee4ba6772813ba5360f51c7295ac8c876642c9b30acd552a541c4679dd10c7c23ee"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x4, 0xf, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x1}]}}]}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x150, 0x8, 0x51, 0x7, 0xff, 0xa3}, 0xd6, &(0x7f0000000700)={0x5, 0xf, 0xd6, 0x3, [@generic={0xb2, 0x10, 0x4, "e66d1396a3e3cd8387cc9c3456d07f860cdf0ef023a6b015c7d0856cbde616bb14a18e4aad91fd1302fab90c766c27df46ee13af37820cbee779d50cdd1274af9885fd1e11541057762d0be823f0834445912e01e566965101cf38c1d45fca4a6fdf3e549112b9160c756b0f251d5938bcf37f5b450a699926d9a9113f3ae709c53753c4daba1ef21ce8f6975865408ab02c84e349febadd280f29affd8ed2d6a24e112407a24c5921c37ae674df02"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x80, 0x9, 0xf7, 0x7, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x10, "e20865e1edbed9eeff7ec27e9c0e8cee"}]}, 0x4, [{0x29, &(0x7f0000000600)=@string={0x29, 0x3, "d05db4b8680c1d831481fafda6090695fbedd08a010bfee1d7cd24a8f983ee77c4e47c6e299083"}}, {0x3, &(0x7f0000000640)=@string={0x3, 0x3, '?'}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x426}}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000680), r4) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000b40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000d00)={0x20, r6, 0x20d, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r7}, {0x4}}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$tipc(0x0, r5) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44080000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r3, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffffffb, 0x7f}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x4008000) 6m46.345535177s ago: executing program 4 (id=5947): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000880)={0x14, r1, 0x4f79951a91b7df8f, 0x70bd2c, 0x3}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) recvmmsg(r0, &(0x7f00000064c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/49, 0x31}, {&(0x7f00000008c0)=""/229, 0x123}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/4088, 0xff8}, {&(0x7f0000000000)=""/137, 0x89}], 0x6}, 0x60}, {{0x0, 0x0, 0x0}, 0x4}], 0x400000000000015, 0x2000, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201410117512920570509201ec7010203010902240001020010000904"], 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000040)=0x9) ioctl$KVM_SET_DEBUGREGS(r5, 0x4080aea2, &(0x7f00000000c0)={[0xeeef0000, 0x13fd000, 0x0, 0x200000], 0x4, 0x64, 0x1}) r6 = socket(0x840000000002, 0x3, 0xff) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80500, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000440)={0xc, 0x0, 0x0}) ioctl$IOMMU_DESTROY$ioas(r7, 0x3b80, &(0x7f0000000480)={0x8, r8}) sendmmsg$inet(r6, &(0x7f00000009c0)=[{{&(0x7f0000000140)={0x2, 0x4e2c, @local}, 0x10, &(0x7f00000019c0)=[{&(0x7f0000000400)="320a540a516412a892165a4f8be7a7e03beabe81", 0x14}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="100000000000000004"], 0x10}}], 0x2, 0x4000044) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r9, 0xc018ae85, &(0x7f0000000080)={0x30000, 0xc000, 0xe, 0x5, 0x5}) 6m45.702873916s ago: executing program 4 (id=5953): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0xa9525000) unlink(&(0x7f0000000140)='./cgroup\x00') timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r4, 0x5, 0x20}, 0xc) socket(0xa, 0x3, 0x3a) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f00000005c0)='fd', 0x0, r5) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x2) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r8, r8) setpgid(0x0, r8) fchdir(r7) r9 = socket$unix(0x1, 0x2, 0x0) connect$unix(r9, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 6m44.689881268s ago: executing program 4 (id=5961): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTLCK(r0, 0x5420, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000100)={0x6, 0x0, r2}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x66, 0x1000, 0x2c9a, 0x0, 0x37, 0x5, 0x1}, &(0x7f0000000280)=0x9c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000019140000001100", @ANYRES64], 0xd8}}, 0x80) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84000000010101020000000000000000030000010800074000000000140019800800020005007f000000000000000000310001802c00018014000300fe8000000000000000000000000000bb14000400fe80000000d913ab703810c7000000000000000000002b08000c40000000031c001880080003400000000308000140000000050800034000000006"], 0x84}, 0x1, 0x0, 0x0, 0x8004}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={r5, 0x0, 0x30}, 0xc) r7 = dup(r4) sendmsg$kcm(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)="1d42c70de6cf", 0x6}], 0x1}, 0x10) write$cgroup_subtree(r7, &(0x7f0000000080)={[{0x2d, 'freezer'}]}, 0x9) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000200)={0x0, 0xffffffffffffffa1, 0xfa00, {0x1, 0x0, 0x111, 0xa}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x8}}, 0x34000) write$RDMA_USER_CM_CMD_ACCEPT(r7, &(0x7f0000000780)={0x8, 0x120, 0xfa00, {0x2, {0x80000000, 0x7, "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", 0x6, 0xe6, 0x5, 0x3, 0x4b, 0x4, 0xff, 0x1}}}, 0x128) waitid$P_PIDFD(0x3, r3, 0x0, 0x1, &(0x7f0000000140)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @mcast1, 0x2}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x8000000004) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x18, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}]}, 0x18}}, 0x0) writev(r8, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 6m29.471512204s ago: executing program 36 (id=5961): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTLCK(r0, 0x5420, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000100)={0x6, 0x0, r2}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x66, 0x1000, 0x2c9a, 0x0, 0x37, 0x5, 0x1}, &(0x7f0000000280)=0x9c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000019140000001100", @ANYRES64], 0xd8}}, 0x80) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84000000010101020000000000000000030000010800074000000000140019800800020005007f000000000000000000310001802c00018014000300fe8000000000000000000000000000bb14000400fe80000000d913ab703810c7000000000000000000002b08000c40000000031c001880080003400000000308000140000000050800034000000006"], 0x84}, 0x1, 0x0, 0x0, 0x8004}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={r5, 0x0, 0x30}, 0xc) r7 = dup(r4) sendmsg$kcm(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)="1d42c70de6cf", 0x6}], 0x1}, 0x10) write$cgroup_subtree(r7, &(0x7f0000000080)={[{0x2d, 'freezer'}]}, 0x9) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000200)={0x0, 0xffffffffffffffa1, 0xfa00, {0x1, 0x0, 0x111, 0xa}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x8}}, 0x34000) write$RDMA_USER_CM_CMD_ACCEPT(r7, &(0x7f0000000780)={0x8, 0x120, 0xfa00, {0x2, {0x80000000, 0x7, "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", 0x6, 0xe6, 0x5, 0x3, 0x4b, 0x4, 0xff, 0x1}}}, 0x128) waitid$P_PIDFD(0x3, r3, 0x0, 0x1, &(0x7f0000000140)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @mcast1, 0x2}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x8000000004) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x18, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}]}, 0x18}}, 0x0) writev(r8, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 4m25.301755114s ago: executing program 8 (id=6725): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFCONF(r0, 0x8912, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x12}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c9741, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 4m25.293766587s ago: executing program 8 (id=6726): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'tunl0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x3a, 0x7, [{}, {}, {}, {}, {}, {}, {}]}}) 4m25.242819712s ago: executing program 8 (id=6727): syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)=ANY=[@ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c00018006000600894f"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x3}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x2c}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}, @flat=@weak_handle={0x77682a85, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x2c, r3, 0xa11, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x13}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x9) r10 = syz_open_dev$I2C(&(0x7f0000000040), 0x12, 0xeb7638b851bb12f7) ioctl$I2C_RDWR(r10, 0x707, &(0x7f0000000a40)={&(0x7f0000000100)=[{0x4, 0x1001, 0x0, 0x0}], 0x1}) 4m24.625753065s ago: executing program 8 (id=6728): set_mempolicy(0x2, &(0x7f0000000280)=0x4, 0x9) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) (async) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r0, 0x6f000) (async) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000380)={0x0, 0x3, 0xffffffff, 0xa, 0x0, 0x6, 0x401, 0xeb, {0x0, @in6={{0xa, 0x4e24, 0x7fffffff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x1}}, 0x3ff, 0x1, 0x40, 0x122e, 0x3}}, &(0x7f0000000440)=0xb0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x3, r2, 'id1\x00'}) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xf}}, [@NFT_MSG_NEWTABLE={0x40, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x58, 0x14, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x118, 0x8, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x69, 0x7, 0x1, 0x0, "9ff52423ac5116ffbddb12c76bb619220a86f37c9e4b8773a18475a8c44a4c9bf33ffac766cc102459ae494e5b84a2213cd9f8b0835bee257c7bdcebee496fc5f315cf04403b2dcc43cdc9875612fe8ed326a634d06b2c6cb7c7c3490689f337ae11787972"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x301, 0x0, 0x0, {0x4, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x70, 0x5, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_HOOK={0x1c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1566d075}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2de531c5}]}]}, @NFT_MSG_NEWCHAIN={0x11c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x47}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0xb5, 0xc, "42bdcb969a8058c1072bf4da06b0469e53e96f47dc12a458305fc7f07b7cce0a6ef1b43b5125f9f2d8d18927989e37c229bd622668280a77734b89b12e3e7f3ac27595360ade68cc270176ad40808a2eff78054b26b6ca79d9d7fec2ef8b61d6706f71caf787c80776d6d056fea28e7a3e2e267d5913d0c2923b0c74e3274875ba463c8c53b506c946630fdfee1a2a58425b45257b130dcac316fe13b13b9e7b9e7e1707a8f07843c9674ab1f22a30c3f7"}]}], {0x14}}, 0x390}, 0x1, 0x0, 0x0, 0x4044810}, 0x1) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r4, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r5, @ANYBLOB="e0005a80dc0000801400030020380000080003000600000003000800040002004a0002"], 0xfc}, 0x1, 0x0, 0x0, 0x4008821}, 0x20000880) 4m24.512182864s ago: executing program 8 (id=6729): mremap(&(0x7f0000ff8000/0x3000)=nil, 0x7fffdf00a000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) madvise(&(0x7f0000ff4000/0x9000)=nil, 0x9000, 0x16) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x111101) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x8) 4m23.889356081s ago: executing program 8 (id=6732): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {0x101, 0x8000, 0x248, 0x9b99}, 0x2d, [0xfffffff6, 0x8, 0x6, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x8007, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x2, 0x1, 0x16, 0x2, 0x5, 0x3fe, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0x4f9a2, 0x80000001, 0xff, 0x0, 0x7f, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x6], [0x9, 0x8, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd4e, 0x7, 0x5, 0x2, 0x809, 0x4, 0x6, 0x1000, 0x100000, 0x200b398, 0x400000, 0x0, 0x204, 0x1c, 0x4, 0x1, 0x9, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x0, 0xab00060, 0x6, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x0, 0x1cb, 0x1, 0x80000004, 0x3, 0x438, 0xfffffffe, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x1, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x4, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x9000003, 0x5, 0x9, 0x3, 0x3, 0x8, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0x4000000d, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7b, 0x9d26, 0x10000, 0x1, 0x5, 0x2, 0x6, 0x8000, 0xf65, 0x3, 0x4, 0x8, 0xe7d2, 0xa28, 0x6, 0xfffc, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x0, 0x7, 0x1e, 0xc, 0x81, 0x3, 0x9d86, 0xd, 0xf7, 0x8, 0x140f2, 0x3, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x7, 0xfffffffa, 0x32d, 0x200003, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x3, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x8000, 0x4, 0xfffffffd, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x80000001, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4m23.476720682s ago: executing program 37 (id=6732): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {0x101, 0x8000, 0x248, 0x9b99}, 0x2d, [0xfffffff6, 0x8, 0x6, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x8007, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x2, 0x1, 0x16, 0x2, 0x5, 0x3fe, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0x4f9a2, 0x80000001, 0xff, 0x0, 0x7f, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x6], [0x9, 0x8, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd4e, 0x7, 0x5, 0x2, 0x809, 0x4, 0x6, 0x1000, 0x100000, 0x200b398, 0x400000, 0x0, 0x204, 0x1c, 0x4, 0x1, 0x9, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x0, 0xab00060, 0x6, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x0, 0x1cb, 0x1, 0x80000004, 0x3, 0x438, 0xfffffffe, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x1, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x4, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x9000003, 0x5, 0x9, 0x3, 0x3, 0x8, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0x4000000d, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7b, 0x9d26, 0x10000, 0x1, 0x5, 0x2, 0x6, 0x8000, 0xf65, 0x3, 0x4, 0x8, 0xe7d2, 0xa28, 0x6, 0xfffc, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x0, 0x7, 0x1e, 0xc, 0x81, 0x3, 0x9d86, 0xd, 0xf7, 0x8, 0x140f2, 0x3, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x7, 0xfffffffa, 0x32d, 0x200003, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x3, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x8000, 0x4, 0xfffffffd, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x80000001, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m17.640698765s ago: executing program 7 (id=7036): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x28, 0x0, 0xc4fc9e906872338b, 0x3, 0xf0ffff, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="310428bd7000ffffffff1600000018000180140002006e657464657673696d3000000000600005000200000000000500040001000000050003"], 0x44}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)={0x20, 0x14, 0x4, "0426fd98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000c80)={0x20, 0x0, 0x4, "f670e000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, &(0x7f0000000f00)={0x0, 0x14, 0x4, "42467af9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r4) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x24, r5, 0x421, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, '(/}\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x4000010) sendmsg$NFC_CMD_DEP_LINK_DOWN(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x5c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40005}, 0x240c0804) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r8 = syz_open_dev$hiddev(&(0x7f0000000280), 0x2f, 0x10000) ioctl$HIDIOCGFLAG(r8, 0x8004480e, &(0x7f00000002c0)) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x8) write$cgroup_devices(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='c ', @ANYRESDEC], 0x8) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3m14.582912719s ago: executing program 7 (id=7050): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000100)={0x29, 0x1}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000600)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m11.494956012s ago: executing program 7 (id=7059): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = syz_usb_connect(0x2, 0x250, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x35, 0x85, 0xff, 0xbf, 0x2001, 0x3308, 0xe718, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23e, 0x1, 0x2, 0x6, 0x60, 0x6, [{{0x9, 0x4, 0x75, 0x9, 0x4, 0xff, 0xff, 0xff, 0x8, [@uac_as={[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x8, 0x3, 0xf3, 0xd7, "2a99e6d638"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x7, 0x7, 0x0, "48289383af1234"}, @as_header={0x7, 0x24, 0x1, 0x7, 0x1, 0x1004}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xfd, 0x1, 0xf, 0x0, "50c3", "7c68bc"}]}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x60, 0x42, 0x5}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x8, 0x2, 0x11, 0xfd, "2a93"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x9, 0x5, 0x8, "1b332a649134"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9, 0x2, 0x5, 0x7, "9e939336"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x6, 0x166b, 0x81}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x4, 0x2, 0xa, 0x44, 'SQt '}]}], [{{0x9, 0x5, 0x0, 0x10, 0x40, 0x3, 0x1, 0x7, [@generic={0x3c, 0x7, "617198caed9e6c5976e21464b5e2cf0ea746f88efc14376cdad4ed925ea78aa89dc554efa8856564a7faaccdfbf63b58efffb9d5777eb23d31e5"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x1}]}}, {{0x9, 0x5, 0xb, 0x0, 0xc773b18d2b2775d4, 0xf4, 0x0, 0x2, [@generic={0xae, 0x22, "1685c1e40230c504262208f7fe313a8dd821ecfc34a61e14b4007de91d718b826a728ffff71f9c1a7594588cb70a587a75af063eeb8863647ba3f260c02fb5b77521ae6d4c8e5d50a217e798c864f85cd91aec8546dd46b197ec202b55c036d27abf6a1d77735e92f73418d9e9374aa9b2e5d8d36aa662f8a75066814016bc7d357cf8926832d6a7bc52d700e8e907acbe4e62d452a05ffe1afb12b13be234874eda1e864112d0898ec2e24a"}, @generic={0x23, 0xd, "21555eff5b9ca5d567d5f8e22acfc98ffe8ed0e5306e1bda852e8a6e4cb7d76ba1"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x4, 0x4, 0xb7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x2a6f}]}}, {{0x9, 0x5, 0x1, 0x8, 0x20, 0x9, 0x2, 0x0, [@generic={0x7b, 0xc, "e50c874568be00ab455adb97b60cbbf0064a8cb8c5a3dff7b0d8d19e5ad4328efb83961b85a40ab0b1eec6ac5473b2391cbf72ccab65eb1918f8bf8f8d0e3054e633b095dfc0024fdb6afcde519fab04527907aa299ff30b74571e8bc6e7272714fa9611effa1576a27c9abaaf68676a00eecf512a956d7262"}]}}]}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x8, 0x3, 0x9, 0xff, 0x6}, 0x1c1, &(0x7f0000000480)={0x5, 0xf, 0x1c1, 0x5, [@ptm_cap={0x3}, @generic={0xb5, 0x10, 0xb, "eb754ccb8ab832d8fc8d634ef9a02d72f2f85ed421673e24cf4185d6f147d38e62a867fdde834a16ec898a7df63e9438180a3fa24971cc17ec37a84399186462dfe5c6a1c4a8a4f921d827694a1a4a0f0706c62034a9ede8ac65fd2eb715cd3fa24818f463b8687e666940a8b3229a98ee79173e176d70c7b11b1fe048dab622b7eaf5a777c4be1073380fc5a32374a4fdacaea52598c774889156a4773e43e17bc4a99625a6f01aac8cc1b54f689a342d7e"}, @generic={0xf3, 0x10, 0xa, "1fc70d6036e0aa4b85e90624cab16f8a8b8f9d8972b029ca2d179d4827fbf7c5bba206b7e9f2fa65ce3c34220b46535efe3b808c4fe4ac5144372f43ccc89416167a40585d63afd4dae7635063eb0f736b70d0e56cb5628808eeaed18ef59624a15c7f4af2e148dcce268c87a3942635f061cea013e4493166d2253472cb9d4d80cd571a6219905ab029548fa959fda199740008b44d9c9aa6d274c2b1d7b5392f4bb82be28cf4aaa3f5a4bf1707977587d5c6442f8fd152db379892014b1a87096a96304acaf90e1a223b941fc7a5e6042ff34b9359aea3eb80328fe2d65c14bdef237b1e28821b8f92ef40d1f3f3a0"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x63, 0x4, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0x6, 0xe}]}, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x411}}]}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r3, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000700)=ANY=[@ANYRES16=0x0, @ANYBLOB="33e89c02592370f1e042355ca5ddf11562a467c6ea597844b715256ff336f2305076419326838616cf821d60e990c70a8e5d89bd35e0591ce11c0e0b0fb5df6ba1ebc8bb79d2f5e335cf1701eeab108801c13067", @ANYRES8=r0, @ANYRES32=r3]) modify_ldt$write(0x1, &(0x7f0000000040)={0x82, 0xffffffffffffffff, 0x1000, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = getpid() r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x7, @broadcast, 'macvlan1\x00'}}, 0x1e) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r6, r6, 0x0) r7 = syz_pidfd_open(r4, 0x0) setns(r7, 0x24020000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b0001007461726765740000400002802c000300000000000455afb9fdd672bad09dfb78c7699c74e891a0c7fffffff50000000000000000000000000800024000000000080001004c4544000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m8.313136128s ago: executing program 7 (id=7083): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000040)={"5661d767", 0x203, 0x8, 0xb, 0x8, 0xffff0000, "c0cf144b8998d936f4d1cd67cccb94", "b62a66ee", "040800", "1f23cabb", ["b4e21d04a8fb4c7a94eadc07", "7d55e45eb0356fa5507bb7cf", "a5848123b6f078a2b73f239c", "2c5271c0469b3f778e7e7822"]}) r2 = socket$netlink(0x10, 0x3, 0x9) mount_setattr(0xffffffffffffffff, &(0x7f0000000340)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000000c0)={0x100000, 0xd, 0x20000, {r0}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) writev(r2, &(0x7f0000000200), 0x0) 3m8.237145763s ago: executing program 7 (id=7084): r0 = syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="2201ff0007ff1a40d8048200b7ce0102829709021200010000000009040000000202", @ANYRES64], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000001680)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)={0x40, 0x5, 0x1, '/'}}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 3m7.301964394s ago: executing program 7 (id=7086): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="400e1100000001", @ANYRES64=r0, @ANYRES8=r0], 0x0, 0x0}) 3m7.140698965s ago: executing program 38 (id=7086): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="400e1100000001", @ANYRES64=r0, @ANYRES8=r0], 0x0, 0x0}) 3m1.765677787s ago: executing program 9 (id=7095): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) unlink(&(0x7f00000001c0)='./file0/file1\x00') r0 = socket$inet(0xa, 0x801, 0x84) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/vmcoreinfo', 0x101200, 0x4e) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x34808421, 0x401, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0xa4001f7a}}, 0x50) write$FUSE_INIT(r1, &(0x7f0000000240)={0x50, 0xfffffffffffffff5, r3, {0x7, 0x2d, 0x0, 0x0, 0x1, 0x6, 0x1, 0x2, 0x0, 0x0, 0x100, 0x6}}, 0x50) getsockopt$IPT_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000000c0)={'mangle\x00', 0x0, [0x8, 0x0, 0x7, 0x4, 0x9]}, &(0x7f0000000200)=0x54) syz_usb_connect$uac1(0x0, 0xa6, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) 2m59.924948887s ago: executing program 9 (id=7104): r0 = userfaultfd(0x80801) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000090400020221f768000905013d000401ff070905021008"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00400000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r4 = shmget$private(0x0, 0x2000, 0x88, &(0x7f0000001000/0x2000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000140)=""/122) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x8, r6, 0x0, 0x8, 0x2f4671, 0x0, 0x0, 0x10001}) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x4004000) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r7, &(0x7f0000000280)=[{0x6, 0x2, 0x83, 0x0, @tick=0x2fef, {0x5, 0x6}, {}, @result={0xff, 0x6b79}}, {0x0, 0x4, 0x0, 0x0, @time, {0x6, 0x4}, {0xff}, @result={0x3}}, {0x0, 0x0, 0x0, 0xfc, @tick=0xfffffffa, {}, {}, @control={0x1f, 0x8, 0x401}}, {0x8, 0x9, 0x0, 0x0, @time={0x7, 0x2}, {0x80}, {0x0, 0x3}, @raw8={"c36b471c6aabd6564ef665d0"}}], 0x70) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="34000000150a030000000000000000000200000009000273797a310000000008000340000000010900010073797a30cd677c267a937598d21747f78f50ff6ddadcbf8dcef0f87a51206e3cce90b840149db3632bfdb2360010b1b885b3905914608915ef96ec162efd9570945952554a8b72125e2dfebf3392f1a38d18c13edcbed8744153a77a8e79feae7d729875b39bb0ff125087ae0535e8412592d88c969a3197f0fee38bb24690e93ccb00892f0fa56d5eff30a60cd7bb4290062f07a3a91ad0d3b2bbcee6094907b1c72044da50e016cf2745ae8d4314c33e3dbceb059ad358b77f1ed33263e31a0eeef5ec0d8a517d46dac813b455a8c2261f0c37d9d7ec763a62d4ec22cba6a2484c2b2934e4bde897b191c769d38d30312545473c3e76b519eee08d6fb17b72dc85983d6bc84acb42ea984374b747de8d887a84c8f81897d7267d97485d7b7a9f4421e516d4e19f5a88054b40ec3f719dd9b534a654e0cc24cc03a98783d906158622ede8a0a8bf9f2175d956b4548da002b1ac6bfb6b67d53ad98a54056c169f08f164d0b516a41aec"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0x10, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r12, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0x40000002, 0x0, 0x6}]}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f00004f3000/0x3000)=nil, 0x3000}}) r13 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_INTERRUPT(r13, 0x4004ae86, &(0x7f00000001c0)=0x673d) 2m57.873919168s ago: executing program 9 (id=7109): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="20000000010405"], 0x20}}, 0x4040) 2m57.593695075s ago: executing program 9 (id=7111): r0 = socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)='fusectl\x00', 0x1214040, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000001100), 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r1, 0xc02063a0, &(0x7f0000001140)) lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)=@ng={0x4, 0x14, "321443aa"}, 0x6, 0x1) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000240), 0x103480, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00') sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000100)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00400020208000200618294ff0051f60a84c9f4d4938037e786a6d000102df2a13f60f3da6c96661a00000e4509c5bbcd72c6c95300000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) 2m57.468833204s ago: executing program 9 (id=7112): r0 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) syz_clone(0x2226000, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, 0x1, 0x2, 0x7cbbda779fe004e1, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x8000}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000004c0)={r1, @in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x200, 0x800, 0x5, 0x48, 0x5, 0x5}, 0x9c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r3 = shmget$private(0x0, 0x3000, 0x10, &(0x7f00009fa000/0x3000)=nil) shmat(r3, &(0x7f0000a94000/0x3000)=nil, 0x4000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r5}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d6fe682c6100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) sendmsg$can_bcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000003000000", @ANYRES64, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00b997ae12"], 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0xc000) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000003500)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0x16, 0x68, 0x0, 0x60, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "11f3"}}, 0x24) 2m57.117787436s ago: executing program 9 (id=7114): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000180)={0x2, 0x0, [{0x4b564d01, 0x0, 0xffffffff}, {0x3b, 0x0, 0x3}]}) read(r0, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x100000001, 0x5, 0x100000000000000, 0x6, 0x0, 0x800000, 0x6, 0x0, 0x4, 0x9, 0x0, 0x1e87, 0xfffffffffffffffc, 0x7, 0x0, 0x1000, 0x8, 0x7, 0x3, 0x0, 0x4, 0x0, 0x800000}) syz_usb_connect(0x0, 0x5e, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000c291492099042a102d850102030109024c0001000010000904"], 0x0) 2m56.445124992s ago: executing program 39 (id=7114): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000180)={0x2, 0x0, [{0x4b564d01, 0x0, 0xffffffff}, {0x3b, 0x0, 0x3}]}) read(r0, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x100000001, 0x5, 0x100000000000000, 0x6, 0x0, 0x800000, 0x6, 0x0, 0x4, 0x9, 0x0, 0x1e87, 0xfffffffffffffffc, 0x7, 0x0, 0x1000, 0x8, 0x7, 0x3, 0x0, 0x4, 0x0, 0x800000}) syz_usb_connect(0x0, 0x5e, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000c291492099042a102d850102030109024c0001000010000904"], 0x0) 1m29.478042202s ago: executing program 3 (id=7588): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) move_mount(0xffffffffffffffff, 0x0, r1, 0x0, 0x46) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000640)=ANY=[@ANYRESDEC=r0], 0x0) syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f0000000600)={0x1c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}) r3 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r5) quotactl_fd$Q_GETFMT(r3, 0xffffffff80000400, r5, &(0x7f0000000080)) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f00000007c0)={0x34, &(0x7f0000000680)={0x60, 0x10, 0x9, "38f40597e05185cc02"}, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) 1m26.448062741s ago: executing program 3 (id=7593): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) timer_create(0x9, &(0x7f0000002c00)={0x0, 0x25, 0x1}, &(0x7f0000002c40)=0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000080)) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f00", 0x1f}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x1}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-neonbs-sync\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket(0xa, 0x1, 0x84) r8 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e22, @multicast2}}}, 0x108) dup3(r8, r7, 0x0) 1m24.609748085s ago: executing program 3 (id=7603): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="18000000010000", 0x7) r1 = socket$inet(0x2, 0x6, 0x1004) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ioctl$BLKDISCARDZEROES(r2, 0x127c, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000", 0x14, 0x0, &(0x7f0000000140), 0x14) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vxcan0\x00'}) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth0_to_hsr\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@private2, 0x33, r5}) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000040)={@private2, r5}, 0x14) (async) getsockopt$MRT(r1, 0x0, 0xcf, 0x0, 0x0) (async) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[], 0x0) (async) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="528185f46522e1f1936c4e28a1079704cb04725507aa4f86fb355deed7428785ffaf56ee3e6f18d7bcd5b42bc51f3ad5210b98dfe7c5bdf5cb1c6242819c441047155055d56e5783077e4d2333f82121427963a5d3fa4fb42364ce1ed64350efe8a16413f84fd5635b80fed21ba3ec88ff4557b22a0e9291148fea7a829f7b63c063c0be6cb31dc0b7e0478c4bd23518712c95c6cb3217919873c8f9e5", 0x9d, 0xfffffffffffffffd) 1m23.96923436s ago: executing program 3 (id=7607): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc801}, 0x40004) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000009, 0x3032, 0xffffffffffffffff, 0xca551000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x3, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1m23.814087891s ago: executing program 3 (id=7608): socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x5, @empty, 0x9}], 0x1c) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x5, @empty, 0x9}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1ff, 0x20000) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x6, 0x6, 0x448, 'syz0\x00', 0x2}, 0x1, [0x7, 0xd5, 0x2, 0xfff, 0xb, 0x6, 0x2, 0x401, 0x2, 0xbc, 0x7f, 0x102d, 0x8, 0x1, 0x3, 0x1, 0x1, 0x7, 0x6, 0x200, 0x80, 0x4000000000007, 0x6e45109f, 0x4000000000007, 0x8, 0x2, 0x0, 0x7, 0xfffffffffffffffd, 0x3, 0x100000001, 0x403, 0x1, 0x8, 0x101, 0x3, 0x4, 0x1, 0x0, 0x1da5, 0x9, 0x4, 0x8a, 0x50f, 0x9ac2, 0x6fe5, 0x9e, 0x7, 0x9, 0x88a, 0x6, 0x6, 0xffffffffffffffff, 0x400, 0x3, 0x3, 0x2, 0xfffffffffffffff9, 0x0, 0xf9800000, 0x0, 0x5, 0x4, 0x9, 0x82d, 0x3, 0x6, 0x0, 0x9, 0x3, 0x3ff, 0x6, 0xff, 0x2f, 0x1, 0x7, 0x414, 0x2, 0x42843379, 0x1, 0x7, 0x2, 0x77a, 0x6997, 0x4000000007, 0x539, 0x623a, 0x6, 0x0, 0x6, 0x9, 0x200, 0x9, 0x7ff, 0x40000000, 0x5, 0x93, 0x7, 0x80, 0x2, 0x2775e12f, 0x680000000000, 0x5, 0x7, 0x9, 0x80000004, 0xfffffffffffffffd, 0xfffffffffffffffa, 0x10001, 0x8, 0x8, 0x5, 0x802, 0x5, 0x0, 0xfffffffffffff000, 0x10000, 0x7ffc, 0xfffffffffffffff9, 0x6, 0x46b, 0x8, 0x5, 0x6, 0x7, 0x2, 0x7f, 0x63a]}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x6, 0x6, 0x448, 'syz0\x00', 0x2}, 0x1, [0x7, 0xd5, 0x2, 0xfff, 0xb, 0x6, 0x2, 0x401, 0x2, 0xbc, 0x7f, 0x102d, 0x8, 0x1, 0x3, 0x1, 0x1, 0x7, 0x6, 0x200, 0x80, 0x4000000000007, 0x6e45109f, 0x4000000000007, 0x8, 0x2, 0x0, 0x7, 0xfffffffffffffffd, 0x3, 0x100000001, 0x403, 0x1, 0x8, 0x101, 0x3, 0x4, 0x1, 0x0, 0x1da5, 0x9, 0x4, 0x8a, 0x50f, 0x9ac2, 0x6fe5, 0x9e, 0x7, 0x9, 0x88a, 0x6, 0x6, 0xffffffffffffffff, 0x400, 0x3, 0x3, 0x2, 0xfffffffffffffff9, 0x0, 0xf9800000, 0x0, 0x5, 0x4, 0x9, 0x82d, 0x3, 0x6, 0x0, 0x9, 0x3, 0x3ff, 0x6, 0xff, 0x2f, 0x1, 0x7, 0x414, 0x2, 0x42843379, 0x1, 0x7, 0x2, 0x77a, 0x6997, 0x4000000007, 0x539, 0x623a, 0x6, 0x0, 0x6, 0x9, 0x200, 0x9, 0x7ff, 0x40000000, 0x5, 0x93, 0x7, 0x80, 0x2, 0x2775e12f, 0x680000000000, 0x5, 0x7, 0x9, 0x80000004, 0xfffffffffffffffd, 0xfffffffffffffffa, 0x10001, 0x8, 0x8, 0x5, 0x802, 0x5, 0x0, 0xfffffffffffff000, 0x10000, 0x7ffc, 0xfffffffffffffff9, 0x6, 0x46b, 0x8, 0x5, 0x6, 0x7, 0x2, 0x7f, 0x63a]}) shutdown(r0, 0x1) close(r0) 1m23.460955235s ago: executing program 3 (id=7611): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) iopl(0x3) clock_settime(0xa, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xd) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg0\x00'}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x88, r4, 0x104, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0xfffffffffffffcd2, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x15}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8001}]}, 0x88}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000280)={0x38, r1, 0x1, 0x0, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x48854}, 0x240048c0) 1m8.320522852s ago: executing program 40 (id=7611): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) iopl(0x3) clock_settime(0xa, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xd) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg0\x00'}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x88, r4, 0x104, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0xfffffffffffffcd2, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x15}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8001}]}, 0x88}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000280)={0x38, r1, 0x1, 0x0, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x48854}, 0x240048c0) 8.370127456s ago: executing program 1 (id=7993): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0xa, 0x1000, 0x0, 0x0}], 0x1}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.156256674s ago: executing program 0 (id=7997): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, r0, 0x0) 8.115801249s ago: executing program 0 (id=7998): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bcbe6074bdf1dc41427cb05cdcc0a6bf", 0x36}], 0x1, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40000}], 0x1, 0xc0) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)=""/53, 0x35}], 0x1}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x2, 0x10000, 0x0) 8.034236267s ago: executing program 0 (id=8000): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$binfmt_format(r2, &(0x7f0000000300)='1\x00', 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r4, 0x4018aee2, &(0x7f0000000240)=@attr_other={0x0, 0x0, 0x3, 0x0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 7.64722693s ago: executing program 2 (id=8004): socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e0000001000000002800000000000000000000000700000094040007441405"], 0x48}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETA(r4, 0x5405, &(0x7f0000000040)) 6.500643798s ago: executing program 2 (id=8005): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x800, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000800)={'\x00', 0x6, 0x2, 0x2, 0x0, 0x6, 0x70000, 0xe000, '\x00', 0x2}) 6.267472241s ago: executing program 2 (id=8008): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x104) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') socket(0x6, 0xa, 0x4) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0xffffffff, 0x401, 0x80000000, 0xcb81}, 0x1, 0x9, 0x0, 0x7f, 0x0, 0x6}}) 5.626570256s ago: executing program 1 (id=8009): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setitimer(0x1, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf64(r1, &(0x7f00000003c0)=ANY=[], 0x78) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000080)={0x10000, 0x14000, 0x8}) 5.463555978s ago: executing program 0 (id=8010): mount_setattr(0xffffffffffffffff, 0x0, 0xa100, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004600)=""/102400, 0x19000) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 5.355319328s ago: executing program 1 (id=8011): add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000040)="01000000020000000000006bb55a2a000bf7c045f91f34aba6", 0x19, 0xffffffffffffffff) 4.157810159s ago: executing program 0 (id=8012): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000b00)={0xa, @pix_mp={0x8, 0x8011, 0x31324d59, 0x7, 0x9, [{0x2315, 0x81}, {0xffffffff, 0x7}, {0x4, 0x10000}, {0x5, 0x4018}, {0x100000, 0x8}, {0x6}, {0x0, 0x9}, {0x1}], 0x7f, 0x0, 0x0, 0x0, 0x1}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000140)={0x3, 0x2, 0xfec00000, 0x1000, &(0x7f0000f40000/0x1000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f0000000380)={0x3, 0x0, &(0x7f0000ffd000/0x3000)=nil}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r7, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000200)={'wg2\x00'}) sendmsg$WG_CMD_SET_DEVICE(r8, 0x0, 0x40) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(0x0, 0x11e) r9 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x22001) mmap$IORING_OFF_CQ_RING(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000c, 0x31, 0xffffffffffffffff, 0x8000000) ioctl$USBDEVFS_GETDRIVER(r10, 0x41045508, 0x0) close(0x3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './cgroup/../file0\x00'}) openat$cgroup_subtree(r9, &(0x7f0000000200), 0x2, 0x0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)={0x1c, r1, 0x545fbe876f258d49, 0x70bd66, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4.13473599s ago: executing program 1 (id=8013): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 3.160548256s ago: executing program 1 (id=8016): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/123, 0x7b}], 0x1) 2.665855368s ago: executing program 2 (id=8019): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x10000004}) 2.551799476s ago: executing program 2 (id=8021): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000140001800500020001000000080006001a"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 2.47063796s ago: executing program 5 (id=8022): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8f30fc733", 0x51}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.439666013s ago: executing program 2 (id=8023): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000000440)=0x2000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8003, 0x0, 0x9, 0x8000, 0x3, 0x4, 0xfffbffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) 2.281528308s ago: executing program 5 (id=8024): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x13, r0, 0x0) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000180), 0x14ffffff) 2.186167245s ago: executing program 1 (id=8025): syz_usb_connect(0x0, 0x38, &(0x7f0000000100)=ANY=[@ANYBLOB="120100005fdfc50821048f00deba0000000109022600010000000009040100020202ff"], 0x0) 2.162207781s ago: executing program 5 (id=8026): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x2, 0x6, 0x4}}, 0x30) 2.064027409s ago: executing program 5 (id=8027): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x2b}}, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, r5, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, 0x2c}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) r7 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80000) recvmsg(r7, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x10002) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r8 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r8, &(0x7f0000000a40)={0x2020}, 0x50a) write$vhost_msg_v2(r8, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0x74, 0x0, 0x2, 0x2}}, 0x48) 1.058036441s ago: executing program 5 (id=8028): r0 = socket(0x400000000010, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x6, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix={0x8, 0x8001, 0x47425247, 0x8, 0x5, 0x5, 0x3, 0x9, 0x0, 0x3, 0x2, 0x4}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="a056fa9857", @ANYRES16=r7, @ANYBLOB="080029bd7000fbdbdf255d0000000c009900010000001e0000000800a500000000000800a500000000000800a500010000005800a6800a00060008021100000100000a00060008021100000000000a000600ffffffffffff00000a00060008021100000100000a00060008021100000100000a00060008021100000000000a00060008021100000100000800a500010000000800a500010000001000a6800a00060008021100000100000800a50001000000"], 0xb8}, 0x1, 0x0, 0x0, 0x14}, 0x0) 846.714767ms ago: executing program 0 (id=8029): syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) 0s ago: executing program 5 (id=8030): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x185402) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): cle [ 1545.693280][ T5834] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1545.714115][ T5834] usb 3-1: device descriptor read/8, error -71 [ 1545.752595][ T5922] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1545.907823][ T5922] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1545.917253][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.925492][ T5922] usb 4-1: Product: syz [ 1545.929943][ T5922] usb 4-1: Manufacturer: syz [ 1545.936963][ T5922] usb 4-1: SerialNumber: syz [ 1545.952539][ T5834] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1545.973318][ T5834] usb 3-1: device descriptor read/8, error -71 [ 1546.050924][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.083541][ T5834] usb usb3-port1: unable to enumerate USB device [ 1546.351972][ T5922] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1546.367860][ T5922] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1547.079304][T32230] overlayfs: failed to resolve './file0': -2 [ 1547.523104][T31670] udevd[31670]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1547.732547][T31670] udevd[31670]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1547.809510][T31670] udevd[31670]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1547.975552][ T5922] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO [ 1547.992436][ T5922] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1548.004054][ T5922] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1548.020448][ T5922] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1548.056989][ T5922] usb 4-1: USB disconnect, device number 58 [ 1548.081452][ T1218] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1548.271341][ T1218] usb 3-1: Using ep0 maxpacket: 16 [ 1548.284017][ T1218] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1548.314072][ T1218] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1548.331217][ T1218] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1548.339466][ T1218] usb 3-1: Product: syz [ 1548.361328][ T1218] usb 3-1: Manufacturer: syz [ 1548.366085][ T1218] usb 3-1: SerialNumber: syz [ 1548.383712][ T1218] usb 3-1: config 0 descriptor?? [ 1548.631412][T31672] udevd[31672]: symlink '../../loop3' '/dev/disk/by-diskseq/134.tmp-b7:3' failed: Read-only file system [ 1548.644034][ T987] usb 3-1: USB disconnect, device number 75 [ 1548.922021][T14308] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1548.954802][T32287] nbd: couldn't find device at index -37165402 [ 1549.093624][T14308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1549.105264][T14308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1549.116990][T14308] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 1549.126713][T14308] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 1549.140910][T14308] usb 4-1: Manufacturer: syz [ 1549.183900][T14308] usb 4-1: config 0 descriptor?? [ 1549.198097][T14308] uvcvideo 4-1:0.0: Found UVC 0.00 device (18ec:3288) [ 1549.219517][T14308] uvcvideo 4-1:0.0: No valid video chain found. [ 1549.222635][T31670] udevd[31670]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1549.307994][T32299] 9p: Bad value for 'rfdno' [ 1549.308954][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1549.440089][T32277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1549.449803][T32277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1549.469292][ T5922] usb 4-1: USB disconnect, device number 59 [ 1549.560708][ T1218] usb 3-1: new low-speed USB device number 76 using dummy_hcd [ 1549.679705][T32303] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.7536'. [ 1549.694475][T32303] bridge_slave_1: default FDB implementation only supports local addresses [ 1549.710614][ T1218] usb 3-1: Invalid ep0 maxpacket: 64 [ 1549.843614][T32308] netlink: 9 bytes leftover after parsing attributes in process `syz.0.7538'. [ 1549.855432][T32308] gretap0: entered promiscuous mode [ 1549.860849][ T1218] usb 3-1: new low-speed USB device number 77 using dummy_hcd [ 1549.943463][T32310] syzkaller1: entered promiscuous mode [ 1549.955084][T32310] syzkaller1: entered allmulticast mode [ 1550.030461][ T1218] usb 3-1: Invalid ep0 maxpacket: 64 [ 1550.036335][ T1218] usb usb3-port1: attempt power cycle [ 1550.073502][T31672] udevd[31672]: symlink '../../loop3' '/dev/disk/by-diskseq/134.tmp-b7:3' failed: Read-only file system [ 1550.323615][T31672] udevd[31672]: symlink '../../loop3' '/dev/disk/by-diskseq/134.tmp-b7:3' failed: Read-only file system [ 1550.380470][ T1218] usb 3-1: new low-speed USB device number 78 using dummy_hcd [ 1550.395080][T31672] udevd[31672]: symlink '../../loop3' '/dev/disk/by-diskseq/134.tmp-b7:3' failed: Read-only file system [ 1550.432022][ T1218] usb 3-1: Invalid ep0 maxpacket: 64 [ 1550.479598][T31672] udevd[31672]: symlink '../../loop3' '/dev/disk/by-diskseq/134.tmp-b7:3' failed: Read-only file system [ 1550.546634][T32327] comedi comedi0: Minor 47 could not be opened [ 1550.560393][ T1218] usb 3-1: new low-speed USB device number 79 using dummy_hcd [ 1550.591053][ T1218] usb 3-1: Invalid ep0 maxpacket: 64 [ 1550.596850][ T1218] usb usb3-port1: unable to enumerate USB device [ 1551.327645][T32338] netlink: 'syz.0.7547': attribute type 16 has an invalid length. [ 1552.542892][T27255] Bluetooth: hci1: unexpected event for opcode 0x2027 [ 1552.678500][T31672] udevd[31672]: symlink '../../loop3' '/dev/disk/by-diskseq/134.tmp-b7:3' failed: Read-only file system [ 1552.742755][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1552.814779][T31672] udevd[31672]: symlink '../../loop3' '/dev/disk/by-diskseq/134.tmp-b7:3' failed: Read-only file system [ 1552.816857][T32368] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.7557'. [ 1552.872807][T32367] dummy0: entered promiscuous mode [ 1553.064142][T32373] dummy0: left promiscuous mode [ 1553.134097][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1553.159273][ T5922] usb 4-1: new low-speed USB device number 60 using dummy_hcd [ 1553.323248][ T5922] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1553.352853][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1553.385766][ T5922] usb 4-1: config 64 has an invalid interface number: 227 but max is 0 [ 1553.401033][ T5922] usb 4-1: config 64 has no interface number 0 [ 1553.432392][ T5922] usb 4-1: config 64 interface 227 altsetting 9 endpoint 0x4 is Bulk; changing to Interrupt [ 1553.452494][ T5922] usb 4-1: config 64 interface 227 altsetting 9 endpoint 0xC has an invalid bInterval 226, changing to 4 [ 1553.468249][ T5922] usb 4-1: config 64 interface 227 altsetting 9 endpoint 0xC has invalid maxpacket 512, setting to 0 [ 1553.481308][ T5922] usb 4-1: config 64 interface 227 has no altsetting 0 [ 1553.523712][ T5922] usb 4-1: string descriptor 0 read error: -22 [ 1553.539768][ T5922] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=cc.bf [ 1553.566375][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.587671][T32370] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1553.606063][ T5922] imon_raw 4-1:64.227: IR endpoint missing [ 1553.792156][ T5922] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1553.948484][ T5922] usb 3-1: device descriptor read/64, error -71 [ 1554.065812][T29510] usb 4-1: USB disconnect, device number 60 [ 1554.163836][T32403] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7570'. [ 1554.189511][ T5922] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1554.328327][ T5922] usb 3-1: device descriptor read/64, error -71 [ 1554.464413][ T5922] usb usb3-port1: attempt power cycle [ 1554.528758][T32415] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7572'. [ 1554.818203][ T5922] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1554.857325][T31672] udevd[31672]: symlink '../../loop3' '/dev/disk/by-diskseq/134.tmp-b7:3' failed: Read-only file system [ 1554.869407][ T5922] usb 3-1: device descriptor read/8, error -71 [ 1554.958985][T32423] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7576'. [ 1555.118240][ T5922] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1555.158843][ T5922] usb 3-1: device descriptor read/8, error -71 [ 1555.228266][T32428] orangefs: client-core tried to read wrong size [ 1555.290177][ T5922] usb usb3-port1: unable to enumerate USB device [ 1555.535973][T32438] syzkaller1: entered promiscuous mode [ 1555.541947][T32438] syzkaller1: entered allmulticast mode [ 1555.775415][T31672] udevd[31672]: symlink '../../loop3' '/dev/disk/by-diskseq/134.tmp-b7:3' failed: Read-only file system [ 1555.843461][T32450] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1555.967966][T31672] udevd[31672]: symlink '../../loop3' '/dev/disk/by-diskseq/134.tmp-b7:3' failed: Read-only file system [ 1556.237463][T26804] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1556.377492][T26804] usb 4-1: device descriptor read/64, error -71 [ 1556.449806][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1556.472590][T32462] netlink: 'syz.2.7589': attribute type 2 has an invalid length. [ 1556.535250][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1556.541343][T32465] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7590'. [ 1556.647215][T26804] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1556.787103][T26804] usb 4-1: device descriptor read/64, error -71 [ 1556.807151][ T5922] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1556.898791][T26804] usb usb4-port1: attempt power cycle [ 1556.956996][ T5922] usb 3-1: device descriptor read/64, error -71 [ 1557.196921][ T5922] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1557.247150][T26804] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1557.277992][T26804] usb 4-1: device descriptor read/8, error -71 [ 1557.326802][ T5922] usb 3-1: device descriptor read/64, error -71 [ 1557.437175][ T5922] usb usb3-port1: attempt power cycle [ 1557.536914][T26804] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1557.579570][T26804] usb 4-1: device descriptor read/8, error -71 [ 1557.688121][T26804] usb usb4-port1: unable to enumerate USB device [ 1557.776753][ T5922] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1557.797855][ T5922] usb 3-1: device descriptor read/8, error -71 [ 1558.038341][ T5922] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1558.067464][ T5922] usb 3-1: device descriptor read/8, error -71 [ 1558.178003][ T5922] usb usb3-port1: unable to enumerate USB device [ 1559.021644][T31672] udevd[31672]: symlink '../../loop3' '/dev/disk/by-diskseq/134.tmp-b7:3' failed: Read-only file system [ 1559.401530][T26804] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 1559.565472][T26804] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1559.579502][T26804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1559.592305][T26804] usb 4-1: Product: syz [ 1559.595248][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1559.597921][T26804] usb 4-1: Manufacturer: syz [ 1559.615317][T26804] usb 4-1: SerialNumber: syz [ 1559.632063][T26804] usb 4-1: config 0 descriptor?? [ 1559.644823][T32476] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7595'. [ 1559.648711][T26804] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1559.701937][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88803e528000 (28)(bond0) start [ 1559.723467][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88803e528000 (20)(bond0) end [ 1559.755157][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff888060032000 (3)(bond0.1) start [ 1559.775278][T32476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1559.786844][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff888060032000 (3)(bond0.1) end [ 1559.818341][T32476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1559.836859][T32476] bond0 (unregistering): Released all slaves [ 1559.976156][T32481] netlink: 180 bytes leftover after parsing attributes in process `syz.0.7597'. [ 1559.986479][T32482] netlink: 180 bytes leftover after parsing attributes in process `syz.0.7597'. [ 1559.997490][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1560.278761][T26804] gspca_stk1135: reg_w 0x0 err -71 [ 1560.295364][T26804] gspca_stk1135: serial bus timeout: status=0x00 [ 1560.302272][T26804] gspca_stk1135: Sensor write failed [ 1560.308366][T26804] gspca_stk1135: serial bus timeout: status=0x00 [ 1560.315340][T26804] gspca_stk1135: Sensor write failed [ 1560.328743][T26804] gspca_stk1135: serial bus timeout: status=0x00 [ 1560.345280][T26804] gspca_stk1135: Sensor read failed [ 1560.357683][T26804] gspca_stk1135: serial bus timeout: status=0x00 [ 1560.371850][T26804] gspca_stk1135: Sensor read failed [ 1560.380713][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1560.392637][T26804] gspca_stk1135: Detected sensor type unknown (0x0) [ 1560.392681][T26804] gspca_stk1135: serial bus timeout: status=0x00 [ 1560.415840][T26804] gspca_stk1135: Sensor read failed [ 1560.424023][T26804] gspca_stk1135: serial bus timeout: status=0x00 [ 1560.442343][T19849] Bluetooth: hci3: Frame reassembly failed (-84) [ 1560.449646][T26804] gspca_stk1135: Sensor read failed [ 1560.455264][T26804] gspca_stk1135: serial bus timeout: status=0x00 [ 1560.462113][T26804] gspca_stk1135: Sensor write failed [ 1560.467894][T26804] gspca_stk1135: serial bus timeout: status=0x00 [ 1560.474502][T26804] gspca_stk1135: Sensor write failed [ 1560.478565][T32496] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1560.480518][T26804] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 1560.508306][T26804] usb 4-1: USB disconnect, device number 65 [ 1560.854225][T31672] udevd[31672]: symlink '../../loop3' '/dev/disk/by-diskseq/134.tmp-b7:3' failed: Read-only file system [ 1560.860240][T32502] Bluetooth: MGMT ver 1.23 [ 1561.452784][T31672] udevd[31672]: symlink '../../loop3' '/dev/disk/by-diskseq/134.tmp-b7:3' failed: Read-only file system [ 1561.675230][T31672] udevd[31672]: symlink '../../loop3' '/dev/disk/by-diskseq/134.tmp-b7:3' failed: Read-only file system [ 1562.356899][T32526] netlink: 'syz.1.7612': attribute type 12 has an invalid length. [ 1562.368560][T32526] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7612'. [ 1562.523508][T27255] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1562.531172][ T5836] Bluetooth: hci3: command 0x1003 tx timeout [ 1562.697633][T32535] sctp: [Deprecated]: syz.1.7614 (pid 32535) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1562.697633][T32535] Use struct sctp_sack_info instead [ 1562.716878][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1563.758959][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1564.644167][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 1564.644187][ T30] audit: type=1326 audit(6063156345.981:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32547 comm="syz.2.7618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263ff9c629 code=0x7fc00000 [ 1564.775823][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1565.053230][T29510] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1565.214989][T29510] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1565.243028][T29510] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 102, changing to 7 [ 1565.271439][T29510] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 24624, setting to 1024 [ 1565.302199][T29510] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1565.319830][T29510] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.346114][T29510] usb 3-1: Product: syz [ 1565.354806][T29510] usb 3-1: Manufacturer: syz [ 1565.365142][T29510] usb 3-1: SerialNumber: syz [ 1565.383800][T29510] usb 3-1: config 0 descriptor?? [ 1565.407931][T29510] usb 3-1: 0:0 : invalid sync pipe. bmAttributes e5, bLength 9, bSynchAddress 66 [ 1565.677272][T32579] kAFS: No cell specified [ 1565.724795][T29510] usb 3-1: USB disconnect, device number 88 [ 1565.828932][T31328] udevd[31328]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1566.159798][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1566.462462][T29510] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1566.625805][T29510] usb 3-1: Using ep0 maxpacket: 8 [ 1566.654967][T29510] usb 3-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 1566.676602][T29510] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1566.702371][T29510] usb 3-1: New USB device found, idVendor=05c6, idProduct=9215, bcdDevice=29.ac [ 1566.711910][T29510] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.745974][T29510] usb 3-1: config 0 descriptor?? [ 1566.811441][T32591] can: request_module (can-proto-5) failed. [ 1566.856194][T32591] netlink: 624 bytes leftover after parsing attributes in process `syz.1.7630'. [ 1566.971722][T29510] usb 3-1: string descriptor 0 read error: -71 [ 1566.994334][T29510] qmi_wwan 3-1:0.0: probe with driver qmi_wwan failed with error -22 [ 1567.019854][T29510] usb 3-1: USB disconnect, device number 89 [ 1567.597523][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1567.927868][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1568.082321][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1568.271157][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1568.384439][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1568.774477][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1568.819012][T32629] fuse: Unknown parameter 'max_read0x0000000000000005' [ 1568.930122][T32631] overlayfs: failed to resolve './bus': -2 [ 1569.071308][T29510] usb 3-1: new low-speed USB device number 90 using dummy_hcd [ 1569.245585][T29510] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26392, setting to 8 [ 1569.271195][T29510] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1569.291204][T29510] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1569.323836][T29510] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1569.341178][T29510] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.349220][T29510] usb 3-1: Product: Т [ 1569.371176][T29510] usb 3-1: Manufacturer: Ц [ 1569.375922][T29510] usb 3-1: SerialNumber: င [ 1569.396195][T32628] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1569.404614][T32628] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1569.412488][T32628] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1569.674233][T29510] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1569.721629][T29510] usb 3-1: USB disconnect, device number 90 [ 1570.305438][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1570.453879][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1570.754584][ T1218] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1570.924906][ T1218] usb 3-1: Using ep0 maxpacket: 8 [ 1570.948466][ T1218] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1570.962647][ T1218] usb 3-1: config 8 has an invalid interface number: 24 but max is 0 [ 1570.970811][ T1218] usb 3-1: config 8 has no interface number 0 [ 1570.993733][ T1218] usb 3-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 1024 [ 1571.022498][ T1218] usb 3-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 1571.041266][ T1218] usb 3-1: config 8 interface 24 has no altsetting 0 [ 1571.063238][ T1218] usb 3-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 1571.082844][ T1218] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.091059][ T1218] usb 3-1: Product: syz [ 1571.105465][ T1218] usb 3-1: Manufacturer: syz [ 1571.110344][ T1218] usb 3-1: SerialNumber: syz [ 1571.140767][T32647] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1571.402389][T32654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7652'. [ 1571.418903][ T1218] comedi comedi4: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'. [ 1571.452657][ T1218] usb 3-1: USB disconnect, device number 91 [ 1572.069197][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1572.138557][T32657] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 1572.287075][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1572.427322][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1572.435985][T32667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7657'. [ 1572.530166][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1572.649333][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1572.907930][T26804] usb 3-1: new low-speed USB device number 92 using dummy_hcd [ 1573.075396][T26804] usb 3-1: device descriptor read/64, error -71 [ 1573.321295][T26804] usb 3-1: new low-speed USB device number 93 using dummy_hcd [ 1573.456371][T26804] usb 3-1: device descriptor read/64, error -71 [ 1573.575601][T26804] usb usb3-port1: attempt power cycle [ 1573.943237][T32679] xt_bpf: check failed: parse error [ 1573.945038][T26804] usb 3-1: new low-speed USB device number 94 using dummy_hcd [ 1573.982642][T26804] usb 3-1: device descriptor read/8, error -71 [ 1574.221375][T26804] usb 3-1: new low-speed USB device number 95 using dummy_hcd [ 1574.269005][T26804] usb 3-1: device descriptor read/8, error -71 [ 1574.395424][T26804] usb usb3-port1: unable to enumerate USB device [ 1575.148620][T32694] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7670'. [ 1575.250453][T32697] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.7671'. [ 1575.482312][T32701] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7673'. [ 1575.496066][T32701] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7673'. [ 1575.587691][T32706] netlink: 100 bytes leftover after parsing attributes in process `syz.1.7674'. [ 1575.779594][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1575.957882][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1576.058019][T32717] netlink: 'syz.2.7678': attribute type 10 has an invalid length. [ 1576.063045][T32716] lo speed is unknown, defaulting to 1000 [ 1576.082965][T32717] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7678'. [ 1576.239540][T32717] syzkaller1: entered promiscuous mode [ 1576.252576][T32717] syzkaller1: entered allmulticast mode [ 1576.747451][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88805b1be000 (5)(erspan0) start [ 1576.792979][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88805b1be000 (4)(erspan0) end [ 1576.816053][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88807b1ae000 (4)(gretap0) start [ 1576.835096][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88807b1ae000 (3)(gretap0) end [ 1577.177641][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1577.444999][T31328] udevd[31328]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1577.594110][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1577.623856][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1577.636349][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1577.653379][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1577.661768][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1577.779200][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1577.813878][T32741] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7686'. [ 1577.829546][T32736] lo speed is unknown, defaulting to 1000 [ 1578.109559][T19847] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88804e9ac000 (23)(syz_tun) start [ 1578.130927][T19847] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88804e9ac000 (20)(syz_tun) end [ 1578.298365][T32754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1578.312336][T32754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1578.322240][T32754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1578.329730][T32754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1578.358625][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff8880595a8000 (20)(batadv0) start [ 1578.376781][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff8880595a8000 (15)(batadv0) end [ 1578.513366][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff888048270000 (15)(netdevsim3) start [ 1578.524753][T19847] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.553162][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff888048270000 (11)(netdevsim3) end [ 1578.695570][T19849] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88807c9e8000 (16)(netdevsim2) start [ 1578.697141][T19847] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.728439][T19849] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88807c9e8000 (5)(netdevsim2) end [ 1578.849169][T19849] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff888077a90000 (16)(netdevsim1) start [ 1578.855927][T19847] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.892912][T19849] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff888077a90000 (5)(netdevsim1) end [ 1578.969641][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88805f074000 (16)(netdevsim0) start [ 1578.973490][T19847] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1579.003232][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88805f074000 (9)(netdevsim0) end [ 1579.035943][T32736] chnl_net:caif_netlink_parms(): no params data found [ 1579.295153][T32736] bridge0: port 1(bridge_slave_0) entered blocking state [ 1579.303219][T32736] bridge0: port 1(bridge_slave_0) entered disabled state [ 1579.312574][T32736] bridge_slave_0: entered allmulticast mode [ 1579.325336][T32736] bridge_slave_0: entered promiscuous mode [ 1579.357522][T32736] bridge0: port 2(bridge_slave_1) entered blocking state [ 1579.381691][T32736] bridge0: port 2(bridge_slave_1) entered disabled state [ 1579.389086][T32736] bridge_slave_1: entered allmulticast mode [ 1579.412885][T32736] bridge_slave_1: entered promiscuous mode [ 1579.421344][T19847] bridge_slave_1: left allmulticast mode [ 1579.427043][T19847] bridge_slave_1: left promiscuous mode [ 1579.435502][T19847] bridge0: port 2(bridge_slave_1) entered disabled state [ 1579.449629][T19847] bridge_slave_0: left allmulticast mode [ 1579.456958][T19847] bridge_slave_0: left promiscuous mode [ 1579.462949][T19847] bridge0: port 1(bridge_slave_0) entered disabled state [ 1579.560909][ T614] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88807b306000 (15)(ip6gretap0) start [ 1579.583288][ T614] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88807b306000 (7)(ip6gretap0) end [ 1579.610111][ T614] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88805aaf6000 (12)(erspan0) start [ 1579.631881][ T614] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88805aaf6000 (7)(erspan0) end [ 1579.652036][ T614] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88803566c000 (12)(gretap0) start [ 1579.672251][ T614] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88803566c000 (7)(gretap0) end [ 1579.690604][ T614] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff8880377ac000 (7)(geneve1) start [ 1579.710982][ T614] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff8880377ac000 (7)(geneve1) end [ 1579.731852][ T5836] Bluetooth: hci3: command tx timeout [ 1579.740452][ T614] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff8880446fc000 (7)(geneve0) start [ 1579.758281][ T614] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff8880446fc000 (5)(geneve0) end [ 1579.775982][ T614] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88804ed48000 (6)(bridge0) start [ 1579.776712][T19847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1579.794960][ T614] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88804ed48000 (6)(bridge0) end [ 1579.820320][ T614] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88804fe18000 (13)(bond0) start [ 1579.837953][ T614] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88804fe18000 (13)(bond0) end [ 1579.839371][T19847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1579.869045][T19847] bond0 (unregistering): Released all slaves [ 1579.928294][T32736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1579.990895][T32736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1580.122400][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1580.178805][T20092] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff8880796ec000 (15)(wlan1) start [ 1580.198821][T20092] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff8880796ec000 (9)(wlan1) end [ 1580.225376][T32736] team0: Port device team_slave_0 added [ 1580.231213][T32736] team0: Port device team_slave_1 added [ 1580.259613][ T314] netlink: 'syz.2.7699': attribute type 58 has an invalid length. [ 1580.422741][T19849] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff888046798000 (15)(wlan0) start [ 1580.480759][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1580.505081][T32736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1580.512832][T19849] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff888046798000 (3)(wlan0) end [ 1580.540686][T32736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1580.572452][T32736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1580.599599][T32736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1580.607243][T32736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1580.634998][T32736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1580.904226][T32736] hsr_slave_0: entered promiscuous mode [ 1580.923604][T32736] hsr_slave_1: entered promiscuous mode [ 1580.944127][T32736] debugfs: 'hsr0' already exists in 'hsr' [ 1580.950191][T32736] Cannot create hsr debugfs directory [ 1581.079965][T19847] hsr_slave_0: left promiscuous mode [ 1581.094268][T19847] hsr_slave_1: left promiscuous mode [ 1581.104637][T19847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1581.131269][T19847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1581.140781][T19847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1581.154570][T19847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1581.207102][T19847] veth1_macvtap: left promiscuous mode [ 1581.215205][T19847] veth0_macvtap: left promiscuous mode [ 1581.242915][T19847] veth1_vlan: left promiscuous mode [ 1581.263258][T19847] veth0_vlan: left promiscuous mode [ 1581.286221][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1581.426809][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff8880303a8000 (11)(vlan0001) start [ 1581.445234][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff8880303a8000 (4)(vlan0001) end [ 1581.469296][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff888076dbc000 (8)(macsec0) start [ 1581.493199][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff888076dbc000 (8)(macsec0) end [ 1581.514438][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88805f070000 (14)(macvtap0) start [ 1581.538492][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88805f070000 (11)(macvtap0) end [ 1581.557980][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff888061bf6000 (9)(veth0_macvtap) start [ 1581.582369][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff888061bf6000 (9)(veth0_macvtap) end [ 1581.603485][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff888035e46000 (7)(veth1_macvtap) start [ 1581.626754][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff888035e46000 (7)(veth1_macvtap) end [ 1581.646221][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff888061bf0000 (6)(ipvlan1) start [ 1581.664611][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff888061bf0000 (6)(ipvlan1) end [ 1581.685262][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88807acea000 (6)(ipvlan0) start [ 1581.705790][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88807acea000 (6)(ipvlan0) end [ 1581.726768][T19847] team0 (unregistering): Port device team_slave_1 removed [ 1581.727654][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff888050528000 (5)(macvlan1) start [ 1581.757599][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff888050528000 (5)(macvlan1) end [ 1581.778234][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88804c1c0000 (5)(macvlan0) start [ 1581.795960][ T5836] Bluetooth: hci3: command tx timeout [ 1581.803520][T19847] team0 (unregistering): Port device team_slave_0 removed [ 1581.806892][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88804c1c0000 (5)(macvlan0) end [ 1581.834199][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff8880815f6000 (6)(vlan1) start [ 1581.853330][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff8880815f6000 (6)(vlan1) end [ 1581.884170][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff888064d02000 (6)(vlan0) start [ 1581.903189][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff888064d02000 (6)(vlan0) end [ 1581.928713][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88801eedc000 (9)(veth0_vlan) start [ 1581.974191][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88801eedc000 (9)(veth0_vlan) end [ 1582.015792][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88801eeda000 (8)(veth1_vlan) start [ 1582.034132][T26804] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1582.066838][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88801eeda000 (7)(veth1_vlan) end [ 1582.113766][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff888050096000 (5)(virt_wifi0) start [ 1582.159590][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff888050096000 (5)(virt_wifi0) end [ 1582.191586][T26804] usb 3-1: device descriptor read/64, error -71 [ 1582.210091][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff8880328b2000 (4)(veth0_virt_wifi) start [ 1582.268797][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff8880328b2000 (4)(veth0_virt_wifi) end [ 1582.331308][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88804de98000 (4)(veth1_virt_wifi) start [ 1582.383016][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88804de98000 (4)(veth1_virt_wifi) end [ 1582.403631][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88805103a000 (4)(hsr0) start [ 1582.454600][T26804] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1582.465710][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (19)(bond_slave_1) cookie=ffff88805103a000 (4)(hsr0) end [ 1582.506394][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88808a4e8000 (3)(hsr_slave_1) start [ 1582.524710][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88808a4e8000 (3)(hsr_slave_1) end [ 1582.544203][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff888075ab6000 (4)(veth1_to_hsr) start [ 1582.563909][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff888075ab6000 (4)(veth1_to_hsr) end [ 1582.584691][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff888049596000 (3)(hsr_slave_0) start [ 1582.613660][T26804] usb 3-1: device descriptor read/64, error -71 [ 1582.622976][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff888049596000 (3)(hsr_slave_0) end [ 1582.659584][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff8880815b2000 (4)(veth0_to_hsr) start [ 1582.698053][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff8880815b2000 (4)(veth0_to_hsr) end [ 1582.728252][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88804c3a6000 (4)(batadv_slave_1) start [ 1582.754664][T26804] usb usb3-port1: attempt power cycle [ 1582.788162][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88804c3a6000 (4)(batadv_slave_1) end [ 1582.852878][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88804c3a4000 (4)(veth1_to_batadv) start [ 1582.944220][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88804c3a4000 (4)(veth1_to_batadv) end [ 1582.985367][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88804a752000 (4)(batadv_slave_0) start [ 1583.053596][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88804a752000 (4)(batadv_slave_0) end [ 1583.082419][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff888080138000 (4)(veth0_to_batadv) start [ 1583.101801][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff888080138000 (4)(veth0_to_batadv) end [ 1583.128665][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88807c3d6000 (8)(team_slave_1) start [ 1583.151909][T26804] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1583.179596][ T374] overlayfs: failed to clone lowerpath [ 1583.188461][T26804] usb 3-1: device descriptor read/8, error -71 [ 1583.217680][ T374] overlayfs: failed to clone lowerpath [ 1583.224287][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88807c3d6000 (8)(team_slave_1) end [ 1583.265986][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88807c3d4000 (4)(veth1_to_team) start [ 1583.317250][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88807c3d4000 (4)(veth1_to_team) end [ 1583.346242][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff888050e84000 (8)(team_slave_0) start [ 1583.374987][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff888050e84000 (8)(team_slave_0) end [ 1583.393859][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88804f6b2000 (4)(veth0_to_team) start [ 1583.412781][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88804f6b2000 (4)(veth0_to_team) end [ 1583.451356][T26804] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1583.479387][T26804] usb 3-1: device descriptor read/8, error -71 [ 1583.491753][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff888048498000 (3)(bond_slave_1) start [ 1583.534426][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff888048498000 (3)(bond_slave_1) end [ 1583.587832][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff888077b66000 (4)(veth1_to_bond) start [ 1583.615579][T26804] usb usb3-port1: unable to enumerate USB device [ 1583.625007][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff888077b66000 (4)(veth1_to_bond) end [ 1583.650256][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88804ccdc000 (3)(bond_slave_0) start [ 1583.676203][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88804ccdc000 (3)(bond_slave_0) end [ 1583.694446][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88805a33a000 (4)(veth0_to_bond) start [ 1583.718443][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88805a33a000 (4)(veth0_to_bond) end [ 1583.739403][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88804c820000 (3)(bridge_slave_1) start [ 1583.759479][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88804c820000 (3)(bridge_slave_1) end [ 1583.779233][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88804c37e000 (4)(veth1_to_bridge) start [ 1583.826761][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88804c37e000 (4)(veth1_to_bridge) end [ 1583.861337][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff888048d24000 (3)(bridge_slave_0) start [ 1583.880154][ T5836] Bluetooth: hci3: command tx timeout [ 1583.886032][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff888048d24000 (3)(bridge_slave_0) end [ 1583.906771][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88804a562000 (4)(veth0_to_bridge) start [ 1583.924737][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88804a562000 (4)(veth0_to_bridge) end [ 1583.945226][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88805b038000 (4)(veth1) start [ 1583.964189][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88805b038000 (4)(veth1) end [ 1583.981970][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88804b642000 (4)(veth0) start [ 1583.999698][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88804b642000 (4)(veth0) end [ 1584.017923][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88804e598000 (4)(batadv0) start [ 1584.066900][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88804e598000 (4)(batadv0) end [ 1584.097322][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff8880491b6000 (4)(dummy0) start [ 1584.118019][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff8880491b6000 (4)(dummy0) end [ 1584.155122][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88804e59c000 (4)(team0) start [ 1584.193414][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88804e59c000 (4)(team0) end [ 1584.250064][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88804de50000 (4)(eth12) start [ 1584.270122][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88804de50000 (4)(eth12) end [ 1584.417039][T19853] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff8880333c4000 (16)(eth11) start [ 1584.435382][T19853] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff8880333c4000 (9)(eth11) end [ 1584.574260][T19853] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff888068918000 (16)(eth10) start [ 1584.617891][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1584.631232][T19853] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff888068918000 (6)(eth10) end [ 1584.738974][ T614] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88807e374000 (23)(eth9) start [ 1584.787765][ T614] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88807e374000 (6)(eth9) end [ 1584.932158][ T1218] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 1585.072332][ T1218] usb 3-1: device descriptor read/64, error -71 [ 1585.096159][T32736] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1585.108868][T32736] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1585.126968][ T417] netlink: 'syz.1.7718': attribute type 13 has an invalid length. [ 1585.141277][T32736] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1585.159530][T32736] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1585.296243][ T429] netlink: 'syz.1.7720': attribute type 10 has an invalid length. [ 1585.311852][ T1218] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 1585.327029][ T429] macvlan0: entered promiscuous mode [ 1585.346121][ T429] macvlan0: entered allmulticast mode [ 1585.451205][ T1218] usb 3-1: device descriptor read/64, error -71 [ 1585.467051][T32736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1585.536794][T32736] 8021q: adding VLAN 0 to HW filter on device team0 [ 1585.585346][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1585.592074][ T1218] usb usb3-port1: attempt power cycle [ 1585.592712][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1585.679216][T19853] bridge0: port 2(bridge_slave_1) entered blocking state [ 1585.686781][T19853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1585.935075][ T1218] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 1585.954275][ T5836] Bluetooth: hci3: command tx timeout [ 1585.985043][ T1218] usb 3-1: device descriptor read/8, error -71 [ 1586.177210][T32736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1586.231240][ T1218] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 1586.253285][ T1218] usb 3-1: device descriptor read/8, error -71 [ 1586.362935][ T1218] usb usb3-port1: unable to enumerate USB device [ 1586.845996][T25866] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff8880513d8000 (12)(syzkaller1) start [ 1586.874926][T25866] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff8880513d8000 (5)(syzkaller1) end [ 1586.878304][T32736] veth0_vlan: entered promiscuous mode [ 1586.930967][T32736] veth1_vlan: entered promiscuous mode [ 1587.089291][T32736] veth0_macvtap: entered promiscuous mode [ 1587.128287][T32736] veth1_macvtap: entered promiscuous mode [ 1587.215842][T32736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1587.278314][T32736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1587.338063][T25866] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.380330][ T488] IPVS: set_ctl: invalid protocol: 5988 100.1.1.2:20002 [ 1587.382436][T25866] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.415797][ T489] 9p: Bad value for 'rfdno' [ 1587.441217][T25866] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.476603][T25866] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.785816][T19847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1587.799094][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1587.825569][T19847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1587.886576][T20092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1587.911156][T20092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1587.943332][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1588.078412][T31672] udevd[31672]: symlink '../../loop5' '/dev/disk/by-diskseq/116.tmp-b7:5' failed: Read-only file system [ 1588.090647][ T30] audit: type=1107 audit(2000000019.600:611): pid=510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='a&ȯ۵AopN< 2 sM6 ̍^T·W[}[zJw0F63h}%' [ 1588.126885][T31670] udevd[31670]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1588.216489][ T513] loop4: detected capacity change from 0 to 1 [ 1588.218834][T31672] udevd[31672]: symlink '../../loop5' '/dev/disk/by-diskseq/116.tmp-b7:5' failed: Read-only file system [ 1588.233497][ T513] Dev loop4: unable to read RDB block 1 [ 1588.240237][ T513] loop4: unable to read partition table [ 1588.264732][ T513] loop4: partition table beyond EOD, truncated [ 1588.282567][ T513] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 1588.297522][T31670] udevd[31670]: symlink '../../loop4' '/dev/disk/by-diskseq/136.tmp-b7:4' failed: Read-only file system [ 1588.333034][T31672] udevd[31672]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1588.455588][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1588.495165][ T30] audit: type=1326 audit(2000000020.010:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=523 comm="syz.2.7737" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f263ff9c629 code=0x0 [ 1588.560654][T26804] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1588.624713][ T526] overlayfs: failed to resolve '/D(YRy]DyUlm!(@ĄeiinwVH~^I4|%B&Wm?#J5MZPQe;{c1by}yk7ƨtH~xB wd5;*?W5 _e``^zOm|5]٠E[NxUKA~4@pgV2UG@ix*9kXaePRȡ̊%Sa5 [ 1588.624713][ T526] ̥=5;$=7Dcs92~q}K& Q?7!EjRA Hw)xNL6'Qd3ttnHi=d0`Gk sFeN?2T+"#@ZjX#+~ڄ~J0K0"ԛ0d6p3N1': -36 [ 1588.795897][T26804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1588.819177][T26804] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1588.856781][T26804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1588.879203][T26804] usb 6-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 1588.889962][T26804] usb 6-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 1588.899109][T26804] usb 6-1: Manufacturer: syz [ 1588.929217][ T540] netlink: 'syz.1.7741': attribute type 4 has an invalid length. [ 1588.939298][T26804] usb 6-1: config 0 descriptor?? [ 1588.955988][T26804] smsusb:smsusb_probe: board id=9, interface number 0 [ 1588.974793][T26804] smsusb:smsusb_probe: Device initialized with return code -19 [ 1589.170163][T26804] usb 6-1: USB disconnect, device number 8 [ 1589.431459][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1589.731446][ T5834] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1589.781825][T31672] udevd[31672]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1589.871870][ T5834] usb 3-1: device descriptor read/64, error -71 [ 1590.139248][ T5834] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1590.236376][ T581] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7747'. [ 1590.301194][ T5834] usb 3-1: device descriptor read/64, error -71 [ 1590.411691][ T5834] usb usb3-port1: attempt power cycle [ 1590.771279][ T5834] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1590.812120][ T5834] usb 3-1: device descriptor read/8, error -71 [ 1591.071397][ T5834] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1591.102530][ T5834] usb 3-1: device descriptor read/8, error -71 [ 1591.221791][ T5834] usb usb3-port1: unable to enumerate USB device [ 1591.245462][ T611] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7753'. [ 1591.665613][ T624] netlink: 252 bytes leftover after parsing attributes in process `syz.0.7756'. [ 1591.874515][ T634] autofs: Unknown parameter 'pm' [ 1592.027475][ T642] netlink: 188 bytes leftover after parsing attributes in process `syz.0.7759'. [ 1592.884604][ T666] CIFS mount error: No usable UNC path provided in device string! [ 1592.884604][ T666] [ 1592.896580][ T665] overlayfs: failed to resolve './file2': -2 [ 1592.903763][ T667] overlayfs: failed to resolve './file2': -2 [ 1592.904001][ T666] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1592.946665][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1592.981800][ T5834] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1593.016801][T31328] udevd[31328]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1593.164935][T31672] udevd[31672]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1593.221877][ T5834] usb 3-1: Using ep0 maxpacket: 16 [ 1593.245646][ T5834] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1593.276246][T31672] udevd[31672]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1593.309811][ T5834] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1593.345769][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.373165][ T5834] usb 3-1: Product: syz [ 1593.400780][ T5834] usb 3-1: Manufacturer: syz [ 1593.435169][ T5834] usb 3-1: SerialNumber: syz [ 1593.496536][ T5834] usb 3-1: config 0 descriptor?? [ 1593.695517][T31672] udevd[31672]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1593.779565][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 1594.061379][T29307] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1594.214648][T29307] usb 6-1: device descriptor read/64, error -71 [ 1594.471280][T29307] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1594.580226][ T724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7773'. [ 1594.622044][T29307] usb 6-1: device descriptor read/64, error -71 [ 1594.742792][T29307] usb usb6-port1: attempt power cycle [ 1594.832010][ T729] IPv6: NLM_F_CREATE should be specified when creating new route [ 1594.960215][T31672] udevd[31672]: symlink '../../loop4' '/dev/disk/by-diskseq/136.tmp-b7:4' failed: Read-only file system [ 1595.039661][T31672] udevd[31672]: symlink '../../loop4' '/dev/disk/by-diskseq/136.tmp-b7:4' failed: Read-only file system [ 1595.121610][T29307] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1595.165166][T29307] usb 6-1: device descriptor read/8, error -71 [ 1595.176551][ T737] overlayfs: failed to resolve './file1': -2 [ 1595.219689][T27255] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1595.232098][T27255] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1595.241568][T27255] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1595.259615][T27255] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1595.267656][T27255] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1595.412290][T29307] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1595.426266][ T738] lo speed is unknown, defaulting to 1000 [ 1595.458254][ T746] ieee802154 phy0 wpan0: encryption failed: -90 [ 1595.482490][T29307] usb 6-1: device descriptor read/8, error -71 [ 1595.525705][ T745] lo speed is unknown, defaulting to 1000 [ 1595.595359][T29307] usb usb6-port1: unable to enumerate USB device [ 1595.611500][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff888073768000 (21)(syz_tun) start [ 1595.661760][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff888073768000 (18)(syz_tun) end [ 1595.686576][ T5889] usb 3-1: USB disconnect, device number 108 [ 1595.797329][T31670] udevd[31670]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1596.181165][ T5889] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1596.360458][ T738] chnl_net:caif_netlink_parms(): no params data found [ 1596.377805][ T5889] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1596.408331][ T5889] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1596.429647][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1596.447631][ T5889] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1596.469620][ T5889] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1596.479592][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.493621][ T5889] usb 3-1: Product: syz [ 1596.497841][ T5889] usb 3-1: Manufacturer: syz [ 1596.503180][ T5889] usb 3-1: SerialNumber: syz [ 1596.521940][ T5889] usb 3-1: config 0 descriptor?? [ 1596.534355][ T5889] garmin_gps 3-1:0.0: Garmin GPS usb/tty converter detected [ 1596.567259][ T5889] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1596.605566][ T5889] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 1596.623217][T19853] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88803b16c000 (11)(erspan0) start [ 1596.647318][T19853] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88803b16c000 (4)(erspan0) end [ 1596.664683][T19853] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88804db1a000 (4)(gretap0) start [ 1596.682116][T19853] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88804db1a000 (4)(gretap0) end [ 1596.766407][ T5889] usb 3-1: USB disconnect, device number 109 [ 1596.778313][ T738] bridge0: port 1(bridge_slave_0) entered blocking state [ 1596.805639][ T738] bridge0: port 1(bridge_slave_0) entered disabled state [ 1596.808831][ T5889] garmin_gps 3-1:0.0: device disconnected [ 1596.823948][ T738] bridge_slave_0: entered allmulticast mode [ 1596.853800][ T738] bridge_slave_0: entered promiscuous mode [ 1596.871048][ T738] bridge0: port 2(bridge_slave_1) entered blocking state [ 1596.905003][ T738] bridge0: port 2(bridge_slave_1) entered disabled state [ 1596.936657][ T738] bridge_slave_1: entered allmulticast mode [ 1596.972566][ T738] bridge_slave_1: entered promiscuous mode [ 1596.986842][T31672] udevd[31672]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1597.178089][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff8880233c0000 (7)(syzkaller1) start [ 1597.244164][ T738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1597.255280][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff8880233c0000 (3)(syzkaller1) end [ 1597.280229][ T738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1597.317880][ T5836] Bluetooth: hci0: command tx timeout [ 1597.446971][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1597.528257][ T738] team0: Port device team_slave_0 added [ 1597.583315][ T738] team0: Port device team_slave_1 added [ 1597.740014][ T738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1597.776934][ T738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1597.848972][ T738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1597.921106][ T30] audit: type=1326 audit(2000000029.430:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=816 comm="syz.0.7785" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9d4bd9c629 code=0x0 [ 1597.962200][ T738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1597.986040][ T818] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1597.994759][ T738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1598.022358][ T738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1598.125189][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1598.163977][ T738] hsr_slave_0: entered promiscuous mode [ 1598.185992][ T738] hsr_slave_1: entered promiscuous mode [ 1598.203134][ T738] debugfs: 'hsr0' already exists in 'hsr' [ 1598.208928][ T738] Cannot create hsr debugfs directory [ 1598.299707][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1598.564720][ T5834] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1598.618067][T31672] udevd[31672]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1598.630451][ T838] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7788'. [ 1598.726037][T25866] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88804f654000 (13)(netdevsim3) start [ 1598.732518][ T5834] usb 3-1: Using ep0 maxpacket: 32 [ 1598.750492][T31672] udevd[31672]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1598.767939][ T738] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1598.792041][ T5834] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1598.802354][T25866] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88804f654000 (8)(netdevsim3) end [ 1598.835207][ T5834] usb 3-1: config 7 has an invalid interface number: 33 but max is 0 [ 1598.848476][ T5834] usb 3-1: config 7 has no interface number 0 [ 1598.858510][ T5834] usb 3-1: string descriptor 0 read error: -22 [ 1598.866508][ T5834] usb 3-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=9e.69 [ 1598.900242][T31672] udevd[31672]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1598.922308][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1598.945909][ T5834] usb 3-1: bad CDC descriptors [ 1599.029811][T20092] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88805b0c4000 (16)(netdevsim2) start [ 1599.032154][ T738] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1599.058280][T20092] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88805b0c4000 (11)(netdevsim2) end [ 1599.180834][ T831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1599.197045][ T831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1599.209618][T20092] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff8880261ec000 (15)(netdevsim1) start [ 1599.217355][ T738] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1599.276025][T20092] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff8880261ec000 (5)(netdevsim1) end [ 1599.318543][T29510] usb 3-1: USB disconnect, device number 110 [ 1599.369596][T31670] udevd[31670]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1599.393431][ T5836] Bluetooth: hci0: command tx timeout [ 1599.453141][T20092] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88804dae4000 (13)(netdevsim0) start [ 1599.473679][ T738] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1599.491318][T20092] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff88804dae4000 (5)(netdevsim0) end [ 1599.650845][ T738] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1599.662546][ T738] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1599.673797][ T738] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1599.681212][T29510] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1599.694470][ T738] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1599.836542][T29510] usb 6-1: config 0 has an invalid interface number: 3 but max is 0 [ 1599.846798][T29510] usb 6-1: config 0 has no interface number 0 [ 1599.853824][ T738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1599.855970][T29510] usb 6-1: New USB device found, idVendor=10b8, idProduct=1f90, bcdDevice= b.78 [ 1599.876351][T29510] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.887924][T29510] usb 6-1: Product: syz [ 1599.893437][T29510] usb 6-1: Manufacturer: syz [ 1599.898230][T29510] usb 6-1: SerialNumber: syz [ 1599.907256][T29510] usb 6-1: config 0 descriptor?? [ 1599.926644][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1599.954359][ T738] 8021q: adding VLAN 0 to HW filter on device team0 [ 1599.978589][ T614] bridge0: port 1(bridge_slave_0) entered blocking state [ 1599.986267][ T614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1600.007865][ T614] bridge0: port 2(bridge_slave_1) entered blocking state [ 1600.015086][ T614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1600.050442][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1600.124366][T29510] dvb-usb: found a 'DiBcom STK807xP reference design' in warm state. [ 1600.144890][T29510] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1600.155261][T29510] dvbdev: DVB: registering new adapter (DiBcom STK807xP reference design) [ 1600.165809][T29510] usb 6-1: media controller created [ 1600.189696][T29510] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1600.276880][T29510] DVB: Unable to find symbol dib8000_attach() [ 1600.306998][T29510] dvb-usb: no frontend was attached by 'DiBcom STK807xP reference design' [ 1600.369851][T27248] udevd[27248]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1600.416393][T29510] rc_core: IR keymap rc-dib0700-nec not found [ 1600.433350][T29510] Registered IR keymap rc-empty [ 1600.443761][T29510] dvb-usb: could not initialize remote control. [ 1600.460498][T29510] dvb-usb: DiBcom STK807xP reference design successfully initialized and connected. [ 1600.462515][ T877] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1600.481825][T29510] usb 6-1: USB disconnect, device number 13 [ 1600.516639][ T877] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 1600.533770][T29510] dvb-usb: DiBcom STK807xP reference design successfully deinitialized and disconnected. [ 1600.544656][ T738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1600.669943][ T738] veth0_vlan: entered promiscuous mode [ 1600.689828][ T738] veth1_vlan: entered promiscuous mode [ 1600.750034][ T738] veth0_macvtap: entered promiscuous mode [ 1600.765457][ T738] veth1_macvtap: entered promiscuous mode [ 1600.799972][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1600.818590][ T738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1600.859394][ T738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1600.956342][ T884] binder: 883:884 ioctl c058565d 200000000280 returned -22 [ 1600.957076][T19853] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.027985][T19853] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.055983][T19853] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.085390][ T887] netlink: 'syz.2.7799': attribute type 10 has an invalid length. [ 1601.096548][T19853] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.282110][T19847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1601.317071][T19847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1601.345022][ T892] netlink: 'syz.2.7801': attribute type 1 has an invalid length. [ 1601.361987][ T892] netlink: 'syz.2.7801': attribute type 2 has an invalid length. [ 1601.370531][ T892] netlink: 'syz.2.7801': attribute type 1 has an invalid length. [ 1601.380917][T19847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1601.395889][ T892] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7801'. [ 1601.404138][ T893] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1601.405850][T19847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1601.471471][ T5836] Bluetooth: hci0: command tx timeout [ 1601.773022][ T5889] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1601.845578][ T907] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1601.932424][ T5889] usb 2-1: Using ep0 maxpacket: 16 [ 1601.940119][ T5889] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1601.961134][ T5889] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1601.983202][ T5889] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1602.002881][ T910] input: syz1 as /devices/virtual/input/input131 [ 1602.014597][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.040947][ T5889] usb 2-1: Product: syz [ 1602.057037][ T5889] usb 2-1: Manufacturer: syz [ 1602.070885][ T5889] usb 2-1: SerialNumber: syz [ 1602.305927][ T5889] usb 2-1: 0:2 : does not exist [ 1602.316983][ T5889] usb 2-1: unit 9 not found! [ 1602.414625][ T922] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.7809'. [ 1602.443457][ T5889] usb 2-1: USB disconnect, device number 90 [ 1602.781247][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1602.901661][T29307] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1602.931426][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1602.945079][ T24] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 1602.971046][ T24] usb 6-1: config 0 has no interface number 0 [ 1602.977626][ T24] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1603.011982][ T24] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1603.022572][ T24] usb 6-1: config 0 interface 85 has no altsetting 0 [ 1603.042786][ T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1603.052330][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.060395][ T24] usb 6-1: Product: syz [ 1603.075874][T29307] usb 3-1: Using ep0 maxpacket: 8 [ 1603.084754][ T24] usb 6-1: Manufacturer: syz [ 1603.089523][ T24] usb 6-1: SerialNumber: syz [ 1603.101044][T29307] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1603.104965][ T24] usb 6-1: config 0 descriptor?? [ 1603.120666][T29307] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1603.147008][T29307] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1603.178914][T29307] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1603.211529][T29307] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1603.222664][T29307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1603.337881][ T929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1603.352927][ T929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1603.363839][ T24] appletouch 6-1:0.85: Failed to read mode from device. [ 1603.374383][ T24] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 1603.410876][ T24] usb 6-1: USB disconnect, device number 14 [ 1603.448840][T29307] usb 3-1: GET_CAPABILITIES returned 0 [ 1603.472048][T29307] usbtmc 3-1:16.0: can't read capabilities [ 1603.551700][ T5836] Bluetooth: hci0: command tx timeout [ 1603.652402][ T932] 9p: Bad value for 'rfdno' [ 1603.659485][ T932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1603.668482][ T932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1603.677900][T29307] usb 3-1: USB disconnect, device number 111 [ 1603.867528][ T975] netlink: 'syz.0.7817': attribute type 1 has an invalid length. [ 1603.878095][ T975] netlink: 'syz.0.7817': attribute type 3 has an invalid length. [ 1603.886637][ T975] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7817'. [ 1603.935054][T31672] udevd[31672]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1604.074003][ T981] Invalid ELF header magic: != ELF [ 1604.096164][T19853] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff8880340d0000 (7)(rose0) start [ 1604.138462][T19853] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff8880340d0000 (5)(rose0) end [ 1604.160565][T31672] udevd[31672]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1604.287073][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1604.473682][ T24] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1604.581417][ T987] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 1604.646745][ T24] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1604.656062][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1604.664461][ T24] usb 6-1: Product: syz [ 1604.668738][ T24] usb 6-1: Manufacturer: syz [ 1604.674772][ T24] usb 6-1: SerialNumber: syz [ 1604.681792][ T24] usb 6-1: config 0 descriptor?? [ 1604.691847][ T24] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 015 [ 1604.756115][ T987] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16932, setting to 64 [ 1604.767451][ T987] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1604.776743][ T987] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1604.788285][ T987] usb 3-1: config 0 descriptor?? [ 1604.794282][ T993] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1604.805280][ T987] uvcvideo 3-1:0.0: Found UVC 0.00 device (10c4:ea90) [ 1604.813568][ T987] uvcvideo 3-1:0.0: No valid video chain found. [ 1604.889845][ T24] (null): failure setting delay to 10us [ 1604.896103][ T5922] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1604.903967][ T24] i2c-tiny-usb 6-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 1604.922924][ T24] usb 6-1: USB disconnect, device number 15 [ 1605.006165][ T993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1605.015233][ T993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1605.024310][ T987] usb 3-1: USB disconnect, device number 112 [ 1605.071359][ T5922] usb 2-1: Using ep0 maxpacket: 16 [ 1605.087049][ T5922] usb 2-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 1605.098116][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1605.106829][ T5922] usb 2-1: Product: syz [ 1605.111416][ T5922] usb 2-1: Manufacturer: syz [ 1605.116041][ T5922] usb 2-1: SerialNumber: syz [ 1605.123690][ T5922] usb 2-1: config 0 descriptor?? [ 1605.130569][ T5922] hub 2-1:0.0: bad descriptor, ignoring hub [ 1605.137911][ T5922] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1605.430209][T31672] udevd[31672]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1605.443520][T29307] usb 2-1: USB disconnect, device number 91 [ 1605.504256][T31672] udevd[31672]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1605.576621][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1605.647462][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1605.901270][T29307] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1606.031454][T29307] usb 3-1: device descriptor read/64, error -71 [ 1606.201300][ T987] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1606.272689][T29307] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1606.353755][ T987] usb 2-1: Using ep0 maxpacket: 32 [ 1606.372857][ T987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1606.384532][ T987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1606.394536][ T987] usb 2-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 1606.403677][ T987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1606.421208][T29307] usb 3-1: device descriptor read/64, error -71 [ 1606.428803][ T987] usb 2-1: config 0 descriptor?? [ 1606.440017][T31672] udevd[31672]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1606.561657][T29307] usb usb3-port1: attempt power cycle [ 1606.782434][ T1024] binder: 1023:1024 ioctl c028660f 200000000000 returned -22 [ 1606.911398][T29307] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1606.943067][T29307] usb 3-1: device descriptor read/8, error -71 [ 1606.950830][ T987] betop 0003:8380:1850.0046: global environment stack underflow [ 1606.975481][ T987] betop 0003:8380:1850.0046: item 0 1 1 11 parsing failed [ 1606.984833][T31672] udevd[31672]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1606.994732][ T987] betop 0003:8380:1850.0046: parse failed [ 1607.011290][ T987] betop 0003:8380:1850.0046: probe with driver betop failed with error -22 [ 1607.024595][ T1031] PKCS7: Unknown OID: [4] 0.38.107.1697900.285475 [ 1607.031522][ T1031] PKCS7: Only support pkcs7_signedData type [ 1607.075037][T31672] udevd[31672]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1607.181369][T29307] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1607.201889][T29307] usb 3-1: device descriptor read/8, error -71 [ 1607.315795][T29307] usb usb3-port1: unable to enumerate USB device [ 1607.364214][ T1038] dvmrp0: entered allmulticast mode [ 1607.402782][ T24] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1607.480008][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.572526][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 1607.580492][ T24] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1607.590816][ T24] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1607.602225][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1607.614252][ T24] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1607.623624][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1607.631894][ T24] usb 6-1: Product: syz [ 1607.636166][ T24] usb 6-1: Manufacturer: syz [ 1607.640798][ T24] usb 6-1: SerialNumber: syz [ 1607.866428][ T24] usb 6-1: 0:2 : does not exist [ 1607.897373][ T24] usb 6-1: USB disconnect, device number 16 [ 1608.475719][ T1045] netlink: 'syz.5.7839': attribute type 1 has an invalid length. [ 1608.484388][ T1045] netlink: 'syz.5.7839': attribute type 2 has an invalid length. [ 1608.492341][ T1045] netlink: 'syz.5.7839': attribute type 1 has an invalid length. [ 1608.500198][ T1045] netlink: 'syz.5.7839': attribute type 3 has an invalid length. [ 1608.508051][ T1045] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7839'. [ 1608.743335][ T1048] kvm: user requested TSC rate below hardware speed [ 1608.970768][ T987] usb 2-1: USB disconnect, device number 92 [ 1609.081254][T29307] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1609.231504][T29307] usb 3-1: Using ep0 maxpacket: 8 [ 1609.245475][T29307] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1609.255337][T29307] usb 3-1: config 3 has no interfaces? [ 1609.265208][T29307] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a3f, bcdDevice=9c.bb [ 1609.275021][T29307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.283164][T29307] usb 3-1: Manufacturer: 暴⯜隢㟗໿쫰⛏ꐧ㓤ꯔ泥壉烴텄￯掳꞊丢駎됆៕꙾匕 [ 1609.295347][T29307] usb 3-1: SerialNumber: ц [ 1609.370413][T31670] udevd[31670]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1609.516718][T29307] usb 3-1: USB disconnect, device number 117 [ 1609.552215][T27255] Bluetooth: hci1: command 0x2016 tx timeout [ 1609.581719][ T1066] input: syz0 as /devices/virtual/input/input133 [ 1610.176819][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1610.218906][T19853] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff8880654ac000 (11)(pimreg0) start [ 1610.265127][T19853] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff8880654ac000 (4)(pimreg0) end [ 1610.472226][T31672] udevd[31672]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1610.547906][T31670] udevd[31670]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1610.860756][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1610.966534][T31672] udevd[31672]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1611.059338][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1611.926314][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1612.080490][T31672] udevd[31672]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1612.139906][T31670] udevd[31670]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1612.461968][ T5922] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1612.671815][ T5922] usb 3-1: Using ep0 maxpacket: 16 [ 1612.691695][ T5922] usb 3-1: config 0 has an invalid interface number: 240 but max is 0 [ 1612.731802][ T5922] usb 3-1: config 0 has no interface number 0 [ 1612.756646][ T30] audit: type=1326 audit(2000000044.270:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1162 comm="syz.5.7870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e8b9c629 code=0x7ffc0000 [ 1612.801612][ T5922] usb 3-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 1612.819805][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.836715][ T30] audit: type=1326 audit(2000000044.270:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1162 comm="syz.5.7870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e8b9c629 code=0x7ffc0000 [ 1612.870068][ T5922] usb 3-1: Product: syz [ 1612.880350][ T5922] usb 3-1: Manufacturer: syz [ 1612.900738][ T5922] usb 3-1: SerialNumber: syz [ 1612.908086][ T30] audit: type=1326 audit(2000000044.270:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1162 comm="syz.5.7870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e8b9c629 code=0x7ffc0000 [ 1612.947585][ T5922] usb 3-1: config 0 descriptor?? [ 1612.977419][ T5922] gspca_main: spca508-2.14.0 probing 041e:4018 [ 1612.988919][ T30] audit: type=1326 audit(2000000044.270:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1162 comm="syz.5.7870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f53e8b9c629 code=0x7ffc0000 [ 1613.024319][ T30] audit: type=1326 audit(2000000044.270:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1162 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e8b9c629 code=0x7ffc0000 [ 1613.049131][ T30] audit: type=1326 audit(2000000044.270:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1162 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e8b9c629 code=0x7ffc0000 [ 1613.171742][ T5922] gspca_spca508: reg_read err -32 [ 1613.177213][ T30] audit: type=1326 audit(2000000044.270:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1162 comm="syz.5.7870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e8b9c629 code=0x7ffc0000 [ 1613.206222][ T5922] gspca_spca508: reg_read err -32 [ 1613.214099][ T30] audit: type=1326 audit(2000000044.270:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1162 comm="syz.5.7870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e8b9c629 code=0x7ffc0000 [ 1613.265817][ T30] audit: type=1326 audit(2000000044.290:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1162 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f53e8b9c629 code=0x7ffc0000 [ 1613.316004][ T30] audit: type=1326 audit(2000000044.290:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1162 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e8b9c629 code=0x7ffc0000 [ 1613.370859][ T1185] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1613.457425][ T5922] gspca_spca508: reg_read err -32 [ 1613.463875][ T5922] gspca_spca508: reg_read err -32 [ 1614.273005][ T24] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1614.282177][ T5922] gspca_spca508: reg write: error -71 [ 1614.289186][ T5922] spca508 3-1:0.240: probe with driver spca508 failed with error -71 [ 1614.312715][ T5922] usb 3-1: USB disconnect, device number 118 [ 1614.404040][T31670] udevd[31670]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1614.451145][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 1614.498895][ T24] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1614.521786][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1614.557182][ T24] usb 6-1: Product: syz [ 1614.569541][ T24] usb 6-1: Manufacturer: syz [ 1614.580008][ T24] usb 6-1: SerialNumber: syz [ 1614.600715][ T24] usb 6-1: config 0 descriptor?? [ 1614.626464][ T24] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1614.665406][ T24] usb 6-1: Detected FT-X [ 1614.918648][ T24] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1615.147725][ T24] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 1615.171744][ T24] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1615.209685][ T24] usb 6-1: USB disconnect, device number 17 [ 1615.244202][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1615.266994][ T24] ftdi_sio 6-1:0.0: device disconnected [ 1615.346512][T31670] udevd[31670]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1615.428443][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1615.681419][T26804] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1615.743143][T31672] udevd[31672]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1615.853298][T26804] usb 3-1: config 0 has no interfaces? [ 1615.860090][T26804] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1615.877736][T26804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1615.923831][T31672] udevd[31672]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1615.942865][T26804] usb 3-1: config 0 descriptor?? [ 1616.174853][ T24] usb 3-1: USB disconnect, device number 119 [ 1616.278381][ T1218] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1617.153933][ T1218] usb 6-1: config 0 has an invalid interface number: 72 but max is 1 [ 1617.164452][ T1218] usb 6-1: config 0 has an invalid interface number: 98 but max is 1 [ 1617.173466][ T1218] usb 6-1: config 0 has no interface number 0 [ 1617.181719][ T1218] usb 6-1: config 0 has no interface number 1 [ 1617.201249][ T1218] usb 6-1: config 0 interface 72 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1617.231952][ T1218] usb 6-1: config 0 interface 72 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1617.249198][ T1218] usb 6-1: config 0 interface 72 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1617.259628][ T1218] usb 6-1: config 0 interface 72 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1617.289075][ T1218] usb 6-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=13.03 [ 1617.300292][ T1218] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1617.322743][ T1218] usb 6-1: Product: syz [ 1617.328440][ T1218] usb 6-1: Manufacturer: syz [ 1617.334853][ T1218] usb 6-1: SerialNumber: syz [ 1617.361823][ T1218] usb 6-1: config 0 descriptor?? [ 1617.370598][ T1251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7897'. [ 1617.372541][ T1218] s2255 6-1:0.72: Could not find bulk-in endpoint [ 1617.389438][ T1218] Sensoray 2255 driver load failed: 0xfffffff4 [ 1617.398351][ T1218] s2255 6-1:0.72: probe with driver s2255 failed with error -12 [ 1617.414253][ T24] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1617.433359][ T1218] s2255 6-1:0.98: Could not find bulk-in endpoint [ 1617.440871][ T1218] Sensoray 2255 driver load failed: 0xfffffff4 [ 1617.444609][ T1253] ieee802154 phy0 wpan0: encryption failed: -22 [ 1617.447670][ T1218] s2255 6-1:0.98: probe with driver s2255 failed with error -12 [ 1617.581178][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 1617.597648][ T1218] usb 6-1: USB disconnect, device number 18 [ 1617.606679][ T24] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1617.638914][ T24] usb 3-1: config 0 has no interface number 0 [ 1617.649990][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1617.682672][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1617.691877][ T24] usb 3-1: Product: syz [ 1617.696102][ T24] usb 3-1: Manufacturer: syz [ 1617.700809][ T24] usb 3-1: SerialNumber: syz [ 1617.720563][ T24] usb 3-1: config 0 descriptor?? [ 1618.154689][ T24] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1618.169854][ T24] uvcvideo 3-1:0.31: No streaming interface found for terminal 32774. [ 1618.190296][T31670] udevd[31670]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1618.199662][ T24] usb 3-1: USB disconnect, device number 120 [ 1618.287230][T31670] udevd[31670]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1618.473213][T31672] udevd[31672]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1618.576570][T31672] udevd[31672]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1618.678054][T31672] udevd[31672]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1618.960539][ T5836] Bluetooth: hci3: Invalid handle: 0x306c > 0x0eff [ 1619.321196][ T24] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1619.434843][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1619.524360][T26804] libceph: connect (1)[c::]:6789 error -101 [ 1619.536055][T26804] libceph: mon0 (1)[c::]:6789 connect error [ 1619.551199][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 1619.562392][ T1287] ceph: No mds server is up or the cluster is laggy [ 1619.579593][ T24] usb 6-1: config 0 has no interfaces? [ 1619.586517][ T24] usb 6-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1619.598136][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1619.611447][ T24] usb 6-1: config 0 descriptor?? [ 1619.755604][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1619.844231][ T24] usb 6-1: USB disconnect, device number 19 [ 1619.866713][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1620.341164][ T24] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1620.449478][T31672] udevd[31672]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1620.516756][ T24] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1620.528142][T31672] udevd[31672]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1620.535957][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1620.567792][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1620.588188][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1620.600127][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1620.619902][ T24] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1620.680231][ T24] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1620.688742][ T24] usb 2-1: Product: syz [ 1620.693737][ T24] usb 2-1: Manufacturer: syz [ 1620.707314][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 1620.863219][T31670] udevd[31670]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1620.894083][T26804] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1621.020082][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 1621.028307][ T24] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1621.034492][ T24] cdc_wdm 2-1:1.0: Unknown control protocol [ 1621.045673][ T24] usb 2-1: USB disconnect, device number 93 [ 1621.214518][ T5836] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1621.265975][T26804] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1621.410311][T26804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1621.592240][T26804] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1621.742172][T26804] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1621.951558][T26804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.959706][T26804] usb 6-1: Product: syz [ 1621.965117][T26804] usb 6-1: Manufacturer: syz [ 1621.969769][T26804] usb 6-1: SerialNumber: syz [ 1621.993989][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1622.012873][T26804] usb 6-1: config 0 descriptor?? [ 1622.032118][ T1316] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1622.652184][ T1316] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1622.710402][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff888047da0000 (3)(rose0) start [ 1622.917927][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff888047da0000 (3)(rose0) end [ 1622.971806][T31328] udevd[31328]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1623.122914][T26804] usb 6-1: USB disconnect, device number 20 [ 1623.167471][T31670] udevd[31670]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1623.182302][T26186] udevd[26186]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1624.912886][T31672] udevd[31672]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1626.583904][T31670] udevd[31670]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1627.175778][ T1371] overlayfs: failed lookup in lower (newroot/54, name='file1', err=-40): overlapping layers [ 1627.692208][T31672] udevd[31672]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1627.771012][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1629.526055][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1629.665440][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1629.941185][ T10] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1630.046109][ T1392] netlink: 'syz.1.7949': attribute type 4 has an invalid length. [ 1630.114060][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1630.137889][ T10] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1630.150037][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1630.161638][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1630.178879][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1630.203703][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1630.225963][T31672] udevd[31672]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1630.243767][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1630.257712][ T10] usb 3-1: Product: syz [ 1630.263607][ T10] usb 3-1: Manufacturer: syz [ 1630.283132][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 1630.296642][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 1630.316496][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1630.326298][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 1630.481664][ T24] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1630.642179][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1630.649781][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1630.661671][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1630.677416][ T24] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1630.687309][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1630.698096][ T1405] fuse: Unknown parameter 'use00000000000000000000' [ 1630.698834][ T24] usb 6-1: config 0 descriptor?? [ 1630.961293][ T1218] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1631.121646][ T1218] usb 2-1: Using ep0 maxpacket: 8 [ 1631.127846][ T24] hid_parser_main: 1 callbacks suppressed [ 1631.127869][ T24] koneplus 0003:1E7D:2D51.0047: unknown main item tag 0x0 [ 1631.140966][ T24] koneplus 0003:1E7D:2D51.0047: unknown main item tag 0x0 [ 1631.150763][ T24] koneplus 0003:1E7D:2D51.0047: unknown main item tag 0x0 [ 1631.161339][ T24] koneplus 0003:1E7D:2D51.0047: unknown main item tag 0x0 [ 1631.168814][ T24] koneplus 0003:1E7D:2D51.0047: unknown main item tag 0x0 [ 1631.176817][ T1218] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1631.190190][ T1218] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1631.201656][ T24] koneplus 0003:1E7D:2D51.0047: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.5-1/input0 [ 1631.215008][ T1218] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1631.225596][ T1218] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1631.239530][ T1218] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1631.253476][ T1218] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1631.324495][ T24] koneplus 0003:1E7D:2D51.0047: couldn't init struct koneplus_device [ 1631.339098][ T24] koneplus 0003:1E7D:2D51.0047: couldn't install mouse [ 1631.351922][ T24] koneplus 0003:1E7D:2D51.0047: probe with driver koneplus failed with error -71 [ 1631.367296][ T24] usb 6-1: USB disconnect, device number 21 [ 1631.489899][ T1218] usb 2-1: usb_control_msg returned -32 [ 1631.495811][ T1218] usbtmc 2-1:16.0: can't read capabilities [ 1631.876523][T31672] udevd[31672]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1632.131304][ T24] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1632.314581][ T24] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1632.323152][ T24] usb 6-1: config 0 has no interface number 0 [ 1632.334900][ T24] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1632.344163][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1632.352527][ T24] usb 6-1: Product: syz [ 1632.357048][ T24] usb 6-1: Manufacturer: syz [ 1632.361855][ T24] usb 6-1: SerialNumber: syz [ 1632.369581][ T24] usb 6-1: config 0 descriptor?? [ 1632.581352][ T24] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1632.594534][ T24] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1632.605469][ T24] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1632.613676][ T24] usb 6-1: media controller created [ 1632.627512][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1632.714921][ T10] usb 3-1: USB disconnect, device number 121 [ 1632.766654][ T1412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7956'. [ 1632.767328][T27248] udevd[27248]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1632.789244][ T24] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 1632.867250][ T24] usb 6-1: USB disconnect, device number 22 [ 1632.870826][T31670] udevd[31670]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1632.956359][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1633.140099][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1633.222215][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1633.236226][ T1426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7963'. [ 1633.285117][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1633.365622][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1633.395907][T31672] udevd[31672]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1633.712831][ T1218] usb 2-1: USB disconnect, device number 94 [ 1633.881295][ T24] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1634.041236][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 1634.066066][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1634.086455][ T24] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1634.098134][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1634.160704][ T24] usb 6-1: config 0 descriptor?? [ 1634.758679][ T24] input: HID 041e:3100 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:041E:3100.0048/input/input134 [ 1634.885971][ T24] creative-sb0540 0003:041E:3100.0048: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.5-1/input0 [ 1634.941760][ T24] usb 6-1: USB disconnect, device number 23 [ 1635.054416][ T1463] fido_id[1463]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1635.998891][T31672] udevd[31672]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1636.146467][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1636.660224][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1636.944714][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1637.073793][T31672] udevd[31672]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1637.114945][T31670] udevd[31670]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1637.215043][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff8880a4fdc000 (15)(syzkaller1) start [ 1637.216237][ T1502] support for cryptoloop has been removed. Use dm-crypt instead. [ 1637.236587][T19855] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88803513c000 (14)(syz2) rdma_ndev=ffff888077868000 (18)(bond_slave_1) cookie=ffff8880a4fdc000 (10)(syzkaller1) end [ 1637.334138][ T1218] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1637.381216][T26804] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1637.410798][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1637.494370][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1637.541292][ T1218] usb 6-1: Using ep0 maxpacket: 8 [ 1637.571178][T26804] usb 2-1: Using ep0 maxpacket: 32 [ 1637.589178][ T1218] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1637.604988][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1637.621210][T26804] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1637.630582][ T1218] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.657071][ T1218] usb 6-1: Product: syz [ 1637.658240][T26804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1637.661397][ T1218] usb 6-1: Manufacturer: syz [ 1637.692388][T26804] usb 2-1: config 0 descriptor?? [ 1637.710286][ T1218] usb 6-1: SerialNumber: syz [ 1637.748692][ T1218] usb 6-1: config 0 descriptor?? [ 1637.776245][ T1218] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1637.814657][ T1218] pctv452e: pctv452e_power_ctrl: 1 [ 1637.814657][ T1218] [ 1637.842580][T31670] udevd[31670]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1637.859508][ T1218] usb 6-1: selecting invalid altsetting 3 [ 1637.879675][ T1218] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1637.879675][ T1218] [ 1637.917943][T26804] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1637.929864][T26804] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1637.939746][ T1218] dvb-usb: bulk message failed: -22 (5/0) [ 1637.974157][T26804] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1637.988191][T26804] usb 2-1: media controller created [ 1638.009972][T26804] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1638.099939][ T1218] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1638.881340][T26804] DVB: Unable to find symbol dib7000p_attach() [ 1638.891309][T26804] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1638.911744][ T1218] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1638.962386][ T1218] usb 6-1: media controller created [ 1639.000472][ T1218] dvb-usb: bulk message failed: -22 (8/0) [ 1639.027646][ T1218] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1639.068423][ T1218] dvb-usb: MAC address reading failed. [ 1639.084927][ T1529] binder: 1528:1529 ioctl 4020ae46 0 returned -22 [ 1639.095823][T26804] rc_core: IR keymap rc-dib0700-rc5 not found [ 1639.113004][ T1529] binder: 1528:1529 ioctl 41a0ae8d 200000000800 returned -22 [ 1639.121167][T26804] Registered IR keymap rc-empty [ 1639.133546][T26804] dvb-usb: could not initialize remote control. [ 1639.167201][T26804] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1639.215838][ T1218] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1639.219115][T26804] usb 2-1: USB disconnect, device number 95 [ 1639.369163][T26804] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1639.514497][ T1218] DVB: Unable to find symbol stb0899_attach() [ 1639.527690][ T1218] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1639.661137][ T1218] rc_core: IR keymap rc-tt-1500 not found [ 1639.668870][ T1218] Registered IR keymap rc-empty [ 1639.681250][ T1218] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 1639.693903][ T1218] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input136 [ 1639.709849][ T1218] dvb-usb: schedule remote query interval to 100 msecs. [ 1639.717858][ T1218] pctv452e: pctv452e_power_ctrl: 0 [ 1639.717858][ T1218] [ 1639.725305][ T1218] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1639.759203][ T1218] usb 6-1: USB disconnect, device number 24 [ 1639.950244][ T1218] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1641.389046][T31672] udevd[31672]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1642.249826][T31672] udevd[31672]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1642.423856][T31672] udevd[31672]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1642.704208][T31672] udevd[31672]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1642.776733][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1642.848989][T31670] udevd[31670]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1642.949723][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1643.043269][T31670] udevd[31670]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1643.216686][T31672] udevd[31672]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1643.294742][T31672] udevd[31672]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1643.651174][ T10] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1644.592132][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1644.602455][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1644.620534][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1645.471537][ T10] usb 2-1: config 0 has no interface number 0 [ 1645.498612][ T10] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1645.498711][ T1600] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1645.518132][ T1600] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1645.551805][ T1600] vhci_hcd vhci_hcd.0: Device attached [ 1645.562667][ T1604] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 1645.569358][ T1604] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1645.588088][ T10] usb 2-1: New USB device found, idVendor=0421, idProduct=008f, bcdDevice=ba.de [ 1645.608213][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1645.611367][ T1604] vhci_hcd vhci_hcd.0: Device attached [ 1645.624187][ T1600] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(5) [ 1645.627334][ T10] usb 2-1: config 0 descriptor?? [ 1645.630738][ T1600] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1645.670998][ T1604] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(8) [ 1645.673623][ T10] usb 2-1: bad CDC descriptors [ 1645.677599][ T1604] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1645.685180][ T10] cdc_acm 2-1:0.1: Zero length descriptor references [ 1645.697480][ T1600] vhci_hcd vhci_hcd.0: Device attached [ 1645.707632][ T10] cdc_acm 2-1:0.1: probe with driver cdc_acm failed with error -22 [ 1645.724130][ T1600] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1645.741564][ T1604] vhci_hcd vhci_hcd.0: Device attached [ 1645.762691][ T1610] vhci_hcd: connection closed [ 1645.762974][ T614] vhci_hcd vhci_hcd.0: stop threads [ 1645.777573][ T1608] vhci_hcd: connection closed [ 1645.779819][ T1605] vhci_hcd: connection closed [ 1645.814359][ T1601] vhci_hcd: connection closed [ 1645.814575][ T614] vhci_hcd vhci_hcd.0: release socket [ 1645.831665][ T614] vhci_hcd vhci_hcd.0: disconnect device [ 1645.837624][ T614] vhci_hcd vhci_hcd.0: stop threads [ 1645.844976][ T614] vhci_hcd vhci_hcd.0: release socket [ 1645.850745][ T614] vhci_hcd vhci_hcd.0: disconnect device [ 1645.856618][T29307] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 1645.866986][ T1602] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1645.883140][ T1607] [ 1645.885526][ T1607] ====================================================== [ 1645.892296][ T614] vhci_hcd vhci_hcd.0: stop threads [ 1645.892805][ T1607] WARNING: possible circular locking dependency detected [ 1645.905232][ T1607] syzkaller #0 Tainted: G L [ 1645.905366][ T10] usb 2-1: USB disconnect, device number 96 [ 1645.911310][ T1607] ------------------------------------------------------ [ 1645.911322][ T1607] syz.5.8030/1607 is trying to acquire lock: [ 1645.911335][ T1607] ffffffff8ea5e9a8 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x218/0x19c0 [ 1645.911391][ T1607] [ 1645.911391][ T1607] but task is already holding lock: [ 1645.911399][ T1607] ffff888026942680 (&q->q_usage_counter(io)#54){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 1645.958074][ T1607] [ 1645.958074][ T1607] which lock already depends on the new lock. [ 1645.958074][ T1607] [ 1645.968601][ T1607] [ 1645.968601][ T1607] the existing dependency chain (in reverse order) is: [ 1645.977717][ T1607] [ 1645.977717][ T1607] -> #2 (&q->q_usage_counter(io)#54){++++}-{0:0}: [ 1645.986443][ T1607] blk_alloc_queue+0x546/0x680 [ 1645.991812][ T1607] __blk_mq_alloc_disk+0x197/0x390 [ 1645.997475][ T1607] nbd_dev_add+0x499/0xb50 [ 1646.002512][ T1607] nbd_init+0x168/0x1f0 [ 1646.007305][ T1607] do_one_initcall+0x250/0x8d0 [ 1646.012595][ T1607] do_initcall_level+0x104/0x190 [ 1646.018331][ T1607] do_initcalls+0x59/0xa0 [ 1646.023220][ T1607] kernel_init_freeable+0x2a6/0x3e0 [ 1646.028967][ T1607] kernel_init+0x1d/0x1d0 [ 1646.033923][ T1607] ret_from_fork+0x51e/0xb90 [ 1646.039056][ T1607] ret_from_fork_asm+0x1a/0x30 [ 1646.044363][ T1607] [ 1646.044363][ T1607] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1646.051586][ T1607] fs_reclaim_acquire+0x71/0x100 [ 1646.057054][ T1607] prepare_alloc_pages+0x152/0x650 [ 1646.062954][ T1607] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1646.069369][ T1607] __alloc_pages_noprof+0xa/0x30 [ 1646.074831][ T1607] pcpu_populate_chunk+0x182/0xb30 [ 1646.080481][ T1607] pcpu_alloc_noprof+0xc6c/0x19c0 [ 1646.086029][ T1607] xt_percpu_counter_alloc+0x161/0x220 [ 1646.092015][ T1607] translate_table+0x134a/0x2110 [ 1646.097569][ T1607] ipt_register_table+0x11b/0x7f0 [ 1646.103138][ T1607] iptable_nat_table_init+0x43/0x2e0 [ 1646.109142][ T1607] xt_find_table_lock+0x30c/0x3e0 [ 1646.114708][ T1607] xt_request_find_table_lock+0x26/0x100 [ 1646.121053][ T1607] do_ipt_get_ctl+0x716/0x1240 [ 1646.126438][ T1607] nf_getsockopt+0x26e/0x290 [ 1646.131640][ T1607] ip_getsockopt+0x19e/0x230 [ 1646.136748][ T1607] do_sock_getsockopt+0x2d3/0x3f0 [ 1646.142298][ T1607] __x64_sys_getsockopt+0x1a4/0x240 [ 1646.148026][ T1607] do_syscall_64+0x14d/0xf80 [ 1646.153135][ T1607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1646.159655][ T1607] [ 1646.159655][ T1607] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 1646.167401][ T1607] __lock_acquire+0x15a5/0x2cf0 [ 1646.172792][ T1607] lock_acquire+0xf0/0x2e0 [ 1646.177734][ T1607] __mutex_lock+0x19f/0x1300 [ 1646.183276][ T1607] pcpu_alloc_noprof+0x218/0x19c0 [ 1646.188824][ T1607] sbitmap_init_node+0x1e1/0x640 [ 1646.194286][ T1607] sbitmap_queue_init_node+0x3e/0x4d0 [ 1646.200365][ T1607] blk_mq_init_tags+0x15c/0x2d0 [ 1646.205853][ T1607] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 1646.211879][ T1607] blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 1646.218232][ T1607] nbd_start_device+0x17f/0xb10 [ 1646.223870][ T1607] nbd_ioctl+0x579/0xe40 [ 1646.228638][ T1607] blkdev_ioctl+0x5e3/0x740 [ 1646.233670][ T1607] __se_sys_ioctl+0xfc/0x170 [ 1646.238870][ T1607] do_syscall_64+0x14d/0xf80 [ 1646.243980][ T1607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1646.250493][ T1607] [ 1646.250493][ T1607] other info that might help us debug this: [ 1646.250493][ T1607] [ 1646.260893][ T1607] Chain exists of: [ 1646.260893][ T1607] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#54 [ 1646.260893][ T1607] [ 1646.274667][ T1607] Possible unsafe locking scenario: [ 1646.274667][ T1607] [ 1646.282214][ T1607] CPU0 CPU1 [ 1646.287663][ T1607] ---- ---- [ 1646.293024][ T1607] lock(&q->q_usage_counter(io)#54); [ 1646.298405][ T1607] lock(fs_reclaim); [ 1646.304919][ T1607] lock(&q->q_usage_counter(io)#54); [ 1646.312832][ T1607] lock(pcpu_alloc_mutex); [ 1646.317453][ T1607] [ 1646.317453][ T1607] *** DEADLOCK *** [ 1646.317453][ T1607] [ 1646.325598][ T1607] 4 locks held by syz.5.8030/1607: [ 1646.330709][ T1607] #0: ffff8880277c71d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1ae0 [ 1646.342288][ T1607] #1: ffff8880277c70d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1ae0 [ 1646.353254][ T1607] #2: ffff888026942680 (&q->q_usage_counter(io)#54){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 1646.364096][ T1607] #3: ffff8880269426b8 (&q->q_usage_counter(queue)#38){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 1646.375277][ T1607] [ 1646.375277][ T1607] stack backtrace: [ 1646.381167][ T1607] CPU: 1 UID: 0 PID: 1607 Comm: syz.5.8030 Tainted: G L syzkaller #0 PREEMPT(full) [ 1646.381191][ T1607] Tainted: [L]=SOFTLOCKUP [ 1646.381197][ T1607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1646.381206][ T1607] Call Trace: [ 1646.381214][ T1607] [ 1646.381221][ T1607] dump_stack_lvl+0xe8/0x150 [ 1646.381243][ T1607] print_circular_bug+0x2e1/0x300 [ 1646.381267][ T1607] check_noncircular+0x12e/0x150 [ 1646.381290][ T1607] __lock_acquire+0x15a5/0x2cf0 [ 1646.381316][ T1607] lock_acquire+0xf0/0x2e0 [ 1646.381334][ T1607] ? pcpu_alloc_noprof+0x218/0x19c0 [ 1646.381354][ T1607] __mutex_lock+0x19f/0x1300 [ 1646.381369][ T1607] ? pcpu_alloc_noprof+0x218/0x19c0 [ 1646.381384][ T1607] ? stack_depot_save_flags+0x3f3/0x810 [ 1646.381408][ T1607] ? kasan_save_track+0x4f/0x80 [ 1646.381422][ T1607] ? kasan_save_track+0x3e/0x80 [ 1646.381435][ T1607] ? pcpu_alloc_noprof+0x218/0x19c0 [ 1646.381449][ T1607] ? __kmalloc_cache_node_noprof+0x3ef/0x6b0 [ 1646.381464][ T1607] ? blk_mq_init_tags+0x83/0x2d0 [ 1646.381482][ T1607] ? blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 1646.381496][ T1607] ? blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 1646.381513][ T1607] ? __pfx___mutex_lock+0x10/0x10 [ 1646.381525][ T1607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1646.381546][ T1607] pcpu_alloc_noprof+0x218/0x19c0 [ 1646.381566][ T1607] sbitmap_init_node+0x1e1/0x640 [ 1646.381585][ T1607] sbitmap_queue_init_node+0x3e/0x4d0 [ 1646.381603][ T1607] blk_mq_init_tags+0x15c/0x2d0 [ 1646.381623][ T1607] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 1646.381639][ T1607] ? kfree+0x1c1/0x630 [ 1646.381660][ T1607] ? blk_mq_update_nr_hw_queues+0x977/0x1ae0 [ 1646.381678][ T1607] blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 1646.381699][ T1607] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 1646.381717][ T1607] ? tomoyo_path_number_perm+0x219/0x630 [ 1646.381754][ T1607] ? __pfx___mutex_lock+0x10/0x10 [ 1646.381769][ T1607] nbd_start_device+0x17f/0xb10 [ 1646.381788][ T1607] nbd_ioctl+0x579/0xe40 [ 1646.381813][ T1607] ? __pfx_nbd_ioctl+0x10/0x10 [ 1646.381833][ T1607] ? __pfx_nbd_ioctl+0x10/0x10 [ 1646.381849][ T1607] blkdev_ioctl+0x5e3/0x740 [ 1646.381865][ T1607] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1646.381879][ T1607] ? __fget_files+0x2a/0x420 [ 1646.381900][ T1607] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1646.381918][ T1607] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1646.381932][ T1607] __se_sys_ioctl+0xfc/0x170 [ 1646.381949][ T1607] do_syscall_64+0x14d/0xf80 [ 1646.381962][ T1607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1646.381977][ T1607] ? clear_bhb_loop+0x40/0x90 [ 1646.381993][ T1607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1646.382008][ T1607] RIP: 0033:0x7f53e8b9c629 [ 1646.382022][ T1607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1646.382036][ T1607] RSP: 002b:00007f53e6df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1646.382054][ T1607] RAX: ffffffffffffffda RBX: 00007f53e8e15fa0 RCX: 00007f53e8b9c629 [ 1646.382066][ T1607] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004 [ 1646.382076][ T1607] RBP: 00007f53e8c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1646.382085][ T1607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1646.382095][ T1607] R13: 00007f53e8e16038 R14: 00007f53e8e15fa0 R15: 00007fffb3f80198 [ 1646.382111][ T1607] [ 1646.391898][ T614] vhci_hcd vhci_hcd.0: release socket [ 1646.726252][T31672] udevd[31672]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 1646.748252][ T614] vhci_hcd vhci_hcd.0: disconnect device [ 1646.754699][ T5836] block nbd5: Receive control failed (result -32) [ 1646.762588][T27255] block nbd5: Receive control failed (result -32) [ 1646.764113][ T614] vhci_hcd vhci_hcd.0: stop threads [ 1646.774469][ T614] vhci_hcd vhci_hcd.0: release socket [ 1646.779927][ T614] vhci_hcd vhci_hcd.0: disconnect device [ 1646.786607][ T1607] block nbd5: shutting down sockets [ 1646.824144][T31672] udevd[31672]: symlink '../../loop5' '/dev/disk/by-diskseq/135.tmp-b7:5' failed: Read-only file system [ 1650.982001][T29307] vhci_hcd vhci_hcd.0: vhci_device speed not set