last executing test programs: 14m18.521638627s ago: executing program 4 (id=1796): mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x3, 0x30, 0xffffffffffffffff, 0x0) 14m18.396257768s ago: executing program 4 (id=1797): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES8=r0, @ANYRESOCT=r0, @ANYRES16=r0, @ANYBLOB="c3d5b009117e3f9f5b2e34c572bea50ec4099e3c5de2ff9057a20f4ef23bf885146c0c207b9b19bb5ae397f470202523d4152943b58eaf9c71001d8c92bf528bea455342ce8cb5c4d48c0a6864bedf10c3115bedb4f6495da2835d7db25d0335e185ac0917fd9fb9e0b236994f0a0d62a7d3bf7cf0bc", @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYBLOB="59f5d28d033d78df41ed887495b5ee7952abbf1537b84b216e34d105003216ecb2af8483d4940d431eef2a123ce7522b7979054287ebb87821337ffa48486766c35a7c4ac0ef207cf479b2e454d20a5d5696a605504e729ad6781224bf72f20f2115", @ANYBLOB="752266a8fab22d84068bee416cf626f968eb6753aabbb93fc8b16b2fefb4e56b4f95d8b59f90d4f4c4cc64c7103ee6ed9877191c8c7f95d6a13c957d3b5e8c7ddf0ecfc2dec083b04cf0b30ad01d55f4d450a4e09f2df842278926091a9d4efddddac1a8d47a0e0388b5617e00aea56089d57ee911f66b8723e2336043814e492d6f1b7e17eaddc2ae4477f2fab326648c5dfff3693ef5ae039763ced8e01d13d7dc7661dbf26580e79f919a3b238c1b"], 0x7c}}, 0x4000085) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000308000340000000170900010073797a30000000000900020073797a32"], 0x94}}, 0x0) 14m18.370029958s ago: executing program 4 (id=1798): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000002c0), 0x4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x2, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x10000}]}, 0x20}, 0x1, 0x0, 0x0, 0x45}, 0x44800) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) close(0xffffffffffffffff) openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x0, {0x132e712c, 0x2fd, 0x3ff, 0x3d45}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) syz_usb_connect(0x0, 0x3b, &(0x7f0000002080)={{0x12, 0x1, 0x110, 0x41, 0xa7, 0x38, 0x10, 0xd49, 0x7000, 0x6c67, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0x8, 0x2, 0x10, 0x2, [{{0x9, 0x4, 0xc6, 0x9, 0x0, 0x91, 0xb0, 0x9b, 0xf6, [@uac_control={{0xa, 0x24, 0x1, 0x53, 0x6}, [@mixer_unit={0x5, 0x24, 0x4, 0x5, 0x3c}, @feature_unit={0x9, 0x24, 0x6, 0x2, 0x6, 0x1, [0x9], 0x4}]}]}}]}}]}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x6}}]}}]}, 0x48}}, 0x44080) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r9, {0xf, 0xa}, {0xffe0, 0xa}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0xb, 0x52, 0x97, 0x8, 0xe41, 0x4142, 0xd46e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x0, 0x21, 0xf7, 0x68}}]}}]}}, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x84002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000", @ANYRES32, @ANYRESHEX=r4], 0x3c}}, 0x0) 14m14.971954589s ago: executing program 4 (id=1811): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x7e, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000010280)='id_resolver\x00', &(0x7f0000010200)='iy\"\xac\xd1\xeb\x93\xc4\xe4\x03\x9b>\xae3%\xef>\x8e1w\xfd\x00\x00\x00') syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000010000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c4be3e4ec3ce3a8ad0017d88f95233ba224c6f1fb2a563c05015ccfac15798d9dfe8bc2f23d72"], 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x6}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a380)="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", 0x2000, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x78, 0xffffffffffffffda, 0x0, {0xcdce, 0xe, 0x0, {0x3, 0x0, 0x9, 0x1, 0x5, 0x6, 0x80000000, 0xb, 0x8, 0x5000, 0xffffffff, r6, r7, 0x300, 0x23}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_STATX(r3, &(0x7f00000100c0)={0x130, 0xfffffffffffffff5, 0x0, {0x200, 0x7, 0x0, '\x00', {0x100, 0x7fffffff, 0xffffffffffffffff, 0x5, 0x0, r7, 0xa000, '\x00', 0x0, 0x1, 0x0, 0x4, {0x2, 0x8000}, {0x8001, 0xffffc000}, {0x45d, 0x7}, {0x8, 0x10001}, 0x1ff, 0x7ff, 0x10, 0x6}}}, 0x130) sendmmsg$inet6(r4, &(0x7f0000000380)=[{{&(0x7f0000000300)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00', 0x6}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)}}], 0x2, 0x0) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000540)={0x0, 0x1b, "e7898580ff3e7683e4db195e23ccc1238b9d6d51765e3e73000000"}, &(0x7f0000000580)=0x23) r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB='@7\r'], 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000040)=0x45ce, 0x4) r10 = socket$kcm(0xa, 0x5, 0x0) ppoll(&(0x7f0000000080)=[{r10, 0x310}], 0x1, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r9, 0x8907, 0x0) syz_usb_control_io$hid(r8, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000f00)=ANY=[@ANYBLOB="221528000000a559"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r8, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x0, 0x18, 0x4, "4cd1953d"}, 0x0, 0x0}) 14m11.703275713s ago: executing program 4 (id=1830): io_setup(0x7ff, &(0x7f00000003c0)=0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) io_submit(r0, 0x6, &(0x7f0000000c00)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x9, 0xffffffffffffffff, &(0x7f00000005c0)="d4c10d00ea965fc8e6d6d2ebcbe780925e65", 0x12, 0x4, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x8, r1, &(0x7f0000000640)="710755d1d662cd19d0ee0d8b48effe6c2000fb927efc99d6d30949786ac23ad988ff2204497b77e5072d268dba5a077e0ca1af4f7ab1cce75b6fae00cf576c904a69e6ea891d6a24c083baea1447318141c525490a8d", 0x56, 0x6a0, 0x0, 0x3}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x2, r1, &(0x7f0000000700)="d096c96fa94cbc4898a6e432c622ffab45eced1f37b19e69727e177fa58aff0852e5313bf91f18581067434eff65859d69433f4b051e9895b41512c817edd8872f5ab0e0c9e9208f28aca9f679f454d7817e56f7ee0d901a9bd91789f9ae45c711e8c5f6de98c632f01934593b89ee119067265cc5790b950d123fc2dc735ded8a0be0f52f0e7bc130cf12e546d44a93515290c92913447bfed14815a979891f940535db7524bdc71459cc952add4cb3e13cbbd07712b9b6ac87fc4e66f516a5535fdf30de36f91b9c225d2d330f05072bbae9db688ce8317381325b53b9731252c29fef00688b51", 0xe8, 0x7, 0x0, 0x5}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x5, 0x1, r1, &(0x7f0000000840)="19f0dc1164f23b3f71d6d1e938869111ff552378a6d1c7021fe6d9de4de9cec935a2fea512bf7a47e9700d773231d06ede27ddaf0a5fadbb7ab89b6d204009c4b438f29f10a0446d53ddc89b80bde569843fa921bb0093349a8a29e7fcab00c9c6a0b6c750aa13bc8024630a66aa8c92d6b1cc49cec2f53c2c9865f7fe5fd9036c2d22fbea", 0x85, 0x1, 0x0, 0x1}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x8, r1, &(0x7f0000000980)="44840ea5ff9a46780fd2fd270cde1648710e2ab3fe0a71d221fca9f766b17ce79e94822eedd2b50ce925cce8686b2bc62b210e027be8d87469804cf35772472ccd161226d1679901d745dca6f6a6c1e0930e93d9d696f934fd79b33f04052442e5340165bae05e5dccc29a09a20869e497e4c965fdfead2a60d3c4aaaa9a4971aae2d66aeafa218e320c011d491b768c0ebde6ca506b843eb60a786d00f43b38b785773476dd74e06daa05a135dd1394391813da248a313ae1dc3bc3e5b80fd8b8ee61bbe6a90174a9e9d897f5", 0xcd, 0xea27, 0x0, 0x1}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x6, 0x7, r1, &(0x7f0000000ac0)="56ccff523218fb7ef79096fce7331210cf92f5a813479654d4e6587f48add2fbd25742ed7cecd99e91dac79f017fbbc47d497a0f1ddc2a7b2f5c4169f7ea9b1b308e331a5a0d5da580d1975fba35500e7668937504eb07808fe086199d7fcbd8adb6a211a048960f779bd88a084dec38fe46e8d643f0ba572af8f6bfc3bb6a65c020aabfae2d85ab3e7336f51e64636fe021cbac5e38a11daa8d51effd59fbafcfd4808d411f99d66e370d34e1b6aeb62c9058c68929dc8ca63a0155c40544b7daf19acf967011f5cbbbe6fe244c10f0539ac691130a2062e25e4c740f42c9bb8414c5dacaa2168426634ebad484d56b2ff1cf95db4d3c0228", 0xf9, 0x5}]) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="d93c3979db996d1c840ab40697d7281cd758d64c70f852a5e15edbe646cd0f03dd2d697423615b73684c141e61752f8c91460dfe6ce21bd90f07"], 0x1c}}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, 0x0) r6 = open$dir(&(0x7f0000000240)='./file0\x00', 0x800, 0x100) openat$incfs(r6, &(0x7f0000000280)='.log\x00', 0x800, 0x0) syz_open_procfs$pagemap(0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x189240, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETTXFILTER(r7, 0x400454d1, &(0x7f0000000040)=ANY=[@ANYBLOB="01f20000bbbb8a5cbbbb"]) ioctl$USBDEVFS_CLAIM_PORT(r5, 0x80045518, &(0x7f0000000000)) ioctl$USBDEVFS_BULK(r5, 0xc0185502, &(0x7f0000000380)={{{0xf}}, 0x0, 0x6, &(0x7f00000001c0)}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x1, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r9, 0x18f40, 0x2200a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$P9_RSTATu(r2, &(0x7f0000000080)={0x50e, 0x7d, 0x0, {{0x500, 0x1f8, 0x0, 0x40, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xc, 0x0, 0x10f, '\x04nodZ=\xbfd`\xd2\xc2\x97D,\x027\xfcb%\xff\xff\xff\x80\x05\x00\x00\x00\x00\x00\x00\xff\x03\xff\x92\xe9\x16\x00\x05\x00\x00\x00,\x93\xcb=\xb6\xc21\xd1\x19\xaa\xa1ou\xc5\x8f\xa6\x88\x9f\xf3\xc8\xf7\xab\xc6\x1bY\xa1\xd2o\fJ\xf8\xe2\x93\xd3\xf8l\xcd\xc6o\xf5{\xe9\x00\x00\x00\x00\x00\x00\x00\x03\xd5\x89-\x8e\xfe\xbb\x9e\x05\xac\nk\xc5)`z\xc6\x8a8\x13\xaf\xe7\x9e\x85cj\xfdl]\x15\xb2\xae\xbb\xb7\xee;\x1e\xae\x8a\x7f\xbe.\x85\x88s\x14\xcb\xec\xf0\xa1\xa5\x124z\x8c\x15\xb3 \xd1\xe1\xc0\x10Uz\xaaw\x16^Q`208^|\'\x01\x00\xacB3\x00D\xa9\b=\xe5\xbe\xd8\xe0\xbd(h\"\x94\xf68\xc3\x8e%uj\xb0\xb0\x7fe\xdb\xd6$\xee\x95_}\xa7\x8e\xe1\x96I7?0\xe3\xf7\xb9d\xf0\xa2f\xc3\xac\x9ePwS\xa3\xc4\x03\xc8{\xf1Jv\x87%\x91h\xb4[\xbdz\x1f\xd8`\x0e\xa1.\x00\xdb\xfeL\x1a\xfe\xea\xaf\x9d{\xb4\xa7Z\x1c\x82\x18\x93\xf7\xf4|\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x35, '\xcf`7-a\xcc\xea\xb8\xc8\x86A\xeb\x93\xb4\xcc\xf6\x00*\xb8{\xfc\x01\'\x96\t?h0\\M\" \x83~\x01\b\xe2\xe7HP\x1cQHK\xa0/\x10\x9c\xaa\xf9\x15\t\xa2', 0x56, '\xf8\xf6i\xfbqk\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x15\xbe6\xf4\xfd\x1aL\xdb\x80\xe8\xd4\a\x00\x00\x007\x00C'}, 0x301, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\fA\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaau\xf8$k\xccB\xea\xa8\xc61\xc0\xc5\x00\x95\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xc0\xfbNL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12.a\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xc2\x00\x00\x000\xe4\xee+\xfc\x7f\x80P\x85\x11C\xe5\x16\x1a\xcdG\x15\n\xcb\xaft8\"\xdf\xe2\x03\xb1\b\xd3~\x91M\xc1\xe5>#LP\x9e\xcaA\a\xa1q,\xaa\x9d\xa5=\x05\x1c6\x88Ly\x18&a\xf3\xca6\xbc\xdb\xfb\xbd&q\t\xf81\x9d\x8d\xd5\xc0p\x99\xeb\x1b\x11\x03\x06U\xf5biOat=\x19B\x1bJ\x19\xef\x8b\x8bL\xe9\xc9\x93\xc7\xd6\xcb0\fNezNP\xa3[\\\xc1k\x8c\x16\x1a\x8e=\xf9\x03k\xbc\xf2\x8a\xdc\xd1\x9alL)\x17\t\xae\xe5\xab>[\xc5\xae)\xf4u\xe4\xd2D\b\xb5\x16}\x0f\xaf_\xc1Vkp\\\x8b`\xaf\xa8\xac\xa4/~\x04i\x18\x8a\x0e\xf0b\xca\x18\xe3\x8f\x9e\xe1\n\xc7}+~\xb9\xd6\x0e\xa7\x9f\xdbUd\x11H[\x1b\x13\xdb\xb8\xa2\xa6b.\xbc\xf8Lio\xa4\xda!\xba\xd22\r\rh\xe9\xbfCF\xf0ha\x19\xa3\x9e@\x03\x95\xc8\xf2\x82^\xa0i\xae\x0e\x14;\xd1\xa4Ay\xedlTp,^\x9a\x19\xcc\x7f\xfaP\x0f\xa4\x1bl\x80I\xbd\xe4X\'\xd5N\xc9\x01\xd2z\xd1%\x05h\x89\xb33k?\x06\x83\x8c[fz\xe2.\xfe;\xc1[\x82_\x7f\xbc\xe4\x80\'(\x1c\xf9\xfe\x8f\xc2\x1f\xc7|$=\xe2g\x051\x0e\xb8\x1c\xf7M\xe0)1\x92\xa1?j\xd0W\xdea\xfd\x8a\xba\x8e\xf4C\x9b\xc0jE\xb2\xb01bQZ#C:\xfe\xb5*\xed\xb5\xabo3FS8\x05\x15\xf7y\xf3]\xc8\xa7\x8c7w$\x92\xa2(L!\xd2\x13V\xd4s\xf0\x0f\x85\x13|{\xf0cou}5(\x86\x9b?\x00w5\xcf\xf8\\\x9d\x97\x8b\xf5]\xcc&\xd6-%\xe3\b\xf0\x88\'\xa9\x1f\xf4{\xec\x92\xf8\xe9\x1ey\bfT\x00\xaaN9\xb3Y\x86#\x9d\\{\x94\x92\xc5\xbb&\xbcU\xb5[I\xedpHnn}\xa3\x8c \x84P\xf9\xf7\x9e\x1bA\x00'/769, 0xffffffffffffffff, 0xee01}}, 0x50e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 14m11.480174348s ago: executing program 4 (id=1831): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000e1c400710000400000000000070400000000002eef8d90bb7d8ccfbfbcf64f1a98cfdbf12a02fb5699ea933a25af727ce1bc6e458a4b4278d718"]) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xf}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) 14m10.971820091s ago: executing program 32 (id=1831): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000e1c400710000400000000000070400000000002eef8d90bb7d8ccfbfbcf64f1a98cfdbf12a02fb5699ea933a25af727ce1bc6e458a4b4278d718"]) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xf}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) 2m16.371307826s ago: executing program 2 (id=4279): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0xfffffffffffffea8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000001c0), 0x0, 0x4000000) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = fsopen(0x0, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x3, 0x0, 0x0, 0xfffffffc, 0x3, 0x9, 0xff, 0x5, 0xc0000000}, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, 0x1c, &(0x7f0000000b40)}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000440)="1722f82cf4c01f3c1774f40b09fd34bab564a624bca14ddbfe253a4623dbc9d961581f7c8e560558301edc68a940e7bfacf02d9925a25b8483380d95c9e05f03883c392f53adedcc91d20717ed4a59d56c084ce37be5765dcdff3e7f85afcf5c007f9a41d80c9e2babbe4f0fca5433faf111bb1f493557b94516c02636c158df2d42940a5e61aabdf5", 0x89}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, 0x0, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000500)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000080)={r7, 0x5}, &(0x7f00000000c0)=0x8) io_setup(0xffffff7f, &(0x7f0000000280)=0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x6bee41885f5e5619) (async) socket$netlink(0x10, 0x3, 0x6) r10 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x6) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r1, @ANYBLOB="79910e370000000000000002cb45ba85c9d1d26a9c65e785a9eb4f780f13bd17697606c00ab2d44aa9a06b4b73b90d5863cc97b1629dc34e506e2d2af6139e45153f3913cdca68a390591f07ebce787f7af6b1e64b751208cb2d7383920ee1534adbf08dda4454330c533cc3fcb9d5c2e9b5c988574acd8388aa19b0382c7f66657a44f7a3278e6e331d6a54fec94d4b137d180bffde13fb91", @ANYRESHEX=r8, @ANYRES16=r3, @ANYRESHEX=0x0, @ANYRESHEX=r6, @ANYRES32=r9], 0x3c}}, 0x4048000) (async) r11 = openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) r12 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa4242, 0x0) ptrace$setregs(0xf, 0x0, 0x0, &(0x7f0000000600)="53722042a3ad45fb6f51d114f9f95cf539233c6eb77daae759a3f73353d8ff5134c51d20715f122694012533e53576170458189103eceaf55179311db239bdbde43ce9f972fcc7a936eac89df33ca52454c6ff4cfac1b696d24803dea5333fc6ad") (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r12, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r11, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r13}) 2m16.168844586s ago: executing program 2 (id=4281): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/snmp\x00') r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) close(0x3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xffffffff) r4 = fsopen(&(0x7f0000000040)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000000)='\xb7\v\x02rw\xc1\xffG?\xe27\x17/&\"\xa1\xfc\x96\xeb\ra\xfc~i\x8f\x7f\x18\f\xc1', 0x0, r4) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000180)) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/242, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/60, 0xeeee0000}) ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, &(0x7f0000000200)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) memfd_create(&(0x7f00000001c0)='net/snmp\x00', 0x3) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r5 = memfd_secret(0x80000) munmap(&(0x7f0000feb000/0x14000)=nil, 0x14000) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x12, r5, 0x5af0e000) lseek(r0, 0x1000000, 0x0) 2m15.117297473s ago: executing program 2 (id=4286): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f0000001e00)=[{{&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000240)=[{&(0x7f00000000c0)="19ec7c998614b2df49290083209cb6c1cd2647f5a0a89efa71a43a705a56793b22e56187f4cd646bdc32", 0x2a}], 0x1, &(0x7f0000000540)=[@rights={{0x30, 0x1, 0x1, [r1, r0, r1, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}], 0x50, 0x40000}}, {{&(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000640)="acd2a7432587ed", 0x7}, {&(0x7f0000000680)="a71ebd76bdedc3cef6e5d252388b5ea63b24b561ed7355614cf2f815b9ee4fcdc34ff7dd0ac3ef17d6530fc116a4da2b38b31c188bd16be71c866d057dcaba6d720c65eb2758209ba5a18c2137cc5314740c963b51c952c09e1846ad54052ac52bbf009fbd9d095a743d54c12bd6ad51f0895e51b70f469fc67f08af5bf4c12df16855e0970ebd491bdfeb5257e12e7d03f106705c12a768ea4bf94f8c2c28ba7cc75dee10966679fbe45fb6dfa6b2f072c51ae5b2179a8bfb", 0xb9}], 0x2, &(0x7f0000000880)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1]}}], 0x70, 0x4000004}}, {{&(0x7f0000000900)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000980)="d6950666c635a072bfbcba703232ffef25c51cef5392fd954aa1752ee1eeec565b1b9e23484fdc754c0a486ad2c9f572dfd7933cdf5316f65a9e97eb2c902e60dd6637efbc12cd5c6882b41dafff87b8392140851d48c1ffae958062505c76848c4134d5d3bc77c69dfdee00fa9fbee2b4469f78604401d648ff32", 0x7b}], 0x1, 0x0, 0x0, 0x10}}, {{&(0x7f0000000a40)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000000ac0)="0b1790f65aa0e515a5130880d47d9d0670e0d4f5aa0cdfcc8e6a32419f4b36142f6266ea223b07bd3c48cce331a4c1828e9f5c75ccfd5eca1244dd6940fb942b", 0x40}, {&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000001b00)="577c221f93d192b71be361224f0af58cd7a48860b6054e5efe539e47f4f231c42889df1eb8dc355053e0822fad076d2fdbd16b55152f736c2e2b84b764cf8f7323f3f0a8fa12f3bd4bcf81a448cdfef1453a5530065ed5564d3af3626f22b4ecdb2e75fc825a343abe146e403b562f8445c4c6ca78a1519cfbaf003fbdcad524950fedb3f070f2a68ce6226ef4441cc647581560e1c78fc24b62081e914dfe59ec411e2f53b0fbd7d86b2cc65f7db5d086aa1e97a350058a44a56e492de1f9e04a7d244a5df3bc89b3dc66a0cb323a5a3fae25", 0xd3}], 0x3, &(0x7f0000001d00)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0xe0, 0x1}}], 0x4, 0x4000001) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_connect$uac1(0x0, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x56, &(0x7f0000000500)=ANY=[]}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x80400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000380)={0x1, 0x0, 0x1}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x7000, 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000c6302, 0x0) r5 = timerfd_create(0x4, 0xebfbc3872d003697) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r6, 0x0) (async) sendfile(r6, r6, 0x0, 0xffffffff) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000080)=0x1a8, 0x4) (async) connect$inet(r10, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) (async) write$tcp_congestion(r8, &(0x7f0000000180)='westwood\x00', 0x9) (async) splice(r7, 0x0, r7, 0x0, 0x4ffe4, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000000)={0xf, 0x3, 0x2, 0x3, 0x200, 0xc67f, 0xce59, 0x5}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) syz_io_uring_setup(0x61e7, &(0x7f0000000300)={0x0, 0x400017da, 0x0, 0x2, 0xbfdffff9}, &(0x7f0000000000), &(0x7f0000000280)) 2m14.755233847s ago: executing program 2 (id=4289): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) bind$can_raw(r0, &(0x7f0000000480), 0x10) (async) r1 = socket(0x15, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000240)={0x1d, r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') 2m14.560757958s ago: executing program 2 (id=4291): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x10) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$inet6(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0xa, 0x4e24, 0x8001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000080)="ec41beb5fa7844fb30063a71822cf05c97125a0f843344e037da6b259e238744e22998653aac97619079e7aa74d8f09589fa2dd40aab5292a326dcc70727d94c9a256e341c37d023ca3a4d7a0dd1fbe8c13cf9660808a11dea6fa47141db5477dac63bedc27f526e9f086d79ea767a821f235b8005f99a0083aaa88be5f0264b04e9465c14a37be1b97921393f24866f4da436ae67c0badc4a92ebd6f29a782c73ec013365ba2f0b38fb15c47ed3ccaeb515e880262a0ae2f0c0e01ab69a73d92d0ed534a3401f502afb1311c63edc48b76d4aa834641e8990a2ec8df0c0cbbc4a6b3d3f07354fbe4ff50acc910adc48b7fa1f4393cb0fa4e5", 0xf9}, {&(0x7f0000000180)="b2ecc51a8cd0d5c9686c6c3b8d08c2c26f209597a65e7f149859efe63e7cbcf88103d229390d1376beebff1a53d66e0b3f0b9ef1669cca2a450aa31f65ad65b08333e0c4f71a82f15f76a1d3f6eee4051da7e592e0f9394cc80132facaf28a06a05fb4bfd4f840c8e2", 0x69}, {&(0x7f0000000200)="63daa700d9f88e796709f7d0149d9808949593ad6a769ada689c4ed11bdba65248e66ca056b05697a6062b7d078dbfe56f2b9a5b2f1d38bbaeb9cdfd3872f28eb60be627", 0x44}], 0x3}, 0x0) r5 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x5}) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) close_range(r5, 0xffffffffffffffff, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000080000006a0a00ff000000407e00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="100000000000002505000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xa, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) timer_settime(r6, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) unshare(0x42000000) 2m14.028086157s ago: executing program 2 (id=4292): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x4f}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x4, @private1}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r2, 0x1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x4f}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x4, @private1}, 0x1c) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r2, 0x1}, 0x8) (async) 2m12.914896704s ago: executing program 33 (id=4292): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x4f}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x4, @private1}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r2, 0x1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x4f}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x4, @private1}, 0x1c) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r2, 0x1}, 0x8) (async) 14.700351531s ago: executing program 0 (id=4652): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) r2 = syz_clone(0x86000, &(0x7f0000000580)="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", 0x1c7, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000500)="48a989b015acf71f66a60392b1516e3fd13e9455187984729501336e3ad9f5e45573a862a1cb83ed3d8effea00"/55) execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x78d) syz_emit_ethernet(0x76, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000000}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000001c0)={'xfrm0\x00', &(0x7f0000000180)=@ethtool_stats={0x1d, 0x1, [0x0]}}) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000009c0)=ANY=[@ANYBLOB="1201010200000010f3044d074000010200e6cad251e603010902240001010330050904000801030101000921ff00010122b00b090581031094cbba0756c586d6fc1411f8003ad316c002e16d422e78a524420b2d27c9857c47c17c7b160f212518d03792e31aa8d387273b7aabc8732ed1030483c7cc9465d2c93e2dc46cffafa11875500d46eb855d6ecfdc78295fca5aa03346f5"], &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x7, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x424}}, {0x68, &(0x7f0000000440)=@string={0x68, 0x3, "880b94f61258036c40586f45b416ca3ea861bd568940b88cea7836cd3c1f0edac8bab3211b3bf6057ec060f2f498f4bd2412ceece12bdeefd117fdd44e022b293a92087767bcfc79bc6760bee28ff474a0bba1d8d3e8b99f4115b1364ef27fa80885f8d561ad"}}, {0xe0, &(0x7f0000000780)=@string={0xe0, 0x3, "d86884935b56297fffa99bf85008f7e4e6388832f15052e28c49ecfc2470d0d61ec5db48a44e3cd875bd7ea899e40f3a713b9574697c38c09c67d1c946137f705a0f95aea04bf6a027fc51d814dfac9da7e42ddb0fda83cc849c2658a6cb666a564619bb83e5433f14bb4b11cc9ffb30fb823b4bf60bca80e3122bc45561175e343adcb56520a3eeff35270ca55f06311260c96e5d972e860e8807177acd979fc4fdc0d5ccd6bead4acc82609396452be802b4eb46014d5c3cc9bf380e94c977a513c3999287dcb315739fc8db389eff1ff037017259639de88b26bf9d27"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x860}}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00012cbd7000f8dbdf258200000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x10010) prlimit64(r2, 0x8, &(0x7f00000003c0)={0xd, 0x2}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000003, 0x50, 0xffffffffffffffff, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000380)={0x0, @remote, 0x4e24, 0x0, 'dh\x00', 0x25, 0x2, 0x47}, 0x2c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 11.078843518s ago: executing program 0 (id=4658): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffeca50000006d000000850000000f"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x2, {0x41}}, 0x10) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x1, 0x3}}, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x3}], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xb, 0x0, 0x0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @random="8f064ab6bf7c", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x20, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[@hopopts={0x0, 0x3, '\x00', [@ra, @calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0x90, [0x0]}}, @generic]}]}}}}}, 0x0) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)=0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execve(0x0, 0x0, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\b\x00'/20]) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000000000)={@loopback, @multicast2, r9}, 0xc) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r10, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r10, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 10.180047519s ago: executing program 5 (id=4661): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'ip6_vti0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x20048004) 10.044175384s ago: executing program 5 (id=4662): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3ff}}, './file0\x00'}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="6634abbf363e51c95be02bceef99d9d2", 0x10) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x4) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000080)={0x0, 0x1, r0}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="18399d330e424ba7c8cf417493c12cbfdb6f3a44ab81968e5d1ab2f2459f1a5548d9d06a2350b22b4516ca11b41d6e868248bac92906123adefb84686d05ef588b7dca26ffda10ebba3b3a15df21ee7503ac4ecbf254a910d4cbf802ffd99d0659b6bd13e248a417b4a6fa5a31c6cb3329b6bef2ff08e44cc31c02b14dbcb385", 0x80}], 0x1) ioctl$LOOP_CLR_FD(r0, 0x4c01) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x100010, r0, 0x0) r3 = socket(0x29, 0x5, 0x1) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01064c2, &(0x7f00000001c0)={0x0, 0x0, r0}) socket$rxrpc(0x21, 0x2, 0x2) io_uring_register$IORING_UNREGISTER_NAPI(r3, 0x1c, &(0x7f0000000200), 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x2f, 0xe3, 0xd7, 0xfffffff3, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x1, 0x7, 0x7, 0x8}}) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000300)={@empty, @dev={0xac, 0x14, 0x14, 0xa}, r5}, 0xc) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r6, 0xf503, 0x0) r8 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000380)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1b96, 0x14, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7b, 0xa0, 0x4, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x3, 0xe6, {0x9, 0x21, 0x7f, 0x5, 0x1, {0x22, 0xaed}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x3, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0xde, 0x7, 0xf1}}]}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x200, 0x0, 0x80, 0x4, 0x20, 0x3}, 0xc, &(0x7f0000000400)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x4, 0x1, 0x5}]}, 0x7, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x40f}}, {0xd3, &(0x7f00000004c0)=@string={0xd3, 0x3, "cf97fcf48480786d4185c8ce14cde4c9b6027dd31b6dbe328a018f251476233ee01536ba79d27dd6a5d0cd3fcf9a86a5a20ca7698a9a284ca0cd37574a81de13ebe869f47ab88bdcfb1e83f01978af39f70af47df3edd276d4b6731b4ca2d689117675c909daf5cf3d3953d5d87630d213e2c178a0169745d0834c1c24a28a6ccaf9ecc33401a940e80daf5ad59816cb2bcae2d3302fd8c70aa58bfc0e61299e2f5364884e86c693b5e8aad37245f8aa3c4de2388e50461dfa6eb4d89db6265de72db6166f57ad5735aabf1830858597f4"}}, {0x22, &(0x7f00000005c0)=@string={0x22, 0x3, "130ae6827ff9395282666ac5e13140f3f54d64bf6e1348e45374497722e7235a"}}, {0x69, &(0x7f0000000600)=@string={0x69, 0x3, "2d4562c3d4a6086482eaa2044d98b62f31fa048c359bf936888f85a46c9746047d82a8bf7dc75715cc396cbd1661eb0e765160c161218a897c22f4a143d1c6b2997c9021abaa1e2193a3d5e508b9ed0a1520e899ec0bca8f49de8c523506cc05afdd08fb11c48f"}}, {0x5a, &(0x7f0000000680)=@string={0x5a, 0x3, "265b661fe88b4467f6d0b8c3b9bab6694b5b1758978db062ddb3f13c9f6c81a066b2a1855b3959c94de9c27f811563d08418fac8e93c20cf53507c3d7704a61bffaba95d735abe031cd980a10b13107b611b12b12ad73b51"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x1809}}]}) syz_usb_control_io(r8, &(0x7f0000000980)={0x2c, &(0x7f00000007c0)={0x40, 0x21, 0x93, {0x93, 0xd, "f50f1393abb600d5d8b5470f12ef43a6e5ca35962e096c0f5f39269397c7180b88b7def1c90237356d822303f4a6c5fb036f5775b8274fed0de9f2e15928991bfdda1d37d517bc6232f1ac056a78d093516a367f7c03349251c814f10fce312ac008b973e523b364d7ecc4fadf971de1fde0b6b8ba0f4404a96c3e24eec4e0cfe2cd30c84c458ab831744bc8da618b3d62"}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100c}}, &(0x7f00000008c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000900)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x2, 0x6, 0xe, "752f3bc8", "64cc7ffc"}}, &(0x7f0000000940)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0xf, 0x3, 0xe, 0x9, 0xfff2}}}, &(0x7f0000000e40)={0x84, &(0x7f00000009c0)={0x40, 0x31, 0xa2, "62921780dd195557eb50eb7dac13c7a2e0aa7c987222efac263574bdf7ee27beabf5008cd988f6b8537cb9665aaa70cb133adcd117d715a2fca1d494681ec163c5c2ea2ba05a0f7d72a7b1ac0aa8b37bce404289fd8953b5746f26db278ac31050c887dfaf8b5587746c80d6d593b77643fab8981b1564741c01fbfd6ee5d42f7eb6f0ff721eb6561d335336fc482a600d72017e403b3250c5b5e754a7c87d134689"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x4c}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000b00)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000b40)={0x20, 0x0, 0x8, {0xc0, 0x41, [0xfff]}}, &(0x7f0000000b80)={0x40, 0x7, 0x2, 0x200}, &(0x7f0000000bc0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000c00)={0x40, 0xb, 0x2, "f646"}, &(0x7f0000000c40)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000c80)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000cc0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000d00)={0x40, 0x19, 0x2, "5eb6"}, &(0x7f0000000d40)={0x40, 0x1a, 0x2}, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xd}, &(0x7f0000000dc0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000e00)={0x40, 0x21, 0x1, 0xd0}}) close_range(r1, r4, 0x2) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000f00), 0x0, 0x26040014) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001040)={&(0x7f0000000f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x8, [@typedef={0x4, 0x0, 0x0, 0x8, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0xffffffad}}, @func={0xf, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x61, 0x0, 0x5f, 0x5f, 0x2e, 0x30]}}, &(0x7f0000000fc0)=""/128, 0x50, 0x80, 0x1, 0x6, 0x10000, @value=r0}, 0x28) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001080)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000001100)={r10, 0x80000001, 0x1, 0x8, 0x3, [], [0x40, 0x6, 0x4, 0x5], [0x8, 0x0, 0x8, 0x5], [0xa, 0xd43, 0x0, 0xfffffffffffffffb]}) ioctl$FS_IOC_GETFSSYSFSPATH(r6, 0x80811501, &(0x7f0000001180)={0x80}) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x68, 0x4, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_USERDATA={0x1e, 0xc, "6fd1169e06948f43ae7fd3232a4b1375264526e1bcf6312a1692"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000801}, 0x80) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000013c0)={&(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, r9, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000001440)={0x0, r9, r11, 0xc, 0x4, 0x3, 0x8, 0x7, 0x1ff, 0x8, 0x0, 0x8}) write$vhost_msg_v2(r6, &(0x7f0000001640)={0x2, 0x0, {&(0x7f0000001480)=""/222, 0xde, &(0x7f0000001580)=""/160, 0x1, 0x2}}, 0x48) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) 8.297564455s ago: executing program 5 (id=4666): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340009100000109022400010000b00009040000010301010009210008000122010009058103"], 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={@ifindex, 0xffffffffffffffff, 0xf, 0x30, 0x0, @void, @void, @void, @value}, 0x20) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)={0x3c, r2, 0x1001, 0x70bd28, 0x0, {}, [@ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x2}]}, 0x3c}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d80)={0x0, 0x16, 0x4, "7d470003"}, 0x0, 0x0, 0x0, 0x0}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f00000001c0)={{@host}, @local, 0x8, 0x6, 0x0, 0x10, 0x0, 0x10, 0x9}) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.836204244s ago: executing program 0 (id=4669): setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$dh_compute(0x17, 0x0, &(0x7f00000001c0)=""/44, 0x2c, &(0x7f0000000000)={0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x2) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000001140)={0x80, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendfile(r3, r2, 0x0, 0x20000023893) syz_emit_ethernet(0xa6, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0000fa", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, '\x00'/12}]}}}}}}, 0x0) r4 = getpgid(0x0) ptrace$ARCH_SET_CPUID(0x1e, r4, 0x1, 0x1012) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x3f, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x8001}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5}]}}}]}, 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 7.806868904s ago: executing program 1 (id=4670): r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getpgid(0xffffffffffffffff) getgid() r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c) getsockopt$inet6_opts(r3, 0x84, 0x3b, 0x0, &(0x7f0000000380)) pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', 0x0, 0x8, r0}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f00000003c0)) fcntl$getown(r3, 0x9) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) read$FUSE(r8, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r12 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x24c01, 0x0) write$FUSE_ENTRY(r12, &(0x7f0000000340)={0x90, 0x0, r9, {0x2, 0x0, 0xa, 0x0, 0x800, 0x7, {0x5, 0x6, 0x7ff, 0x5, 0x51b5, 0x4, 0x1, 0x7fffffff, 0xf5, 0x6000, 0x9, r10, r11, 0x6, 0x3e}}}, 0x90) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f00000006c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000040)="e33852afece50ca321710691940e192448bc4c8611a3840b023f9e285124", 0x1e}, {&(0x7f00000000c0)="5dc9d26b4c2e3f222a960dad", 0xc}, {&(0x7f00000001c0)="c93d7ee4fb8bfe6d9468f8312aca5759caa53f242d7d597325e8e4d68fae88fe21eb50b03bd145680e87445b9f177f74d398e463896bc994412246710753c4b1bc3f4feecd90a8b0f78a27ef7c0488bb52ec6be053d4e2727fd115b744f313e8b758995c17d48741a6655a2d5c166537a704d3ec8b380019f6b2479d8a0cf66b2226bde8cf6ecd523c435d4def0eb3ac71bf83246ba725a1ce31af5e85291f970f0fcfa69a4347ac820bd6d8b7", 0xad}], 0x3, &(0x7f0000000740)=[@rights={{0x18, 0x1, 0x1, [r5, r4]}}, @rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [r1, r8, r7, 0xffffffffffffffff, 0xffffffffffffffff, r7]}}, @rights={{0x1c, 0x1, 0x1, [r0, r12, r5]}}, @rights={{0x28, 0x1, 0x1, [r7, r4, r5, r6, 0xffffffffffffffff, r6]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, r4, r1, r1, 0xffffffffffffffff, r8]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r7]}}], 0xe8}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)="4c1acbe5fa450138c8cf0a45f7fea40ba562130975ccf8528c6b538375aec69ac9eb660e5a44da0f7eadfa01a1c9ce76bacbcb244beebe51cefbbbee5256ce38df4b89a637db4294074b0e1b2fb9e68c962467a42e97aa5511d1d9037b46db76ed447dda0e6a27f16484348d5d6b04983e5d7d06994a90701cd15080368b4eb6da1f5175dfc9e5094e0d2c3b0cd4be5de66276725711f2139c788775c66bb48e6da6892717ffe5847374481ede7ed94abd47055ecf656ed85b21fba45945", 0xbe}], 0x1, &(0x7f0000000140), 0x0, 0x1}}], 0x2, 0x814) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r13 = syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r14, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r16 = socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_submit(r14, r15, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r16, 0x0, 0x0, 0x0, 0x40012020, 0x1, {0x2}}) io_uring_enter(r13, 0x47f6, 0x0, 0x4, 0x0, 0x0) 7.217802585s ago: executing program 6 (id=4671): r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000040)) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_delrule={0x44, 0x21, 0x200, 0x70bd27, 0x25dfdbfc, {0x2, 0x0, 0x80, 0x7, 0x1, 0x0, 0x0, 0x1, 0x18}, [@FRA_SRC={0x8, 0x2, @empty}, @FRA_FLOW={0x8, 0xb, 0x570}, @FRA_FLOW={0x8, 0xb, 0xffffff01}, @FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x3}, @FRA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000810}, 0xc4) (async) close(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x280000, 0x100) read$eventfd(0xffffffffffffffff, &(0x7f0000000200), 0x8) (async) r3 = fcntl$dupfd(r2, 0x406, r0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4080) (async) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000003c0)={0x0, 0x40, 0x4, 0x6}, 0x10) (async) readv(r2, &(0x7f0000001500)=[{&(0x7f0000000400)=""/241, 0xf1}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x2) (async) r6 = fspick(r3, &(0x7f0000001540)='./file0\x00', 0xc73943871ca1dc76) r7 = accept4$packet(r3, &(0x7f0000001580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000015c0)=0x14, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001600)={'wlan0\x00'}) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r3) sendmsg$NL80211_CMD_SET_WDS_PEER(r3, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x40, r8, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="0578483d58c7"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="d9b29df892f3"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4008850) r9 = socket(0x15, 0x800, 0x80) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000001780), 0x220440, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000017c0), 0x90100, 0x0) r10 = accept4(r7, 0x0, &(0x7f0000001800), 0x0) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000001880), r9) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x50, r11, 0x100, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0xfffffffffffffffe}, {0xc, 0x90, 0x2}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4080}, 0x8001) (async) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f00000019c0)={0x0, @loopback, 0x4e20, 0x1, 'lblcr\x00', 0x18, 0x2, 0x1}, 0x2c) (async) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000001a00)=0x1, 0x4) (async) r12 = syz_clone3(&(0x7f0000001d00)={0x200, &(0x7f0000001a80), &(0x7f0000001ac0), &(0x7f0000001b00), {0x2}, &(0x7f0000001b40)=""/93, 0x5d, &(0x7f0000001bc0)=""/209, &(0x7f0000001cc0)=[0x0, 0xffffffffffffffff], 0x2, {r3}}, 0x58) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000001d80)='./file0\x00', &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000001e40)={0x0, 0x0}, &(0x7f0000001e80)=0xc) sendmsg$nl_generic(r9, &(0x7f0000002500)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000024c0)={&(0x7f0000001ec0)={0x600, 0x2a, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@generic="a3b6a58d8dbba1e411235c42bed60c1d0f14b3321e1b3664218ddc5d4256bc593f75015d3bb74d27e8c984207df5244ed15bc99997dd6b9444262f093623b58afd0d8cd70ec5f075374ffc855e36fa7a774e25e8cc364ec2906b323b87b9244c7d4c981d08b85cabf9f5980a6fd850742b398bf695c3b798638a1d20342250acec33cbbc64815d363f58d9e67832e576f35fdc988b5602cc16a35bbf7941fc84b27836583d4266592e8304245200f80cc845f64b65384641a7e9683dba3392ce471e0dade7a41acfbe8a7754ba7641a780bcb3567168fe2df9ae3802a23838de808a08a2684ed2b8c379c0ed2df2e53f4ddd", @typed={0x8, 0xb5, 0x0, 0x0, @pid=r12}, @nested={0x1bb, 0x85, 0x0, 0x1, [@nested={0x4, 0x73}, @typed={0x8, 0x103, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x85, 0x0, 0x0, @uid=r13}, @generic="44e10fbd253a59ab2757c5e54b9e69b02f98f494d2dd08714f520ee8edc628458ef48ca923d5add3129862ea7bc830672e97dcb45339a8d623bd8c62b2d8717bfe11fdba67bbd1f49f0bb9700a03dc60a490ded37d06354e194d0c4cd6ca16ca2132f4f649500bc2aeee7059bb0b07c2f5add710c406b9236e459253be198a50a0bea436a684d67bda74d9376c779e07c1983f010206db45306f139dba3dfffc1c9787de97de772218a1f4326888449fc2a677e84595a5fbf6b08ddbdde72c86", @nested={0x4, 0x8c}, @typed={0x8, 0x132, 0x0, 0x0, @uid=r14}, @nested={0x4, 0xc0}, @nested={0x4, 0x116}, @generic="bf4ecd0a78c2235fe25daf0c7405bd079753a7ff335c8a5631868ebf60c3ed8f98fcce435762483aacd70c33356b12c06297ade9551cca46dd8271b35fa702bc5ec35a944db6c4c6f757dfdc0e9f0c3d3862925bf1a713abdb173e9fe6fd63b9f830e6e19f93a9900d928e08d189424d235f755a5078d40fe600ee69658351fd0e5ae61d526cef226129782421063897fe8762bf05640f4dcf94eb1adfed34525e32003e2ffcb41448d2a74c7b3ac8089f84e55a975a58370f4594da71b565c8d4a670ed6c575a8f6c46b16499ef94"]}, @nested={0x32a, 0xa6, 0x0, 0x1, [@typed={0x8, 0x8c, 0x0, 0x0, @str='},&\x00'}, @generic="d9974fc635b6de5426b0860214b09671737137ef46e3758b7decdf8b833099ca4b462f4f8661ac3bb93f4cbd356cf718cbb75a58313ab3d846591a5255fbc3093b275d19d4e467640d3063e01beb2fe9822fbf6e25a1bb65ccb9acfda7d8907d8feb524d42e78c895f511f4720b8954b533b02a0fd893e50ad9351edc5b9bfa804f8e31c7b7bcef9ced042af09982ffd4ce6a849eb6a3196eb7f94ea0f3957fa4312dfed8b2bfd9382", @generic="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", @generic, @generic="5cf01bc13a6abeca9aca0ad1ba993b5632718f8234c79728ecf382744709c91ea511eef55860f05df00759e02849b0eecaa87eb2030614e804d3377686b55cc909a1e349dcf24d23bb77b6bb3dbb0eddec8a1e799b1c580a7737921b0fcef89152610db4663521718f92db7018d79f30ca049167db37cd1e6953a4eac890", @generic="b1a0cbd9afd32963125e8e8ba0aca16d699c3af86b34f5a94a8f62ba1bb0a049d5751c6af1410bf4762cdd5251f51cfbbc2368e6377f8d207f22c11c0f9f6f423885b039f8581099a4210b14178baaa0ebe5fa0bc1cf63", @generic="88dcb4da323e6ce0d7fcdcf3ca12369285fa98e51bf426572f40cba4d3b615f4121d1283dac947382a02988fbbb9b0deecff46eac70fd97f071487aca656232a5bf002b9f3ec7dc4ca85d4c420673ca015c635cf82dd4d16e7d874dc6c2ce9d52a22d852481ec8f4655a4df17f1a9bbeb70b71c5952004e4f628c97e79214ff9ed6439fdd858c3e3cdd225214e2933866bfe4bd376d6b7abdb16bb55a0882297c4abac52cf"]}, @typed={0x8, 0x13a, 0x0, 0x0, @fd=r6}]}, 0x600}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 6.984146444s ago: executing program 6 (id=4672): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) syz_usb_disconnect(0xffffffffffffffff) (async, rerun: 32) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x30a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x40, 0x78, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x2, 0xef, {0x9, 0x21, 0xfc60, 0x3, 0x1, {0x22, 0xb83}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x6, 0x5}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) (async, rerun: 32) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) (rerun: 32) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) (async, rerun: 64) ppoll(&(0x7f00000000c0)=[{r0, 0x2004}], 0x1, &(0x7f0000000100), 0x0, 0x0) (rerun: 64) 6.753514162s ago: executing program 6 (id=4673): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6, 0x3, 0x0, 0x7fffffff}]}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$inet(r2, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES64=r5], 0x20}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000080)={'ip6gre0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}) close_range(r0, 0xffffffffffffffff, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) r8 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r8, 0x13) waitid(0x0, 0x0, 0x0, 0x100000e, 0x0) ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x9, 0xefff, 0x2, 0x100, 0x40, 0x85000040}) 6.704027866s ago: executing program 3 (id=4674): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="400300000000667cb0046c5843b277da4af66f702a59a01c13e7efb7e21c68281b57837d394925b7be19a418010019d45b696584ca02df5d41ce66dcb7e2ac94ad612220c5e69452a8cab6a85510d5fe45c01706d15058fef0c1089fda6fa5a577e836797754a0fe369b3f17d59e4d0a273813794a3043a1c32f3d2ae574e083adcf548b0d6bcb65bf76842730017040fd86772e9140c1dfa98984fe7d2d4ae9729880155abc65b88b8d353a0ea875c8cfe8f8d5306415219cd4a146b3b0e67a5bf9d4a04394ce35b257a1c67fc76a550761d7c0c473055d22a495a82426602f6262a0d17b6adf749b921356d433e1a98c07040d3a933fc807"], 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000001800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b40)={0x34, &(0x7f0000000840)={0x20, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="00150080005ef9ca947832a7cefee07465707a3142666594379fa133"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f00000006c0)={0x20}, 0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x0, &(0x7f0000000240)}) r1 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000240)=@arm64={0x4, 0x4, 0x70, '\x00', 0x10000}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) timerfd_settime(r1, 0x2, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000100)=0x5bf) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PPPIOCSMRRU(r5, 0x4004743b, &(0x7f0000000500)=0x1) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x400001003, 0x5, 0xfffffffffffffffe, 0x4, 0xffffffffffffffff, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x401, 0x4, 0x0, 0x1, 0x3], 0x0, 0x6f143}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="202c8e"], 0x0, 0x0}) 6.587968359s ago: executing program 1 (id=4675): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) (async) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000000)={0x3, [[0x0, 0x1000, 0x1, 0x9, 0x3, 0x1, 0x6, 0xfffffffd], [0x5, 0x3, 0x9, 0xfe, 0xffffffff, 0x6610, 0x1, 0x80], [0x400, 0x80000000, 0x1219, 0x0, 0x2, 0x723d, 0xfffffe00]], '\x00', [{0x6, 0x4, 0x1, 0x0, 0x1, 0x1}, {0x7, 0x4, 0x1, 0x0, 0x1, 0x1}, {0x80000001, 0x81, 0x1, 0x0, 0x1, 0x1}, {0x0, 0x6, 0x1, 0x0, 0x1}, {0xfffffff9, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x6, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0x400, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x4, 0x5, 0x1, 0x0, 0x1, 0x1}, {0x4, 0x10001, 0x0, 0x1, 0x0, 0x1}, {0x8, 0x98b, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x81d4, 0x0, 0x0, 0x1}, {0x9, 0x200, 0x0, 0x1}], '\x00', 0xfffffff8}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) shutdown(r2, 0x2) (async) shutdown(r2, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x423c2, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x423c2, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000004000600000000000000048b84b000000000000000f000000000000001007000f23f8b9a00d00000f320f79445c74c4817be64eeb66b82a010f00d82e0fc7bdf21ee6dc6426f3450fc737c4c1f56c8f030000000f073e3e0f08c3"], 0x60}) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000004000600000000000000048b84b000000000000000f000000000000001007000f23f8b9a00d00000f320f79445c74c4817be64eeb66b82a010f00d82e0fc7bdf21ee6dc6426f3450fc737c4c1f56c8f030000000f073e3e0f08c3"], 0x60}) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000000000d00000000000077582e458b0f"]) (async) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000000000d00000000000077582e458b0f"]) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x400000000000c, 0x7, 0x0, 0x4000000000180, 0x5, 0x10, 0x8d, 0xffffffffffff18c4, 0x7fffffffffffe, 0x5, 0x0, 0x80000001, 0x0, 0x5, 0xfffffffffffffffe, 0xbdb], 0x1, 0x3c4210}) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r7, &(0x7f0000000740)='\x00', 0x1, 0x44, &(0x7f0000000100)={0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x8}, 0x1c) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000480)={0x14, &(0x7f0000000380)={0x40, 0x8, 0xa5, {0xa5, 0x6, "aacdea33b53e684d5a60dbab2358dcc0e39a134117cbf6e16d20d6805c136bdbb9151f33d5f90071ee09d059d0bd898d78198d44b8fa1ac86cbdbd8033e1a414729f27fcd3b4774edc20ed44b5c7e0124826553ee463b8209b45965aa3e452e52f469268743a03320b1c60a5f3b11ee35183e97ebb94e8a26b1d8135202327354bd4164d0f7e31c0dce1420e3752a60a9bc9ad1ed8b146d643079dacf47de02db495cf"}}, &(0x7f0000000440)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000840)={0x1c, &(0x7f00000004c0)={0x20, 0x8, 0x58, "679e5e5accc866f06f48a7028579c691e2ebff391ac1a592d3efa6d0b175eff72a0d8d1aa37ace3d6e2644cb20fa55cd43199940798bef2443781a488542cbcd90db5114d0dadd7075d0348ab208bbfff0398030dcfbdcb9"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x70}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x3}}) (async) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000480)={0x14, &(0x7f0000000380)={0x40, 0x8, 0xa5, {0xa5, 0x6, "aacdea33b53e684d5a60dbab2358dcc0e39a134117cbf6e16d20d6805c136bdbb9151f33d5f90071ee09d059d0bd898d78198d44b8fa1ac86cbdbd8033e1a414729f27fcd3b4774edc20ed44b5c7e0124826553ee463b8209b45965aa3e452e52f469268743a03320b1c60a5f3b11ee35183e97ebb94e8a26b1d8135202327354bd4164d0f7e31c0dce1420e3752a60a9bc9ad1ed8b146d643079dacf47de02db495cf"}}, &(0x7f0000000440)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000840)={0x1c, &(0x7f00000004c0)={0x20, 0x8, 0x58, "679e5e5accc866f06f48a7028579c691e2ebff391ac1a592d3efa6d0b175eff72a0d8d1aa37ace3d6e2644cb20fa55cd43199940798bef2443781a488542cbcd90db5114d0dadd7075d0348ab208bbfff0398030dcfbdcb9"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x70}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x3}}) setsockopt$inet6_int(r7, 0x29, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) eventfd(0x4) 5.743409596s ago: executing program 6 (id=4676): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x20200) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0xd1, &(0x7f0000000540)={0x0, 0xffffffff, 0x800, 0x3}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x8, 0x8440000000000000}) getsockname(r0, 0x0, &(0x7f0000000000)) close_range(r5, 0xffffffffffffffff, 0x0) r6 = add_key$user(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000080)="bc5dfc7fbb", 0x5, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r6}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) r11 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') read$dsp(r11, &(0x7f00000000c0)=""/229, 0xe5) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) 5.656891963s ago: executing program 5 (id=4677): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001b40)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @private0, 0xfffffffc}, 0x1c, &(0x7f0000000300)}}], 0x1, 0x8c1) sendto$inet6(r0, &(0x7f0000000040)="b9", 0x1, 0x4000010, &(0x7f0000000080)={0xa, 0x0, 0xe, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffd}, 0x16) r1 = getpgid(0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xffff, 0xb}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x54}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendmmsg(r6, &(0x7f0000000280)=[{{&(0x7f00000001c0)=@nfc={0x27, r7, 0x0, 0x2}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000380)="64f0e7e2ae73971f2df45e9ec24027a4ce8bef8081b4fca94a1f59936555af9b5d53920c97a5bb5b1284bfbb6bb5c113e9384426bbbb721f99c3d65e598a9e0cbb720b27c89d48387cca7a80391d2227bd1bdf185d2db6260ba418f103bede1f31c118998542610dfbc5111fa630bb8e6456411b3ed6ed0acc873ae170ecb30ba807e5d3ef0d384f91ef70687834c55c8b6f1879e2be18f943caf6d1b39294e12e1012487429c46b0a9094347cc19bfa", 0xb0}, {&(0x7f0000001b80)="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", 0x1000}, {&(0x7f0000002b80)="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", 0x1000}], 0x3}}], 0x1, 0x0) r8 = syz_pidfd_open(r1, 0x0) process_madvise(r8, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000000)="db", 0x1}], 0x2, 0x14, 0x0) listen(r0, 0x100104) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904"], 0x0) rt_sigqueueinfo(0x0, 0x40, &(0x7f00000000c0)={0x3e, 0x3, 0x80}) accept4(r0, 0x0, 0x0, 0x0) 5.267937079s ago: executing program 1 (id=4678): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async, rerun: 64) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x228280, 0x9, 0x10}, 0x18) (rerun: 64) r2 = openat(r1, &(0x7f0000000200)='./file0\x00', 0x101881, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20) vmsplice(r3, &(0x7f0000000540)=[{&(0x7f0000000300)="b1a836440501ef311213f1ee03014220c5f43c3b5e0821044efaab88053e68acef198498f27a31d0ef535d96e121384ba0d79cac8ee2b631a8ac2174b29486ae3e65e550d9457f876eea752ccc4aac8a6c023efa5275ee9e56aefb84830ceefa34df44b327e787f1afb526be31c6c63753da8a66ce025b3c7c14bc0020178c74ff8da42722be3f686b471b6209a7b995c778a2e30f7615171acdbbe73a23c212010764f71a630d96e879c65e8f0073f733", 0xb1}, {&(0x7f00000003c0)="534feaf5da0a6937e5a4722c4640b79fdab4660c132cea72596c9bf6af0405a7a2cbbc4dde9d11db12f82e795616e912e10239d926f8a934d63302907d36169557e1ae8072be8b5ba49284e0c89039e78a877390b5982be4ba4020f3509099d8068b04b536e26d677b784b3ce307786371e980af8cd65036e3990564809a3c996c47a3aa733c9a65d9cbf0ff7a195f36704fd8cb6174ae265a3f9f52e6f0adb16c0d0db7", 0xa4}, {&(0x7f0000000480)="33fea0cd698a90e30f636c2074265e2fe11de1a7e343e36db41af894136ffdf65d6115ce0b4476c18f02e3407f14611649723887b02bcb682576e6cbbfb4db2eed47eb10f7ed3b3791195b97c60508e9c1039d09f20d2b5b884395c5e153d17e23386f1b8940d1ea2ae07b0c5daae1331cbc96da21b493e9d6effb3523f5785ac19569b501fff58411d55466da3fa0cc4359617c1d771dd3aa736f248682cf055d8b4fa2d08da217948613dcce6dd597a49eb9546bf82ec980", 0xb9}], 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'ip_vti0\x00', 0x0, 0x7800, 0x8, 0x99, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp={0x44, 0x10, 0xbf, 0x0, 0x9, [0x93f, 0x10000, 0x9]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x18, 0xec, 0x7, 0x0, 0x40014, r2, 0x56e, '\x00', r4, r2, 0x2, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) (async, rerun: 64) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000006c0), 0x101481, 0x0) (async, rerun: 64) write$binfmt_script(r2, &(0x7f0000000700)={'#! ', './file0', [{0x20, '#{/}'}, {0x20, '/dev/ubi_ctrl\x00'}, {0x20, 'sit0\x00'}, {0x20, 'sit0\x00'}, {0x20, ').@.^\xf4,{-'}, {0x20, '%}--'}], 0xa, "f223068985a681a7ece13e3d63b94dd8fc1842e194f53b3eb710750238d8e035807da499d62a3e2c9835fe45bf09cace25ea0d303961e8a7d1f63bbf01336da36f99db884217939e4a84765dda5c30097c4bcdb6c4c1884f78acecb0635e069b055eff0dde3b99f5267c204ca4e2a94d74d5db213f07f97c04def6728dd8f1c6b80aebe5255a3a9d6ebcccea88b1548cbbf936a6177e31f160ef187c99fe224e7a46edb8b132f2ef1f"}, 0xe3) (async) connect$pppoe(r2, &(0x7f0000000800)={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, 'veth1_to_bridge\x00'}}, 0x1e) fanotify_init(0x1, 0x0) (async) fsetxattr$security_capability(r3, &(0x7f0000000840), &(0x7f0000000880)=@v1={0x1000000, [{0x9, 0x3}]}, 0xc, 0x1) (async) syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000008c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1b09, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x10, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0xb, 0x2, 0x3, 0x1, 0x1, 0x4, {0x9, 0x21, 0x3, 0x6, 0x1, {0x22, 0x9af}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x20, 0x0, 0x8a}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x7a, 0x9, 0x9}}]}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x250, 0x7, 0x3, 0x6, 0x8, 0x4}, 0x184, &(0x7f0000000940)={0x5, 0xf, 0x184, 0x6, [@generic={0xd4, 0x10, 0x2, "c40665578b2727eccc0974ccf4b257e903c0528e4d74811046c259e9265f9a994385943617c4f74119ee3a39fae90d277215fd897d3daee0d38a04d4230a48f9d46e2f5565ace8eb52de1420639f78401b795f27121efde1f3eaa01aed030b2be978e87aa3c323e57e29698e99012fc41603017b32463b71df85b520b82da8213a96b7e531618b424f74b847ea7c330d1f3f255096b1990acd03f73a783bdc15934897d9f212de99fc4ac05abda81674a013d4bf057f8452651828bf294438d9df1904b3082c675a715c9b987e1def3631"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0xe, 0x3, 0xfffd, 0x2}, @ssp_cap={0x24, 0x10, 0xa, 0xfb, 0x6, 0xffff, 0x0, 0x0, [0xf0, 0xf, 0xc7, 0xc00f, 0xc000, 0xff3fc0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x9, 0x32}, @generic={0x6f, 0x10, 0xa, "a3f8721b927bdd1c88c5e79b37f4e9b0dc96b11b58ae4b73b855d28fa6ec40c7e6f243de39f41a8787a0a6fcbc5fb9e9329d429b9f37b930cb1a13093873c84bc89f53c296a53814799aa49c5b7f5def2e6f03f85609dac4916db42aa77c5082f41a7850505b4b36a0fb664b"}]}, 0x3, [{0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x1407}}, {0xef, &(0x7f0000000b40)=@string={0xef, 0x3, "22df39360abff2f11b46701c58c1660af06a088f71cf7d75af2dec5bf2f173c45afd2f0de98771c255a1dc7fededa80ad6134b0431844dbd5377041dc8da2c0a4974609926e9300b9c2e9174803b063676a437984657d8de2c244b7d2e37fa4aa9601c35d48cd3318bdf40a7a898f463fd8da457ef260a25bb6bbf10c9c66048c6c2ec03eb1c355c64d785780e64e5096e221c5a1b60651b9b65525c42f11576600d591db2fbeb2ac9cad1ea1542bb72e5cd535c0ce39a209b70f71802433d135bf5cffc626847a53c11b263ff3eb0f94b45793b1b5770aa3fb33f6eb09ab063fdf2821e3f1ea2426d57d89191"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x814}}]}) (async) sendmmsg$sock(r5, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000cc0)="030a5f1cbf8b47c184620589cdbb59fcbe1e3dab94949e7b9e3902e1", 0x1c}, {&(0x7f0000000d00)="1672faee46189a07e8646dd2ee12680cc4286eca9ca9312581eaef17ff0d5eeca72fb0129c9ce5ca633cf9b3222dfbd02376dc2f9af146a133567ce182ccb49486b80b4c01a9233a96fadf567248998c04c47df88d92fcfdce0efa8c4b800a0f4631c0f107180547a890be37f6cb111ee48b4973988f878d9acdce137865b3a19df0a3b0fbbe153d5f7201998a5927bff14a1e53024a8c4c163d3a8d9e5a5ffc693f76f378f10445f99a0856c4", 0xad}, {&(0x7f0000000dc0)}, {&(0x7f0000000e00)="2b64f21faa12c31712661e27ab14a2b2ced2e98db63928e58dba1229cf7fd91f73313fddcbf1f5ae24151c9cb59eb4a558098e22058a0d173370ab366a27ba45a6ff5478bb13db986b3efd9507219c12e1d451cca9171542d55d61de73dc8675f34550f35f98561997796b63ea00dfa0be1bf7f567c67d513b3669e712814f058522b14f4aec427530bee11feceb69e7f8875b5750929e5f0b5251492a44b4a5673ff31de7949329ec3ffaba5ce2a6a1fde57a3a07d4e15afebdd0cdc862bd35ddb9e14410911df1575ddffb1dba131cbef4d395bd033e046759cf3d91cec23c20df32b960e6bf8e", 0xe8}, {&(0x7f0000000f00)="2d594ad08ac5fb9a3ef04aa4e1917cc46484b8d5ff86", 0x16}], 0x5}}, {{&(0x7f0000000fc0)=@xdp={0x2c, 0xf, r4, 0x14}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001040)="f8b6bc500eabbd5a4ccb366180dc1395d8f2dba6386ca8a53d0472075855d387956e3f46d4dc81916e022fa70a9860157b", 0x31}, {&(0x7f0000001080)="335f06859d89923b2ec549f36723254c7baf3ac798fb63d8fd309db9b75e04158caf2245adf911cf4e48fffd793a1cab0aa6938c1cfad2efcca0418cd6ff609c3fa3eb80d9fa054c026618ffa8067f8451713da616a0bcf2c4f95a0c1cbc75f812d0d2799eaba84c8bd0138458af1f939742b6af3a75c913801f86340e64c34ada0f3dca026d505ac616017f07a3321dc8c81758f7970dfe45302d1287d4abb678c6079ec286fadec9f27dd753ff23b8ae61d3f0c05672f5e74958d7e1682133ea29f0cd26015e7518e00c5c6775ef9eb79cad5316c0118deb4be66591f51ffc", 0xe0}, {&(0x7f0000001180)="af5f91c4d169d6a11d66d908918f63d09bc5e717361e6bbbf1ae4082e2f9a3ae6b1e25", 0x23}, {&(0x7f00000011c0)="9752733f4a83fb00a7904662697a87e952da65901dc2d9f2d3b9c8e99e8670ef30a048ef2186be5b32ae76be690ced67ba86fc93815cb8beeb7ae459c512e831a2fda26b49dbe71233e83c7339935b669adf836293075f25108c359c7d663943002fc3f32e3ec4fd98f283c9e998eac2bb8ef4a4459b897b8fca12068b0867738c72d87e38a878ef414e31e7", 0x8c}, {&(0x7f0000001280)="84b255fb3a6385d9bfc5ae9293ff6cee5944eefddf4f3669ec5680e8e3d31717cf20505dd271ba37d56d55a6867d59b0fa4fa328157336e46f0a09238786e81e04504d2389c0c0c0297d974792060bb56e7cc8abc915aef5fc4dbf6200ad9d7f597519825c943ef5ccf09c9872ee004c1690998175f187fbd807b4726a213c82db8fd6097194e3cca509300441b21a39d0f484d31c4c6ed185b02e059320ff064d03c6793bcbc8be2a04d7eb7a317164423b411b6ad3c831943f7ce9e6896c1c8092b879a68d2a0f4619b885c50674c120af8e47a788df820e5fd72530ff56646ae1b9", 0xe3}, {&(0x7f0000001380)="44ca741fdea07ddbb8e732c1b8082fc0f1a5300e1ce60cd97ad407b41948d8ded5e81bdbc1282bed37044a9db1fd01bae7d74afc6bc43250f130e7b4500ab954474939bed01f948b20a2e8e2a5a80df20451798c1c901c4f91dad08083b18cd8be10f3add40b90d7e1ae3406cf54c6bcde898940d58fdf9f0550e69c8e4f7f74cc27bc03ec82e9fb8c6672d74c6c81804ded56a0e15deee5e4e8956f687ae996257125c8d5db73c9975562e7eb3e7e61329a69525d46c4533f0584b65915c83c4935d3a95f8e9758f269ddee212d53445d5722fb9f9dd391688fd0fe2def5cedb5c1d442ab9a0e22e1f8b3d305f7c429882ab7d65f1bee", 0xf7}, {&(0x7f0000001480)="14fb151e646962d156c728c1c3b66f45940b2aa808a8b6a0fc22959d0a89c820a1b9be4b898c79af90aaf375ab1fc1ac7604578591b4c6e71b03173461be489d9e2a20149108190ce7d73108429989353017784439f81945e22c429a082d", 0x5e}], 0x7, &(0x7f0000001580)=[@timestamping={{0x14, 0x1, 0x25, 0xbe32}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x48}}, {{&(0x7f0000001600)=@xdp={0x2c, 0x4, r4, 0x27}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001680)="9fb6ddb87d3ceccf5600125b87c2341fdd3bb8225aac4667db4896de3739977dee207a947c2eec5d615be79ca5b00b75fe3f215b18019af04ccf08ae824d62222b77314582930b5f3c34d84bdef7707ec1923a2947bf93128bd4de7e20697fa2e1e3e88ec989b415bc4ba4bc878a", 0x6e}], 0x1, &(0x7f0000001740)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffff}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x78}}, {{&(0x7f00000017c0)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000002900)=[{&(0x7f0000001840)="ef0d94dafe173b413e2e7dfd12", 0xd}, {&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000002880)="c7db78314fd12d7c2db9707ae28dcc17a4eaf5c5e6bdc3b0affe305c60e5e9d8ca42dbebb5da8bc75c2a323c68cdeb671fefc42401dee3d2a96700a5a622558bccea1811fc9bf58c353cd7c4d5d85c0382a9e2688eaa44125639065ad1", 0x5d}], 0x3, &(0x7f0000002940)=[@txtime={{0x18, 0x1, 0x3d, 0x2b7}}, @timestamping={{0x14, 0x1, 0x25, 0xc972}}, @txtime={{0x18, 0x1, 0x3d, 0x2000}}, @txtime={{0x18, 0x1, 0x3d, 0x7fffffff}}], 0x60}}, {{&(0x7f00000029c0)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@null, @null, @default, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000002a40)="a5e54ec1dd1c17cd7597113f01fe70031a57da1c62cf4ecf1e208bc162ce2e07b91bfa1c02a90eea146c32dc135213b8d6a2611a4c7130a67e04b1207462e9b10dfec5e5590a41f1c79ee209b9c55b10ea69e900cc0e5ef5ba0983cbad364a4d2ac030aa66f51f3731930e71f2fd406f3389003f39cd", 0x76}, {&(0x7f0000002ac0)="f0acb7c95786d61c270303d44d40107ed4380529d3b71a1baa9a8365695b339db4351d44d2130467a77e23aba19399687b8844447956882213421cacbcb177b027faaaf62fc7e48f36c9d7584353e09796ad275399ce1c6639a06fc5739d3ce5d2aca9fcfaf9cbacd73c396df53b8a51c65c79553249f8a9803e521f97d8032e3abeeabefe46b6f00cbbd24c920e8da16761c449ffbd5a8f4f380507d0bdb2a571ae3a3686", 0xa5}, {&(0x7f0000002b80)="577922069719df3133de1764793d80f0bc5c52f3bbbf8a0afabb5b17fe3d49769075078c5a8dfa78b421383f16cdf88be69b0fe5984bb138ef50d420a21e574307dde710d1afac69997ec40e6978edd18daa19d540f1f0f10a1397fc2436fce7a5c9e922fb7531c8f68282202e8aaf414be5d72c0713f78b71acfe41443c5fafbdc46cae9e48bedb6b3c9c46b680cdd05c1a63733172fe63217184ddeb9258d580db1e94dd0b83a52c54b41a711255b0", 0xb0}, {&(0x7f0000002c40)="cc1e2a11a44846ac57affab4063f03e34bb12878c8ad2fd7dc3962c6b714f72bfd91f7196e246fc47afbd96c4d344c296b309373f9bb70fac183d41f12f38f65b5b421b9d1b4bd9bcaa3d14456aa9f2825cccd90257090749302daa6a7c2fc05cdeaed2f79a486acd58fcbf698729ac9603cb439514316de5d67bf806f7b00b2e0f8e9a271ed6f4be7468c72dedaa7792bfd66c048492e52d291a539af1d243fb75fa1ceccf55be1923c713108cca9acc2e32b06", 0xb4}], 0x4}}], 0x5, 0x9caca3e71b2f4db1) r6 = accept4(r5, 0x0, &(0x7f0000002e80), 0x800) connect$inet(r6, &(0x7f0000002ec0)={0x2, 0x4e21, @broadcast}, 0x10) openat$pidfd(0xffffffffffffff9c, &(0x7f0000002f00), 0x20401, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000002f40)={0x4, 0x1, 0x7, 0x1ab, 'syz1\x00', 0x1}) ioctl$HIDIOCSREPORT(r5, 0x400c4808, &(0x7f0000002f80)={0x3, 0x3, 0xae0}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) r7 = creat(&(0x7f0000002fc0)='./file0\x00', 0x18) sendto$packet(r7, &(0x7f0000003000)="387df619649cc309b263d2198d6e8cce867de3fc69fb08753ef6d51edcdf1f887577d7c5b9603840e374102dd5dda41db08c2b4e4c44ef858b09d3b2b84ba5a01bc116e0af49e9af0b32f78365d866e85691283f2bd7d03ed301ab0dbf5ad0bd62ee651e9d68826e3600187ffe25275a539d14504c70e74d1aa957b1550db1036a7e4a1615d72e1f30cae7429c08e2f4982fa680ce622bb9fd9c462244534b7dd5383719dcc14a825aada5098f89b81a436babbfe310615a46a7f7d4054c9550", 0xc0, 0x24008001, &(0x7f00000030c0)={0x11, 0x4, r4, 0x1, 0x8}, 0x14) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000003180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x1c, r8, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) ioctl$HIDIOCGCOLLECTIONINDEX(r7, 0x40184810, &(0x7f0000003280)={0x3, 0xfffffffc, 0xfffffffb, 0x7, 0xc23, 0x88b}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f00000032c0)=0x1, 0x4) (async, rerun: 32) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f00000033c0)={&(0x7f0000003300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003380)={&(0x7f0000003340)={0x30, r8, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x2a}}}}, [@mon_options, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048040}, 0xc0080) (rerun: 32) 4.94226208s ago: executing program 6 (id=4679): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x458, 0x4018, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x1f0, 0x10, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0x2, 0x1, {0x22, 0x85}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0x1, 0x88, {0x88, 0x3, "08bc9b910b863a7ec3e1f3cd37f7cf38df43089b21b5a50c5064ab0219ba4827c223a182e1f6ee65e932d3f2690f257be5c208b84f1be1d9bb0a24676a19b17519db093c3257e225d9ddbf4056d7286ca66fb092c403be79cf5108a8e261aa1e8644ec9d7cf300ef6ef8529f477e70d99419fb3cf56e973bbb59dff9773046c7b67ed77f7330"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x400003b3}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0xf, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x458, 0x4018, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x1f0, 0x10, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0x2, 0x1, {0x22, 0x85}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x3}}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0x1, 0x88, {0x88, 0x3, "08bc9b910b863a7ec3e1f3cd37f7cf38df43089b21b5a50c5064ab0219ba4827c223a182e1f6ee65e932d3f2690f257be5c208b84f1be1d9bb0a24676a19b17519db093c3257e225d9ddbf4056d7286ca66fb092c403be79cf5108a8e261aa1e8644ec9d7cf300ef6ef8529f477e70d99419fb3cf56e973bbb59dff9773046c7b67ed77f7330"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x400003b3}, &(0x7f00000006c0), &(0x7f00000001c0)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0xf, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) (async) 4.914463353s ago: executing program 1 (id=4680): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f0000000080)={0x70, 0x8}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001100)={0x6, 0x11, &(0x7f00000011c0)=ANY=[@ANYBLOB="1855000004000000000000000000000018350000040000000017474507372193914753d00000000000000018420000ffffffff00000000000000001832000002000000000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000b9d43a920300000095000000000000008d70ffff08000000186200000a0000000000000057a50000"], &(0x7f0000000f00)='GPL\x00', 0x7f, 0xc4, &(0x7f0000000f40)=""/196, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000001080)={0x3, 0x5, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[r2, 0x1, r3, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7f, @void, @value}, 0x94) close_range(r4, r2, 0x2) syz_open_dev$evdev(&(0x7f0000000180), 0xd5, 0x262400) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f0000000280)={0x80, 0x0, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 4.548078867s ago: executing program 0 (id=4681): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) (async) syz_open_dev$vcsn(0x0, 0xd, 0x102) (async, rerun: 64) r3 = socket$qrtr(0x2a, 0x2, 0x0) (rerun: 64) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000840)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x6, 0xb8, 0x0, 0x0, @in={0x2, 0x3, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @dev}}, @sadb_key={0x2, 0x8, 0x8, 0x0, "b6"}]}, 0x60}, 0x1, 0x7}, 0x0) (async) r6 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) (async) syz_usb_control_io$hid(r6, 0x0, 0x0) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff}) munmap(&(0x7f0000003000/0x4000)=nil, 0x4000) (async) vmsplice(r7, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) read$FUSE(r4, &(0x7f0000000080)={0x2020}, 0x2020) (async, rerun: 32) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x8041, 0x0) (async, rerun: 64) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x800, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, &(0x7f0000000280), 0x0) (async, rerun: 64) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, 0x0, 0x0) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f0000000180)={0x6, 'dvmrp0\x00', {0x2}, 0xfe00}) (async, rerun: 64) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000b00)={0x0, 'gretap0\x00', {0x2}, 0x80}) (async, rerun: 64) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) 4.356417558s ago: executing program 1 (id=4682): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r2, 0x4b48, &(0x7f0000003d40)=""/175) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f00000001c0)=0x2001) openat$vimc2(0xffffff9c, &(0x7f0000003d00), 0x2, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x2710, 0x3, 0xdddd0000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg(r5, &(0x7f0000000d40), 0x0, 0x4009) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10021, &(0x7f0000000380)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x4}}, 0x80) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000080)=0x80) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a001fffffffff7f0000000080000000", @ANYRES32=0x0, @ANYRES8], 0x24}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {0x6, 0x4}, {0x0, 0x6}, @result={0x401, 0x1}}, {0x0, 0x0, 0x3, 0x3, @tick=0xf27, {0x1, 0x81}, {0x0, 0x4}, @addr={0x2a, 0x5}}], 0x38) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 2.901822797s ago: executing program 0 (id=4683): syz_usb_connect(0x2, 0x51, &(0x7f0000001c40)={{0x12, 0x1, 0x0, 0x87, 0x5a, 0xc9, 0x8, 0x1965, 0x18, 0xd94d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x7, 0x0, 0xa0, 0xc, [{{0x9, 0x4, 0x6d, 0x4, 0x5, 0x3, 0xa4, 0x43, 0x2, [], [{{0x9, 0x5, 0x9, 0x3, 0x20, 0x6, 0x7, 0xa}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x5, 0x6, 0x7f}}, {{0x9, 0x5, 0x3, 0x2eded18f44d24e0b, 0x200, 0x0, 0x5, 0x6}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0xe, 0x7f, 0x5}}, {{0x9, 0x5, 0x8, 0x3, 0x400, 0x0, 0xe, 0x1}}]}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000c0780a402a1101007f9e0102030109022400010000000009040000020a6bc50009f40522000000000009059232"], 0x0) 2.823941858s ago: executing program 6 (id=4684): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_usb_connect(0x5, 0x255, 0x0, 0x0) r3 = syz_io_uring_setup(0x1108, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r3, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r6, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x10, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x7}}}, 0x24}}, 0xc0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x7) shutdown(r1, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r8, &(0x7f00000002c0)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r8, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000700)='k', 0x1}], 0x1}}], 0x1, 0x81) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/protocols\x00') write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x4, @loopback, 0x4321}, {0xa, 0x4e20, 0x7, @empty, 0x7}, 0xffffffffffffffff, 0xd561}}, 0x48) setsockopt$sock_int(r8, 0x1, 0x12, &(0x7f0000000040)=0x101, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) 2.212453162s ago: executing program 5 (id=4685): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ip_vti0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017000000000008001d00040000000c002200060000000000000008000400810000000500240001000000050016000100000005002c0002"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ip_vti0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017000000000008001d00040000000c002200060000000000000008000400810000000500240001000000050016000100000005002c0002"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) 2.147973113s ago: executing program 3 (id=4686): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x3d4cce3a, 0x59c5f8b35074c909) writev(r0, &(0x7f00000010c0), 0x1cc) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000380), 0x4) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f00000007c0), 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 1.930565188s ago: executing program 3 (id=4687): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r4, r3, 0x0, 0x0, 0x0, 0x800, {0x3, 0x1, 0x0, 0x69, 0x200, 0x0, 0x0, 0x5, 0x4cab, 0xe156, 0x0, 0x0, 0x200, 0x0, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000180)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) 1.683650006s ago: executing program 5 (id=4688): r0 = syz_usb_connect(0x0, 0x5e, &(0x7f0000000140)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001000010000904d6000229feac000b2402010302057ff49bfd052406000105240002000d240f0105000000090007000806241a7f000109050602ff030000000905820208"], 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000003}, 0x80) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x9, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtfilter={0x4c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xf1, 0x4, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xffff}}]}}]}, 0x4c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='ip_vti0\x00', 0x10) r8 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x1a, 0xcc, 0x6, 0x20, 0x1435, 0x326, 0xeac7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x4, 0x1, 0x0, 0xcd, 0xea, 0x72}}]}}]}}, 0x0) r9 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r9, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000500)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r10, 0x720, &(0x7f0000000680)={0x0, 0x2, 0x8, &(0x7f0000000400)={0x1a, "65c28678035ab73ade02d839a66f560cfa56ec4319a52702236be319b49de48232"}}) syz_usb_disconnect(r8) r11 = syz_usb_connect(0x2, 0x10e, &(0x7f00000002c0)=ANY=[], 0x0) syz_usb_control_io$hid(r11, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r12, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) setsockopt$SO_TIMESTAMPING(r12, 0x1, 0x41, &(0x7f0000000000)=0x11, 0x4) 1.561059645s ago: executing program 3 (id=4689): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000043c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) (async) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async, rerun: 64) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (rerun: 64) r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) (async) r6 = semget$private(0x0, 0x7, 0x0) semtimedop(r6, &(0x7f0000000300)=[{0x3, 0xfff7, 0x1000}], 0x1f4, 0x0) (async, rerun: 64) semctl$SETVAL(r6, 0x3, 0x10, &(0x7f0000000040)=0x4) (async, rerun: 64) close(r5) (async) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, &(0x7f00000003c0)={[], 0xf000}, 0x1000) 1.410092216s ago: executing program 3 (id=4690): socket(0x10, 0x803, 0x8) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x100400, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x7ff, 0x41}) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) (async) r4 = syz_io_uring_setup(0x6edf, &(0x7f0000000340)={0x0, 0x5230, 0x10, 0x1, 0x2e1}, 0x0, 0x0) r5 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x0, 0x3a6, 0x0, r4}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) (async) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x40000, 0x1}) (async) io_uring_enter(r5, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r8 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r8, 0x0) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) (async) remap_file_pages(&(0x7f0000fec000/0x13000)=nil, 0x13000, 0x1000000, 0x4, 0x40) (async) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r10, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0xc, 0x10000000, 0x3}, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$inet(0x2, 0x4000000000000001, 0x0) 861.282836ms ago: executing program 0 (id=4691): syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010802f638d408030002204ddc01010301095f40030a00004009010002000202040c0905080c400001c60d090582ff54315dfc781758aa097c2474bfe223628be83454260044aed4d08ab316913cba6d50efd7dc5402f49307ff4cdcae5e15c749ac04a94248af97e8e72492cea0a57ee9b6ede55ec46f30f3d29b7dfe46958a42218272"], 0x0) 178.683862ms ago: executing program 1 (id=4692): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x1000, @rand_addr, 0x5}, 0x1c) socket$inet6(0xa, 0x4, 0x1000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x3fe}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) socket$packet(0x11, 0x3, 0x300) timer_create(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x40010, r2, 0x411df000) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 0s ago: executing program 3 (id=4693): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) timer_create(0x1, 0x0, &(0x7f0000000000)) (async) timer_create(0x1, 0x0, &(0x7f0000000000)=0x0) timer_gettime(r0, &(0x7f0000000040)) (async) timer_gettime(r0, &(0x7f0000000040)) timer_settime(r1, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {r2, r3+10000000}}, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) (async) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0xa9fe0000}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='r', 0x1}], 0x1, &(0x7f0000007880)=[@ip_retopts={{0x10, 0x84}}], 0x10}, 0x0) r5 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r6 = shmat(r5, &(0x7f0000ff6000/0x4000)=nil, 0x400c) mremap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ff9000/0x3000)=nil) (async) mremap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ff9000/0x3000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ff7000/0x2000)=nil) shmdt(r6) (async) shmdt(r6) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r7, 0x2285, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) write$sndseq(r8, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @time=@time={0x9, 0x1}}], 0x38) (async) write$sndseq(r8, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @time=@time={0x9, 0x1}}], 0x38) read$snapshot(r8, 0x0, 0xffffffbf) read$watch_queue(r8, &(0x7f0000000080)=""/215, 0xd7) (async) read$watch_queue(r8, &(0x7f0000000080)=""/215, 0xd7) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r8, 0x89f5, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={@loopback, 0x0, 0x0, 0x60, 0x0, [{@multicast1}, {@empty}, {@loopback}, {@local}, {@remote}, {}]}}) read$snapshot(r8, 0x0, 0x0) (async) read$snapshot(r8, 0x0, 0x0) write$uinput_user_dev(r8, &(0x7f0000000300)={'syz0\x00', {0xee10, 0x6, 0xc, 0xffff}, 0x51, [0xff, 0xc, 0x10, 0x80, 0x0, 0xfffffffc, 0x8, 0x6, 0x5, 0x0, 0x80000001, 0x7e, 0x1, 0x4, 0x7, 0x1, 0x71, 0x101, 0x93f1, 0x7, 0x1, 0x6, 0xa, 0x397, 0x1, 0x8, 0xff, 0x3, 0xb, 0x48000, 0x0, 0xfffffff8, 0x1, 0x296, 0x9, 0x3, 0xffffffff, 0x8b, 0x8, 0x3, 0x100, 0x0, 0x3, 0x4, 0x7, 0x2000000, 0xfffffff6, 0x39c, 0x2, 0x3ff, 0x8, 0x7fff, 0x68000, 0x1000, 0x4, 0x6, 0x0, 0x3, 0xff, 0xfffff9df, 0x6, 0x2, 0x500000, 0x7], [0xfffff615, 0xf9, 0x10000000, 0xfffffff7, 0x3, 0x1, 0x5, 0x8d26, 0x7ff, 0x2, 0x1, 0x2, 0x1, 0x4, 0x2, 0x3, 0x3, 0x1, 0x8, 0x8000, 0xe, 0xbb16, 0x2, 0x2, 0xf, 0x1cd8, 0x401, 0x9f5, 0xa, 0x9cc5, 0x800, 0x6, 0x0, 0x10001, 0x4, 0x9, 0x7fff, 0x7, 0x23bc, 0x8, 0xd, 0x1fb1, 0x802, 0x100, 0xdf, 0x1000, 0x1, 0x7, 0x4, 0xe71, 0x9, 0x5, 0x4, 0xd, 0x5, 0x0, 0x3d, 0x1, 0x4db0, 0x0, 0x4, 0xfffffffb, 0x8b, 0x7f], [0x9, 0x2f6b, 0x4, 0xd, 0x2c3, 0x1, 0x2478, 0x6, 0x6, 0xe, 0x78aa, 0x5, 0xd97, 0x397, 0x100, 0x7, 0x2, 0x6, 0x7fd, 0xff, 0xffffffff, 0x27a, 0x5ed, 0x7f, 0x6, 0xe663, 0x6, 0xd, 0xffffffff, 0x5, 0x1, 0x2, 0x7, 0x5, 0x0, 0x1, 0x1, 0x6, 0x82, 0x8, 0x7, 0x100, 0x5, 0x80, 0x9, 0x0, 0xfffffffa, 0x0, 0xff, 0x6, 0x1, 0x9, 0x8, 0x61d, 0x10001, 0x6, 0x4, 0xffffffa6, 0x9, 0xffff, 0x8, 0x4, 0xa], [0x5, 0xf915, 0x7, 0x20ade648, 0x10000, 0x6, 0x85, 0xe7, 0x4, 0x2b67, 0x7, 0x1, 0x1, 0x7b9, 0x6, 0x2, 0x10, 0x4, 0x8, 0xfffffffb, 0x7, 0x6, 0xc4, 0x4, 0x2, 0x4, 0x5b1, 0x6, 0x7, 0x6, 0x6, 0x4, 0x9, 0x10000, 0x4, 0x8, 0x800, 0x6, 0x4, 0x7, 0x2b101a82, 0x1, 0x3, 0x5a5, 0x4, 0x2, 0xf, 0x0, 0xc, 0x6, 0x7ff, 0x8, 0x8, 0x0, 0x7, 0x2, 0xffffff24, 0x6, 0xe8, 0x8, 0x5, 0x6, 0x1, 0x7f]}, 0x45c) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x2, 0x2, 0x83, 0x8}, {0x5, 0x6, 0x4, 0x1}, {0x9, 0x6, 0x9, 0x9698}, {0x5, 0x0, 0x1, 0x7b4}, {0x4, 0xb, 0x18, 0x1}, {0x6, 0x6, 0x9, 0x4}, {0x8, 0xc3, 0x6d, 0xd66c}]}) unshare(0x42000000) kernel console output (not intermixed with test programs): y_hcd [ 1305.807441][ T8289] vhci_hcd: vhci_device speed not set [ 1305.863246][ T43] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1305.883370][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.926899][ T43] usb 6-1: config 0 descriptor?? [ 1305.951258][ T43] ums-realtek 6-1:0.0: USB Mass Storage device detected [ 1306.197543][T17680] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1306.303234][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1306.360174][T17680] usb 4-1: config 0 has an invalid interface number: 168 but max is 0 [ 1306.372695][T17680] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1306.385129][T17680] usb 4-1: config 0 has no interface number 0 [ 1306.388119][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1306.412484][T17680] usb 4-1: config 0 interface 168 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1306.463384][T17680] usb 4-1: config 0 interface 168 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1306.521869][T17680] usb 4-1: config 0 interface 168 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 1306.561736][T17680] usb 4-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 1306.580539][T17680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.599932][T17680] usb 4-1: config 0 descriptor?? [ 1306.659091][T17680] HFC-S_USB 4-1:0.168: probe with driver HFC-S_USB failed with error -5 [ 1306.970404][T17680] usb 4-1: USB disconnect, device number 117 [ 1307.137553][ T5893] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1307.317299][ T5893] usb 3-1: Using ep0 maxpacket: 32 [ 1307.342051][T17680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1307.441965][T23846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1307.457882][T23846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1308.377939][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1308.393244][T17680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1308.609474][ T5893] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1308.671713][ T5893] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1308.687531][ T5893] usb 3-1: can't read configurations, error -71 [ 1309.417824][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1309.426361][T17680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1309.456462][ T5919] usb 6-1: USB disconnect, device number 70 [ 1309.971254][ T5919] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1310.147886][ T5919] usb 6-1: Using ep0 maxpacket: 32 [ 1310.204174][ T5919] usb 6-1: config 0 has an invalid interface number: 235 but max is 0 [ 1310.237076][ T5919] usb 6-1: config 0 has no interface number 0 [ 1310.281889][ T5919] usb 6-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 1310.330705][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.371872][ T5919] usb 6-1: Product: syz [ 1310.372896][T23878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1310.397061][ T5919] usb 6-1: Manufacturer: syz [ 1310.405546][ T5919] usb 6-1: SerialNumber: syz [ 1310.413642][T23878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1310.451963][ T5919] usb 6-1: config 0 descriptor?? [ 1310.465374][T23878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1310.536105][ T43] hid (null): unknown global tag 0xc [ 1310.544972][ T43] hid-generic 0401:10000:8001.006D: unknown main item tag 0x3 [ 1310.558471][ T43] hid-generic 0401:10000:8001.006D: unexpected long global item [ 1310.569819][ T43] hid-generic 0401:10000:8001.006D: probe with driver hid-generic failed with error -22 [ 1310.666780][T23879] autofs4:pid:23879:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294967071.1), cmd(0xc018937e) [ 1310.722390][T23879] autofs4:pid:23879:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 1310.736869][ T5919] kaweth 6-1:0.235: Firmware present in device. [ 1310.957444][ T5893] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1311.149278][ T5893] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 1311.187372][ T5893] usb 4-1: config 0 has no interface number 0 [ 1311.223874][ T5893] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1311.277374][ T5893] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1311.341355][ T5893] usb 4-1: config 0 interface 255 has no altsetting 0 [ 1311.376116][ T5893] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1311.413831][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.462407][ T5893] usb 4-1: config 0 descriptor?? [ 1311.496863][ T5893] ums-realtek 4-1:0.255: USB Mass Storage device detected [ 1312.156673][ T5919] kaweth 6-1:0.235: Error reading configuration (-71), no net device created [ 1312.199911][T23903] No such timeout policy "syz1" [ 1312.237384][ T5919] kaweth 6-1:0.235: probe with driver kaweth failed with error -5 [ 1312.282616][ T5919] usb 6-1: USB disconnect, device number 71 [ 1312.713083][T23902] sctp: [Deprecated]: syz.2.4262 (pid 23902) Use of int in maxseg socket option. [ 1312.713083][T23902] Use struct sctp_assoc_value instead [ 1312.862276][ T43] usb 4-1: USB disconnect, device number 118 [ 1312.985551][T23912] input: syz0 as /devices/virtual/input/input102 [ 1313.099387][T23912] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4264'. [ 1313.186639][T23916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1313.229823][T23916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1313.662236][T23921] binder: 23919:23921 ioctl c0306201 200000000640 returned -22 [ 1314.093216][T23934] kvm_intel: kvm [23933]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x200000000201 [ 1314.636326][T23949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1314.673494][T23949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1316.122363][ T30] audit: type=1326 audit(1749905711.436:6861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23972 comm="syz.2.4281" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f327938e929 code=0x0 [ 1316.326522][T23977] netlink: 'syz.3.4282': attribute type 4 has an invalid length. [ 1316.542958][T23981] netlink: 'syz.3.4282': attribute type 4 has an invalid length. [ 1317.102890][T23996] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1317.557633][ T8289] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1317.727529][ T8289] usb 6-1: Using ep0 maxpacket: 32 [ 1317.734862][ T8289] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1317.869483][ T8289] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1317.900559][ T8289] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1317.917370][ T8289] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.944293][ T8289] usb 6-1: config 0 descriptor?? [ 1318.308666][T24010] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4290'. [ 1318.625528][ T8289] usbhid 6-1:0.0: can't add hid device: -32 [ 1318.633476][ T8289] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 1319.772143][T20897] bond0: (slave netdevsim0): Releasing backup interface [ 1320.271376][T24035] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1320.284216][T24035] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1320.296135][T24035] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1320.315940][T24035] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1320.324852][T24035] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1320.504305][T17699] usb 6-1: USB disconnect, device number 73 [ 1320.844690][ T30] audit: type=1326 audit(1749905716.156:6862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24038 comm="syz.1.4300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423078e929 code=0x7ffc0000 [ 1320.885297][ T30] audit: type=1326 audit(1749905716.196:6863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24038 comm="syz.1.4300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423078e929 code=0x7ffc0000 [ 1320.968012][ T30] audit: type=1326 audit(1749905716.196:6864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24038 comm="syz.1.4300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f423078e929 code=0x7ffc0000 [ 1321.025916][ T30] audit: type=1326 audit(1749905716.196:6865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24038 comm="syz.1.4300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423078e929 code=0x7ffc0000 [ 1321.158761][ T30] audit: type=1326 audit(1749905716.196:6866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24038 comm="syz.1.4300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423078e929 code=0x7ffc0000 [ 1321.197808][ T5893] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1321.279972][ T30] audit: type=1326 audit(1749905716.196:6867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24038 comm="syz.1.4300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f423078e929 code=0x7ffc0000 [ 1321.337423][ T30] audit: type=1326 audit(1749905716.196:6868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24038 comm="syz.1.4300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423078e929 code=0x7ffc0000 [ 1321.383873][ T5893] usb 4-1: Using ep0 maxpacket: 32 [ 1321.399873][ T5893] usb 4-1: config 0 has an invalid interface number: 150 but max is 0 [ 1321.417686][ T5893] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1321.427582][ T30] audit: type=1326 audit(1749905716.196:6869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24038 comm="syz.1.4300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423078e929 code=0x7ffc0000 [ 1321.485702][ T5893] usb 4-1: config 0 has no interface number 0 [ 1321.495420][ T5893] usb 4-1: New USB device found, idVendor=0c45, idProduct=628f, bcdDevice= 8.b6 [ 1321.541184][ T30] audit: type=1326 audit(1749905716.196:6870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24038 comm="syz.1.4300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f423078e929 code=0x7ffc0000 [ 1321.552898][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.598288][ T30] audit: type=1326 audit(1749905716.196:6871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24038 comm="syz.1.4300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423078e929 code=0x7ffc0000 [ 1321.621416][ T30] audit: type=1326 audit(1749905716.196:6872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24038 comm="syz.1.4300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423078e929 code=0x7ffc0000 [ 1321.644397][ T5893] usb 4-1: Product: syz [ 1321.644423][ T5893] usb 4-1: Manufacturer: syz [ 1321.644441][ T5893] usb 4-1: SerialNumber: syz [ 1321.659297][ T30] audit: type=1326 audit(1749905716.196:6873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24038 comm="syz.1.4300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f423078e929 code=0x7ffc0000 [ 1321.680382][ T5893] usb 4-1: config 0 descriptor?? [ 1321.685178][ T30] audit: type=1326 audit(1749905716.196:6874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24038 comm="syz.1.4300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423078e929 code=0x7ffc0000 [ 1321.723764][ T5893] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628f [ 1321.757449][ T30] audit: type=1326 audit(1749905716.196:6875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24038 comm="syz.1.4300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f423078e929 code=0x7ffc0000 [ 1321.787823][T17699] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1321.961110][T17699] usb 6-1: Using ep0 maxpacket: 32 [ 1321.996085][T17699] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1322.008430][T17699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1322.024154][T17699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1322.119641][T17699] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1322.134235][T17699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1322.167546][T17699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1322.187963][T17699] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1322.197614][T17699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.208989][T17699] usb 6-1: Product: syz [ 1322.213296][T17699] usb 6-1: Manufacturer: syz [ 1322.252323][T17699] usb 6-1: SerialNumber: syz [ 1322.258024][ T5893] gspca_sn9c20x: Write register 1000 failed -110 [ 1322.264430][ T5893] gspca_sn9c20x: Device initialization failed [ 1322.290714][T17699] usb 6-1: config 0 descriptor?? [ 1322.319345][ T5893] gspca_sn9c20x 4-1:0.150: probe with driver gspca_sn9c20x failed with error -110 [ 1322.458245][ T5841] Bluetooth: hci0: command tx timeout [ 1323.052569][ T5893] usb 4-1: USB disconnect, device number 119 [ 1323.180066][T20897] bond0 (unregistering): (slave 4): Releasing backup interface [ 1323.194865][T20897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1323.205353][T20897] bond0 (unregistering): Released all slaves [ 1323.343720][T20897] : left promiscuous mode [ 1323.873650][T24077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1323.885756][T24077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1324.369342][T24091] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4309'. [ 1324.396564][T24088] fuse: Unknown parameter 'p_id' [ 1324.423653][T24091] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4309'. [ 1324.490246][T24091] binder: 24089:24091 ioctl c018620c 200000000040 returned -22 [ 1324.532863][T24091] binder: 24089:24091 ioctl c018620c 200000000040 returned -22 [ 1324.567353][ T5841] Bluetooth: hci0: command tx timeout [ 1324.612962][T20897] hsr_slave_0: left promiscuous mode [ 1324.626019][T20897] hsr_slave_1: left promiscuous mode [ 1325.121646][ T43] usb 6-1: USB disconnect, device number 74 [ 1325.250459][T24108] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4311'. [ 1325.747372][ T43] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1325.927875][T24122] syz.0.4311 (24122): drop_caches: 2 [ 1325.941454][T24117] syz.0.4311 (24117): drop_caches: 2 [ 1325.958100][T24117] syz.0.4311 (24117): drop_caches: 2 [ 1326.002115][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 1326.029665][ T43] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1326.060088][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.127676][ T43] usb 6-1: Product: syz [ 1326.131958][ T43] usb 6-1: Manufacturer: syz [ 1326.136787][ T43] usb 6-1: SerialNumber: syz [ 1326.189711][ T43] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1326.196112][ T43] r8152-cfgselector 6-1: config 0 descriptor?? [ 1326.428887][ T43] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1326.437376][ T43] r8152-cfgselector 6-1: bad CDC descriptors [ 1326.460180][ T43] r8152-cfgselector 6-1: USB disconnect, device number 75 [ 1326.625878][ T5841] Bluetooth: hci0: command tx timeout [ 1326.694260][T20897] team0 (unregistering): Port device team_slave_1 removed [ 1326.767635][ T8289] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1326.779705][T20897] team0 (unregistering): Port device team_slave_0 removed [ 1326.932781][ T8289] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1326.954692][ T8289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.969027][ T8289] usb 4-1: config 0 descriptor?? [ 1326.985755][ T8289] cp210x 4-1:0.0: cp210x converter detected [ 1327.307500][ T43] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1327.457505][ T43] usb 6-1: device descriptor read/64, error -71 [ 1327.707422][ T43] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1327.822505][T24108] netlink: 216 bytes leftover after parsing attributes in process `syz.0.4311'. [ 1327.839770][T24108] netlink: 216 bytes leftover after parsing attributes in process `syz.0.4311'. [ 1327.847852][ T43] usb 6-1: device descriptor read/64, error -71 [ 1327.856234][T24108] net_ratelimit: 1 callbacks suppressed [ 1327.863838][T24108] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1327.968107][ T43] usb usb6-port1: attempt power cycle [ 1328.021299][T24037] chnl_net:caif_netlink_parms(): no params data found [ 1328.201557][T24138] veth1: entered promiscuous mode [ 1328.263840][ T8289] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1328.308015][ T8289] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 1328.372087][ T43] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1328.388156][ T8289] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1328.453522][ T43] usb 6-1: device descriptor read/8, error -71 [ 1328.471328][ T8289] usb 4-1: USB disconnect, device number 120 [ 1328.557136][ T8289] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1328.608698][ T8289] cp210x 4-1:0.0: device disconnected [ 1328.698026][ T43] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1328.709609][ T5841] Bluetooth: hci0: command tx timeout [ 1328.908973][ T43] usb 6-1: device descriptor read/8, error -71 [ 1329.020909][ T43] usb usb6-port1: unable to enumerate USB device [ 1329.174330][T24037] bridge0: port 1(bridge_slave_0) entered blocking state [ 1329.191760][T24037] bridge0: port 1(bridge_slave_0) entered disabled state [ 1329.205520][T24037] bridge_slave_0: entered allmulticast mode [ 1329.224957][T24037] bridge_slave_0: entered promiscuous mode [ 1329.245451][T20897] IPVS: stop unused estimator thread 0... [ 1329.268860][T24037] bridge0: port 2(bridge_slave_1) entered blocking state [ 1329.298389][T24037] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.327898][T24037] bridge_slave_1: entered allmulticast mode [ 1329.374327][T24037] bridge_slave_1: entered promiscuous mode [ 1329.498934][T24164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1329.557873][T24164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1329.563186][T24037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1329.632681][T24037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1329.935592][T24037] team0: Port device team_slave_0 added [ 1329.982131][T24037] team0: Port device team_slave_1 added [ 1329.999721][T24172] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode [ 1330.013158][T24172] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode [ 1330.282863][T24037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1330.308740][T24037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1330.508503][T24037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1330.527854][ T8289] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1330.666000][T24037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1330.698573][T24037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1330.759184][ T8289] usb 6-1: Using ep0 maxpacket: 32 [ 1330.790735][T24037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1330.801978][ T8289] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1330.828463][ T8289] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1330.863154][ T8289] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1330.930258][ T8289] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1330.998010][ T8289] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1331.037091][ T8289] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1331.089463][ T8289] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1331.110185][ T8289] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.118590][ T8289] usb 6-1: Product: syz [ 1331.122946][ T8289] usb 6-1: Manufacturer: syz [ 1331.128189][ T8289] usb 6-1: SerialNumber: syz [ 1331.136653][ T8289] usb 6-1: config 0 descriptor?? [ 1331.224238][T24037] hsr_slave_0: entered promiscuous mode [ 1331.263212][T24037] hsr_slave_1: entered promiscuous mode [ 1331.280473][T24037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1331.289530][T24037] Cannot create hsr debugfs directory [ 1332.605358][T24037] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1332.632523][T24037] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1332.646334][T24037] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1332.764040][T24037] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1333.562459][T24037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1333.774107][T24037] 8021q: adding VLAN 0 to HW filter on device team0 [ 1333.846346][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 1333.854636][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1333.903020][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 1333.910551][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1334.126679][ T5919] usb 6-1: USB disconnect, device number 80 [ 1334.149504][T24037] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1334.266633][T24227] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4330'. [ 1334.355010][T24037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1334.577587][T24037] veth0_vlan: entered promiscuous mode [ 1334.644884][T24037] veth1_vlan: entered promiscuous mode [ 1334.694129][T24244] loop7: detected capacity change from 0 to 7 [ 1334.702653][T24245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1334.718407][T24245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1334.756981][T24244] Dev loop7: unable to read RDB block 7 [ 1334.791503][T24245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1334.800338][T24245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1334.812803][T24244] loop7: unable to read partition table [ 1334.828179][T24244] loop7: partition table beyond EOD, truncated [ 1334.863341][T24244] loop_reread_partitions: partition scan of loop7 (被x ) failed (rc=-5) [ 1334.941519][T24037] veth0_macvtap: entered promiscuous mode [ 1335.013810][T24037] veth1_macvtap: entered promiscuous mode [ 1335.279906][T24037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1335.601089][T24037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1335.687790][T24037] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.696804][T24037] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.715015][T24037] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.724665][T24037] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.877532][ T5893] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1336.959415][ T6948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1336.979666][ T6948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1337.047265][ T5893] usb 4-1: Using ep0 maxpacket: 8 [ 1337.059131][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1337.095019][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1337.118628][ T5893] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1337.133504][ T6948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1337.152241][ T6948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1337.170736][ T5893] usb 4-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 1337.210943][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.247993][ T5893] usb 4-1: config 0 descriptor?? [ 1337.652663][T24280] fuse: Unknown parameter '' [ 1337.904614][T24283] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1337.947858][T24283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4340'. [ 1338.207990][ T5893] usbhid 4-1:0.0: can't add hid device: -71 [ 1338.282500][ T5893] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1338.311936][ T5893] usb 4-1: USB disconnect, device number 121 [ 1338.607491][T17690] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1338.798974][T17690] usb 7-1: Using ep0 maxpacket: 32 [ 1338.834864][T17690] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1338.877501][T17690] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1338.915212][T17690] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1338.942308][T17690] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1339.017806][T17690] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1339.148647][T17690] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1339.167632][T24309] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4345'. [ 1339.209039][T24309] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4345'. [ 1339.246054][T17690] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1339.272127][T17690] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.281619][T24309] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4345'. [ 1339.299455][T17690] usb 7-1: Product: syz [ 1339.307993][T17690] usb 7-1: Manufacturer: syz [ 1339.312828][T17690] usb 7-1: SerialNumber: syz [ 1339.318543][T24309] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4345'. [ 1339.382464][T24316] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4346'. [ 1339.402481][T24314] sctp: [Deprecated]: syz.1.4343 (pid 24314) Use of int in maxseg socket option. [ 1339.402481][T24314] Use struct sctp_assoc_value instead [ 1339.438553][T17690] usb 7-1: config 0 descriptor?? [ 1339.569267][T24309] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4345'. [ 1339.581753][T24313] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4346'. [ 1339.664832][T24309] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4345'. [ 1339.722446][T24309] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4345'. [ 1339.806787][T24309] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4345'. [ 1339.855371][T24309] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4345'. [ 1339.876391][T24309] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4345'. [ 1340.307850][ T5893] usb 4-1: new full-speed USB device number 122 using dummy_hcd [ 1340.511384][ T5893] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1340.562158][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.626091][ T5893] usb 4-1: Product: syz [ 1340.660899][ T5893] usb 4-1: Manufacturer: syz [ 1340.718950][ T5893] usb 4-1: SerialNumber: syz [ 1340.747892][ T5893] usb 4-1: config 0 descriptor?? [ 1340.770255][ T5893] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1340.812389][ T5893] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1340.912867][ T5893] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 1341.008795][ T5893] usb 4-1: USB disconnect, device number 122 [ 1342.279608][ T8289] usb 7-1: USB disconnect, device number 2 [ 1342.850449][T24378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1342.917347][T24378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1344.678395][ T5893] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1344.906466][ T5893] usb 6-1: Using ep0 maxpacket: 32 [ 1344.925587][ T5893] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1344.954253][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1345.000169][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1345.066040][ T5893] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1345.165338][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1345.304854][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1345.385407][ T5893] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1345.401182][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.436653][ T5893] usb 6-1: Product: syz [ 1345.457667][ T5893] usb 6-1: Manufacturer: syz [ 1345.466185][ T5893] usb 6-1: SerialNumber: syz [ 1345.495053][ T5893] usb 6-1: config 0 descriptor?? [ 1346.217618][ T8289] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1346.377829][ T8289] usb 7-1: Using ep0 maxpacket: 16 [ 1346.385335][ T8289] usb 7-1: config 0 has an invalid interface number: 110 but max is 0 [ 1346.394634][ T8289] usb 7-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 1346.426326][ T8289] usb 7-1: config 0 has no interface number 0 [ 1346.450142][ T8289] usb 7-1: config 0 interface 110 has no altsetting 0 [ 1346.475559][ T8289] usb 7-1: New USB device found, idVendor=13d3, idProduct=3346, bcdDevice=5d.d0 [ 1346.487157][ T8289] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.497831][ T8289] usb 7-1: Product: syz [ 1346.507946][ T8289] usb 7-1: Manufacturer: syz [ 1346.519362][ T8289] usb 7-1: SerialNumber: syz [ 1346.598708][ T8289] usb 7-1: config 0 descriptor?? [ 1347.514715][ T8289] usb 7-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 1347.580139][ T8289] usb 7-1: USB disconnect, device number 3 [ 1347.721550][ T30] audit: type=1326 audit(1749905743.036:6876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24461 comm="syz.3.4372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19faf8e929 code=0x7ffc0000 [ 1347.794907][ T30] audit: type=1326 audit(1749905743.036:6877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24461 comm="syz.3.4372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19faf8e929 code=0x7ffc0000 [ 1347.895311][ T30] audit: type=1326 audit(1749905743.076:6878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24461 comm="syz.3.4372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f19faf8e929 code=0x7ffc0000 [ 1348.059082][ T8289] usb 4-1: new full-speed USB device number 123 using dummy_hcd [ 1348.074169][ T30] audit: type=1326 audit(1749905743.076:6879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24461 comm="syz.3.4372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19faf8e929 code=0x7ffc0000 [ 1348.183292][T24468] ipip0: entered promiscuous mode [ 1348.197550][ T8289] usb 4-1: device descriptor read/64, error -71 [ 1348.217297][ T30] audit: type=1326 audit(1749905743.076:6880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24461 comm="syz.3.4372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19faf8e929 code=0x7ffc0000 [ 1348.256035][T24468] ipip0: entered allmulticast mode [ 1348.331700][ T30] audit: type=1326 audit(1749905743.076:6881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24461 comm="syz.3.4372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f19faf8e929 code=0x7ffc0000 [ 1348.397345][ T30] audit: type=1326 audit(1749905743.146:6882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24461 comm="syz.3.4372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19faf8e929 code=0x7ffc0000 [ 1348.438608][ T8289] usb 4-1: new full-speed USB device number 124 using dummy_hcd [ 1348.467795][ T5893] usb 6-1: USB disconnect, device number 81 [ 1348.518158][ T30] audit: type=1326 audit(1749905743.146:6883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24461 comm="syz.3.4372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19faf8e929 code=0x7ffc0000 [ 1348.598349][ T8289] usb 4-1: device descriptor read/64, error -71 [ 1348.708072][ T8289] usb usb4-port1: attempt power cycle [ 1348.728726][T24488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1348.753558][T24488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1348.937591][T17681] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1349.007897][ T5893] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1349.056141][ T8289] usb 4-1: new full-speed USB device number 125 using dummy_hcd [ 1349.078467][ T8289] usb 4-1: device descriptor read/8, error -71 [ 1349.090581][T17681] usb 7-1: Using ep0 maxpacket: 16 [ 1349.100923][T17681] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 1349.122566][T17681] usb 7-1: config 0 descriptor has 1 excess byte, ignoring [ 1349.138860][T17681] usb 7-1: config 0 has no interface number 0 [ 1349.150622][T17681] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1349.162042][T17681] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.167468][ T5893] usb 6-1: Using ep0 maxpacket: 16 [ 1349.182028][ T5893] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1349.192963][ T5893] usb 6-1: config 241 has an invalid interface number: 251 but max is 3 [ 1349.207938][ T5893] usb 6-1: config 241 has an invalid interface number: 97 but max is 3 [ 1349.228311][ T5893] usb 6-1: config 241 has an invalid interface number: 201 but max is 3 [ 1349.230561][T17681] usb 7-1: Product: syz [ 1349.254398][T17681] usb 7-1: Manufacturer: syz [ 1349.255917][ T5893] usb 6-1: config 241 has an invalid interface number: 80 but max is 3 [ 1349.262904][T17681] usb 7-1: SerialNumber: syz [ 1349.305279][ T5893] usb 6-1: config 241 has no interface number 0 [ 1349.317869][ T8289] usb 4-1: new full-speed USB device number 126 using dummy_hcd [ 1349.329405][ T5893] usb 6-1: config 241 has no interface number 1 [ 1349.352576][T17681] usb 7-1: config 0 descriptor?? [ 1349.360170][ T8289] usb 4-1: device descriptor read/8, error -71 [ 1349.363466][ T5893] usb 6-1: config 241 has no interface number 2 [ 1349.383817][ T5893] usb 6-1: config 241 has no interface number 3 [ 1349.403283][T17681] usb 7-1: Found UVC 0.00 device syz (046d:08f3) [ 1349.416415][T17681] usb 7-1: No valid video chain found. [ 1349.439179][ T5893] usb 6-1: config 241 interface 251 altsetting 98 has an invalid descriptor for endpoint zero, skipping [ 1349.462655][ T5893] usb 6-1: config 241 interface 251 altsetting 98 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 1349.481578][ T5893] usb 6-1: config 241 interface 201 altsetting 254 has a duplicate endpoint with address 0x9, skipping [ 1349.499424][ T8289] usb usb4-port1: unable to enumerate USB device [ 1349.505929][ T5893] usb 6-1: config 241 interface 201 altsetting 254 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 1349.533210][ T5893] usb 6-1: config 241 interface 201 altsetting 254 has an invalid descriptor for endpoint zero, skipping [ 1349.579277][ T5893] usb 6-1: config 241 interface 80 altsetting 219 has a duplicate endpoint with address 0x2, skipping [ 1349.596887][ T5893] usb 6-1: config 241 interface 80 altsetting 219 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1349.606046][ T8289] usb 7-1: USB disconnect, device number 4 [ 1349.645071][ T5893] usb 6-1: config 241 interface 80 altsetting 219 has a duplicate endpoint with address 0xF, skipping [ 1349.674372][ T5893] usb 6-1: config 241 interface 80 altsetting 219 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1349.696057][ T5893] usb 6-1: config 241 interface 80 altsetting 219 has an invalid descriptor for endpoint zero, skipping [ 1349.720978][ T5893] usb 6-1: config 241 interface 251 has no altsetting 0 [ 1349.736585][ T5893] usb 6-1: config 241 interface 97 has no altsetting 0 [ 1349.751442][ T5893] usb 6-1: config 241 interface 201 has no altsetting 0 [ 1349.767276][ T5893] usb 6-1: config 241 interface 80 has no altsetting 0 [ 1349.780964][ T5893] usb 6-1: New USB device found, idVendor=03f0, idProduct=1670, bcdDevice=63.3c [ 1349.790362][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.803588][ T5893] usb 6-1: Product: ⹥ඨ⮯둈㘷໹䁨蜔빈⢼꒒觠媘쒲䵸硹澣⽍㒌⤚隗摀ᣞ㈦䄾조꿚謓㡻윱ꅙ䠃뫢玄嗋⓵눹뵺ꤙ㷳漢趻㹢癌m [ 1349.824631][ T5893] usb 6-1: Manufacturer: о [ 1349.829309][ T5893] usb 6-1: SerialNumber: ⩺滕䳬ﷺ炙ꌳʊ줹枾ꮭ푵͑ [ 1350.772230][T24511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1350.783767][T24511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1351.266866][T24521] vivid-002: disconnect [ 1351.275446][T24520] vivid-002: reconnect [ 1352.027556][T17681] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1352.096267][ T5893] usb 6-1: USB disconnect, device number 82 [ 1352.182858][T17681] usb 7-1: Using ep0 maxpacket: 16 [ 1352.224726][T17681] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 1352.260244][T17681] usb 7-1: config 0 has no interface number 0 [ 1352.305417][T17681] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1352.318897][T17681] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.354699][T17681] usb 7-1: Product: syz [ 1352.372623][T17681] usb 7-1: Manufacturer: syz [ 1352.390405][T17681] usb 7-1: SerialNumber: syz [ 1352.414740][T17681] usb 7-1: config 0 descriptor?? [ 1352.443469][T17681] asix 7-1:0.251: probe with driver asix failed with error -22 [ 1352.678559][T17681] usb 7-1: USB disconnect, device number 5 [ 1352.727389][T17680] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1352.877785][T17680] usb 6-1: Using ep0 maxpacket: 32 [ 1352.897732][T17680] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1352.920337][T17680] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1352.962454][T17680] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1352.995462][T17680] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1353.054483][T17680] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1353.087645][T17680] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1353.294452][T17680] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1353.332202][T17680] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.366546][T17680] usb 6-1: Product: syz [ 1353.407411][T17680] usb 6-1: Manufacturer: syz [ 1353.412101][T17680] usb 6-1: SerialNumber: syz [ 1353.548771][T17680] usb 6-1: config 0 descriptor?? [ 1353.759143][T17690] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1353.794307][T24564] netlink: 'syz.1.4393': attribute type 21 has an invalid length. [ 1353.950569][T17690] usb 7-1: device descriptor read/64, error -71 [ 1354.267457][T17690] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1354.429959][T17690] usb 7-1: device descriptor read/64, error -71 [ 1354.617617][T24577] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1354.795530][T17690] usb usb7-port1: attempt power cycle [ 1355.291188][T17690] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1355.604736][T17690] usb 7-1: device descriptor read/8, error -71 [ 1355.880931][T17690] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1355.909133][T17690] usb 7-1: device descriptor read/8, error -71 [ 1355.918135][ T5893] usb 6-1: USB disconnect, device number 83 [ 1355.987771][T17680] usb 4-1: new full-speed USB device number 127 using dummy_hcd [ 1356.032106][T17690] usb usb7-port1: unable to enumerate USB device [ 1356.160983][T17680] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1356.234085][T17680] usb 4-1: config 1 has an invalid descriptor of length 207, skipping remainder of the config [ 1356.293953][T17680] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1356.309462][T17680] usb 4-1: config 1 has no interface number 1 [ 1356.315687][T17680] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1356.334198][T17680] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 53982, setting to 64 [ 1356.364272][T17680] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1356.376140][T17680] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.391154][T17680] usb 4-1: Product: syz [ 1356.417964][T17680] usb 4-1: Manufacturer: syz [ 1356.429950][T17680] usb 4-1: SerialNumber: syz [ 1356.666360][T24590] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1356.809043][T17680] usb 4-1: USB disconnect, device number 127 [ 1356.884643][ T6015] udevd[6015]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1357.000933][T24616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1357.038531][T17681] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1357.063314][T24616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1357.088113][T24619] __nla_validate_parse: 23 callbacks suppressed [ 1357.088134][T24619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4402'. [ 1357.203402][T17681] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1357.228240][T17681] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.268121][T17681] usb 7-1: config 0 descriptor?? [ 1357.291981][T17681] cp210x 7-1:0.0: cp210x converter detected [ 1357.503435][T17681] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1357.619747][T24631] netlink: 'syz.3.4404': attribute type 1 has an invalid length. [ 1357.730239][T24631] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1357.807592][T24631] bond1: (slave gretap1): making interface the new active one [ 1357.822403][T24631] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1358.657583][T17690] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1358.817396][T17690] usb 6-1: Using ep0 maxpacket: 32 [ 1358.830377][T17690] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1358.843764][T17690] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1358.859388][T17690] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1358.870925][T17690] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1358.883653][T17690] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1358.896185][T17690] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1358.912693][T17690] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1358.922695][T17690] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.931676][T17690] usb 6-1: Product: syz [ 1358.940128][T17690] usb 6-1: Manufacturer: syz [ 1358.944965][T17690] usb 6-1: SerialNumber: syz [ 1358.960809][T17690] usb 6-1: config 0 descriptor?? [ 1359.768336][ T8289] usb 7-1: USB disconnect, device number 10 [ 1359.786364][ T8289] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1359.808315][ T8289] cp210x 7-1:0.0: device disconnected [ 1359.841087][T24661] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4410'. [ 1359.856291][T24661] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4410'. [ 1359.927821][T17680] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 1359.946182][T24663] pim6reg: entered allmulticast mode [ 1360.089423][T17680] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1360.110961][T17680] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1360.153456][T17680] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1360.177462][T17680] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.191003][T17680] usb 4-1: Product: syz [ 1360.200254][T17680] usb 4-1: Manufacturer: syz [ 1360.210319][T17680] usb 4-1: SerialNumber: syz [ 1360.508042][T24676] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4413'. [ 1360.659071][T24678] netem: incorrect gi model size [ 1360.678607][T17680] usb 4-1: 0:2 : does not exist [ 1360.679138][T24678] netem: change failed [ 1360.711173][T24676] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4413'. [ 1360.859676][T24681] bridge4: entered promiscuous mode [ 1361.186137][T17680] usb 4-1: USB disconnect, device number 2 [ 1361.373286][ T6015] udevd[6015]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1361.503422][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.512216][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.861980][T17680] usb 6-1: USB disconnect, device number 84 [ 1361.865037][T24687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1361.939846][T24687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1362.915648][T24708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1362.963080][T24708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1363.490080][ T30] audit: type=1326 audit(1749905758.796:6884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24683 comm="syz.3.4415" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f19faf8e929 code=0x0 [ 1364.168840][T24726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1364.214618][T24726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1367.055046][T24759] tmpfs: Unknown parameter '0x0000000000000000' [ 1367.249174][T17690] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1367.718294][T24759] netlink: 'syz.5.4428': attribute type 5 has an invalid length. [ 1367.719484][T17690] usb 7-1: Using ep0 maxpacket: 32 [ 1367.780213][T17690] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1367.806871][T17690] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1367.829203][T17690] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1367.852239][T17690] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1367.874718][T17690] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1367.926545][T17690] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1368.027334][T17690] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1368.049871][T17690] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.191638][T24786] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1368.225549][T17690] usb 7-1: Product: syz [ 1368.250693][T17690] usb 7-1: Manufacturer: syz [ 1368.375436][T17690] usb 7-1: SerialNumber: syz [ 1368.443657][T17690] usb 7-1: config 0 descriptor?? [ 1369.906244][T24807] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1370.006454][T24808] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4434'. [ 1370.016795][T24808] vxcan1: entered promiscuous mode [ 1370.091054][T17681] usb 7-1: USB disconnect, device number 11 [ 1370.287143][T24811] netlink: 'syz.6.4435': attribute type 6 has an invalid length. [ 1370.364369][T24811] netlink: 'syz.6.4435': attribute type 1 has an invalid length. [ 1370.388209][T24811] netlink: 193500 bytes leftover after parsing attributes in process `syz.6.4435'. [ 1370.698385][ T8289] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 1370.862708][ T8289] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1370.878970][ T8289] usb 4-1: config 0 has no interface number 0 [ 1370.903172][ T8289] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1370.942813][ T8289] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1371.004455][ T8289] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1371.106972][ T8289] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1371.206649][ T8289] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1371.217726][T17690] usb 6-1: new full-speed USB device number 85 using dummy_hcd [ 1371.287025][ T8289] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1371.295373][T24828] PKCS7: Unknown OID: [4] 0.0 [ 1371.331259][ T8289] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1371.332259][T24828] PKCS7: Only support pkcs7_signedData type [ 1371.387373][T17690] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1371.395617][ T8289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.437314][T17690] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1371.451645][T24828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1371.481829][ T8289] usb 4-1: config 0 descriptor?? [ 1371.488109][T17690] usb 6-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 1371.518430][T24815] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1371.526291][T24815] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1371.533582][T17690] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.542058][T24828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1371.598606][T17690] usb 6-1: config 0 descriptor?? [ 1371.598964][ T8289] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1371.777949][T24838] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1372.205790][T17690] hid-generic 0003:04F3:0754.006E: failed to start in urb: -90 [ 1372.235787][T17690] hid-generic 0003:04F3:0754.006E: hidraw0: USB HID v1.01 Device [HID 04f3:0754] on usb-dummy_hcd.5-1/input0 [ 1373.149968][T24857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1373.227936][T24857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1373.442470][T17681] usb 4-1: USB disconnect, device number 3 [ 1373.451823][T17681] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1373.893854][T17681] IPVS: starting estimator thread 0... [ 1373.927866][T17681] usb 6-1: USB disconnect, device number 85 [ 1374.108167][T24875] IPVS: using max 27 ests per chain, 64800 per kthread [ 1374.592935][ T43] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1374.767410][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 1374.774710][ T43] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1374.783819][ T43] usb 6-1: config 0 has no interface number 0 [ 1374.790126][ T43] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1374.800236][ T43] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1374.816809][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.836113][ T43] usb 6-1: Product: syz [ 1374.840867][ T43] usb 6-1: Manufacturer: syz [ 1374.845658][ T43] usb 6-1: SerialNumber: syz [ 1374.854750][ T43] usb 6-1: config 0 descriptor?? [ 1374.866982][ T43] smsc75xx v1.0.0 [ 1375.255288][T24899] netlink: 'syz.1.4452': attribute type 1 has an invalid length. [ 1375.309558][T24902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4452'. [ 1375.435135][T24902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1375.445356][T24902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1375.792606][T24908] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (3800 ns). Using initial count to start timer. [ 1375.824917][T24906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1375.856578][T24906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1375.957903][T24910] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1376.020968][ T43] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1376.061344][ T43] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1376.344646][ T43] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1376.387352][ T43] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1376.405403][ T43] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1376.416619][T24922] netlink: 'syz.3.4456': attribute type 2 has an invalid length. [ 1376.426786][ T43] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1376.452675][ T43] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 1376.544814][ T43] usb 6-1: USB disconnect, device number 86 [ 1376.737387][ T5919] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1376.937309][ T5919] usb 4-1: device descriptor read/64, error -71 [ 1377.157330][T17690] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1377.197922][ T5919] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1377.337422][ T5919] usb 4-1: device descriptor read/64, error -71 [ 1377.406414][T17690] usb 7-1: config 0 has no interfaces? [ 1377.425752][T17690] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1377.441296][T17690] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.470910][ T5919] usb usb4-port1: attempt power cycle [ 1377.494975][T17690] usb 7-1: Product: syz [ 1377.530941][T17690] usb 7-1: Manufacturer: syz [ 1377.595188][T17690] usb 7-1: SerialNumber: syz [ 1377.597796][T17681] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1377.622798][T17690] usb 7-1: config 0 descriptor?? [ 1377.771552][T17681] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1377.796676][T17681] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1377.855659][ T5919] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1377.856462][T17681] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1377.913137][ T5919] usb 4-1: device descriptor read/8, error -71 [ 1377.965224][T17681] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1378.043209][T17681] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.126695][T17681] usb 6-1: config 0 descriptor?? [ 1378.157306][ T5919] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1378.188106][ T5919] usb 4-1: device descriptor read/8, error -71 [ 1378.332823][ T5919] usb usb4-port1: unable to enumerate USB device [ 1378.613894][T17681] plantronics 0003:047F:FFFF.006F: No inputs registered, leaving [ 1378.713641][T17681] plantronics 0003:047F:FFFF.006F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1379.686226][T24972] netlink: 'syz.0.4465': attribute type 5 has an invalid length. [ 1379.707735][T24972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4465'. [ 1379.752298][T17681] usb 6-1: USB disconnect, device number 87 [ 1379.873413][ T8289] usb 7-1: USB disconnect, device number 12 [ 1380.284974][T24986] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1380.291638][T24986] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1380.309778][T24986] vhci_hcd vhci_hcd.0: Device attached [ 1380.457063][T24994] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1380.463713][T24994] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1380.475093][T24994] vhci_hcd vhci_hcd.0: Device attached [ 1380.487430][ T5919] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1380.561229][ T5893] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 1380.648083][T17699] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1380.655881][ T5919] usb 7-1: Using ep0 maxpacket: 8 [ 1380.665378][ T5919] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1380.684943][ T5919] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1380.695916][ T5919] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1380.707081][ T5919] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1380.720846][T17690] usb 43-1: new high-speed USB device number 3 using vhci_hcd [ 1380.764983][ T5919] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1380.784803][ T5919] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.848075][T17699] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1380.859223][T17699] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1380.884813][T17699] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1380.909067][T24989] vhci_hcd: connection reset by peer [ 1380.923012][ T1318] vhci_hcd: stop threads [ 1380.928073][ T1318] vhci_hcd: release socket [ 1380.944972][ T1318] vhci_hcd: disconnect device [ 1380.955165][T17699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.984355][T24992] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1381.023508][T17699] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1381.090389][T24987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1381.099502][T24987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1381.122576][ T5919] usb 7-1: usb_control_msg returned -71 [ 1381.170985][ T5919] usbtmc 7-1:16.0: can't read capabilities [ 1381.210074][T24997] vhci_hcd: connection reset by peer [ 1381.243032][T20897] vhci_hcd: stop threads [ 1381.273756][T20897] vhci_hcd: release socket [ 1381.279940][ T30] audit: type=1326 audit(1749905776.596:6885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25001 comm="syz.1.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423078e929 code=0x7ffc0000 [ 1381.312774][T17699] usb 6-1: USB disconnect, device number 88 [ 1381.325827][ T5919] usb 7-1: USB disconnect, device number 13 [ 1381.332686][T20897] vhci_hcd: disconnect device [ 1381.415682][ T30] audit: type=1326 audit(1749905776.596:6886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25001 comm="syz.1.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423078e929 code=0x7ffc0000 [ 1381.475471][ T30] audit: type=1326 audit(1749905776.596:6887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25001 comm="syz.1.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f423078e929 code=0x7ffc0000 [ 1381.541683][ T30] audit: type=1326 audit(1749905776.596:6888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25001 comm="syz.1.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423078e929 code=0x7ffc0000 [ 1381.587821][ T30] audit: type=1326 audit(1749905776.596:6889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25001 comm="syz.1.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423078e929 code=0x7ffc0000 [ 1381.851068][T25011] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1381.888093][T25012] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1382.092369][T25018] netlink: 'syz.5.4478': attribute type 11 has an invalid length. [ 1382.118604][T25018] batadv_slave_1: entered promiscuous mode [ 1382.353473][T25027] netlink: 676 bytes leftover after parsing attributes in process `syz.5.4480'. [ 1382.438798][T25027] netlink: 676 bytes leftover after parsing attributes in process `syz.5.4480'. [ 1382.448147][T17699] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1382.649032][T25029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1382.665324][T25029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1382.673823][T17699] usb 7-1: Using ep0 maxpacket: 8 [ 1382.688715][T17699] usb 7-1: config 0 has no interfaces? [ 1382.696720][T17699] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1382.714094][T17699] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.744348][T17699] usb 7-1: Product: syz [ 1382.752786][T17699] usb 7-1: Manufacturer: syz [ 1382.762920][T17699] usb 7-1: SerialNumber: syz [ 1382.842836][T17699] usb 7-1: config 0 descriptor?? [ 1383.233483][T17681] usb 7-1: USB disconnect, device number 14 [ 1383.350384][T17699] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1383.477744][T17688] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1383.527641][T17699] usb 6-1: Using ep0 maxpacket: 8 [ 1383.552576][T17699] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1383.591432][T17699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.612362][T17699] usb 6-1: Product: syz [ 1383.621961][T17699] usb 6-1: Manufacturer: syz [ 1383.627365][T17699] usb 6-1: SerialNumber: syz [ 1383.645539][T17699] usb 6-1: config 0 descriptor?? [ 1383.663039][T17688] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1383.719027][T17699] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1383.730528][T17688] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1383.741219][T17688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.750153][T17688] usb 4-1: Product: syz [ 1383.755004][T17688] usb 4-1: Manufacturer: syz [ 1383.762231][T17688] usb 4-1: SerialNumber: syz [ 1383.943421][T25035] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1384.450373][T17699] gspca_sq930x: ucbus_write failed -110 [ 1384.677673][T17699] gspca_sq930x: Sensor ov9630 not yet treated [ 1384.705834][T17699] sq930x 6-1:0.0: probe with driver sq930x failed with error -22 [ 1384.815625][T17699] usb 6-1: USB disconnect, device number 89 [ 1385.307924][T17699] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1385.507663][T17699] usb 6-1: Using ep0 maxpacket: 32 [ 1385.521225][T17699] usb 6-1: config 0 has an invalid interface number: 101 but max is 1 [ 1385.549531][T17699] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1385.615704][T17699] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1385.625782][T17699] usb 6-1: config 0 has no interface number 0 [ 1385.633277][T17699] usb 6-1: config 0 interface 101 has no altsetting 0 [ 1385.640732][T17699] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=59.84 [ 1385.649923][T17699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.669101][T17699] usb 6-1: config 0 descriptor?? [ 1385.681450][T17699] hub 6-1:0.101: bad descriptor, ignoring hub [ 1385.722768][T17699] hub 6-1:0.101: probe with driver hub failed with error -5 [ 1385.730815][ T5893] vhci_hcd: vhci_device speed not set [ 1385.817944][T17690] vhci_hcd: vhci_device speed not set [ 1386.017534][T17699] usb 6-1: USB disconnect, device number 90 [ 1386.023998][T17688] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1386.041144][T17688] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 1386.085491][T17688] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 1386.248388][T25071] snd_dummy snd_dummy.0: control 0:0:0:syz0:4 is already present [ 1386.367727][ T8289] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1386.494172][T17688] cdc_ncm 4-1:1.0: setting tx_max = 88 [ 1386.526889][T17688] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1386.547497][ T8289] usb 7-1: Using ep0 maxpacket: 32 [ 1386.556704][ T8289] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 1386.562729][T17688] usb 4-1: USB disconnect, device number 8 [ 1386.614855][ T8289] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1386.632996][T17688] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 1386.652973][ T8289] usb 7-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1386.676416][ T8289] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.696759][ T8289] usb 7-1: Product: syz [ 1386.704293][ T8289] usb 7-1: Manufacturer: syz [ 1386.711483][ T8289] usb 7-1: SerialNumber: syz [ 1386.745826][ T8289] usb 7-1: config 0 descriptor?? [ 1386.772706][ T8289] usb 7-1: no audio or video endpoints found [ 1387.041263][T17680] usb 7-1: USB disconnect, device number 15 [ 1387.056054][T25082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1387.057390][ T8289] usb 6-1: new full-speed USB device number 91 using dummy_hcd [ 1387.084976][T25082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1387.109003][T25082] netlink: 'syz.1.4494': attribute type 5 has an invalid length. [ 1387.170251][T25077] netlink: 'syz.0.4493': attribute type 4 has an invalid length. [ 1387.283387][ T8289] usb 6-1: config index 0 descriptor too short (expected 30049, got 36) [ 1387.294897][ T8289] usb 6-1: config 116 has too many interfaces: 108, using maximum allowed: 32 [ 1387.310447][ T8289] usb 6-1: config 116 has an invalid descriptor of length 0, skipping remainder of the config [ 1387.322363][ T8289] usb 6-1: config 116 has 0 interfaces, different from the descriptor's value: 108 [ 1387.337799][ T8289] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1387.354417][ T8289] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.373344][ T8289] usb 6-1: Product: syz [ 1387.394407][ T8289] usb 6-1: Manufacturer: syz [ 1387.405306][ T8289] usb 6-1: SerialNumber: syz [ 1387.546331][T25093] fuse: Unknown parameter '0xffffffffffffffff0000000000000000000000000000000000000000' [ 1387.687478][T17680] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 1387.841013][T17680] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1387.886600][T17680] usb 4-1: can't read configurations, error -61 [ 1388.068516][T17680] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 1388.195447][T25103] [U] Y [ 1388.199369][T25103] [U] Bc\M۾NVOUx0|MGp7L~ [ 1388.206526][T25103] [U]  [ 1388.222347][T25102] [U] ˿`ng QS8ȣr޳p[ zrP SA=v3 [ 1388.245294][T25104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1388.255935][T25104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1388.282437][T17680] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1388.290270][T17680] usb 4-1: can't read configurations, error -61 [ 1388.300334][T17680] usb usb4-port1: attempt power cycle [ 1389.126651][T17680] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 1389.199755][T17680] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1389.249462][T17680] usb 4-1: can't read configurations, error -61 [ 1389.260960][T25108] program syz.6.4500 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1389.453803][T17680] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 1389.517752][T17680] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1389.525732][T17680] usb 4-1: can't read configurations, error -61 [ 1389.608085][T17680] usb usb4-port1: unable to enumerate USB device [ 1389.914197][T17680] usb 6-1: USB disconnect, device number 91 [ 1390.588018][T25115] netlink: 'syz.3.4502': attribute type 3 has an invalid length. [ 1390.596206][T25115] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4502'. [ 1391.634300][T25132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1391.644499][T25132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1391.661187][T17681] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1391.828103][T17681] usb 7-1: Using ep0 maxpacket: 8 [ 1391.862094][T17681] usb 7-1: config 1 has an invalid descriptor of length 254, skipping remainder of the config [ 1391.918135][T17681] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1391.999440][T17681] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1392.103828][T17681] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1392.136282][T17681] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.291598][T17681] hub 7-1:1.0: bad descriptor, ignoring hub [ 1392.395737][T17681] hub 7-1:1.0: probe with driver hub failed with error -5 [ 1392.455172][T17681] cdc_wdm 7-1:1.0: skipping garbage [ 1392.501725][T17681] cdc_wdm 7-1:1.0: skipping garbage [ 1392.515316][T17681] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1392.591084][T17681] usb 7-1: USB disconnect, device number 16 [ 1393.389868][T17688] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1393.579714][T17688] usb 4-1: config index 0 descriptor too short (expected 8192, got 18) [ 1393.597587][T17688] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1393.622771][T17688] usb 4-1: config 0 has no interfaces? [ 1393.643308][T17688] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1393.665201][T17688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.687977][T17688] usb 4-1: Product: syz [ 1393.697604][T17688] usb 4-1: Manufacturer: syz [ 1393.710680][T17688] usb 4-1: SerialNumber: syz [ 1393.717672][ T8289] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1393.727718][T17690] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1393.761758][T17688] usb 4-1: config 0 descriptor?? [ 1393.947285][T17690] usb 7-1: Using ep0 maxpacket: 8 [ 1393.994733][T17690] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 1394.004151][T17690] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1394.020895][T25157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1394.036870][T25157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1394.047627][T17690] usb 7-1: config 0 has no interface number 0 [ 1394.059128][T17690] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1394.080998][T25157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1394.107389][T17690] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.118695][T25157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1394.146413][T17690] usb 7-1: Product: syz [ 1394.161809][T17690] usb 7-1: Manufacturer: syz [ 1394.166588][T17690] usb 7-1: SerialNumber: syz [ 1394.204228][T17690] usb 7-1: config 0 descriptor?? [ 1394.467402][T17690] usb 7-1: Found UVC 0.04 device syz (046d:08c3) [ 1394.473893][T17690] usb 7-1: No valid video chain found. [ 1394.526155][T17690] usb 7-1: USB disconnect, device number 17 [ 1394.780456][T17688] usb 4-1: USB disconnect, device number 13 [ 1395.018517][ T8289] usb 6-1: device descriptor read/64, error -71 [ 1395.297570][T17680] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1395.337748][ T8289] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1395.687099][T17680] usb 4-1: config 0 has no interfaces? [ 1395.704142][ T8289] usb 6-1: config 0 has no interfaces? [ 1395.732561][T25200] vivid-002: disconnect [ 1395.770833][T25201] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1395.803990][T17680] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1395.816829][T17680] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.828053][T17680] usb 4-1: Product: syz [ 1395.857811][T17680] usb 4-1: Manufacturer: syz [ 1395.862537][T17680] usb 4-1: SerialNumber: syz [ 1395.876822][ T8289] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1395.897113][ T8289] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.917654][T17680] usb 4-1: config 0 descriptor?? [ 1395.933424][ T8289] usb 6-1: Product: syz [ 1395.975324][ T8289] usb 6-1: Manufacturer: syz [ 1396.001068][ T8289] usb 6-1: SerialNumber: syz [ 1396.018166][T25195] vivid-002: reconnect [ 1396.041720][ T8289] usb 6-1: config 0 descriptor?? [ 1397.546670][T25213] fuse: Bad value for 'fd' [ 1398.103526][T17688] usb 4-1: USB disconnect, device number 14 [ 1398.464680][T17680] usb 6-1: USB disconnect, device number 93 [ 1398.474003][T25220] input: syz1 as /devices/virtual/input/input103 [ 1398.661713][T25226] vivid-000: disconnect [ 1398.701451][T25217] vivid-000: reconnect [ 1398.787904][T17688] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1398.801870][T25229] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4530'. [ 1399.140880][T25229] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1399.187600][T17688] usb 4-1: Using ep0 maxpacket: 16 [ 1399.221045][T17688] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1399.233333][T17688] usb 4-1: config 1 interface 0 altsetting 201 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1399.279181][T17688] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1399.333305][T17688] usb 4-1: New USB device found, idVendor=056a, idProduct=00d3, bcdDevice= 0.40 [ 1399.363220][T17688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.393188][T17688] usb 4-1: Product: syz [ 1399.412296][T17688] usb 4-1: Manufacturer: syz [ 1399.436609][T17688] usb 4-1: SerialNumber: syz [ 1400.876861][T25246] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4535'. [ 1400.927630][T25245] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4535'. [ 1401.217512][T17680] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1401.392851][T17680] usb 6-1: config 1 interface 1 has no altsetting 0 [ 1401.498217][T17680] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1401.545420][T17680] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.619682][T17680] usb 6-1: Product: syz [ 1401.627765][T17688] usbhid 4-1:1.0: can't add hid device: -71 [ 1401.634225][T17688] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 1401.667262][T17680] usb 6-1: Manufacturer: syz [ 1401.676707][T17680] usb 6-1: SerialNumber: syz [ 1401.715686][T17688] usb 4-1: USB disconnect, device number 15 [ 1401.877390][T17690] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1401.950423][T17680] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1402.004208][T17680] usb 6-1: USB disconnect, device number 94 [ 1402.027323][T17690] usb 7-1: Using ep0 maxpacket: 32 [ 1402.039963][T17690] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1402.071163][ T6015] udevd[6015]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1402.087793][T17690] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1402.109885][T17690] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1402.147312][T17690] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1402.189631][T17690] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1402.223363][T17690] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1402.251275][T17690] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1402.261526][T17688] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1402.278052][T17690] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.286484][T17690] usb 7-1: Product: syz [ 1402.297256][T17690] usb 7-1: Manufacturer: syz [ 1402.302036][T17690] usb 7-1: SerialNumber: syz [ 1402.315585][T17690] usb 7-1: config 0 descriptor?? [ 1402.354968][T25255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1402.376199][T25255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1402.395637][T25255] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4539'. [ 1402.441821][T17688] usb 4-1: config 0 has no interfaces? [ 1402.456757][T17688] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1402.475008][T17688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.485783][T17688] usb 4-1: Product: syz [ 1402.490616][T17688] usb 4-1: Manufacturer: syz [ 1402.495449][T17688] usb 4-1: SerialNumber: syz [ 1402.505122][T17688] usb 4-1: config 0 descriptor?? [ 1403.047120][T25268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1403.067782][T25268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1403.102412][T17680] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1403.317003][T17680] usb 6-1: config 0 has no interfaces? [ 1403.332470][T17680] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1403.425295][T17680] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.455663][T17680] usb 6-1: Product: syz [ 1403.461315][T17680] usb 6-1: Manufacturer: syz [ 1403.483593][T17680] usb 6-1: SerialNumber: syz [ 1403.530019][T17680] usb 6-1: config 0 descriptor?? [ 1404.630053][ T43] usb 7-1: USB disconnect, device number 18 [ 1404.867786][ C0] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 1404.888432][T17688] usb 4-1: USB disconnect, device number 16 [ 1405.309682][T25285] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4544'. [ 1406.197624][T17688] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1406.358876][T17688] usb 7-1: Using ep0 maxpacket: 8 [ 1406.423418][T17688] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1406.489965][T17688] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1406.606802][T17688] usb 7-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 1406.629243][T25309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1406.638243][T17688] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1406.659204][T17688] usb 7-1: config 0 descriptor?? [ 1406.684492][T25309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1406.736978][T25309] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1406.754487][T25309] bond0: (slave wireguard0): Error -95 calling set_mac_address [ 1406.805802][T25311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1406.834919][T25311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1406.876325][ T43] usb 6-1: USB disconnect, device number 95 [ 1407.367505][T17680] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1407.527852][T17680] usb 6-1: Using ep0 maxpacket: 32 [ 1407.544530][T17680] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1407.563783][T17680] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1407.576373][T17680] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1407.607880][T17680] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1407.637346][T17680] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1407.649320][T17680] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1407.687078][T17680] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1407.726274][T17680] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.755195][T25304] Cannot find del_set index 0 as target [ 1407.761118][T17680] usb 6-1: Product: syz [ 1407.801710][ T30] audit: type=1326 audit(1749905803.116:6890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25303 comm="syz.6.4549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47e238e929 code=0x7ffc0000 [ 1407.825587][T17680] usb 6-1: Manufacturer: syz [ 1407.857778][T17680] usb 6-1: SerialNumber: syz [ 1407.875836][T17680] usb 6-1: config 0 descriptor?? [ 1407.963261][ T30] audit: type=1326 audit(1749905803.116:6891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25303 comm="syz.6.4549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47e238e929 code=0x7ffc0000 [ 1408.001378][T17688] usbhid 7-1:0.0: can't add hid device: -71 [ 1408.025801][T25319] netlink: 'syz.1.4554': attribute type 1 has an invalid length. [ 1408.036929][ T30] audit: type=1326 audit(1749905803.116:6892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25303 comm="syz.6.4549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f47e232ab19 code=0x7ffc0000 [ 1408.037801][T17688] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1408.073342][ T30] audit: type=1326 audit(1749905803.116:6893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25303 comm="syz.6.4549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f47e232ab19 code=0x7ffc0000 [ 1408.135035][ T30] audit: type=1326 audit(1749905803.116:6894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25303 comm="syz.6.4549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f47e232ab19 code=0x7ffc0000 [ 1408.169680][ T30] audit: type=1326 audit(1749905803.116:6895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25303 comm="syz.6.4549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f47e232ab19 code=0x7ffc0000 [ 1408.197665][ T30] audit: type=1326 audit(1749905803.116:6896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25303 comm="syz.6.4549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f47e232ab19 code=0x7ffc0000 [ 1408.222319][T25321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4554'. [ 1408.261744][T25321] bond1: entered allmulticast mode [ 1408.267919][T17688] usb 7-1: USB disconnect, device number 19 [ 1408.292124][ T30] audit: type=1326 audit(1749905803.116:6897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25303 comm="syz.6.4549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f47e232ab19 code=0x7ffc0000 [ 1408.315743][ T30] audit: type=1326 audit(1749905803.116:6898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25303 comm="syz.6.4549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f47e238e929 code=0x7ffc0000 [ 1408.332800][T25321] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1408.338465][ C0] vkms_vblank_simulate: vblank timer overrun [ 1408.352361][ T30] audit: type=1326 audit(1749905803.116:6899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25303 comm="syz.6.4549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47e238e929 code=0x7ffc0000 [ 1408.375293][ C0] vkms_vblank_simulate: vblank timer overrun [ 1408.703401][T25328] macsec0: entered promiscuous mode [ 1408.712378][T25328] macsec0: entered allmulticast mode [ 1408.867454][T17688] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1409.037890][T17688] usb 4-1: Using ep0 maxpacket: 16 [ 1409.059229][T17688] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1409.079095][T17688] usb 4-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.40 [ 1409.079132][T17688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.079160][T17688] usb 4-1: Product: 㣃褃ઔ祳헺㍱魦ꆥ㜢⍠ᇏແ℩ष帇㰉ﶚ堜䨗쑵阭襇톜觎段뀧귀໹牏㲸Ꟶ褢佺멏鋦᱃ￗ푆忙膌较朞 [ 1409.079190][T17688] usb 4-1: Manufacturer: 鞐ᣡ賦㗂脣꠶Ẻ鏅웢衿닂屧㣽㠤릋痡䰎퉚硄īᦖⷡ녜녮삚낆퓲줈㡓ᣱ雜שׂ엢糵㭪槗䍢몮䩿⯮๲⟆嚏난秇礹ᚓ汨㛷竆ȧ䬙磬㛒Îᔎ燷⦓弳⺓ᾜᄊ➛ꃠ숥渆閬㦺驙펜뚛楛읒⁣驥Ⱑᚳ鶑罳䓛䞢ᡩ茨㬤楇鑥դỷ嶳ꢦ던汷䬥ῷ냤剔蜂䱯鏢頔Ӟ孢⩑멼剩锹Ꚏ⁋튅 [ 1409.079238][T17688] usb 4-1: SerialNumber: 퐣鎲騪洍麷雾硪䈺렆獆煮㘲箦듊䩆뒵ꉨ莵짴蛈ṃ揍ힽ⼨Ͱ耭❽؜ḟ蚉뽔ᤚ㦞㥧꼓唙륑䂌⦔옴㮁䁺昹폫鄯䅅ꠂꎋ뾤 [ 1409.211252][T25334] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1409.329914][ C0] vkms_vblank_simulate: vblank timer overrun [ 1409.488238][ T43] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1409.556741][T17688] usbhid 4-1:1.0: can't add hid device: -71 [ 1409.575212][T17688] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 1409.608578][T17688] usb 4-1: USB disconnect, device number 17 [ 1409.658090][ T43] usb 7-1: Using ep0 maxpacket: 8 [ 1409.688762][ T43] usb 7-1: config 0 has an invalid interface number: 200 but max is 0 [ 1409.707348][ T43] usb 7-1: config 0 has no interface number 0 [ 1409.713740][ T43] usb 7-1: config 0 interface 200 has no altsetting 0 [ 1409.873012][ T43] usb 7-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 1409.902182][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.916175][ T43] usb 7-1: Product: syz [ 1409.920592][ T43] usb 7-1: Manufacturer: syz [ 1409.925536][ T43] usb 7-1: SerialNumber: syz [ 1409.968078][ T43] usb 7-1: config 0 descriptor?? [ 1410.083197][T17681] usb 6-1: USB disconnect, device number 96 [ 1410.275227][ T43] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.200/input/input104 [ 1410.423166][ T43] usb 7-1: USB disconnect, device number 20 [ 1413.547878][T17681] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1413.677319][T17688] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 1413.708142][T17681] usb 7-1: Using ep0 maxpacket: 8 [ 1413.721921][T17681] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 1413.730593][T17681] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1413.743706][T17681] usb 7-1: config 0 has no interface number 0 [ 1413.764095][T17681] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1413.777442][T17681] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.793217][T17681] usb 7-1: Product: syz [ 1413.800293][T17681] usb 7-1: Manufacturer: syz [ 1413.805067][T17681] usb 7-1: SerialNumber: syz [ 1413.825395][T17681] usb 7-1: config 0 descriptor?? [ 1413.869284][T17688] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1413.879871][T17688] usb 4-1: config 0 has no interface number 0 [ 1413.895566][T17688] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1413.908405][T17688] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1413.919839][T17688] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1413.929495][T17688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.938298][ T43] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1413.955485][T17688] usb 4-1: config 0 descriptor?? [ 1413.966464][T25401] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1413.995881][T17688] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1414.090704][ T43] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1414.119549][T25393] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1414.131991][ T43] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1414.149752][ T43] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1414.164537][ T43] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1414.197349][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.210483][T17691] usb 4-1: USB disconnect, device number 18 [ 1414.210730][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1414.261582][ T43] usb 6-1: Product: syz [ 1414.266555][ T43] usb 6-1: Manufacturer: 嬖䴻႞帛츱긽ᔵ䴲ᴴⵣ﹢깂럭๎펋⾎꿕ᖲ唋㡛瘕冷袿她ⴷ툎科稾ȶሥ﹚쁪ͻ簵뗠柎쫰聱입ꆋ䆞ᯧ㵺狈ᜳ澕㒟海配R鲑ῴꛁ㻖䙕᡾⃪콎끗ꛟ함淏硨묱鷙룶ゟᇽ巘ꕻ觟䳏ॉ庎묙ॲ豍 [ 1414.296296][ T43] usb 6-1: SerialNumber: syz [ 1414.668050][T25405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1414.684184][T25405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1414.704161][ T43] cdc_ncm 6-1:1.0: bind() failure [ 1414.716729][ T43] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1414.725214][ T43] cdc_ncm 6-1:1.1: bind() failure [ 1414.775465][ T43] usb 6-1: USB disconnect, device number 97 [ 1414.987122][T25421] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4581'. [ 1415.451943][T17681] usb 7-1: Found UVC 0.04 device syz (046d:08c3) [ 1415.461997][T17681] usb 7-1: No valid video chain found. [ 1415.479724][T17681] usb 7-1: USB disconnect, device number 21 [ 1416.662411][T25446] netlink: 'syz.1.4587': attribute type 4 has an invalid length. [ 1416.778088][T17691] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1417.045350][T17691] usb 6-1: config 0 has no interfaces? [ 1417.157647][T17691] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1417.181967][T25460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4590'. [ 1417.191666][T25460] tc_dump_action: action bad kind [ 1417.247209][T17691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.387608][T17691] usb 6-1: Product: syz [ 1417.442583][T17691] usb 6-1: Manufacturer: syz [ 1417.468010][T17691] usb 6-1: SerialNumber: syz [ 1417.520850][T17691] usb 6-1: config 0 descriptor?? [ 1417.928507][T25462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4591'. [ 1418.499099][T17691] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1418.670042][T17691] usb 4-1: Using ep0 maxpacket: 16 [ 1418.679811][T17691] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1418.702151][T17691] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1418.723601][T17691] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1418.766930][T17691] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1418.813267][T17691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1418.888969][T17691] usb 4-1: config 0 descriptor?? [ 1419.103237][T25467] netlink: 'syz.3.4592': attribute type 2 has an invalid length. [ 1419.139381][T17688] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 1419.139904][T25472] fuse: Bad value for 'user_id' [ 1419.162488][T25472] fuse: Bad value for 'user_id' [ 1419.315338][T17688] hid-generic 0000:0000:0000.0070: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1419.403283][T25467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1419.429477][T25467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1419.456376][T17691] hid (null): bogus close delimiter [ 1419.509448][T17691] hid (null): report_id 0 is invalid [ 1419.531818][T17691] hid (null): invalid report_size 4076 [ 1419.556285][T17691] hid (null): unknown global tag 0xc [ 1419.573041][T17691] hid (null): invalid report_size 59118 [ 1419.589505][T17691] hid (null): unknown global tag 0xd [ 1419.617117][T17691] hid (null): unknown global tag 0x55 [ 1419.639564][T17691] hid (null): unknown global tag 0xe [ 1419.655575][T25467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1419.665180][T17691] hid (null): unknown global tag 0xd [ 1419.670858][T17691] hid (null): invalid report_size 460700670 [ 1419.676823][T17691] hid (null): report_id 0 is invalid [ 1419.683152][T17691] hid (null): unknown global tag 0x56 [ 1419.699693][T25467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1419.944843][T17680] usb 6-1: USB disconnect, device number 98 [ 1419.965793][T17691] usb 4-1: USB disconnect, device number 20 [ 1419.976235][T25475] fido_id[25475]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1420.262638][T25491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1420.288302][T25491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1420.477518][T17680] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1420.542445][T25501] hub 1-0:1.0: USB hub found [ 1420.547570][T25501] hub 1-0:1.0: 1 port detected [ 1420.630747][T17680] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1420.645580][T17680] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.33 [ 1420.655624][T17680] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.664183][T17680] usb 6-1: Product: syz [ 1420.669959][T17680] usb 6-1: Manufacturer: syz [ 1420.674829][T17680] usb 6-1: SerialNumber: syz [ 1420.817644][T17688] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1420.894897][T25489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1420.904534][T25489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1420.997855][T17688] usb 1-1: Using ep0 maxpacket: 8 [ 1421.009072][T17688] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1421.029845][T17688] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1421.044315][T17688] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.053648][T17688] usb 1-1: Product: syz [ 1421.059633][T17688] usb 1-1: Manufacturer: syz [ 1421.064297][T17688] usb 1-1: SerialNumber: syz [ 1421.077882][T17688] usb 1-1: config 0 descriptor?? [ 1421.358918][T25477] kvm: pic: non byte write [ 1421.572736][T25512] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4604'. [ 1421.991465][T25489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1422.002259][T25489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1422.062033][T17680] cdc_ncm 6-1:1.0: bind() failure [ 1422.081079][T17680] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1422.097878][T17680] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1422.111730][T17680] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 1422.131236][T17680] usb 6-1: USB disconnect, device number 99 [ 1423.128185][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.137566][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.221234][T17680] usb 1-1: USB disconnect, device number 66 [ 1424.177323][T17691] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1424.594684][T17691] usb 6-1: config 0 has no interfaces? [ 1424.635713][T17691] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1424.659729][T17691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.716918][T17691] usb 6-1: Product: syz [ 1424.737707][T17691] usb 6-1: Manufacturer: syz [ 1424.742594][T17691] usb 6-1: SerialNumber: syz [ 1424.789607][T17691] usb 6-1: config 0 descriptor?? [ 1426.559513][T25559] gre1: entered promiscuous mode [ 1426.593331][T25559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4615'. [ 1426.621990][T25551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.690862][T25551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1427.238807][T17691] usb 6-1: USB disconnect, device number 100 [ 1427.717972][T17688] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1427.748375][T17691] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1427.762089][T25581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1427.809830][T25581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1427.889400][T17688] usb 4-1: config 0 has no interfaces? [ 1427.910070][T17688] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1427.919497][T17688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.936381][T17688] usb 4-1: Product: syz [ 1427.947339][T17691] usb 6-1: Using ep0 maxpacket: 32 [ 1427.959001][T25581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1427.980217][T17691] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1427.992897][T17691] usb 6-1: config 0 has no interface number 0 [ 1428.007231][T17688] usb 4-1: Manufacturer: syz [ 1428.012201][T17691] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1428.029809][T17688] usb 4-1: SerialNumber: syz [ 1428.045901][T25581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1428.066835][T17688] usb 4-1: config 0 descriptor?? [ 1428.074782][T17691] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1428.137372][T17691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.145429][T17691] usb 6-1: Product: syz [ 1428.203053][T17691] usb 6-1: Manufacturer: syz [ 1428.216154][T17691] usb 6-1: SerialNumber: syz [ 1428.269039][T17691] usb 6-1: config 0 descriptor?? [ 1428.310551][T17691] smsc75xx v1.0.0 [ 1428.389927][T25577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1428.423903][T25577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1428.556529][T17691] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1428.662206][T17691] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1428.977700][T17691] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 1429.029810][T17691] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 1429.156501][T17691] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 1429.193438][T17691] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -61 [ 1429.234357][T25601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1429.250046][T17691] usb 6-1: USB disconnect, device number 101 [ 1429.269539][T25601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1429.966132][T17681] usb 4-1: USB disconnect, device number 21 [ 1430.130446][T25611] vlan2: entered allmulticast mode [ 1430.136577][T25611] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1430.186373][T25611] team0: Port device vlan2 added [ 1430.303449][T25615] fuse: Bad value for 'group_id' [ 1430.315853][T25615] fuse: Bad value for 'group_id' [ 1430.327483][ T8289] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1430.489947][ T8289] usb 6-1: Using ep0 maxpacket: 8 [ 1430.512158][ T8289] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1430.528987][ T8289] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.595426][ T8289] usb 6-1: Product: syz [ 1430.600065][ T8289] usb 6-1: Manufacturer: syz [ 1430.604709][ T8289] usb 6-1: SerialNumber: syz [ 1430.617750][T17691] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1430.700339][ T8289] usb 6-1: config 0 descriptor?? [ 1430.891588][ T8289] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1430.926286][T25626] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4635'. [ 1430.948242][ T8289] usb 6-1: setting power ON [ 1430.964085][ T8289] dvb-usb: bulk message failed: -22 (2/0) [ 1430.978093][T25627] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4635'. [ 1431.011911][ T8289] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1431.079924][ T8289] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1431.132887][ T8289] usb 6-1: media controller created [ 1431.182403][T25609] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20003 [ 1431.325550][ T8289] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1431.693379][ T8289] usb 6-1: selecting invalid altsetting 6 [ 1431.707275][ T8289] usb 6-1: digital interface selection failed (-22) [ 1431.714621][ T8289] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1431.731487][ T8289] usb 6-1: setting power OFF [ 1431.736860][ T8289] dvb-usb: bulk message failed: -22 (2/0) [ 1431.743636][ T8289] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1431.754028][ T8289] (NULL device *): no alternate interface [ 1431.929948][ T8289] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1432.038023][ T8289] usb 6-1: USB disconnect, device number 102 [ 1432.067331][T17681] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 1432.376032][T17681] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1432.456643][T25643] sctp: [Deprecated]: syz.5.4638 (pid 25643) Use of int in maxseg socket option. [ 1432.456643][T25643] Use struct sctp_assoc_value instead [ 1432.488046][T17681] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.547673][T17681] usb 7-1: config 0 descriptor?? [ 1433.071171][T17681] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1433.854793][T25634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1433.863909][T25634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1433.885344][T25634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4636'. [ 1433.903191][T25662] netlink: 'syz.3.4642': attribute type 27 has an invalid length. [ 1433.905020][T17680] IPVS: starting estimator thread 0... [ 1433.948190][T25662] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4642'. [ 1434.017442][T25663] IPVS: using max 29 ests per chain, 69600 per kthread [ 1434.748983][T25664] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1434.790286][T25664] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1434.817333][T25670] C: renamed from team_slave_0 (while UP) [ 1434.855718][T25672] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1434.856647][T25670] netlink: 'syz.0.4643': attribute type 8 has an invalid length. [ 1434.895360][T25664] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1434.921767][T25670] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1434.951903][T25664] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1434.991261][T25677] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4644'. [ 1435.030967][ T6951] IPVS: stop unused estimator thread 0... [ 1435.051532][T25664] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1435.068062][T25664] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1435.233200][T25664] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1435.237871][T17681] [drm:udl_init] *ERROR* Selecting channel failed [ 1435.257338][T25664] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1435.317849][T17681] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 1435.324727][T17681] [drm] Initialized udl on minor 2 [ 1435.336855][T17681] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1435.346817][T17681] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1435.348223][T17688] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 1435.359956][ T8289] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1435.373701][T17681] usb 7-1: USB disconnect, device number 22 [ 1435.381900][T25664] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1435.409829][ T8289] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1435.418707][T25664] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1435.568052][T25683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1435.570622][T17688] usb 1-1: not running at top speed; connect to a high speed hub [ 1435.621485][T17688] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1435.676488][T17688] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1435.702399][T17688] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.712627][T17688] usb 1-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區訍ẝ蚞丶舰摎菦ﱿᄨ郋껥麭绚ᄂ퀖ﰻ♕校ⶤ鿐ϩ뢃ᄽᆝ轰㿸ᗗ쨸跖霃廨ೀ蝣憕扳딇氷枣쁆᯻ᒆꢽٖ覡:㥿⦧蔦襤뿓ኵ㕼겨弈冲ᦄ乹햬쎆댹읻㦟뱩q∖⯂雖脿㔟携▬㬲⮷霂䱒䂛ㅅꆦ㪐䲮뙀樌Ჱ䁀ස띫踖㚤퍒 [ 1435.747066][ C0] vkms_vblank_simulate: vblank timer overrun [ 1435.758639][T25683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1435.786687][T17688] usb 1-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ엺 [ 1435.817820][ C0] vkms_vblank_simulate: vblank timer overrun [ 1435.830559][T17688] usb 1-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩㐉琒햠댚ꈶ渨嗱䨂蕐Ꮴ裉췻㑶䥅袨䏱༯梹ﴑኁ밪ዸ┙滆㙱綒揭뭨㺵礌闵℘鄬㻞㔲㏖⠿쀋಍뛰잗䝳想ﯵᓇ븜ш佧㵺쑮ᑬ梺雬淽ڑ玒ঁ䠫䃙叴琺閾뉶⃔ [ 1435.927617][ T8289] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1436.117321][ T8289] usb 6-1: Using ep0 maxpacket: 16 [ 1436.145611][ T8289] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1436.161539][T17688] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 67 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 1436.170313][ T8289] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1436.185604][ T8289] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1436.199150][ T8289] usb 6-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1436.265832][ T8289] usb 6-1: config 7 interface 0 has no altsetting 0 [ 1436.276331][T17688] usb 1-1: USB disconnect, device number 67 [ 1436.315314][T17688] usblp0: removed [ 1436.350154][ T8289] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1436.572267][ T8289] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.767282][T17691] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1436.985039][T17691] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 1437.004928][T17691] usb 4-1: config 0 has no interface number 0 [ 1437.029686][T17691] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1437.041333][T17691] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1437.051799][T17691] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1437.062269][T17691] usb 4-1: config 0 interface 128 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1437.076412][T17691] usb 4-1: New USB device found, idVendor=1b3d, idProduct=0161, bcdDevice=94.b4 [ 1437.086413][T17691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.144777][T17691] usb 4-1: config 0 descriptor?? [ 1437.235443][T17691] ftdi_sio 4-1:0.128: FTDI USB Serial Device converter detected [ 1437.264324][T17691] ftdi_sio ttyUSB0: unknown device type: 0x94b4 [ 1437.341490][T25675] netlink: 'syz.5.4645': attribute type 46 has an invalid length. [ 1437.361245][T25675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1437.378753][T25675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1437.409169][ T8289] usbhid 6-1:7.0: can't add hid device: -71 [ 1437.435552][ T8289] usbhid 6-1:7.0: probe with driver usbhid failed with error -71 [ 1437.483486][ T8289] usb 6-1: USB disconnect, device number 103 [ 1437.800108][T25708] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 1437.941824][T25714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1437.962225][T25714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1438.288534][T25716] loop4: detected capacity change from 0 to 14 [ 1438.310345][T25716] Dev loop4: unable to read RDB block 14 [ 1438.323644][T25716] loop4: unable to read partition table [ 1438.358182][T25716] loop4: partition table beyond EOD, truncated [ 1438.418866][T25718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1438.483990][T25716] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 1438.566255][T25718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1438.647659][T17691] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1438.820050][T17691] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1438.830643][T17691] usb 6-1: config 1 has an invalid interface number: 43 but max is 1 [ 1438.907461][T17691] usb 6-1: config 1 has no interface number 1 [ 1438.944392][T17691] usb 6-1: config 1 interface 0 altsetting 247 endpoint 0x4 has invalid maxpacket 600, setting to 64 [ 1439.033378][T17691] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1439.142384][T17691] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=f6.75 [ 1439.207425][ T43] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1439.368583][T17691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.369365][ T43] usb 7-1: device descriptor read/64, error -71 [ 1439.417287][T17691] usb 6-1: Product: syz [ 1439.429280][T17691] usb 6-1: Manufacturer: syz [ 1439.452761][T17691] usb 6-1: SerialNumber: syz [ 1439.647743][ T43] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1439.749618][T17691] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1439.831387][T17691] gspca_spca501: reg write: error -71 [ 1439.871997][T17691] spca501 6-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 1439.877315][ T43] usb 7-1: device descriptor read/64, error -71 [ 1439.907070][T17691] spca501 6-1:1.0: probe with driver spca501 failed with error -22 [ 1440.016593][T17691] usb 6-1: USB disconnect, device number 104 [ 1440.043867][ T43] usb usb7-port1: attempt power cycle [ 1440.413638][ T8289] usb 4-1: USB disconnect, device number 23 [ 1440.424006][ T8289] ftdi_sio 4-1:0.128: device disconnected [ 1440.477454][ T43] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1440.517000][ T43] usb 7-1: device descriptor read/8, error -71 [ 1440.778215][ T43] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1440.798800][ T43] usb 7-1: device descriptor read/8, error -71 [ 1440.817595][ T5893] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1440.918064][ T43] usb usb7-port1: unable to enumerate USB device [ 1440.937414][ T8289] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1440.981187][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1441.003067][ T5893] usb 6-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 1441.005283][T25729] binder: 25728:25729 ioctl c0306201 2000000003c0 returned -14 [ 1441.012946][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.024537][T25729] binder: 25728:25729 ioctl ae80 0 returned -22 [ 1441.044296][ T5893] usb 6-1: config 0 descriptor?? [ 1441.054476][ T5893] smsusb:smsusb_probe: board id=8, interface number 0 [ 1441.067392][ T5893] smsusb:smsusb_probe: Device initialized with return code -19 [ 1441.098117][ T8289] usb 4-1: Using ep0 maxpacket: 8 [ 1441.110452][T25705] delete_channel: no stack [ 1441.120819][ T8289] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1441.153303][ T8289] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1441.166607][ T8289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.179139][ T8289] usb 4-1: config 0 descriptor?? [ 1441.202992][ T8289] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1441.256893][ T43] usb 6-1: USB disconnect, device number 105 [ 1441.327624][T17691] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1441.487370][T17691] usb 1-1: Using ep0 maxpacket: 16 [ 1441.494981][T17691] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1441.506957][T17691] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1441.516229][T17691] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.528103][T17691] usb 1-1: config 0 descriptor?? [ 1442.071730][T25736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4660'. [ 1442.131793][T25736] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1442.141663][T25736] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1442.150943][T25736] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1442.159864][T25736] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1442.179223][T25736] vxlan0: entered promiscuous mode [ 1442.354519][ T5893] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1442.517565][ T5893] usb 6-1: Using ep0 maxpacket: 16 [ 1442.533317][ T5893] usb 6-1: config 1 interface 0 altsetting 9 endpoint 0x2 has an invalid bInterval 222, changing to 11 [ 1442.560608][ T5893] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1442.582213][ T5893] usb 6-1: New USB device found, idVendor=1b96, idProduct=0014, bcdDevice= 0.40 [ 1442.592227][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.609089][ T5893] usb 6-1: Product: 韏肄浸蕁컈촔짤ʶ퍽洛㊾Ɗ▏瘔㸣ᗠ먶퉹홽킥㿍髏ꖆಢ榧骊䰨춠圷腊Ꮮ롺ỻ砙㦯૷練盒뛔᭳ꉌ觖瘑쥵쿵㤽핓盘툰磁ᚠ䖗菐᱌ꈤ沊流쏬Ĵ䂩෨媯飕쬖쨫폢⼰쟘ꔊﲋ愎鸩匯衤虎鏆펪䕲꫸䴼㣢傎ᵆ滺뚝崦ⷧᚶ坯垭ꨵᢿ蔰鞅 [ 1442.662699][ T5893] usb 6-1: Manufacturer: Џ [ 1442.677858][ T5893] usb 6-1: SerialNumber: ਓ苦勵刹暂앪㇡䷵뽤፮瑓睉娣 [ 1442.804553][ T8289] gspca_vc032x: reg_w err -71 [ 1442.811378][ T8289] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 1442.832434][ T8289] usb 4-1: USB disconnect, device number 24 [ 1443.169297][T25747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1443.183742][T25747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1443.711927][ T5893] usbhid 6-1:1.0: can't add hid device: -71 [ 1443.721523][ T5893] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 1443.762289][ T5893] usb 6-1: USB disconnect, device number 106 [ 1444.098668][T17691] usbhid 1-1:0.0: can't add hid device: -71 [ 1444.159777][T17691] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1444.232566][T17691] usb 1-1: USB disconnect, device number 68 [ 1444.249599][ T5893] usb 6-1: new full-speed USB device number 107 using dummy_hcd [ 1444.540297][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1444.680239][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1444.755561][ T5893] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1444.777515][T17691] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1444.788130][ T5893] usb 6-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 1444.796474][ T5893] usb 6-1: Manufacturer: syz [ 1444.825373][ T5893] usb 6-1: config 0 descriptor?? [ 1444.849172][ T5893] hub 6-1:0.0: USB hub found [ 1444.973304][T17691] usb 1-1: config 0 has no interfaces? [ 1445.077357][ T5893] hub 6-1:0.0: 1 port detected [ 1445.104879][T17691] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1445.169268][T17691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.235462][T17691] usb 1-1: Product: syz [ 1445.240845][T17691] usb 1-1: Manufacturer: syz [ 1445.292377][T17691] usb 1-1: SerialNumber: syz [ 1445.304733][T17691] usb 1-1: config 0 descriptor?? [ 1445.557398][T25779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1445.592069][T25779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1445.732769][ T5893] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 1445.743516][T17691] usb 6-1: USB disconnect, device number 107 [ 1445.917797][T17681] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1446.108524][T17681] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1446.182042][T17681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.249776][T17681] usb 4-1: Product: syz [ 1446.272797][T17681] usb 4-1: Manufacturer: syz [ 1446.283088][T17681] usb 4-1: SerialNumber: syz [ 1446.314240][T17681] usb 4-1: config 0 descriptor?? [ 1446.379772][T17681] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1447.472308][T17680] usb 1-1: USB disconnect, device number 69 [ 1447.607257][ T8289] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1447.787547][ T8289] usb 7-1: Using ep0 maxpacket: 8 [ 1447.798640][ T8289] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1447.811962][ T8289] usb 7-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1447.827577][ T8289] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1447.835545][ T8289] usb 7-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 1447.846911][ T8289] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1447.859943][ T8289] usb 7-1: config 0 descriptor?? [ 1448.007049][T25811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1448.016687][T25811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1448.263075][ T30] kauditd_printk_skb: 193 callbacks suppressed [ 1448.263096][ T30] audit: type=1326 audit(1749905843.576:7093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25781 comm="syz.3.4674" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f19faf8e929 code=0x0 [ 1448.291295][ C0] vkms_vblank_simulate: vblank timer overrun [ 1448.391880][ T8289] kye 0003:0458:4018.0072: unknown main item tag 0x0 [ 1448.412334][ T8289] kye 0003:0458:4018.0072: reserved main item tag 0xe [ 1448.430504][ T8289] kye 0003:0458:4018.0072: item fetching failed at offset 15/133 [ 1448.456418][ T8289] kye 0003:0458:4018.0072: parse failed [ 1448.485658][ T8289] kye 0003:0458:4018.0072: probe with driver kye failed with error -22 [ 1448.726805][T25815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1448.862009][T25815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1449.142945][ T8289] usb 7-1: USB disconnect, device number 27 [ 1449.698043][T17681] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 1449.860478][T17681] usb 1-1: config 7 has an invalid interface number: 109 but max is 0 [ 1449.870707][T17681] usb 1-1: config 7 has no interface number 0 [ 1449.890593][T17681] usb 1-1: config 7 interface 109 altsetting 4 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 1449.903813][ T8289] usb 4-1: USB disconnect, device number 25 [ 1449.983021][T17681] usb 1-1: config 7 interface 109 altsetting 4 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1450.061163][T17681] usb 1-1: config 7 interface 109 altsetting 4 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1450.132826][T17681] usb 1-1: config 7 interface 109 altsetting 4 endpoint 0x8 has an invalid bInterval 0, changing to 10 [ 1450.203658][T17681] usb 1-1: config 7 interface 109 altsetting 4 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 1450.237033][T17681] usb 1-1: config 7 interface 109 has no altsetting 0 [ 1450.266086][T17681] usb 1-1: New USB device found, idVendor=1965, idProduct=0018, bcdDevice=d9.4d [ 1450.289446][T17681] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.305089][T17681] usb 1-1: Product: syz [ 1450.315627][T17681] usb 1-1: Manufacturer: syz [ 1450.326668][T17681] usb 1-1: SerialNumber: syz [ 1450.348243][T25820] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1450.361373][T25820] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1450.589581][T25820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1450.598821][T25820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1450.637336][ T8289] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1450.652883][T17681] usbhid 1-1:7.109: couldn't find an input interrupt endpoint [ 1450.692216][T17681] usb 1-1: USB disconnect, device number 70 [ 1450.817306][ T8289] usb 6-1: Using ep0 maxpacket: 32 [ 1450.824912][ T8289] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 1450.833526][ T8289] usb 6-1: config 0 has no interface number 0 [ 1450.843673][ T8289] usb 6-1: config 0 interface 214 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1450.874248][ T8289] usb 6-1: config 0 interface 214 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1450.936294][ T8289] usb 6-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1450.945875][ T8289] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.971181][ T8289] usb 6-1: Product: syz [ 1450.983619][ T8289] usb 6-1: Manufacturer: syz [ 1450.993825][ T8289] usb 6-1: SerialNumber: syz [ 1451.016578][ T8289] usb 6-1: config 0 descriptor?? [ 1451.039421][T25835] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1451.047088][T25835] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1451.140520][ T8289] plusb 6-1:0.214 usb0: register 'plusb' at usb-dummy_hcd.5-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, d2:a2:b5:c4:31:af [ 1451.290641][T25835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1451.312400][T25835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1451.338243][T25835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1451.355780][T25835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1451.518987][ T5893] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1451.570080][T25835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1451.586719][T25835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1451.687719][ T5893] usb 1-1: Using ep0 maxpacket: 8 [ 1451.706524][ T5893] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1451.745215][ T5893] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1451.767760][ T5893] usb 1-1: can't read configurations, error -71 [ 1451.986339][T25857] netlink: 'syz.1.4692': attribute type 10 has an invalid length. [ 1452.074308][T25864] ================================================================== [ 1452.082463][T25864] BUG: KASAN: slab-out-of-bounds in _raw_spin_lock+0x2e/0x40 [ 1452.089897][T25864] Read of size 1 at addr ffff888031211960 by task syz.3.4693/25864 [ 1452.097922][T25864] [ 1452.100292][T25864] CPU: 1 UID: 0 PID: 25864 Comm: syz.3.4693 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 1452.100323][T25864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1452.100339][T25864] Call Trace: [ 1452.100349][T25864] [ 1452.100360][T25864] dump_stack_lvl+0x189/0x250 [ 1452.100399][T25864] ? __kasan_check_byte+0x12/0x40 [ 1452.100425][T25864] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1452.100460][T25864] ? lock_release+0x4b/0x3e0 [ 1452.100495][T25864] ? __virt_addr_valid+0x4a5/0x5c0 [ 1452.100519][T25864] print_report+0xd2/0x2b0 [ 1452.100549][T25864] ? _raw_spin_lock+0x2e/0x40 [ 1452.100579][T25864] kasan_report+0x118/0x150 [ 1452.100604][T25864] ? _raw_spin_lock+0x2e/0x40 [ 1452.100668][T25864] ? __futex_pivot_hash+0x226/0x460 [ 1452.100693][T25864] __kasan_check_byte+0x2a/0x40 [ 1452.100714][T25864] lock_acquire+0x8d/0x360 [ 1452.100746][T25864] ? futex_hash_allocate+0x7eb/0xba0 [ 1452.100776][T25864] _raw_spin_lock+0x2e/0x40 [ 1452.100805][T25864] ? __futex_pivot_hash+0x226/0x460 [ 1452.100829][T25864] __futex_pivot_hash+0x226/0x460 [ 1452.100860][T25864] futex_hash_allocate+0xa6b/0xba0 [ 1452.100889][T25864] ? __pfx_futex_hash_allocate+0x10/0x10 [ 1452.100915][T25864] ? __pfx_var_wake_function+0x10/0x10 [ 1452.100943][T25864] ? static_key_count+0x41/0x70 [ 1452.100964][T25864] ? security_task_prctl+0x163/0x190 [ 1452.100996][T25864] __se_sys_prctl+0x9e8/0x1940 [ 1452.101027][T25864] ? __pfx___se_sys_prctl+0x10/0x10 [ 1452.101054][T25864] ? rcu_is_watching+0x15/0xb0 [ 1452.101091][T25864] ? do_syscall_64+0xbe/0x3b0 [ 1452.101113][T25864] ? __x64_sys_prctl+0x20/0xc0 [ 1452.101142][T25864] do_syscall_64+0xfa/0x3b0 [ 1452.101163][T25864] ? lockdep_hardirqs_on+0x9c/0x150 [ 1452.101197][T25864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.101220][T25864] ? clear_bhb_loop+0x60/0xb0 [ 1452.101246][T25864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.101269][T25864] RIP: 0033:0x7f19faf8e929 [ 1452.101290][T25864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1452.101311][T25864] RSP: 002b:00007f19f8df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1452.101335][T25864] RAX: ffffffffffffffda RBX: 00007f19fb1b6080 RCX: 00007f19faf8e929 [ 1452.101353][T25864] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000004e [ 1452.101368][T25864] RBP: 00007f19fb010b39 R08: 0000000000000000 R09: 0000000000000000 [ 1452.101383][T25864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1452.101398][T25864] R13: 0000000000000000 R14: 00007f19fb1b6080 R15: 00007f19fb2dfa28 [ 1452.101423][T25864] [ 1452.101432][T25864] [ 1452.363338][T25864] Allocated by task 25863: [ 1452.367818][T25864] kasan_save_track+0x3e/0x80 [ 1452.372571][T25864] __kasan_kmalloc+0x93/0xb0 [ 1452.377222][T25864] __kvmalloc_node_noprof+0x30d/0x5f0 [ 1452.382666][T25864] futex_hash_allocate+0x3f4/0xba0 [ 1452.387844][T25864] __se_sys_prctl+0x9e8/0x1940 [ 1452.392654][T25864] do_syscall_64+0xfa/0x3b0 [ 1452.397196][T25864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.403221][T25864] [ 1452.405589][T25864] The buggy address belongs to the object at ffff888031211900 [ 1452.405589][T25864] which belongs to the cache kmalloc-cg-64 of size 64 [ 1452.419848][T25864] The buggy address is located 32 bytes to the right of [ 1452.419848][T25864] allocated 64-byte region [ffff888031211900, ffff888031211940) [ 1452.434405][T25864] [ 1452.436751][T25864] The buggy address belongs to the physical page: [ 1452.443189][T25864] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888031211e00 pfn:0x31211 [ 1452.453279][T25864] memcg:ffff88801148a801 [ 1452.457534][T25864] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1452.464752][T25864] page_type: f5(slab) [ 1452.468752][T25864] raw: 00fff00000000000 ffff88801a449c80 ffffea00016035c0 0000000000000004 [ 1452.477384][T25864] raw: ffff888031211e00 000000008020001c 00000000f5000000 ffff88801148a801 [ 1452.485992][T25864] page dumped because: kasan: bad access detected [ 1452.492418][T25864] page_owner tracks the page as allocated [ 1452.498160][T25864] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 25322, tgid 25312 (syz.5.4552), ts 1408429251985, free_ts 1408382036364 [ 1452.517808][T25864] post_alloc_hook+0x240/0x2a0 [ 1452.522589][T25864] get_page_from_freelist+0x21e4/0x22c0 [ 1452.528151][T25864] __alloc_frozen_pages_noprof+0x181/0x370 [ 1452.533974][T25864] alloc_pages_mpol+0x232/0x4a0 [ 1452.538838][T25864] allocate_slab+0x8a/0x3b0 [ 1452.543358][T25864] ___slab_alloc+0xbfc/0x1480 [ 1452.548055][T25864] __kmalloc_cache_noprof+0x296/0x3d0 [ 1452.553438][T25864] kvm_set_irq_routing+0x17c/0xa50 [ 1452.558570][T25864] kvm_arch_vm_ioctl+0x14b4/0x16f0 [ 1452.563714][T25864] kvm_vm_ioctl+0x85f/0xc60 [ 1452.568244][T25864] __se_sys_ioctl+0xf9/0x170 [ 1452.572856][T25864] do_syscall_64+0xfa/0x3b0 [ 1452.577395][T25864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.583312][T25864] page last free pid 0 tgid 0 stack trace: [ 1452.589127][T25864] __free_frozen_pages+0xc71/0xe70 [ 1452.594254][T25864] rcu_core+0xca5/0x1710 [ 1452.598515][T25864] handle_softirqs+0x286/0x870 [ 1452.603314][T25864] __irq_exit_rcu+0xca/0x1f0 [ 1452.607922][T25864] irq_exit_rcu+0x9/0x30 [ 1452.612182][T25864] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1452.617837][T25864] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1452.623854][T25864] [ 1452.626214][T25864] Memory state around the buggy address: [ 1452.631868][T25864] ffff888031211800: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1452.639950][T25864] ffff888031211880: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 1452.648026][T25864] >ffff888031211900: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 1452.656102][T25864] ^ [ 1452.663316][T25864] ffff888031211980: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 1452.671392][T25864] ffff888031211a00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1452.679461][T25864] ================================================================== [ 1452.687662][ C1] vkms_vblank_simulate: vblank timer overrun [ 1452.695434][T25864] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1452.702687][T25864] CPU: 1 UID: 0 PID: 25864 Comm: syz.3.4693 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 1452.714897][T25864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1452.724972][T25864] Call Trace: [ 1452.728270][T25864] [ 1452.731217][T25864] dump_stack_lvl+0x99/0x250 [ 1452.735855][T25864] ? __asan_memcpy+0x40/0x70 [ 1452.740464][T25864] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1452.745689][T25864] ? __pfx__printk+0x10/0x10 [ 1452.750707][T25864] panic+0x2db/0x790 [ 1452.755280][T25864] ? lockdep_hardirqs_on+0x9c/0x150 [ 1452.760924][T25864] ? __pfx_panic+0x10/0x10 [ 1452.765657][T25864] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 1452.771596][T25864] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1452.777606][T25864] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1452.783962][T25864] ? _raw_spin_lock+0x2e/0x40 [ 1452.788661][T25864] check_panic_on_warn+0x89/0xb0 [ 1452.793622][T25864] ? _raw_spin_lock+0x2e/0x40 [ 1452.798333][T25864] end_report+0x78/0x160 [ 1452.802605][T25864] kasan_report+0x129/0x150 [ 1452.807161][T25864] ? _raw_spin_lock+0x2e/0x40 [ 1452.811875][T25864] ? __futex_pivot_hash+0x226/0x460 [ 1452.817092][T25864] __kasan_check_byte+0x2a/0x40 [ 1452.821956][T25864] lock_acquire+0x8d/0x360 [ 1452.826395][T25864] ? futex_hash_allocate+0x7eb/0xba0 [ 1452.831702][T25864] _raw_spin_lock+0x2e/0x40 [ 1452.836245][T25864] ? __futex_pivot_hash+0x226/0x460 [ 1452.841638][T25864] __futex_pivot_hash+0x226/0x460 [ 1452.846687][T25864] futex_hash_allocate+0xa6b/0xba0 [ 1452.851818][T25864] ? __pfx_futex_hash_allocate+0x10/0x10 [ 1452.857568][T25864] ? __pfx_var_wake_function+0x10/0x10 [ 1452.863054][T25864] ? static_key_count+0x41/0x70 [ 1452.867925][T25864] ? security_task_prctl+0x163/0x190 [ 1452.873235][T25864] __se_sys_prctl+0x9e8/0x1940 [ 1452.878030][T25864] ? __pfx___se_sys_prctl+0x10/0x10 [ 1452.883244][T25864] ? rcu_is_watching+0x15/0xb0 [ 1452.888031][T25864] ? do_syscall_64+0xbe/0x3b0 [ 1452.892721][T25864] ? __x64_sys_prctl+0x20/0xc0 [ 1452.897515][T25864] do_syscall_64+0xfa/0x3b0 [ 1452.902043][T25864] ? lockdep_hardirqs_on+0x9c/0x150 [ 1452.907279][T25864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.913372][T25864] ? clear_bhb_loop+0x60/0xb0 [ 1452.918062][T25864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.923967][T25864] RIP: 0033:0x7f19faf8e929 [ 1452.928395][T25864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1452.948037][T25864] RSP: 002b:00007f19f8df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1452.956491][T25864] RAX: ffffffffffffffda RBX: 00007f19fb1b6080 RCX: 00007f19faf8e929 [ 1452.964501][T25864] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000004e [ 1452.972593][T25864] RBP: 00007f19fb010b39 R08: 0000000000000000 R09: 0000000000000000 [ 1452.980583][T25864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1452.988656][T25864] R13: 0000000000000000 R14: 00007f19fb1b6080 R15: 00007f19fb2dfa28 [ 1452.996682][T25864] [ 1452.999994][T25864] Kernel Offset: disabled [ 1453.004522][T25864] Rebooting in 86400 seconds..