last executing test programs: 4m40.43308598s ago: executing program 0 (id=717): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) syz_open_dev$evdev(0x0, 0x2, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f004000000000000000000000100000e1fcd8c6", @ANYRES32, @ANYBLOB="0000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0)=0x3) socket$alg(0x26, 0x5, 0x0) syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) 4m40.299526037s ago: executing program 0 (id=718): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'netpci0\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = epoll_create(0x9) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x110000010}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x2d, 0x9, 0x70bd27, 0x0, {0x5}, [@typed={0x14, 0xa, 0x0, 0x0, @ipv6=@loopback={0x900000000000000}}]}, 0x28}}, 0x84) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) 4m39.941226107s ago: executing program 0 (id=721): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, 0x2}, 0x10) getsockname$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x10010, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x4115, &(0x7f00000000c0)={0x0, 0x3a93, 0x20, 0x3, 0x2ac}, &(0x7f0000000140), &(0x7f0000000180)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000440)=@IORING_OP_SENDMSG={0x9, 0x50, 0x0, r0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@in={0x2, 0x4e21, @empty}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000240)="85f2983f66968b331abe94550469e966716f701ac537249bb6bdb093b6a7aac2321d878b280a029d75d2c453a69e2b5fb8ed4e40252a3a1344abbb43727d9afa20652b732eecd7231a7b5bb0e52744fd9ce8663cb4eb6d93eb5cfa6392e07cd8214bdfafcabb33c265b50f035e6b90849520011b35d1874dd8682f46b626017fc35704053805bd0f8e114d651c8703d8d0d521b8117351ccb336249adb89835bc19b88d57308b9ac9f1032160e7b71d691c94631", 0xb4}], 0x1, &(0x7f0000000340)=[{0xb8, 0x110, 0x8000, "a7cab99172656f60337358557abb5e6507840f0903dabca5dad3659db90d5cf73be4d1b737c541d47e1efadb66967ffd7b4caee3db185aaaae30e000b7c4dffd8a566e44ffddcd1f4712c7fabdbcbe62c02bc28dfac7099e3990a95f3031fc36965415a2ba9d5e95afb9e63f5efbfda0f5dceb77c65414259f85ba15003790c4469563f53f17c9edf2e493f531420e078216cfea77f03bac61b9d9d86b537d0ac5e654dc"}], 0xb8}, 0x0, 0x20068100, 0x1, {0x0, r4}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000840)={'syztnl2\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x2f, 0x5, 0x7, 0x4, 0x20, @dev={0xfe, 0x80, '\x00', 0x37}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x2, 0x9dc}}) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000480)="5f2006a30e4ba130b51bb32c6ea2d7c73c4d03650196c10d1774dde9bd28b6ba4aae82beb27113bc54027a36416f4d74ea67b7f09b3bc7c4c25000ed592e8b4d72320304fb1535204c32d01d2ec71ae9d823990991fd7d646c156c61ef830fd933f29401333870b0", 0x68}, {&(0x7f0000000500)="69024535a3db36ba3ce1331f63702ebc5155b3d81bcd02ade88d03145fc31960957b13c013cd708cac001039b09a2b6b07da0e1ca60f538a2729e75ed074bcde31c57ba177d72b3497d99a3a9dd4643f7b5a2513d3284af3318ba1a57ca3056fabcee322f1b40ead2839e113c7c7f443e4fcaa2f286287bfe6fd9b68abf37557b8b7cfce07ce3ea52e11c67de301a346968ebd7a9fc3658a8c8bd2493b05a3c2efaed9ae65b33fd0d15f420e06e6c51f1298fe266ce83d68393689e39a7546bb940fbf", 0xc3}, {&(0x7f0000000600)="4eb4bac46f81a1cea16897be44471e4a0c20", 0x12}, {&(0x7f0000000640)="087bfae6ebdb76dc8a4ce9fa07760cb5c2d4317e48de99a09eacb31f540602f67c5aee2a22d410c693e84a40e799a5da032942740f33c936b88ef856f118a1e9b82e6c740979f72f873db986100adfc9e7e516fadea169f931baee34060ca97b5ce7947643c6b1893efda6c6176924b33dcc147499ab510c8d697295e7f3fa99c5fd2bcf2c481a93b5bc33597bf06722f5bb1e5ea3ce417d9d0830130aaac92fbeff3f8d4958099c30ea3d62bf4faa4331cba0328d21a6a9b362fdff81b43594dd4dce79938143f07653782fb9089650b99e18facafc4f6c703586b36eaf46b1363ef724239ee308735feca9", 0xec}], 0x4, &(0x7f0000000880)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @rand_addr=0x64010100, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}}, @ip_retopts={{0x80, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x44, 0x5a, 0x3, 0xb, [{@empty, 0x5}, {@private=0x4, 0x2}, {@empty, 0x7}, {@multicast1, 0x962a}, {@broadcast}, {@local, 0x4}, {@multicast1, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}, @end, @cipso={0x86, 0x14, 0xffffffffffffffff, [{0x0, 0xe, "9f9e6b6044a93ccc5da387a6"}]}, @rr={0x7, 0x17, 0x6f, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x2d}]}]}}}], 0xd8}, 0x10) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000009c0)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000a00)={0x9, r0, 0x8, {0xc137, 0xf4}, 0x7}, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x50, 0x22, 0xc580c9156f6f4285, 0x70bd28, 0x25dfdbfc, {0xd}, [@nested={0x8, 0x20, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @generic="ae9c74d6281a2129b65f2ab29420762591f4146d5c81de5710815c13f7f8195bc8669ff7ebbc4656e8167c798d384fdfa5"]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x810) io_uring_setup(0x30e, &(0x7f0000000b80)={0x0, 0x5bbb, 0x4000, 0x3, 0x21, 0x0, r2}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000c00)="91e50175692ab530a1185b9af65e0e0dc0fe15b3f993831c3d56938ef645a65ad9ff5e18472216e2294dad882b03921b4f9b0600d2af7aba4079b271df25bcfceb645dd7adbd7f4b0a58071d98dc5f59c7d60c9709", 0x55, 0x1, &(0x7f0000000c80)={0xa, 0x4e24, 0xa, @dev={0xfe, 0x80, '\x00', 0x20}, 0xffffff58}, 0x1c) socket$packet(0x11, 0x3, 0x300) socket$inet(0x2, 0xa, 0x1) r9 = creat(&(0x7f0000000cc0)='./file0\x00', 0x180) munlock(&(0x7f0000ff3000/0xd000)=nil, 0xd000) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f0000000d40)={0x0, 0x0, r9}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000d80)={'vxcan0\x00'}) r11 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000dc0)='/proc/asound/card2/oss_mixer\x00', 0x2000, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r10, 0x18, &(0x7f0000000e00)={0x1, r11, 0x25, {0xffffffff, 0x100000001}, 0x6}, 0x1) syz_clone(0x40400, &(0x7f0000000e40)="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", 0xfb, &(0x7f0000000f40), &(0x7f0000000f80), &(0x7f0000000fc0)="543e83f8db4768ee5927dc681e4275d7a761fa95d2eef6f8cb6022b7bcc019ca6d4152") read$FUSE(r10, &(0x7f0000001000)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r10, &(0x7f0000003040)={0x18, 0xfffffffffffffff5, r12, {0x2}}, 0x18) mkdir(&(0x7f0000003080)='./file0\x00', 0x109) 4m39.611678806s ago: executing program 0 (id=724): socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$qrtr(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ptrace(0x10, 0x1) bind$packet(0xffffffffffffffff, 0x0, 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, 0x0, 0x400) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)={0x40000000}) 4m35.839500275s ago: executing program 0 (id=736): syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MFC(r1, 0x3a, 0xcd, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) socket$inet(0xa, 0x801, 0x84) (async) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) accept4(r3, 0x0, 0x0, 0x0) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000480)={0x0, 0x40, 0xffff, 0x9, 0x3ff, 0x6}, &(0x7f0000000440)=0x14) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="fd8d00000000000000000300000008000300", @ANYRES32=r2], 0x30}}, 0x0) (async) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="fd8d00000000000000000300000008000300", @ANYRES32=r2], 0x30}}, 0x0) r5 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) readv(r5, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r5, &(0x7f00000012c0)=""/232, 0xe8) socket$netlink(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x10) ioctl$SNDCTL_SEQ_PANIC(r7, 0x5100) 4m35.168427884s ago: executing program 0 (id=739): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$lock(r1, 0x5, &(0x7f0000000000)={0x0, 0x1, 0x7fffffffffffffff, 0x9, r2}) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000080)=@arm64={0x9, 0x2, 0x81, '\x00', 0x8000000000000001}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000004080), 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xaece, 0x0) r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905"], 0x0) mlockall(0x2) r5 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmat(r5, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r5, 0xc) unshare(0x20000400) syz_usb_control_io(r4, &(0x7f0000000500)={0x2c, &(0x7f0000000280)={0x20, 0x2, 0xf9, {0xf9, 0x30, "af0d56264a39910a90cf88c08ba2eb2996e39842d278da6843ca59bd12dd81fa4fe147aa22364e334ea9014891dd597634f004e1af916eef2fc84bdfd3a12cbdf4f4c11c9666def2fc86035b9bef4b4be84e2e5ccfbef610bba13f3ebacb7edd1ddf1f56f76647124e1dbf3c61f3c511666c7993c41b21348032edd2e3ee5add83f964f581ccc5b0d95f45bfbfc34f552d62569160b6d3b650b34a634a27806c7def362a57725466b4ff50cfe9ccd6265fdd818e476c2c4700bb7fb77cd840dae8714ad79b092c06ff6031ab511d5e6fecaa916cec0667b17352f90fe4be3d2e266e306bf5c87b19624749e60000e4f4eee6c057170000"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x430}}, &(0x7f0000000200)={0x0, 0xf, 0x36, {0x5, 0xf, 0x36, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x8b, "8c7f4b0a3b21928f65735054719743ea"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x9, 0x9, 0x1}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0xf1, 0x2, 0x6, 0x32}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0xa, 0x6, 0x200, 0x2}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4a, 0x8, 0x5, 0x8, "c97182a0", '\a3\r@'}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x8, 0x6, 0xe, 0x2, 0x1ff, 0x2}}}, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x9d, "cec6f7433b8983931cf0565005a8281ae0a07f1f7a36f0435a97a5a8f46c1cbe34297e26ecc091bf884b2d1c460757761e444b2fd1406e30ba2f6147d29cfdf18f6b39a576667e51da9b6ddff53f3c98a6218d95bf3bb701c48879bed1dd0b431e0f4d91b6b1209c216032323c85cf8063735420545568fe60854ace207488bcbbcc97a79c935c450f0f6318333ecd4d2815f2240b67770987433e7f51"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000740)={0x20, 0x0, 0x8, {0x100, 0x20, [0xe1]}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0xc}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x7f}, &(0x7f0000000800)={0x40, 0xb, 0x2, "ea7a"}, 0x0, &(0x7f00000008c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000900)={0x40, 0x17, 0x6, @local}, &(0x7f0000000940)={0x40, 0x19, 0x2, "0fe0"}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0xc59}, &(0x7f0000000a00)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0x7}}) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002600), 0x101840, 0x0) ioctl$RTC_AIE_ON(r6, 0x7001) r7 = syz_open_dev$vim2m(0x0, 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000040)={0x1, @raw_data="dfab4d85d47fab3f5852323481422e0f382a7fff4f2f6544e6018dbd8ab7448ced0cb6d971aa93e8b234fd2ceb6c160545bc47d95cb6f68a98ee9ea4686093a60d1e90430c08857fd0c428cdd40ea133631f9993733758d144b78ac24b59a54138ada8c18089c1250c7de9ef6ad3b2f7f28322211b5313b263f34c07a174f7d1d0f000f2bd2a60f9e4f18a82318f990d85778a2b77c73764d2d187c87800f0905ca84dbdd9002b572b0928a92da591fbaa566464e5cb6dbaf6a6945d91b66259944c62c5090ca50c"}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000003040)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40084}, 0x0) syz_usb_connect(0x0, 0x56, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRESOCT=0x0], 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{0x1, 0x7, 0x2, 0xa2c}, 'syz0\x00', 0x48}) 4m34.394980821s ago: executing program 32 (id=739): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$lock(r1, 0x5, &(0x7f0000000000)={0x0, 0x1, 0x7fffffffffffffff, 0x9, r2}) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000080)=@arm64={0x9, 0x2, 0x81, '\x00', 0x8000000000000001}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000004080), 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xaece, 0x0) r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905"], 0x0) mlockall(0x2) r5 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmat(r5, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r5, 0xc) unshare(0x20000400) syz_usb_control_io(r4, &(0x7f0000000500)={0x2c, &(0x7f0000000280)={0x20, 0x2, 0xf9, {0xf9, 0x30, "af0d56264a39910a90cf88c08ba2eb2996e39842d278da6843ca59bd12dd81fa4fe147aa22364e334ea9014891dd597634f004e1af916eef2fc84bdfd3a12cbdf4f4c11c9666def2fc86035b9bef4b4be84e2e5ccfbef610bba13f3ebacb7edd1ddf1f56f76647124e1dbf3c61f3c511666c7993c41b21348032edd2e3ee5add83f964f581ccc5b0d95f45bfbfc34f552d62569160b6d3b650b34a634a27806c7def362a57725466b4ff50cfe9ccd6265fdd818e476c2c4700bb7fb77cd840dae8714ad79b092c06ff6031ab511d5e6fecaa916cec0667b17352f90fe4be3d2e266e306bf5c87b19624749e60000e4f4eee6c057170000"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x430}}, &(0x7f0000000200)={0x0, 0xf, 0x36, {0x5, 0xf, 0x36, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x8b, "8c7f4b0a3b21928f65735054719743ea"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x9, 0x9, 0x1}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0xf1, 0x2, 0x6, 0x32}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0xa, 0x6, 0x200, 0x2}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4a, 0x8, 0x5, 0x8, "c97182a0", '\a3\r@'}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x8, 0x6, 0xe, 0x2, 0x1ff, 0x2}}}, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x9d, "cec6f7433b8983931cf0565005a8281ae0a07f1f7a36f0435a97a5a8f46c1cbe34297e26ecc091bf884b2d1c460757761e444b2fd1406e30ba2f6147d29cfdf18f6b39a576667e51da9b6ddff53f3c98a6218d95bf3bb701c48879bed1dd0b431e0f4d91b6b1209c216032323c85cf8063735420545568fe60854ace207488bcbbcc97a79c935c450f0f6318333ecd4d2815f2240b67770987433e7f51"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000740)={0x20, 0x0, 0x8, {0x100, 0x20, [0xe1]}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0xc}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x7f}, &(0x7f0000000800)={0x40, 0xb, 0x2, "ea7a"}, 0x0, &(0x7f00000008c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000900)={0x40, 0x17, 0x6, @local}, &(0x7f0000000940)={0x40, 0x19, 0x2, "0fe0"}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0xc59}, &(0x7f0000000a00)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0x7}}) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002600), 0x101840, 0x0) ioctl$RTC_AIE_ON(r6, 0x7001) r7 = syz_open_dev$vim2m(0x0, 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000040)={0x1, @raw_data="dfab4d85d47fab3f5852323481422e0f382a7fff4f2f6544e6018dbd8ab7448ced0cb6d971aa93e8b234fd2ceb6c160545bc47d95cb6f68a98ee9ea4686093a60d1e90430c08857fd0c428cdd40ea133631f9993733758d144b78ac24b59a54138ada8c18089c1250c7de9ef6ad3b2f7f28322211b5313b263f34c07a174f7d1d0f000f2bd2a60f9e4f18a82318f990d85778a2b77c73764d2d187c87800f0905ca84dbdd9002b572b0928a92da591fbaa566464e5cb6dbaf6a6945d91b66259944c62c5090ca50c"}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000003040)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40084}, 0x0) syz_usb_connect(0x0, 0x56, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRESOCT=0x0], 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{0x1, 0x7, 0x2, 0xa2c}, 'syz0\x00', 0x48}) 11.496712861s ago: executing program 5 (id=1699): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0x27, 0xc0, 0xde, 0x20, 0x86a, 0x3, 0xf03f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x2, 0x2, 0x2, 0xf3, 0xbf, 0xf5, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x16, @string={0x16, 0x3, "6d0a412b2cde821824674afe5f8c7e017e901c88"}}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0202}]}) syz_clone3(&(0x7f00000007c0)={0x1800200, 0x0, 0x0, 0x0, {0x6}, &(0x7f00000005c0), 0x0, 0x0, 0x0}, 0x58) 9.865766507s ago: executing program 5 (id=1703): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0x1c22, 0x2, 0x0, 0x17f}, &(0x7f00000002c0), &(0x7f00000001c0)) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001500)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000540)={0x50, 0x0, r4, {0x7, 0x2b, 0xee0d, 0x2000248f, 0x0, 0x5, 0x5, 0x9cf, 0x0, 0x0, 0x8, 0xffff}}, 0x50) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, 0x0, 0x2) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000140)={0x1, 'ip6tnl0\x00', {}, 0x7ff}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000280)={0x3, {0xfffffff7, 0x2, 0x1, 0x6}, {0x5, 0x4, 0x0, 0x9}, {0x5, 0xa}}) io_setup(0x4082, &(0x7f0000000380)) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') write$uinput_user_dev(r5, 0x0, 0x28) syz_io_uring_setup(0x1002943, &(0x7f0000001400)={0x0, 0x0, 0x10}, &(0x7f0000001480), &(0x7f00000014c0)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000440)={0x1, @pix_mp={0x62, 0x1, 0x3031334d, 0x3, 0xa, [{0x3, 0x6}, {0x2, 0x2}, {0x3, 0x411}, {0x10001, 0x8}, {0x6, 0x8}, {0x4, 0xd}, {0x8, 0xfffffff8}, {0x5, 0x1}], 0xc, 0x2, 0x1, 0x0, 0x2}}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x24008884) syz_io_uring_setup(0x24ff, &(0x7f0000000300)={0x0, 0xf36d, 0x400, 0x0, 0xfffffffc, 0x0, r2}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0x40, 0x0, 0x6, 0x0, 0x1}) 8.034339316s ago: executing program 4 (id=1705): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x10, 0x713, 0x70bd27, 0x25dfdbfc, {{@in6=@mcast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e21, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0x2, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200810000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) 7.888264909s ago: executing program 4 (id=1706): r0 = socket(0x0, 0x5, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"/616], 0x268}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r8, 0x0, 0x2, 0x0) splice(r7, 0x0, r6, 0x0, 0x41c, 0xe) ioctl$sock_qrtr_TIOCINQ(r8, 0x541b, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) 7.358125446s ago: executing program 5 (id=1708): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06b9409b0dffff11", 0xf, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7ff, 0x81, 0xd, 0x4003, 0x2}) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 7.219919535s ago: executing program 5 (id=1709): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = userfaultfd(0x80801) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x12, &(0x7f0000000000), 0x4) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000000480)={{0x3, 0x0, 0x80, {0xeeee0000, 0xeeef0000, 0x2}}, "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", "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"}) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x105100, 0x83) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_GET_MP_STATE(r5, 0x8004ae98, &(0x7f00000000c0)) 6.705787961s ago: executing program 5 (id=1711): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000007110bf000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) syz_open_dev$sndmidi(0x0, 0x5, 0x141101) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) close(r4) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201010200000010f3b100000000010203010902240001010330050904000801030101000921"], 0x0) mlock2(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002e000100000000000000000008000000", @ANYRES32, @ANYBLOB="b7b72caf035a10dbc1ec381d0211", @ANYRES32=0xee00, @ANYBLOB="0c0000800500010098000000"], 0x2c}], 0x1}, 0x0) 4.735590748s ago: executing program 2 (id=1722): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffb, 0x6, 0x6, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="a20087ca01a5", 0x0, 0x400, 0x20004, 0x0, 0x0}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x0) fchdir(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendto$packet(r5, &(0x7f00000004c0)="27ae7a5c0cbed4eb3bebc9ec4672", 0xe, 0x1, &(0x7f0000000080)={0x11, 0x8808, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ftruncate(r4, 0x796c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e20, 0x8001, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}}, 0x7, 0x21}, 0x90) 4.732822889s ago: executing program 4 (id=1724): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0xca042) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000980)={'#! ', './file1/../file0', [{0x20, 'cgroQ\xedB\x9f\xc6\vQ\xf8~up.stat\x00\x88\xd8K\x91\x17\xb3\xe4w\x956\xf1\xce\xdcX\xf5\x03\x1a\x84\xdaj\xf8a\xc4#g\xad\x8d;xu\x16W_!m\xd0I\xe1\x98?3lA\x82\xa1. K\xa6\x9c\xcc\x02:k\x9d\xd4\x14\xb1\xdbK\xf3\x9e$\xe4\x04\x91\xc2\xf6\xc5%+r*E\xee\x9c9\xfe\xa5\xeb\xda\xa3\xfa\xdf\xbfQS\xcbxz9p\x01o\x1bm'}, {0x20, 'EY\x86\x97\x01\xa3\xa6\b\x008/\xea\xf9W\x11\xbd\x0e\xe6\xb8\x8d\x03\xca\xf0\x881\xe8 Pj4\xe9\x021\xe8\x88\x1a\x13C\xf6\xb1\xc2\x7f\x04\xc5*`b3\xe8%5\xeexZ\bii\v\xea\t\xfd\xbc\xc2\xbf?gpv5\xab\xd1W\xf0\x92\x86\x86\x05\x00\x00\x00\xaa\xb1.n\xbf\xc8\xd1\xa5\r\xc7\x04O\xde\xd3w\xe1\xdd\x11g3\x15}\xe0\xc5V\xc3\x97J\x10\x17\xd9\x1c\xf9\xfc:>\x0eN\x81*\x15\x14\xfe\xec\x1d@~\x0f9\xce\xb0\xa5\xe3\x12\x04\xef\x12\xd2J$)7/R8\x0eS\xa7\x14\xfdz\x80g\xd5\x9d\x8e{\xeb\xc9\x19\xf4\xf3k\v\xd0\xeaP\xd8p\xf4\n\xe0\x81\x9c\x9a\xd4o\xc2\xb3\xbc\xd2\x8d3\x87\f\xe1C\xb6\x8ct\x97\xeb\xe9\\\x9c\xb8bs#\xf7*\x1c\xb4g\x9d\xaa,\x97\a\x00\x00\x00\x00\x00\x00\x00\a\xdbt\xb3\x84\x98\x87$\xbc\xf8\x91\x06D\xa6\xc0\x90?J\xec@\xa3\xfd\x193\xe7\x01d\xd4\xdfP~\xa1}\x83\x12~>\x89\xcd\xf7\x9d\xbfgV\x02\xb0\x88\x9a\x17\xf2\xb2\xa5z4\xe3&Zc\n\xf4\x19U\xeb\a\xe2W\xeeU\xc6\x06\xeb\n\x045\xe7\x94Ho\xb1\x8e\x91+9\xb8=\xe2b\xc0+\xfc\xd1oz\xdd\xbdDHh\xf8\x04m\a\r$\x8f\x93\xfdw\xb4\xc5&CF$\xeb\x91\xad\x1b-\r\xbe2f\xed8R\\?O;\x01\xac\xb3\xa8\xdc\xf5\x9f]\xc2O\xda]=\r\xff8\x99\xa1\xbd\x85#\x88\xb7C\x7f\xf0\xb8f\x90>P>=\xedBQO\xeb\xbd\xa8%a\xddX\xaa\xfb1\xfc\xb9\xbb\xa2\t\x90xao\x9d\x1d.\x82g\x9b\x13\b\x84\x1d\xba?\xb7\x0elp1\x9b\xac\x8c\xaex\x7f\x12\xd6\xf1C%\xec<\xec\xeblp\xd9\x9dt\x97\xe2|8\x9aVE\xa7\xdc\xdf\xe3L\xd4N\xce\x7fbb$$,48\x12\xa0w\x8c\x90x\xddjt\x1b\x93O\xdc\x12\f\xf0\x99\xb10\xc1\xecW\xe2/\x1e\x1d\xc2C-\xdb<\x86\xe5\xd8\xfa\x9f\xd5>\x13\xf0\xb5\xa1Y\x90\x01\xbd\xbcC#\x00'/536}]}, 0x2a3) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000d00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x5dd]}}) 4.538279734s ago: executing program 2 (id=1725): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f0000000100)={0x30b}, 0x18, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000200)={0x100, r3}, 0x0) close(r2) connect$can_bcm(r1, &(0x7f00000004c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[@ANYBLOB="05000000030000000000000000400000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000002"], 0x38}, 0x300}, 0x0) recvmmsg(r1, &(0x7f0000002080)=[{{&(0x7f0000000140)=@can, 0x80, &(0x7f0000000300)=[{&(0x7f00000004c0)=""/254, 0xfe}, {&(0x7f00000005c0)=""/185, 0xb9}], 0x2, &(0x7f0000000680)=""/221, 0xdd}, 0x5}, {{&(0x7f0000000780)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000800)=""/120, 0x78}, {&(0x7f0000000880)=""/195, 0xc3}, {&(0x7f0000000980)=""/193, 0xc1}], 0x3, &(0x7f0000000a80)=""/242, 0xf2}, 0x2}, {{&(0x7f0000000b80)=@xdp, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000c00)=""/130, 0x82}, {&(0x7f0000000cc0)=""/33, 0x21}, {&(0x7f0000000d00)=""/65, 0x41}], 0x3, &(0x7f0000000dc0)=""/157, 0x9d}, 0x4}, {{&(0x7f0000000e80)=@in6, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f0000001f00)=""/62, 0x3e}], 0x2, &(0x7f0000001f80)=""/214, 0xd6}, 0x1000}], 0x4, 0x2, &(0x7f0000002180)={0x0, 0x3938700}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r7 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x40000) connect$rxrpc(r7, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e27, @local}}, 0x24) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@fd={0x66642a85, 0x0, r6}, @flat=@handle={0x73682a85, 0x10b, 0x1}, @fda={0x66646185, 0x3, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 4.311363457s ago: executing program 4 (id=1728): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x380000, @loopback, 0x3}, 0x1c) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0x18, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0xa3, 0x0, 0x5, [0x5]}]}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@cipso={0x86, 0x6, 0x3}, @timestamp={0x44, 0x14, 0x86, 0x0, 0x8, [0xfff, 0x8, 0x1, 0xe4]}, @end]}}}], 0x60}, 0x4000) 4.151922594s ago: executing program 1 (id=1729): socket$packet(0x11, 0x3, 0x300) socket$kcm(0xa, 0x1, 0x106) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer(0xffffffffffffff9c, 0x0, 0x40080, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x7, 0x100000000], 0x3000, 0x280384}) r3 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000100)='\\%)$*:\x00', 0x0) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x34325241, 0x3, [0x2], [0x80ffff], [], [0x400000000000000]}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x2, 0xe0000) socket$qrtr(0x2a, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE(r5, 0x5000940c, 0x0) syz_io_uring_setup(0x7ea9, &(0x7f0000000140)={0x0, 0x4e98, 0x4000, 0x2, 0x201}, &(0x7f0000000080)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f00000000c0)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) fchdir(0xffffffffffffffff) ioctl$KVM_RUN(r2, 0xae80, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 4.038869996s ago: executing program 3 (id=1730): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) fadvise64(r0, 0x5851, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) rt_sigqueueinfo(0x0, 0x27, &(0x7f0000000080)={0xb, 0x40000005, 0x10001}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a0018000020010000000000000000000000000000fe80000000000000000000000000000000020000000000000709"], 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000019440)='net/ip_tables_targets\x00') syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x50, 0x1801, 0x0, 0x0}, {0x7, 0x4200, 0x0, 0x0}], 0x2}) pread64(r2, &(0x7f0000000080)=""/102350, 0xc345, 0x54) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async) fadvise64(r0, 0x0, 0x0, 0x0) (async) fadvise64(r0, 0x5851, 0x0, 0x2) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) (async) rt_sigqueueinfo(0x0, 0x27, &(0x7f0000000080)={0xb, 0x40000005, 0x10001}) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a0018000020010000000000000000000000000000fe80000000000000000000000000000000020000000000000709"], 0x0) (async) syz_open_procfs(0x0, &(0x7f0000019440)='net/ip_tables_targets\x00') (async) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) (async) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x50, 0x1801, 0x0, 0x0}, {0x7, 0x4200, 0x0, 0x0}], 0x2}) (async) pread64(r2, &(0x7f0000000080)=""/102350, 0xc345, 0x54) (async) 3.970639985s ago: executing program 4 (id=1731): unshare(0x6a040000) (async) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x6, 0x8031, 0xffffffffffffffff, 0x6d62d000) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x20000) (async, rerun: 64) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000001480)=0x9, 0x6, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(r0, &(0x7f0000001440)=[{{&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x31}}, 0x3, 0x1, 0x0, 0x2}}, 0x80, &(0x7f00000012c0)=[{&(0x7f00000000c0)="3b8a345383316b4f71bb6d5a6f4078911ce27f89830b853bebb918e294cecfcac6f390c43b622be5f86159099a79060621ee4a5119aae3d23685d52828e84ad82437f89773b341d0622d8f8b84aa415d1ce6a7ceff80e6d69aefbd1d1754473c209ca88218a7aa33062db8025c6b8a3fc31ab855fca0e1f6f1796a8312333389b00b87034089b0066758277c6f36aee69daf023c11fd", 0x96}, {&(0x7f0000000180)="f437238eed3954657e0b5c4ba5da1c2bca6262d268ad398d80dda3e242c878b60696a414310de0d459fe0134d1f109bed36c71417aacf5875ae4847cafdb72aa9c276792c5f82a8b4bda6ded5f7b2df809fd00c59781835ff1429d1e590c256d791eefdcbe829cf299b0b5e4d5026f770084ce5cb27f3f4ccc0f18b19cfdca3746784eb73af88f823f29124d3378817aacd598fdea71f27f2b1154424266128bb1fa805bdea4a97b490518ef26d761b962a9be00e22f7dbe2a68a723908fd7fd", 0xc0}, {&(0x7f0000000240)="c450f9f42bd6591edae644d66693e53fde59104c4fd28f71fa4a6bc583f00e9d4dabda697ad7315aeeeacde653b5e5c8804e14315704c72de971e54ec6b122b6493b6cf3e40bc00d3a0e7bb68ec7c3344f280b8aa23b38c77d9fe05c5302b925b45031ff12a94708bb336ca9b3a5b7", 0x6f}, {&(0x7f00000002c0)="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", 0x1000}], 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="8000000f0000000084000000e05000000a48332eacab04cbd6d3c590c3fd1824d77b4dd888104a63a54d7da80e07022b17cbe851546b7589aefda36b6972b8cb0423284c74a4a8c8aaac5dcd18000000cfb780418f7d4d2ed3dc062b92b1dafb21478df5d37ae8e0d0bde8e12dd649e370d840e3a8226b00a8000000000000000d010000000000003edcaae3f539cf856c13f47baa48359e9ad5dc154ea78a2dc28b36039830118f01153d03fbe654274b9334ef0d96e97601eaa9da48cf6da58151c374cc2bc611bdc78ded9d78138735e247778c7d852ac501b93b1171572ae3a4b7d64b1ac076216115ff752f83de76eafabc1978bcd61cd619a884cea52ac2d8eabc8fc2a5105439228e998e1dcbd8bd0fa7e6c65955a2bacb57c9b4ed44"], 0x128}}], 0x1, 0x2400c805) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000117000/0x2000)=nil, 0x2) syz_open_dev$sg(0x0, 0x0, 0x8002) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x90d29ff4d0c865c2, 0x0) (async) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000014c0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000001500)={0x48, 0x2, r2}) 3.39205213s ago: executing program 2 (id=1732): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0202}]}) fanotify_mark(0xffffffffffffffff, 0x161, 0xc0000867, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1a, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @main=@item_4={0x3, 0x0, 0xb, "09001d00"}, @local=@item_012={0x2, 0x2, 0x3, "0500"}, @global=@item_4={0x3, 0x1, 0x3, "0000c300"}, @global=@item_012={0x0, 0x1, 0x2}, @global=@item_012={0x1, 0x1, 0x7, "eb"}, @local=@item_4={0x3, 0x2, 0x1, "09037a31"}, @global=@item_012={0x1, 0x1, 0x4, '\x00'}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) 3.175353167s ago: executing program 5 (id=1733): bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1e0000000000000000", @ANYRES32], 0x20) r0 = syz_usb_connect(0x2, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x3a, 0x37, 0x5, 0x20, 0x781, 0x5, 0x5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe6, 0x2, 0x2, 0x5b, 0xbd, 0x97, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="201203006b92f8b41f"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000980)={0x34, &(0x7f00000006c0)={0x40, 0x14, 0x1, "f6"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000240)={0x0, 0x24, 0xe9, {0xe9, 0x8, "8c6d326dae0ab70e2dd7b37e5a10b4d1d55a3cf5e35580ab54038ccfaacfccbfc87f18a0ee2f14866cea6243111c5f9afc89ecb09c43abfdfc545da1bfee4ddcf09b1ce07f4415edba479a381508f405854b76ceb4dcc748024ad23b0bf9fcf4a9a14d556b02753446de2d2b8b2c1dad676843d7a98a80e23df4fa12f5d9d4a235400e35856e7781ed0c7de9ede61e28a53f5d3dbd9ca03d4f9ca12b4df47db4f698909d0910cf6b669ae49ca5a77fe73102adba11b61161962dbc790902bc0e9da9aee34a4e692ba0a73defeed9da6aa81850931475330fcf149c96a9afc053c5a75ac87a86e6"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1801}}, &(0x7f0000000040)={0x0, 0xf, 0x10, {0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x84, 0x8, 0x5}]}}, &(0x7f0000000080)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x1, 0x1, 0xff, "b8b8c15e", "a30a2106"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x4, 0x3, 0xf9, 0x80, 0x400, 0xfffe}}}, &(0x7f0000000880)={0x84, &(0x7f0000000340)={0x40, 0x17, 0x74, "339cf51822be3efaf0d6f395c8d67b6913ee2bd6e8a9b91578b2918bd60c89aef3f4bab9ca261f3b7dc09e03a488e222041404d60cd86cf684b676597f1af6bcdea202379c9b1739ecbadaa4d6af16c95fb998859239a602ebda4e5d15665a1dd48d2c335b6e8f35de02f45d72123ae1bde38187"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000940)=ANY=[@ANYBLOB="2000080000cac99aa5c05591007a010100ffff0000"], &(0x7f0000000500)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0xe}, &(0x7f0000000580)={0x40, 0xb, 0x2, "30c9"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x8000}, &(0x7f0000000680)={0x40, 0x13, 0x6, @local}, &(0x7f0000000700)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000740)={0x40, 0x19, 0x2, "57fc"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x6}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0xd6}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000840)={0x40, 0x21, 0x1}}) r1 = io_uring_setup(0x1f5f, &(0x7f00000000c0)={0x0, 0x0, 0x80}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0x2000000, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000480)={0x1c, 0x0, 0x0, 0x0}) socket$inet_smc(0x2b, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 2.795637785s ago: executing program 1 (id=1734): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000180)}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x8200, 0x0) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x3, 0x368}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x32}) io_uring_enter(r0, 0x48ec, 0xffffffff, 0x2, 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x100000}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000020200)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) fsopen(&(0x7f00000018c0)='dax\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) clock_gettime(0x6, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x74, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r8, {0xc, 0xfff1}, {}, {0x2, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8000}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x74}}, 0x20040054) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d5b00000200000004001a80140035006261746164763fa0893e000000000000691c316a1ce83833497cea4fb6712f510c8a223c4dcf70e0de7fb4f84623ce48d0ebef2f58aaf344952bba42f56a"], 0x38}}, 0x0) 2.575845111s ago: executing program 1 (id=1735): socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x3ff, 0x30}, 0xc) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20040091) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x1000000008, 0x10000, 0x3}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000540)="bc3009bb66682c9d4233b0cc644f5fdae5b9d17f7ada03bc77aea173022c18232e1fb162caf50d08fda40c6e9c515c4a2c7245660296c0460cbff563b781695432f5a83f5ab8979bf6fd1c17aaa22ada927f1feb5074053514edf5734d63b2b58edc", 0x62, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000280)="0200550c54f57c3271634a8429b3074ea608c6f84587b8de99fd918ed2f6fdb3e2ed38e1a6f448514c8e214dde93c03040f9edd9", 0x34, 0xfffffffffffffffd) socket(0x2, 0x80805, 0x0) getpgid(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) lseek(r4, 0x0, 0x4) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) syz_io_uring_setup(0x304, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000180), 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x2, 0x2ff7afedf}, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) 2.403156959s ago: executing program 3 (id=1736): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) r2 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff56}) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000040)={&(0x7f0000000bc0)={{@my=0x0}, {@my=0x0, 0x4000}, 0x400, "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"}, 0x418}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0xc, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xe0f, 0x0, 0x1}}, 0x40) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 2.059067901s ago: executing program 3 (id=1737): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) (async) shutdown(r0, 0x1) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000200), &(0x7f0000000080)=0x8) (async, rerun: 32) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) (rerun: 32) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, 0x0, &(0x7f0000000180)) mbind(&(0x7f00009cb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x6, 0x0) 1.680027694s ago: executing program 3 (id=1738): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0xca042) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000980)={'#! ', './file1/../file0', [{0x20, 'cgroQ\xedB\x9f\xc6\vQ\xf8~up.stat\x00\x88\xd8K\x91\x17\xb3\xe4w\x956\xf1\xce\xdcX\xf5\x03\x1a\x84\xdaj\xf8a\xc4#g\xad\x8d;xu\x16W_!m\xd0I\xe1\x98?3lA\x82\xa1. K\xa6\x9c\xcc\x02:k\x9d\xd4\x14\xb1\xdbK\xf3\x9e$\xe4\x04\x91\xc2\xf6\xc5%+r*E\xee\x9c9\xfe\xa5\xeb\xda\xa3\xfa\xdf\xbfQS\xcbxz9p\x01o\x1bm'}, {0x20, 'EY\x86\x97\x01\xa3\xa6\b\x008/\xea\xf9W\x11\xbd\x0e\xe6\xb8\x8d\x03\xca\xf0\x881\xe8 Pj4\xe9\x021\xe8\x88\x1a\x13C\xf6\xb1\xc2\x7f\x04\xc5*`b3\xe8%5\xeexZ\bii\v\xea\t\xfd\xbc\xc2\xbf?gpv5\xab\xd1W\xf0\x92\x86\x86\x05\x00\x00\x00\xaa\xb1.n\xbf\xc8\xd1\xa5\r\xc7\x04O\xde\xd3w\xe1\xdd\x11g3\x15}\xe0\xc5V\xc3\x97J\x10\x17\xd9\x1c\xf9\xfc:>\x0eN\x81*\x15\x14\xfe\xec\x1d@~\x0f9\xce\xb0\xa5\xe3\x12\x04\xef\x12\xd2J$)7/R8\x0eS\xa7\x14\xfdz\x80g\xd5\x9d\x8e{\xeb\xc9\x19\xf4\xf3k\v\xd0\xeaP\xd8p\xf4\n\xe0\x81\x9c\x9a\xd4o\xc2\xb3\xbc\xd2\x8d3\x87\f\xe1C\xb6\x8ct\x97\xeb\xe9\\\x9c\xb8bs#\xf7*\x1c\xb4g\x9d\xaa,\x97\a\x00\x00\x00\x00\x00\x00\x00\a\xdbt\xb3\x84\x98\x87$\xbc\xf8\x91\x06D\xa6\xc0\x90?J\xec@\xa3\xfd\x193\xe7\x01d\xd4\xdfP~\xa1}\x83\x12~>\x89\xcd\xf7\x9d\xbfgV\x02\xb0\x88\x9a\x17\xf2\xb2\xa5z4\xe3&Zc\n\xf4\x19U\xeb\a\xe2W\xeeU\xc6\x06\xeb\n\x045\xe7\x94Ho\xb1\x8e\x91+9\xb8=\xe2b\xc0+\xfc\xd1oz\xdd\xbdDHh\xf8\x04m\a\r$\x8f\x93\xfdw\xb4\xc5&CF$\xeb\x91\xad\x1b-\r\xbe2f\xed8R\\?O;\x01\xac\xb3\xa8\xdc\xf5\x9f]\xc2O\xda]=\r\xff8\x99\xa1\xbd\x85#\x88\xb7C\x7f\xf0\xb8f\x90>P>=\xedBQO\xeb\xbd\xa8%a\xddX\xaa\xfb1\xfc\xb9\xbb\xa2\t\x90xao\x9d\x1d.\x82g\x9b\x13\b\x84\x1d\xba?\xb7\x0elp1\x9b\xac\x8c\xaex\x7f\x12\xd6\xf1C%\xec<\xec\xeblp\xd9\x9dt\x97\xe2|8\x9aVE\xa7\xdc\xdf\xe3L\xd4N\xce\x7fbb$$,48\x12\xa0w\x8c\x90x\xddjt\x1b\x93O\xdc\x12\f\xf0\x99\xb10\xc1\xecW\xe2/\x1e\x1d\xc2C-\xdb<\x86\xe5\xd8\xfa\x9f\xd5>\x13\xf0\xb5\xa1Y\x90\x01\xbd\xbcC#\x00'/536}]}, 0x2a3) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000000002000", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x5dd]}}) 1.043534367s ago: executing program 3 (id=1739): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xfe, 0x0, 0x7ffffffe}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6}]}) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x4, 0x3, 0x0, [0x0, 0x18000000], [0x8200, 0x1]}}, 0xe}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x18603}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r2, 0x800c5011, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 860.311067ms ago: executing program 2 (id=1740): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x10, 0x713, 0x70bd27, 0x25dfdbfc, {{@in6=@mcast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e21, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0x2, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000002c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) 695.987148ms ago: executing program 4 (id=1741): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040000) socket(0x2, 0x80805, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x8, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r1, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x12}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0x1ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000001c0)="17", 0x1}, {&(0x7f0000000280)="1c2c7daad9b6220e0a0fa152b29444cdacd5495eb720067fb6a89ebdb3ce11b3ea0474c0023bfb548876aaf5019077c98cc6da9c46b9001032586bf8b89fcebfe51ecb7632ae7fef5ed108e9d89ce64d37dd720c2e92871f859716f8222d586b2b5930030b56676524be64b2884ea6490917c0ab68efb624cbbc13eb672f80f59b096b01300d61de6c602225b7b9ee249705ef57cf597276ef", 0x99}], 0x2}}], 0x2, 0x0) 650.86418ms ago: executing program 2 (id=1742): keyctl$unlink(0x9, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) getpid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = add_key(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000240)="82704670290550725830b320d38a6ba8e00fadffa22878158efab03994da5142a8349ff81ae442a29b8ea0299f46636a21bddbe475245738c1f44b77ce790137725c2d553b9cc671a8cbd4c89e1157b56ae47f600df20e130c3d38a1723d84eb4c8f48dfb3810555ec04b4a8e79f43babbe5fcceb12fb68bebe95600b3c53cec6bad864f4afc58916d099097d09eedbfb4ef028c088af11fb3b6d293b0afb14d1cc37298f48e514a4a92b5ebea1945005119fd2e3a516178fd55f9f1649ada3345c99783243f8b34ac49259977ea5fd64c41bf00f9b3fe", 0xd7, 0xfffffffffffffffc) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20080, 0x0) openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) keyctl$link(0x8, r0, 0xfffffffffffffffa) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000380)) mkdirat$cgroup(r2, &(0x7f00000000c0)='syz1\x00', 0x1ff) write$yama_ptrace_scope(r1, &(0x7f00000003c0)='0\x00', 0x2) 639.489263ms ago: executing program 3 (id=1743): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000007110bf000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) syz_open_dev$sndmidi(0x0, 0x5, 0x141101) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) close(r4) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201010200000010f3b100000000010203010902240001010330050904000801030101000921"], 0x0) mlock2(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002e000100000000000000000008000000", @ANYRES32, @ANYBLOB="b7b72caf035a10dbc1ec381d0211", @ANYRES32=0xee00, @ANYBLOB="0c0000800500010098000000"], 0x2c}], 0x1}, 0x0) 556.093584ms ago: executing program 1 (id=1744): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8050}, 0x20000040) 504.306314ms ago: executing program 1 (id=1745): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa0028000}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (rerun: 64) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 64) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0xb12}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) prctl$PR_SET_ENDIAN(0x14, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000240)={0x5, &(0x7f00000001c0)=[{0x5, 0x74, 0x1, 0x8000}, {0x1ff, 0x0, 0x2, 0x81ea}, {0x10, 0x4, 0x5, 0x8}, {0x7, 0xf0, 0x5, 0x3}, {0x2, 0x8, 0x7, 0x5}]}, 0x10) 274.191483ms ago: executing program 2 (id=1746): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x218, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x3, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7c, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x80000000, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x5, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x9, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x7, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x5, 0x7, 0x7fff, 0x5a80, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x8, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc46, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x8, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x9, 0x2, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xfffffffa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2e9, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x1, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x738, 0x1, 0x6c1b, 0x80, 0x4, 0x5, 0xb1e, 0x20000d7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000200)={0x3, @vbi={0x6, 0x8, 0x3, 0x34363248, [0x6, 0x2], [0x4, 0x38], 0x1}}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r3, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x140000, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x4) 0s ago: executing program 1 (id=1747): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffc, 0x10}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="1a", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x10000}, 0x1c) sendmmsg$sock(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="d7", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x140408c4) kernel console output (not intermixed with test programs): ct=a415, bcdDevice= 0.40 [ 453.374843][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 453.384573][ T5901] usb 6-1: Product: syz [ 453.388953][ T5901] usb 6-1: Manufacturer: syz [ 453.437797][ T5901] cdc_wdm 6-1:1.0: skipping garbage [ 453.449409][ T5901] cdc_wdm 6-1:1.0: skipping garbage [ 453.455916][T11660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1320'. [ 453.465542][ T5901] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 453.471273][T11660] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1320'. [ 453.471628][ T5901] cdc_wdm 6-1:1.0: Unknown control protocol [ 453.692390][T11664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.706296][T11664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.175782][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 454.175802][ T30] audit: type=1326 audit(1752040283.248:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11658 comm="syz.3.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61858e929 code=0x7fc00000 [ 454.210257][ T30] audit: type=1326 audit(1752040283.248:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11658 comm="syz.3.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff61858e929 code=0x7fc00000 [ 454.239800][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 454.244252][ T5959] usb 6-1: USB disconnect, device number 43 [ 454.246419][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 454.246440][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 454.267775][T11667] cdc_wdm 6-1:1.0: Tx URB error: -19 [ 454.275248][T11672] cdc_wdm 6-1:1.0: Tx URB error: -19 [ 454.283110][ T30] audit: type=1326 audit(1752040283.248:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11658 comm="syz.3.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61858e929 code=0x7fc00000 [ 454.306301][ T30] audit: type=1326 audit(1752040283.248:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11658 comm="syz.3.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61858e929 code=0x7fc00000 [ 454.425856][ T30] audit: type=1326 audit(1752040283.248:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11658 comm="syz.3.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61858e929 code=0x7fc00000 [ 454.558548][ T30] audit: type=1326 audit(1752040283.248:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11658 comm="syz.3.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61858e929 code=0x7fc00000 [ 454.804524][ T30] audit: type=1326 audit(1752040283.248:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11658 comm="syz.3.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61858e929 code=0x7fc00000 [ 454.837398][ T30] audit: type=1326 audit(1752040283.248:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11658 comm="syz.3.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61858e929 code=0x7fc00000 [ 454.939058][ T30] audit: type=1326 audit(1752040283.248:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11658 comm="syz.3.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61858e929 code=0x7fc00000 [ 455.050662][ T30] audit: type=1326 audit(1752040283.248:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11658 comm="syz.3.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61858e929 code=0x7fc00000 [ 455.935146][T11688] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1326'. [ 456.235471][ T5915] usb 2-1: USB disconnect, device number 86 [ 456.416343][T11695] xt_limit: Overflow, try lower: 0/0 [ 456.516761][ T5959] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 456.600927][T11704] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1330'. [ 456.686740][ T5959] usb 5-1: Using ep0 maxpacket: 8 [ 456.704136][ T5959] usb 5-1: config 7 has an invalid interface number: 248 but max is 1 [ 456.747974][ T5959] usb 5-1: config 7 has an invalid interface number: 240 but max is 1 [ 456.800544][ T5959] usb 5-1: config 7 has an invalid interface number: 6 but max is 1 [ 456.840122][ T5959] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 456.848160][T11709] loop2: detected capacity change from 0 to 14 [ 456.854851][ T5959] usb 5-1: config 7 has 3 interfaces, different from the descriptor's value: 2 [ 456.866419][ T5959] usb 5-1: config 7 has no interface number 0 [ 456.877127][ T5901] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 456.884800][T11709] Dev loop2: unable to read RDB block 14 [ 456.912506][T11709] loop2: AHDI p2 p3 [ 456.917024][T11709] loop2: partition table partially beyond EOD, truncated [ 456.926491][ T5959] usb 5-1: config 7 has no interface number 1 [ 456.937283][T11709] loop2: p3 start 335544320 is beyond EOD, truncated [ 456.965198][ T5959] usb 5-1: config 7 has no interface number 2 [ 456.975028][ T5959] usb 5-1: config 7 interface 240 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 456.975264][T11712] xt_hashlimit: overflow, rate too high: 0 [ 456.995078][ T5959] usb 5-1: too many endpoints for config 7 interface 6 altsetting 129: 39, using maximum allowed: 30 [ 457.034634][ T5959] usb 5-1: config 7 interface 6 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 39 [ 457.070490][ T5959] usb 5-1: config 7 interface 248 has no altsetting 0 [ 457.080292][ T5959] usb 5-1: config 7 interface 240 has no altsetting 0 [ 457.088549][ T5959] usb 5-1: config 7 interface 6 has no altsetting 0 [ 457.113174][T11712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1333'. [ 457.122358][T11712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1333'. [ 457.162069][ T5959] usb 5-1: New USB device found, idVendor=0e8d, idProduct=00a0, bcdDevice=17.72 [ 457.187560][ T5959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.203746][ T5959] usb 5-1: Product: ৒쭶푆çœî”­à¤µá¥“á¾à®»ã›¨â½åšê¼¿î•—࣊焜鱨ꮱå”ප핡뀛墕쫃இ뉑ኹᴹ鯛æ‘㜳ꟽ繰嵦∴ã³è£çŽƒâƒ»ï­êŒá§™ä¼¶ëŸ¹ï¡‘䦥៳ᤣﺋ泤磉氠ë¤ì€»ì¼è¯¦æŠ’뎉ç‰ä‘‚ﶕኰã›é³¶å“¨ê‹ç–¶é”©é™¾é¡‰åƒá‰ã²–æ·ì™€å¾¦é¼šë¦€ë¤Š [ 457.231818][ T5901] usb 2-1: device descriptor read/64, error -71 [ 457.256605][ T5959] usb 5-1: Manufacturer: Ж [ 457.261465][ T5959] usb 5-1: SerialNumber: à ’ [ 457.495226][ T5959] option 5-1:7.248: GSM modem (1-port) converter detected [ 457.566778][ T5901] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 457.616242][ T5959] usb 5-1: USB disconnect, device number 101 [ 457.779833][ T5959] option 5-1:7.248: device disconnected [ 457.887931][ T5901] usb 2-1: device descriptor read/64, error -71 [ 458.008426][ T5901] usb usb2-port1: attempt power cycle [ 458.181489][T11729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1337'. [ 458.372682][ T5901] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 458.413762][ T5901] usb 2-1: device descriptor read/8, error -71 [ 458.497038][T11735] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1338'. [ 458.692859][ T5901] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 458.738770][ T5901] usb 2-1: device descriptor read/8, error -71 [ 458.857826][ T5901] usb usb2-port1: unable to enumerate USB device [ 458.890919][ T889] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 459.119068][ T889] usb 3-1: Using ep0 maxpacket: 16 [ 459.137428][ T889] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.152656][ T889] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 459.185597][ T889] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 459.196229][ T889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.236801][ T889] usb 3-1: Product: syz [ 459.289521][ T889] usb 3-1: Manufacturer: syz [ 459.405886][ T889] usb 3-1: SerialNumber: syz [ 459.415503][ T889] usb 3-1: config 0 descriptor?? [ 459.469061][ T49] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 459.633724][ T49] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 459.650596][ T49] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 459.673425][ T49] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 459.800132][ T49] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 459.817345][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.825720][ T49] usb 4-1: Product: syz [ 459.838840][ T49] usb 4-1: Manufacturer: syz [ 459.843560][ T49] usb 4-1: SerialNumber: syz [ 459.902443][T11744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.920300][T11744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.068659][T11741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.090434][T11741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.149133][ T49] usb 4-1: 0:2 : does not exist [ 460.174712][ T49] usb 4-1: USB disconnect, device number 108 [ 460.572808][T11757] dummy0: left allmulticast mode [ 460.593780][T11757] dummy0: left promiscuous mode [ 460.601651][T11757] bridge0: port 3(dummy0) entered disabled state [ 460.637051][T11757] bridge_slave_0: left allmulticast mode [ 460.644893][T11757] bridge_slave_0: left promiscuous mode [ 460.667724][T11757] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.683394][T11757] bridge_slave_1: left allmulticast mode [ 460.720632][T11757] bridge_slave_1: left promiscuous mode [ 460.729428][T11760] netlink: 'syz.5.1343': attribute type 10 has an invalid length. [ 460.739378][T11757] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.782225][T11757] bond0: (slave bond_slave_0): Releasing backup interface [ 460.796491][T11757] bond0: (slave bond_slave_1): Releasing backup interface [ 460.830197][T11757] team0: Failed to send options change via netlink (err -105) [ 460.839455][T11757] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 460.850879][T11757] team0: Port device team_slave_0 removed [ 460.864500][T11757] team0: Failed to send options change via netlink (err -105) [ 460.875289][T11757] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 460.909062][T11757] team0: Port device team_slave_1 removed [ 460.943292][T11757] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.952217][T11757] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.964940][T11757] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.973820][T11757] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.165746][T11757] bond2: (slave gretap1): Releasing active interface [ 461.276612][T11757] team0: Failed to send options change via netlink (err -105) [ 461.284809][T11757] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 461.295310][T11757] team0: Port device batadv1 removed [ 461.398513][T11760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.407364][T11760] team0: Failed to send port change of device bond0 via netlink (err -105) [ 461.426727][T11760] team0: Failed to send options change via netlink (err -105) [ 461.434348][T11760] team0: Port device bond0 added [ 461.637315][T11777] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1348'. [ 462.010984][ T49] usb 3-1: USB disconnect, device number 102 [ 462.078684][ T889] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 462.237968][T11788] fuse: Unknown parameter '‘$F§ö™9DÔa°n¥k' ÒAÉߦËm@â÷Ga])C˜ß¸§Q]ÿ[£í¡€"9ÈLÎÃWcrrw_•Z“0Å_)Mæ{¢aãiÝòHp$ã½Oîò|ø[ŸSÊy…æ/μyÄöt!ßš%ˆL+ÑN̈Lä1¹jp]­nT¦˜Þ¬Út%¼H²' [ 462.286672][ T889] usb 5-1: Using ep0 maxpacket: 16 [ 462.293315][ T889] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 462.302666][ T889] usb 5-1: config 1 has an invalid descriptor of length 175, skipping remainder of the config [ 462.318323][ T889] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 462.432880][ T889] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 462.467984][ T889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.490803][ T889] usb 5-1: Product: syz [ 462.498442][ T889] usb 5-1: Manufacturer: syz [ 462.508887][ T889] usb 5-1: SerialNumber: syz [ 462.676570][T11800] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1353'. [ 463.515400][T11814] libceph: resolve '. [ 463.515400][T11814] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 463.515400][T11814] ' (ret=-3): failed [ 463.676685][ T889] usb 3-1: new low-speed USB device number 103 using dummy_hcd [ 463.774915][T11817] loop2: detected capacity change from 0 to 7 [ 463.784016][ T5959] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 463.792013][T11817] loop2: p1 [ 463.795528][T11817] loop2: partition table partially beyond EOD, truncated [ 463.803750][T11817] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 463.828520][ T889] usb 3-1: config 0 has an invalid interface number: 62 but max is 0 [ 463.844448][ T889] usb 3-1: config 0 has no interface number 0 [ 463.864807][ T889] usb 3-1: config 0 interface 62 has no altsetting 0 [ 463.886380][ T889] usb 3-1: New USB device found, idVendor=12d1, idProduct=1417, bcdDevice= 0.00 [ 463.891706][ T5844] udevd[5844]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 463.907811][ T889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.920613][ T889] usb 3-1: config 0 descriptor?? [ 463.956755][ T5959] usb 2-1: Using ep0 maxpacket: 16 [ 463.975814][ T5959] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.001273][ T5959] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.021652][ T5959] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 464.040145][ T5959] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 464.049503][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.063070][ T5959] usb 2-1: config 0 descriptor?? [ 464.133755][ T889] usb 3-1: string descriptor 0 read error: -71 [ 464.160292][ T889] usb-storage 3-1:0.62: USB Mass Storage device detected [ 464.252834][ T889] usb 3-1: USB disconnect, device number 103 [ 464.396671][ T49] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 464.476333][ T5959] usbhid 2-1:0.0: can't add hid device: -71 [ 464.485918][ T5959] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 464.499613][ T5959] usb 2-1: USB disconnect, device number 91 [ 464.566599][ T49] usb 4-1: Using ep0 maxpacket: 16 [ 464.573412][ T49] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.586022][ T49] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 464.600899][ T49] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 464.610210][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.618409][ T49] usb 4-1: Product: syz [ 464.622676][ T49] usb 4-1: Manufacturer: syz [ 464.627438][ T49] usb 4-1: SerialNumber: syz [ 464.640731][ T5930] usb 5-1: USB disconnect, device number 102 [ 464.663404][ T49] usb 4-1: config 0 descriptor?? [ 464.865929][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 464.865947][ T30] audit: type=1326 audit(1752040293.948:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11833 comm="syz.2.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5378e929 code=0x7ffc0000 [ 464.903779][ T30] audit: type=1326 audit(1752040293.948:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11833 comm="syz.2.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5378e929 code=0x7ffc0000 [ 465.026664][ T30] audit: type=1326 audit(1752040293.948:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11833 comm="syz.2.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0d5378d290 code=0x7ffc0000 [ 465.049183][ C1] vkms_vblank_simulate: vblank timer overrun [ 465.080476][T11840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.097054][T11840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.113526][T11835] usb usb8: usbfs: process 11835 (syz.2.1363) did not claim interface 0 before use [ 465.125702][T11834] usb usb8: usbfs: process 11834 (syz.2.1363) did not claim interface 0 before use [ 465.155268][T11835] loop6: detected capacity change from 0 to 128 [ 465.170890][ T30] audit: type=1326 audit(1752040293.948:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11833 comm="syz.2.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5378e929 code=0x7ffc0000 [ 465.287625][T11842] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1364'. [ 465.345193][ T30] audit: type=1326 audit(1752040293.948:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11833 comm="syz.2.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f0d5378e929 code=0x7ffc0000 [ 465.367533][ C1] vkms_vblank_simulate: vblank timer overrun [ 465.407206][ T30] audit: type=1326 audit(1752040293.948:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11833 comm="syz.2.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5378e929 code=0x7ffc0000 [ 465.429776][ C1] vkms_vblank_simulate: vblank timer overrun [ 465.436221][ T30] audit: type=1326 audit(1752040293.958:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11833 comm="syz.2.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0d5378e929 code=0x7ffc0000 [ 465.458945][ T30] audit: type=1326 audit(1752040293.958:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11833 comm="syz.2.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5378e929 code=0x7ffc0000 [ 465.481369][ C1] vkms_vblank_simulate: vblank timer overrun [ 465.488976][ T30] audit: type=1326 audit(1752040293.958:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11833 comm="syz.2.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5378e929 code=0x7ffc0000 [ 465.516958][ T30] audit: type=1326 audit(1752040293.988:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11833 comm="syz.2.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0d5378d290 code=0x7ffc0000 [ 465.685683][T11848] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1365'. [ 466.038127][T11842] bond0 (unregistering): Released all slaves [ 466.216786][ T889] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 466.394997][ T889] usb 6-1: Using ep0 maxpacket: 32 [ 466.437844][ T889] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 466.446121][ T889] usb 6-1: config 0 has no interface number 0 [ 466.456587][ T889] usb 6-1: config 0 interface 12 has no altsetting 0 [ 466.498025][ T889] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 466.507320][ T889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.519094][ T889] usb 6-1: Product: syz [ 466.523281][ T889] usb 6-1: Manufacturer: syz [ 466.528298][ T889] usb 6-1: SerialNumber: syz [ 466.560170][ T5930] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 466.584621][ T889] usb 6-1: config 0 descriptor?? [ 466.612873][T11857] loop2: detected capacity change from 0 to 7 [ 466.622358][T11857] loop2: p1 [ 466.630388][T11857] loop2: partition table partially beyond EOD, truncated [ 466.643228][T11857] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 466.738741][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 466.760932][ T5930] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 466.824782][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.865571][ T6704] udevd[6704]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 466.885713][ T5930] usb 2-1: config 0 descriptor?? [ 466.894462][T11855] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 467.096769][ T5901] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 467.164099][T11861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.318032][T11861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.397085][ T5901] usb 5-1: Using ep0 maxpacket: 16 [ 467.407975][ T5930] usbhid 2-1:0.0: can't add hid device: -71 [ 467.409080][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.414002][ T5930] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 467.470035][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.538775][ T5901] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 467.572063][ T5901] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 467.577732][ T5930] usb 2-1: USB disconnect, device number 92 [ 467.640322][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.640857][ T5976] usb 4-1: USB disconnect, device number 109 [ 467.706327][ T5901] usb 5-1: config 0 descriptor?? [ 468.064939][ T5930] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 468.197274][ T5930] usb 2-1: device descriptor read/64, error -71 [ 468.223243][T11884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.233436][T11884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.551223][ T5901] usbhid 5-1:0.0: can't add hid device: -71 [ 468.553766][ T5930] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 468.598615][ T5901] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 468.677087][ T5915] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 468.695419][ T889] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 468.722508][ T889] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 468.724206][ T5930] usb 2-1: device descriptor read/64, error -71 [ 468.734816][ T5901] usb 5-1: USB disconnect, device number 103 [ 468.743288][ T889] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 468.779739][ T889] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 468.860582][ T889] usb 6-1: USB disconnect, device number 44 [ 468.887077][ T5930] usb usb2-port1: attempt power cycle [ 468.946940][ T5915] usb 3-1: Using ep0 maxpacket: 16 [ 469.033561][T11887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1376'. [ 469.496694][ T5930] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 469.557607][ T5930] usb 2-1: device descriptor read/8, error -71 [ 470.012933][ T5959] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 470.021872][ T5930] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 470.068998][ T5930] usb 2-1: device descriptor read/8, error -71 [ 470.186682][ T5959] usb 5-1: Using ep0 maxpacket: 16 [ 470.192873][ T5930] usb usb2-port1: unable to enumerate USB device [ 470.206381][ T5959] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 470.222757][ T5959] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.234313][ T5959] usb 5-1: config 0 has no interface number 0 [ 470.243110][ T5959] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 470.252738][ T5959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.263380][ T5959] usb 5-1: Product: syz [ 470.268584][ T5959] usb 5-1: Manufacturer: syz [ 470.357102][ T5959] usb 5-1: SerialNumber: syz [ 470.435790][T11906] netlink: 'syz.5.1381': attribute type 3 has an invalid length. [ 470.640805][ T5959] usb 5-1: config 0 descriptor?? [ 470.667715][ T5959] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 470.710988][ T5959] usb 5-1: No valid video chain found. [ 471.346747][ T889] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 471.558581][ T889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.624067][ T889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.681094][ T889] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 471.771998][ T889] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 471.787858][ T5915] usb 3-1: unable to get BOS descriptor or descriptor too short [ 471.797467][ T889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.806180][ T5915] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 471.818929][ T5915] usb 3-1: can't read configurations, error -71 [ 471.831072][ T889] usb 2-1: config 0 descriptor?? [ 472.082831][T11921] netlink: 'syz.5.1387': attribute type 1 has an invalid length. [ 472.225969][T11921] 8021q: adding VLAN 0 to HW filter on device bond3 [ 472.388666][T11929] bond3: (slave veth3): Enslaving as an active interface with a down link [ 472.473298][ T889] usbhid 2-1:0.0: can't add hid device: -71 [ 472.480884][ T889] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 472.502023][T11930] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 472.521051][ T889] usb 2-1: USB disconnect, device number 97 [ 472.572224][T11921] vlan2: entered allmulticast mode [ 472.585129][T11921] veth1: entered allmulticast mode [ 472.601429][T11921] veth1: entered promiscuous mode [ 472.619538][T11921] veth1: left promiscuous mode [ 472.630912][T11921] bond3: (slave vlan2): making interface the new active one [ 472.655288][ T5930] usb 5-1: USB disconnect, device number 104 [ 472.678057][T11921] veth1: entered promiscuous mode [ 472.683861][T11921] vlan2: entered promiscuous mode [ 472.703137][T11921] bond3: (slave vlan2): Enslaving as an active interface with an up link [ 473.063457][T11952] loop2: detected capacity change from 0 to 7 [ 473.074286][T11952] loop2: p1 [ 473.087646][T11952] loop2: partition table partially beyond EOD, truncated [ 473.096042][T11952] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 473.200290][ T5844] udevd[5844]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 473.716456][T11971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1401'. [ 474.286603][ T5959] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 474.446980][ T5959] usb 3-1: Using ep0 maxpacket: 8 [ 474.456482][ T5959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 474.470516][ T5959] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 474.484673][ T5959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.486651][ T5915] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 474.514952][ T5959] usb 3-1: config 0 descriptor?? [ 474.689650][T11991] FAULT_INJECTION: forcing a failure. [ 474.689650][T11991] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 474.716433][ T5915] usb 2-1: Using ep0 maxpacket: 16 [ 474.722615][T11991] CPU: 1 UID: 0 PID: 11991 Comm: syz.3.1406 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 474.722643][T11991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 474.722668][T11991] Call Trace: [ 474.722680][T11991] [ 474.722690][T11991] dump_stack_lvl+0x189/0x250 [ 474.722720][T11991] ? __pfx____ratelimit+0x10/0x10 [ 474.722751][T11991] ? __pfx_dump_stack_lvl+0x10/0x10 [ 474.722774][T11991] ? __pfx__printk+0x10/0x10 [ 474.722814][T11991] should_fail_ex+0x414/0x560 [ 474.722848][T11991] _copy_to_user+0x31/0xb0 [ 474.722875][T11991] simple_read_from_buffer+0xe1/0x170 [ 474.722905][T11991] proc_fail_nth_read+0x1df/0x250 [ 474.722937][T11991] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 474.722968][T11991] ? rw_verify_area+0x258/0x650 [ 474.722990][T11991] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 474.723025][T11991] vfs_read+0x200/0x980 [ 474.723053][T11991] ? __pfx___mutex_lock+0x10/0x10 [ 474.723074][T11991] ? __pfx_vfs_read+0x10/0x10 [ 474.723098][T11991] ? __fget_files+0x2a/0x420 [ 474.723129][T11991] ? __fget_files+0x3a0/0x420 [ 474.723153][T11991] ? __fget_files+0x2a/0x420 [ 474.723188][T11991] ksys_read+0x145/0x250 [ 474.723214][T11991] ? __pfx_ksys_read+0x10/0x10 [ 474.723243][T11991] ? do_syscall_64+0xbe/0x3b0 [ 474.723267][T11991] do_syscall_64+0xfa/0x3b0 [ 474.723285][T11991] ? lockdep_hardirqs_on+0x9c/0x150 [ 474.723313][T11991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.723334][T11991] ? clear_bhb_loop+0x60/0xb0 [ 474.723358][T11991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.723382][T11991] RIP: 0033:0x7ff61858d33c [ 474.723402][T11991] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 474.723419][T11991] RSP: 002b:00007ff619487030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 474.723441][T11991] RAX: ffffffffffffffda RBX: 00007ff6187b6160 RCX: 00007ff61858d33c [ 474.723456][T11991] RDX: 000000000000000f RSI: 00007ff6194870a0 RDI: 0000000000000009 [ 474.723469][T11991] RBP: 00007ff619487090 R08: 0000000000000000 R09: 0000000000000000 [ 474.723482][T11991] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 474.723494][T11991] R13: 0000000000000000 R14: 00007ff6187b6160 R15: 00007ff6188dfa28 [ 474.723526][T11991] [ 474.725005][ T5915] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.751741][ T5959] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 474.763047][ T5915] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.903916][ C1] vkms_vblank_simulate: vblank timer overrun [ 475.082690][ T5915] usb 2-1: config 0 interface 0 has no altsetting 0 [ 475.096717][ T5915] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 475.131919][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.175567][ T5915] usb 2-1: config 0 descriptor?? [ 475.764524][ T5915] cougar 0003:060B:500A.0021: unexpected long global item [ 475.766664][ T5959] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 475.818731][ T5915] cougar 0003:060B:500A.0021: parse failed [ 475.824769][ T5915] cougar 0003:060B:500A.0021: probe with driver cougar failed with error -22 [ 475.930982][ T5930] usb 2-1: USB disconnect, device number 98 [ 475.938185][ T5959] usb 5-1: Using ep0 maxpacket: 16 [ 475.959552][ T5959] usb 5-1: config 0 has an invalid interface number: 80 but max is 0 [ 475.980647][ T5959] usb 5-1: config 0 has no interface number 0 [ 475.991119][ T5959] usb 5-1: config 0 interface 80 altsetting 254 has an invalid descriptor for endpoint zero, skipping [ 476.017893][ T5959] usb 5-1: config 0 interface 80 altsetting 254 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 476.049221][ T5959] usb 5-1: config 0 interface 80 altsetting 254 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 476.072991][ T5959] usb 5-1: config 0 interface 80 altsetting 254 has a duplicate endpoint with address 0x1, skipping [ 476.097103][ T5959] usb 5-1: config 0 interface 80 altsetting 254 bulk endpoint 0xB has invalid maxpacket 1024 [ 476.126772][ T5959] usb 5-1: config 0 interface 80 altsetting 254 bulk endpoint 0x8 has invalid maxpacket 1024 [ 476.142483][ T5959] usb 5-1: config 0 interface 80 altsetting 254 has a duplicate endpoint with address 0x4, skipping [ 476.174014][ T5959] usb 5-1: config 0 interface 80 has no altsetting 0 [ 476.206666][ T5959] usb 5-1: New USB device found, idVendor=1199, idProduct=6804, bcdDevice=e8.f8 [ 476.215752][ T5959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.258520][ T5959] usb 5-1: Product: syz [ 476.263088][ T5959] usb 5-1: Manufacturer: syz [ 476.280050][ T5959] usb 5-1: SerialNumber: syz [ 476.292185][ T5959] usb 5-1: config 0 descriptor?? [ 476.308266][T12006] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 476.319537][T12006] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 476.341789][ T5959] sierra 5-1:0.80: Sierra USB modem converter detected [ 476.591228][T12006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.618972][T12006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.691069][ T5959] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 476.740375][ T5959] usb 5-1: Sierra USB modem converter now attached to ttyUSB1 [ 476.799736][ T5959] usb 5-1: Sierra USB modem converter now attached to ttyUSB2 [ 476.932075][ T5930] usb 3-1: USB disconnect, device number 106 [ 476.951146][ T5959] usb 5-1: USB disconnect, device number 105 [ 477.071960][ T5959] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 477.157157][ T5915] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 477.194328][ T5959] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 477.288364][ T5959] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 477.326737][ T5915] usb 2-1: Using ep0 maxpacket: 16 [ 477.328314][ T5959] sierra 5-1:0.80: device disconnected [ 477.358425][ T5915] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 477.394318][ T5915] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 477.427961][ T5915] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 477.471348][ T5915] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 477.489270][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.534110][ T5915] usb 2-1: Product: syz [ 477.563577][ T5915] usb 2-1: Manufacturer: syz [ 477.579203][ T5915] usb 2-1: SerialNumber: syz [ 477.620811][T12052] futex_wake_op: syz.5.1425 tries to shift op by -1; fix this program [ 477.755712][T12057] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1426'. [ 477.803746][ T49] hid-generic 00A0:0008:0003.0022: unknown main item tag 0x7 [ 477.822415][T12057] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1426'. [ 477.824891][ T49] hid-generic 00A0:0008:0003.0022: item fetching failed at offset 14/15 [ 477.867119][ T49] hid-generic 00A0:0008:0003.0022: probe with driver hid-generic failed with error -22 [ 477.906905][T12057] netlink: 492 bytes leftover after parsing attributes in process `syz.4.1426'. [ 478.045043][ T5915] usb 2-1: 0:2 : does not exist [ 478.674874][T12073] loop2: detected capacity change from 0 to 7 [ 478.723071][T12073] loop2: p4 [ 478.738363][T12073] loop2: partition table partially beyond EOD, truncated [ 478.757667][ T5915] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 478.794375][ T5915] usb 2-1: USB disconnect, device number 99 [ 478.828329][ T5959] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 478.836766][ T5930] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 478.853554][T12073] loop2: p4 size 4294967295 extends beyond EOD, truncated [ 478.871428][ T6704] udevd[6704]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 478.955650][ T5844] udevd[5844]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 479.006827][ T5976] usb 6-1: new low-speed USB device number 45 using dummy_hcd [ 479.016702][ T5959] usb 3-1: Using ep0 maxpacket: 16 [ 479.059447][ T5930] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 479.088142][ T5959] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 479.159923][ T5930] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 479.170439][T12078] ptrace attach of "./syz-executor exec"[5863] was attempted by "./syz-executor exec"[12078] [ 479.183497][ T5959] usb 3-1: config 0 has no interface number 0 [ 479.197984][ T5959] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 479.211227][ T5959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.220163][ T5930] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0119, bcdDevice= 0.40 [ 479.233664][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.245026][ T5959] usb 3-1: Product: syz [ 479.255184][ T5930] usb 5-1: Product: syz [ 479.261149][ T5976] usb 6-1: config 6 has an invalid interface number: 137 but max is 0 [ 479.277880][ T5959] usb 3-1: Manufacturer: syz [ 479.318716][ T5930] usb 5-1: Manufacturer: syz [ 479.323749][ T5976] usb 6-1: config 6 has no interface number 0 [ 479.336572][ T5959] usb 3-1: SerialNumber: syz [ 479.396902][ T5930] usb 5-1: SerialNumber: syz [ 479.406205][ T5976] usb 6-1: config 6 interface 137 has no altsetting 0 [ 479.425964][ T5959] usb 3-1: config 0 descriptor?? [ 479.441809][ T5959] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 479.459928][ T5976] usb 6-1: string descriptor 0 read error: -22 [ 479.467060][ T5976] usb 6-1: New USB device found, idVendor=19d2, idProduct=0042, bcdDevice=22.a4 [ 479.487912][ T5976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.643586][ T5959] gspca_spca1528: reg_w err -71 [ 479.726157][ T5930] usb 5-1: cannot find UAC_HEADER [ 479.748590][ T5959] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 479.912069][ T5959] usb 3-1: USB disconnect, device number 107 [ 479.921498][ T5930] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 480.000068][ T5930] usb 5-1: USB disconnect, device number 107 [ 480.065957][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 480.279395][ T889] usb 6-1: USB disconnect, device number 45 [ 480.311411][T12086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1434'. [ 480.998042][T12094] netlink: 209588 bytes leftover after parsing attributes in process `syz.4.1435'. [ 481.381021][T12111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1438'. [ 481.437027][T12111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1438'. [ 481.454115][T12111] netlink: 'syz.4.1438': attribute type 12 has an invalid length. [ 481.474792][ T5915] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 481.643611][ T5915] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 481.681897][ T5915] usb 6-1: config 0 has no interface number 0 [ 481.693020][ T5915] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.721255][ T889] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 481.736592][ T5915] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.792529][ T5915] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 481.851891][ T5915] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 481.886627][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.905511][ T889] usb 2-1: device descriptor read/64, error -71 [ 481.923075][ T5915] usb 6-1: config 0 descriptor?? [ 482.076778][ T5959] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 482.156877][ T889] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 482.236664][ T5959] usb 5-1: Using ep0 maxpacket: 8 [ 482.245899][ T5959] usb 5-1: config 2 has an invalid interface number: 70 but max is 1 [ 482.259574][ T5959] usb 5-1: config 2 has an invalid descriptor of length 132, skipping remainder of the config [ 482.270397][ T5959] usb 5-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 482.279475][ T5959] usb 5-1: config 2 has no interface number 0 [ 482.285839][ T5959] usb 5-1: config 2 interface 70 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 482.299848][ T5959] usb 5-1: config 2 interface 70 has no altsetting 0 [ 482.303076][ T889] usb 2-1: device descriptor read/64, error -71 [ 482.310416][ T5959] usb 5-1: New USB device found, idVendor=2040, idProduct=9580, bcdDevice=ee.e4 [ 482.416790][ T5959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.417131][ T889] usb usb2-port1: attempt power cycle [ 482.425440][ T5959] usb 5-1: Product: Й [ 482.435333][ T5959] usb 5-1: Manufacturer: â­¿â°¼å¸ì”°ã¼³ï¶äµ‚꤫삨ᣊ뛹衸妘횑괎é¤è•„ä¡œÛ䤺ᮟ虚﬈蚅檲秲脽弡뉴₣촗ᴳ櫤⥣╈㫉阯Ӫ䧔쮰笫ᥠꜭ⃬璆劈춃뼇苭ᶘ⫚íŒì“㎾쾰穥喀ᮿ௅쳢髜瞷覜å»á•°ê ˜á‹»ë¥´á œë›¦ê¬¼ã ®ê‡·é°’闉迂匣댊åšç¤µæˆ·ì‰­ï½–à¨â—¥èž¥ç…¦îŽà§îƒ·ïŸá¿™ã¼½ì躴㎣⭗휔踤톡࿾놔å–å‹ä“žâ¸è¦†ì¥­ç‰Ÿç³à¤ã­…ﹶᚩᢛéšè„“è©ç » [ 482.477634][ T5959] usb 5-1: SerialNumber: ဌ [ 482.637265][T12104] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.646419][T12104] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.655241][T12104] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.664198][T12104] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.702428][ T5915] input: HID 28bd:0042 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0042.0023/input/input52 [ 482.752078][ T5959] dvb-usb: found a 'Hauppauge Nova-TD Stick/Elgato Eye-TV Diversity' in cold state, will try to load a firmware [ 482.794962][ T5959] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 482.805655][ T5959] dib0700: firmware download failed at 7 with -22 [ 482.832626][ T5959] usb 5-1: USB disconnect, device number 108 [ 482.890979][ T889] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 482.925981][T12104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.947078][T12104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.968800][ T5915] input: HID 28bd:0042 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0042.0023/input/input53 [ 483.019958][ T889] usb 2-1: device descriptor read/8, error -71 [ 483.058126][ T5915] uclogic 0003:28BD:0042.0023: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.5-1/input1 [ 483.186629][ T5915] usb 6-1: USB disconnect, device number 46 [ 483.306651][ T889] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 483.344650][T12128] fido_id[12128]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 483.380842][ T889] usb 2-1: device descriptor read/8, error -71 [ 483.507424][ T889] usb usb2-port1: unable to enumerate USB device [ 483.697998][T12142] futex_wake_op: syz.2.1447 tries to shift op by -1; fix this program [ 483.841789][ T5915] hid-generic 00A0:0008:0003.0024: unknown main item tag 0x7 [ 483.856762][ T5930] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 483.906864][ T5915] hid-generic 00A0:0008:0003.0024: item fetching failed at offset 14/15 [ 483.915817][ T5915] hid-generic 00A0:0008:0003.0024: probe with driver hid-generic failed with error -22 [ 483.934574][T12148] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 484.036592][ T5930] usb 4-1: Using ep0 maxpacket: 16 [ 484.044049][ T5930] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 484.058027][ T5930] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 484.128270][ T5930] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 484.141589][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.160102][ T5930] usb 4-1: Product: syz [ 484.170233][ T5930] usb 4-1: Manufacturer: syz [ 484.181058][ T5930] usb 4-1: SerialNumber: syz [ 484.229415][ T5959] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 484.356666][ T5915] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 484.404892][ T5959] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 484.427134][ T13] vlan2: left promiscuous mode [ 484.436659][ T5959] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 484.463358][ T5930] usb 4-1: 0:2 : does not exist [ 484.489323][T12163] netlink: 'syz.1.1451': attribute type 10 has an invalid length. [ 484.527381][ T5959] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 484.557384][ T5915] usb 6-1: Using ep0 maxpacket: 16 [ 484.581050][ T5930] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 484.592437][ T5915] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 484.617853][ T5915] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 484.619160][ T5959] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 484.637741][ T5915] usb 6-1: config 0 has no interface number 0 [ 484.661418][ T5915] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 484.682119][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.701876][ T5915] usb 6-1: Product: syz [ 484.706068][ T5915] usb 6-1: Manufacturer: syz [ 484.711015][ T5915] usb 6-1: SerialNumber: syz [ 484.722603][T12168] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 484.732756][ T5915] usb 6-1: config 0 descriptor?? [ 484.759797][ T5930] usb 4-1: USB disconnect, device number 110 [ 484.766026][ T5959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.801718][ T5959] usb 5-1: Product: syz [ 484.813539][ T5959] usb 5-1: Manufacturer: syz [ 484.830083][ T5959] usb 5-1: SerialNumber: syz [ 484.867707][ T5915] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 484.893309][ T5915] usb 6-1: No valid video chain found. [ 484.927164][ T5959] hub 5-1:1.0: bad descriptor, ignoring hub [ 485.094956][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 485.118330][ T5930] usb 6-1: USB disconnect, device number 47 [ 485.154992][ T5959] hub 5-1:1.0: probe with driver hub failed with error -5 [ 485.196261][ T5959] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 109 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 485.851554][ T5915] usb 3-1: new low-speed USB device number 108 using dummy_hcd [ 485.928273][T12137] usb 5-1: reset high-speed USB device number 109 using dummy_hcd [ 485.976769][T12184] syz_tun: entered allmulticast mode [ 486.023886][T12183] syz_tun: left allmulticast mode [ 486.038518][ T5915] usb 3-1: config 6 has an invalid interface number: 137 but max is 0 [ 486.062061][ T5915] usb 3-1: config 6 has no interface number 0 [ 486.076835][ T5915] usb 3-1: config 6 interface 137 has no altsetting 0 [ 486.104222][ T5915] usb 3-1: string descriptor 0 read error: -22 [ 486.114877][ T5915] usb 3-1: New USB device found, idVendor=19d2, idProduct=0042, bcdDevice=22.a4 [ 486.124519][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.356695][ T5930] usb 2-1: new full-speed USB device number 104 using dummy_hcd [ 486.396062][ T5959] usb 3-1: USB disconnect, device number 108 [ 486.559497][ T5930] usb 2-1: unable to get BOS descriptor or descriptor too short [ 486.594588][ T5930] usb 2-1: not running at top speed; connect to a high speed hub [ 486.605354][ T5930] usb 2-1: config 5 has an invalid interface number: 246 but max is 0 [ 486.624166][ T5930] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 486.644790][ T5930] usb 2-1: config 5 has no interface number 0 [ 486.655253][ T5930] usb 2-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 486.674595][ T5930] usb 2-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 486.688211][ T5930] usb 2-1: config 5 interface 246 has no altsetting 0 [ 486.720062][ T5930] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 486.746116][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.767207][ T5930] usb 2-1: Product: syz [ 486.779740][ T5930] usb 2-1: Manufacturer: syz [ 486.791270][ T5930] usb 2-1: SerialNumber: syz [ 487.006664][ T5915] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 487.029057][ T5930] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 487.042457][T12201] x_tables: unsorted underflow at hook 4 [ 487.044545][ T5943] usb 2-1: Failed to submit usb control message: -71 [ 487.056142][ T5930] usb 2-1: USB disconnect, device number 104 [ 487.085397][ T5943] usb 2-1: unable to send the bmi data to the device: -71 [ 487.102565][ T5943] usb 2-1: unable to get target info from device [ 487.112032][ T5943] usb 2-1: could not get target info (-71) [ 487.120397][ T5943] usb 2-1: could not probe fw (-71) [ 487.230848][ T5915] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 487.242567][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.265161][ T5915] usb 6-1: config 0 descriptor?? [ 487.278936][ T5915] cp210x 6-1:0.0: cp210x converter detected [ 487.437573][ T10] usb 5-1: USB disconnect, device number 109 [ 487.473680][ T10] usblp0: removed [ 487.497271][ T889] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 487.586666][ T5901] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 487.667596][ T889] usb 4-1: device descriptor read/64, error -71 [ 487.777827][ T5901] usb 3-1: Using ep0 maxpacket: 8 [ 487.805012][ T5901] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 16 [ 487.826374][ T5901] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 16 [ 487.857907][ T5901] usb 3-1: config 1 interface 0 has no altsetting 0 [ 487.872839][ T5901] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 487.891185][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.899940][ T5901] usb 3-1: Product: 㤻㦠ᚠ[ 487.909704][ T889] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 487.930087][ T5901] usb 3-1: Manufacturer: ㈹촩ë£æµ²ì®ºå–—è°©ì眔殓ï…î´â”Ÿæ‚ºá£’ï¬ãŒ±åŒºã–Žã¨°å˜³é¢Žå‰¾ãŒ±à­¿ï¶± [ 487.954506][ T5901] usb 3-1: SerialNumber: Й [ 487.980945][T12212] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 487.988290][T12212] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 488.056787][ T889] usb 4-1: device descriptor read/64, error -71 [ 488.167178][ T889] usb usb4-port1: attempt power cycle [ 488.406640][ T10] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 488.516781][ T889] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 488.546748][ T10] usb 5-1: device descriptor read/64, error -71 [ 488.582097][ T889] usb 4-1: device descriptor read/8, error -71 [ 488.786814][ T10] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 488.846820][ T889] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 488.886722][ T5959] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 488.915781][ T889] usb 4-1: device descriptor read/8, error -71 [ 488.927578][ T10] usb 5-1: device descriptor read/64, error -71 [ 488.977291][ T5901] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 109 if 0 alt 5 proto 1 vid 0x0525 pid 0xA4A8 [ 489.022394][ T5901] usb 3-1: USB disconnect, device number 109 [ 489.037423][ T10] usb usb5-port1: attempt power cycle [ 489.059076][ T889] usb usb4-port1: unable to enumerate USB device [ 489.071384][ T5959] usb 2-1: config 0 has no interfaces? [ 489.080079][ T5959] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 489.092796][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.108484][ T5901] usblp0: removed [ 489.110890][ T5959] usb 2-1: Product: syz [ 489.126750][ T5959] usb 2-1: Manufacturer: syz [ 489.151724][ T5959] usb 2-1: SerialNumber: syz [ 489.174493][ T5959] usb 2-1: config 0 descriptor?? [ 489.396932][ T10] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 489.427266][ T10] usb 5-1: device descriptor read/8, error -71 [ 489.726742][ T10] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 489.757338][ T10] usb 5-1: device descriptor read/8, error -71 [ 489.808676][ T5915] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 489.837372][ T5915] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 489.860681][ T5915] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 489.877161][ T10] usb usb5-port1: unable to enumerate USB device [ 489.892381][ T5915] usb 6-1: cp210x converter now attached to ttyUSB0 [ 489.940808][ T5915] usb 6-1: USB disconnect, device number 48 [ 489.952537][ T5915] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 489.991917][ T5915] cp210x 6-1:0.0: device disconnected [ 490.001414][T12237] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1471'. [ 490.208883][T12242] netlink: 'syz.3.1472': attribute type 10 has an invalid length. [ 490.369578][T12242] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 491.276634][ T5959] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 491.450303][ T5959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.461600][ T5959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.474301][ T5959] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 491.492923][ T5959] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 491.503531][ T5959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.519766][ T5959] usb 3-1: config 0 descriptor?? [ 491.673862][ T10] usb 2-1: USB disconnect, device number 105 [ 491.949594][ T5959] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x6 [ 492.175040][ T5959] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 492.198893][T12255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.237137][T12255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.288885][T12255] binder: 12253:12255 unknown command 0 [ 492.336662][T12255] binder: 12253:12255 ioctl c0306201 200000000080 returned -22 [ 492.769073][T12294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.823205][T12294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.996626][ T5959] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 493.176737][ T5959] usb 4-1: Using ep0 maxpacket: 16 [ 493.183861][ T5959] usb 4-1: config 166 has an invalid interface number: 177 but max is 1 [ 493.201285][ T5959] usb 4-1: config 166 has an invalid interface number: 34 but max is 1 [ 493.224828][ T5959] usb 4-1: config 166 has no interface number 0 [ 493.251182][ T5959] usb 4-1: config 166 has no interface number 1 [ 493.281702][ T5959] usb 4-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 493.326664][ T5959] usb 4-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 493.354243][ T5959] usb 4-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 493.383206][ T5959] usb 4-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 493.415460][ T5959] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 493.441056][ T5959] usb 4-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 493.485082][ T5959] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 493.504698][ T5959] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 493.541337][ T5959] usb 4-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 493.557568][ T5959] usb 4-1: config 166 interface 177 has no altsetting 0 [ 493.564569][ T5959] usb 4-1: config 166 interface 34 has no altsetting 0 [ 493.576132][ T5959] usb 4-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 493.585555][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.595837][ T5959] usb 4-1: Product: syz [ 493.600489][ T5959] usb 4-1: Manufacturer: syz [ 493.605109][ T5959] usb 4-1: SerialNumber: syz [ 493.746638][ T5915] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 493.828171][T12294] veth1_virt_wifi: entered promiscuous mode [ 493.834363][T12294] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1484'. [ 493.852850][T12294] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 493.920603][ T5915] usb 5-1: Using ep0 maxpacket: 8 [ 493.940438][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 494.000259][ T5915] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 494.010597][ T5959] ums-realtek 4-1:166.177: USB Mass Storage device detected [ 494.057783][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.057847][ T10] usb 3-1: USB disconnect, device number 110 [ 494.070171][ T5915] usb 5-1: config 0 descriptor?? [ 494.207103][T12315] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 494.213817][T12315] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 494.220999][T12315] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 494.244749][T12315] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 494.289978][ T5915] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 494.328165][T12315] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 494.648031][ T5959] ums-realtek 4-1:166.34: USB Mass Storage device detected [ 494.837190][ T5959] ums-realtek 4-1:166.34: probe with driver ums-realtek failed with error -5 [ 494.897456][ T5959] usb 4-1: Found UVC 0.00 device syz (0bda:0138) [ 494.903854][ T5959] usb 4-1: No valid video chain found. [ 494.921875][ T5959] usb 4-1: USB disconnect, device number 115 [ 495.014090][T12335] futex_wake_op: syz.2.1493 tries to shift op by -1; fix this program [ 495.195936][ T5915] hid-generic 00A0:0008:0003.0026: unknown main item tag 0x7 [ 495.221907][ T5915] hid-generic 00A0:0008:0003.0026: item fetching failed at offset 14/15 [ 495.232566][ T5915] hid-generic 00A0:0008:0003.0026: probe with driver hid-generic failed with error -22 [ 495.515034][T12342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1494'. [ 495.823763][T12348] bridge2: entered promiscuous mode [ 496.066960][ T10] usb 3-1: new low-speed USB device number 111 using dummy_hcd [ 496.156725][ T5915] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 496.186711][ T5856] Bluetooth: hci0: command 0x0406 tx timeout [ 496.252309][ T5959] usb 5-1: USB disconnect, device number 114 [ 496.266739][ T5856] Bluetooth: hci4: command 0x0406 tx timeout [ 496.272791][ T5853] Bluetooth: hci3: command 0x0406 tx timeout [ 496.272826][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 496.306670][ T5915] usb 6-1: device descriptor read/64, error -71 [ 496.342594][ T10] usb 3-1: config 6 has an invalid interface number: 137 but max is 0 [ 496.416593][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 496.455544][ T10] usb 3-1: config 6 has no interface number 0 [ 496.555869][ T10] usb 3-1: config 6 interface 137 has no altsetting 0 [ 496.576708][ T5915] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 496.601432][ T10] usb 3-1: string descriptor 0 read error: -22 [ 496.645003][ T10] usb 3-1: New USB device found, idVendor=19d2, idProduct=0042, bcdDevice=22.a4 [ 496.671307][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.726672][ T5915] usb 6-1: device descriptor read/64, error -71 [ 496.850012][ T5915] usb usb6-port1: attempt power cycle [ 496.952884][T12365] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1502'. [ 497.528177][ T10] usb 3-1: USB disconnect, device number 111 [ 497.776721][ T5915] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 497.797405][ T5915] usb 6-1: device descriptor read/8, error -71 [ 498.048250][ T5915] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 498.077494][ T5915] usb 6-1: device descriptor read/8, error -71 [ 498.166369][T12389] netlink: 'syz.4.1508': attribute type 3 has an invalid length. [ 498.187351][ T5915] usb usb6-port1: unable to enumerate USB device [ 498.206939][ T5901] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 498.436667][ T5901] usb 2-1: Using ep0 maxpacket: 16 [ 498.444198][ T5901] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 498.454558][ T5901] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 498.469651][ T5901] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 498.483171][ T5901] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 498.496301][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.513492][ T5901] usb 2-1: Product: syz [ 498.518271][ T5901] usb 2-1: Manufacturer: syz [ 498.523020][ T5901] usb 2-1: SerialNumber: syz [ 499.952154][ T5901] usb-storage 2-1:1.2: USB Mass Storage device detected [ 500.106673][ T10] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 500.107327][ T5901] usb 2-1: USB disconnect, device number 106 [ 500.285462][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 500.308557][ T10] usb 4-1: config 162 has an invalid interface number: 161 but max is 1 [ 500.319729][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 500.400121][ T10] usb 4-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 500.494414][ T10] usb 4-1: config 162 has 1 interface, different from the descriptor's value: 2 [ 500.523539][ T10] usb 4-1: config 162 has no interface number 0 [ 500.537282][ T10] usb 4-1: config 162 interface 161 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 500.567990][ T10] usb 4-1: config 162 interface 161 has no altsetting 0 [ 500.591459][ T10] usb 4-1: New USB device found, idVendor=13d3, idProduct=3346, bcdDevice=62.b7 [ 500.603979][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.666162][ T10] usb 4-1: Product: syz [ 500.676366][ T10] usb 4-1: Manufacturer: syz [ 500.691625][ T10] usb 4-1: SerialNumber: syz [ 500.721559][ T5915] usb 5-1: new full-speed USB device number 115 using dummy_hcd [ 500.936747][ T5915] usb 5-1: not running at top speed; connect to a high speed hub [ 500.952041][ T5915] usb 5-1: config 108 interface 0 has no altsetting 0 [ 500.970215][ T5915] usb 5-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=b8.27 [ 500.989540][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.006164][ T5915] usb 5-1: Product: syz [ 501.016608][ T5915] usb 5-1: Manufacturer: syz [ 501.024667][ T5915] usb 5-1: SerialNumber: syz [ 501.480303][ T5915] usb 5-1: USB disconnect, device number 115 [ 501.527758][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.561280][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.777133][ T10] usb 4-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 501.827426][ T10] usb 4-1: USB disconnect, device number 116 [ 502.456456][ T10] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 502.498886][T12465] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 502.661379][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 502.685772][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 502.710871][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 502.754037][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 502.794857][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 502.817202][ T10] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 502.827441][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.835523][ T10] usb 5-1: Product: syz [ 502.839985][ T5930] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 502.856260][ T10] usb 5-1: Manufacturer: syz [ 503.255988][ T10] usb 5-1: SerialNumber: syz [ 503.280720][ T10] usb 5-1: config 0 descriptor?? [ 503.311349][T12461] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 503.328211][ T5930] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 503.340117][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 503.359579][ C0] port100 5-1:0.0: NFC: Urb failure (status -71) [ 503.369661][ T10] port100 5-1:0.0: NFC: Could not get supported command types [ 503.385127][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 503.421612][ T5930] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 503.461965][ T5930] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 503.482472][ T5930] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 503.499933][ T5930] usb 2-1: Manufacturer: syz [ 503.536315][T12461] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1522'. [ 503.554687][ T5930] usb 2-1: config 0 descriptor?? [ 503.572701][T12461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.582771][T12474] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1527'. [ 503.594165][T12461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.616442][ T10] usb 5-1: USB disconnect, device number 116 [ 503.996677][ T5930] rc_core: IR keymap rc-hauppauge not found [ 504.002779][ T5930] Registered IR keymap rc-empty [ 504.014565][ T5930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 504.057449][ T5930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 504.102424][ T5930] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 504.149446][ T5930] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input54 [ 504.166578][ T5930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 504.189189][ T5930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 504.628794][ T5930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 504.667764][ T5930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 504.701014][ T5930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 504.801067][ T5930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 504.876696][ T5930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 504.926991][ T5930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 504.968630][ T5930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 504.998305][ T5930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 505.035066][T12504] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 505.044923][ T5930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 505.068068][ T5930] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 505.080948][ T5930] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 505.099257][ T5930] usb 2-1: USB disconnect, device number 107 [ 505.294984][T12504] binder: 12497:12504 ioctl c0306201 200000000240 returned -14 [ 505.373113][T12511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1534'. [ 506.926752][ T5959] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 507.177006][ T5959] usb 3-1: Using ep0 maxpacket: 32 [ 507.396835][ T5959] usb 3-1: config 1 has an invalid interface number: 242 but max is 0 [ 507.406727][ T5959] usb 3-1: config 1 has no interface number 0 [ 507.414534][ T5959] usb 3-1: config 1 interface 242 has no altsetting 0 [ 507.447044][ T5959] usb 3-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 507.491157][ T5959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.787171][ T5959] usb 3-1: Product: syz [ 507.791420][ T5959] usb 3-1: Manufacturer: syz [ 507.807693][ T5959] usb 3-1: SerialNumber: syz [ 508.698117][T12548] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1543'. [ 508.966727][ T5915] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 509.207447][ T10] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 509.320899][ T5915] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 509.360710][ T5915] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 509.385466][ T5915] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 509.407307][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 509.450470][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.466707][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 509.480136][T12553] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 509.554176][ T5915] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 509.589007][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 509.614339][ T5959] aqc111 3-1:1.242: probe with driver aqc111 failed with error -71 [ 509.716858][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.813803][ T5959] usb 3-1: USB disconnect, device number 112 [ 509.840029][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.934720][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 509.990257][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 510.001651][ T10] usb 4-1: Product: syz [ 510.009591][ T10] usb 4-1: Manufacturer: syz [ 510.123605][T12575] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1549'. [ 510.133550][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 510.197391][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 510.211886][ T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 510.226656][ T10] cdc_wdm 4-1:1.0: Unknown control protocol [ 510.322626][T12558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.332694][T12558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.969490][ T10] usb 6-1: USB disconnect, device number 53 [ 511.037144][ T5915] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 511.187174][ T5915] usb 3-1: Using ep0 maxpacket: 8 [ 511.196290][ T5915] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 511.207871][ T5915] usb 3-1: config 2 has no interface number 0 [ 511.214361][ T5915] usb 3-1: config 2 interface 31 has no altsetting 0 [ 511.230125][ T5915] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 511.242784][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.252562][ T5915] usb 3-1: Product: syz [ 511.260118][ T5915] usb 3-1: Manufacturer: syz [ 511.264955][ T5915] usb 3-1: SerialNumber: syz [ 511.952686][ T5915] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 511.962693][ T5915] usb 3-1: USB disconnect, device number 113 [ 512.816933][ T5856] Bluetooth: hci1: command 0x0c1a tx timeout [ 512.864656][ T5930] usb 4-1: USB disconnect, device number 117 [ 513.226803][ T5915] usb 5-1: new full-speed USB device number 117 using dummy_hcd [ 513.366652][ T5915] usb 5-1: device descriptor read/64, error -71 [ 513.569660][T12633] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1561'. [ 513.606853][ T5915] usb 5-1: new full-speed USB device number 118 using dummy_hcd [ 513.877878][ T5915] usb 5-1: device descriptor read/64, error -71 [ 513.997046][ T5915] usb usb5-port1: attempt power cycle [ 514.157452][T12648] input: syz0 as /devices/virtual/input/input55 [ 514.166658][ T5901] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 514.330551][ T5901] usb 2-1: config 0 has no interfaces? [ 514.340244][ T5915] usb 5-1: new full-speed USB device number 119 using dummy_hcd [ 514.380572][ T5915] usb 5-1: device descriptor read/8, error -71 [ 514.449513][ T5901] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 514.489585][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.570462][ T5901] usb 2-1: Product: syz [ 514.574676][ T5901] usb 2-1: Manufacturer: syz [ 514.647085][ T5901] usb 2-1: SerialNumber: syz [ 514.661544][ T5901] usb 2-1: config 0 descriptor?? [ 514.706884][ T5915] usb 5-1: new full-speed USB device number 120 using dummy_hcd [ 514.799296][ T5915] usb 5-1: device descriptor read/8, error -71 [ 514.836708][ T10] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 514.917030][ T5915] usb usb5-port1: unable to enumerate USB device [ 515.014132][T12671] misc userio: No port type given on /dev/userio [ 515.022761][T12671] misc userio: The device must be registered before sending interrupts [ 515.285471][ T10] usb 6-1: device descriptor read/64, error -71 [ 515.726754][ T5915] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 515.743174][T12679] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 515.798892][ T10] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 515.936801][ T10] usb 6-1: device descriptor read/64, error -71 [ 516.019238][ T5915] usb 3-1: Using ep0 maxpacket: 16 [ 516.047115][ T10] usb usb6-port1: attempt power cycle [ 516.209008][T12673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.220784][T12673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.656622][ T10] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 516.677473][ T10] usb 6-1: device descriptor read/8, error -71 [ 516.926698][ T10] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 516.967380][ T10] usb 6-1: device descriptor read/8, error -71 [ 517.052617][ T5976] usb 2-1: USB disconnect, device number 108 [ 517.087199][ T10] usb usb6-port1: unable to enumerate USB device [ 517.676768][ T5976] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 517.879993][ T5976] usb 2-1: Using ep0 maxpacket: 8 [ 517.887758][ T5976] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.911638][T12688] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1576'. [ 518.043217][ T5976] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 518.069225][ T5976] usb 2-1: config 0 interface 0 has no altsetting 0 [ 518.071041][ T5915] usb 3-1: unable to get BOS descriptor or descriptor too short [ 518.082453][ T5976] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 518.097976][ T5976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.115492][ T5915] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 518.135832][ T5915] usb 3-1: can't read configurations, error -71 [ 518.177765][ T5976] usb 2-1: config 0 descriptor?? [ 518.641372][ T5976] kye 0003:0458:4018.0027: unknown main item tag 0x0 [ 518.694730][ T5976] kye 0003:0458:4018.0027: reserved main item tag 0xe [ 518.731715][ T5976] kye 0003:0458:4018.0027: item fetching failed at offset 15/133 [ 518.775264][ T5976] kye 0003:0458:4018.0027: parse failed [ 518.776806][ T889] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 518.841552][ T5976] kye 0003:0458:4018.0027: probe with driver kye failed with error -22 [ 518.876329][ T5976] usb 2-1: USB disconnect, device number 109 [ 518.960250][ T5901] usb 4-1: new full-speed USB device number 118 using dummy_hcd [ 519.050339][ T889] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 519.117368][ T889] usb 5-1: config 0 has no interface number 0 [ 519.160511][T12711] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1583'. [ 519.170253][ T889] usb 5-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 519.182618][ T889] usb 5-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 519.193000][ T5901] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 519.203792][ T5901] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 519.225820][ T5901] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 519.236037][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 519.288954][ T5901] usb 4-1: SerialNumber: syz [ 519.298748][ T889] usb 5-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 519.342494][ T889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.367404][ T5901] usb 4-1: 0:2 : does not exist [ 519.391255][ T889] usb 5-1: Product: syz [ 519.410665][ T889] usb 5-1: Manufacturer: syz [ 519.415365][ T889] usb 5-1: SerialNumber: syz [ 519.557757][T12719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.610485][T12719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.633300][ T889] usb 5-1: config 0 descriptor?? [ 519.728963][T12726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1585'. [ 519.729634][ T889] vmk80xx 5-1:0.255: driver 'vmk80xx' failed to auto-configure device. [ 519.784292][ T5976] usb 4-1: USB disconnect, device number 118 [ 519.865465][T12726] misc userio: No port type given on /dev/userio [ 519.926144][ T51] Bluetooth: hci0: unexpected event for opcode 0x2062 [ 519.950141][ T889] vmk80xx 5-1:0.255: probe with driver vmk80xx failed with error -22 [ 520.266726][ T5901] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 520.306623][ T5976] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 520.426728][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 520.437083][ T5901] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 520.446180][ T5901] usb 2-1: config 0 has no interface number 0 [ 520.459972][ T5901] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 520.471658][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.478767][ T5976] usb 3-1: unable to get BOS descriptor or descriptor too short [ 520.479814][ T5901] usb 2-1: Product: syz [ 520.492818][ T5976] usb 3-1: not running at top speed; connect to a high speed hub [ 520.503014][ T5976] usb 3-1: config 129 has an invalid interface number: 28 but max is 0 [ 520.511797][ T5976] usb 3-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 520.526487][ T5976] usb 3-1: config 129 has no interface number 0 [ 520.533328][ T5901] usb 2-1: Manufacturer: syz [ 520.541980][ T5901] usb 2-1: SerialNumber: syz [ 520.541991][ T5976] usb 3-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 520.598053][ T5901] usb 2-1: config 0 descriptor?? [ 520.608422][ T5976] usb 3-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid wMaxPacketSize 0 [ 520.626383][ T5901] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 520.641497][ T5976] usb 3-1: config 129 interface 28 has no altsetting 0 [ 520.658173][ T5976] usb 3-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 520.668211][ T5976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.683777][ T5976] usb 3-1: Product: syz [ 520.696880][ T5976] usb 3-1: Manufacturer: syz [ 520.716589][ T5976] usb 3-1: SerialNumber: syz [ 520.832821][ T5901] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 520.850302][ T5901] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 521.072280][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 234 [ 521.286967][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 521.297222][ T5901] usb 2-1: USB disconnect, device number 110 [ 521.310308][ T5901] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 521.325751][ T5901] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 521.343943][ T5901] quatech2 2-1:0.51: device disconnected [ 521.547634][ T5901] usb 5-1: USB disconnect, device number 121 [ 522.338222][ T10] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 522.507398][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 522.514575][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.525393][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 522.536886][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 522.546201][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.555031][ T10] usb 2-1: Product: syz [ 522.559306][ T10] usb 2-1: Manufacturer: syz [ 522.563981][ T10] usb 2-1: SerialNumber: syz [ 522.666698][ T5901] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 522.676844][ T5959] usb 5-1: new full-speed USB device number 122 using dummy_hcd [ 522.732563][T12762] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1595'. [ 522.780613][ T10] usb 2-1: 0:2 : does not exist [ 522.809534][ T10] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 522.831884][ T5901] usb 4-1: Using ep0 maxpacket: 8 [ 522.839856][ T5959] usb 5-1: unable to get BOS descriptor or descriptor too short [ 522.850158][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 522.856349][ T5959] usb 5-1: not running at top speed; connect to a high speed hub [ 522.875182][ T5901] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 522.875486][ T10] usb 2-1: USB disconnect, device number 111 [ 522.902017][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.912416][ T5959] usb 5-1: config 1 has an invalid descriptor of length 93, skipping remainder of the config [ 522.923463][ T5901] usb 4-1: config 0 descriptor?? [ 522.935355][ T5959] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 522.950176][ T5959] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 38188, setting to 64 [ 522.967535][ T5959] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 522.977375][ T5959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.001524][ T5959] usb 5-1: Product: syz [ 523.007872][ T5959] usb 5-1: Manufacturer: syz [ 523.012560][ T5959] usb 5-1: SerialNumber: syz [ 523.146952][ T5901] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 523.195037][ T5976] etas_es58x 3-1:129.28: Starting syz syz (Serial Number syz) [ 523.211256][ T5976] etas_es58x 3-1:129.28: could not retrieve the product info string [ 523.264702][ T5959] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 523.282261][ T5959] cdc_ncm 5-1:1.0: bind() failure [ 523.294155][ T5959] usb 5-1: USB disconnect, device number 122 [ 523.866673][ T5959] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 523.939152][ T51] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 523.948103][ T51] Bluetooth: hci0: Injecting HCI hardware error event [ 523.957580][ T51] Bluetooth: hci0: hardware error 0x00 [ 524.137063][ T5901] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 524.146033][ T5959] usb 2-1: config 0 has no interfaces? [ 524.201654][ T5959] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 524.211933][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.220521][ T5959] usb 2-1: Product: syz [ 524.232448][ T5959] usb 2-1: Manufacturer: syz [ 524.250887][ T5959] usb 2-1: SerialNumber: syz [ 524.259641][ T5959] usb 2-1: config 0 descriptor?? [ 524.296735][ T5901] usb 5-1: Using ep0 maxpacket: 8 [ 524.306476][ T5901] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 524.316263][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.324443][ T5901] usb 5-1: Product: syz [ 524.340686][ T5901] usb 5-1: Manufacturer: syz [ 524.345510][ T5901] usb 5-1: SerialNumber: syz [ 524.441973][ T5901] usb 5-1: config 0 descriptor?? [ 524.678282][ T5901] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 524.704789][ T5901] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 524.719389][ T5901] usb 5-1: USB disconnect, device number 123 [ 525.065951][T12788] netlink: 'syz.2.1602': attribute type 10 has an invalid length. [ 526.018025][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 527.266668][ T5976] usb 3-1: USB disconnect, device number 116 [ 527.289687][ T5976] etas_es58x 3-1:129.28: Disconnecting syz syz [ 527.336301][T12788] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 527.355074][T12788] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 527.563223][ T5959] usb 2-1: USB disconnect, device number 112 [ 527.751880][T12814] usb usb8: usbfs: process 12814 (syz.5.1610) did not claim interface 0 before use [ 527.776331][T12817] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1611'. [ 527.866645][ T889] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 528.086784][ T889] usb 5-1: Using ep0 maxpacket: 16 [ 528.095111][ T889] usb 5-1: unable to get BOS descriptor or descriptor too short [ 528.104418][ T889] usb 5-1: config 3 has an invalid interface number: 216 but max is 0 [ 528.113850][ T889] usb 5-1: config 3 has no interface number 0 [ 528.134051][ T889] usb 5-1: config 3 interface 216 has no altsetting 0 [ 528.181446][ T5901] usb 4-1: USB disconnect, device number 119 [ 528.266337][ T889] usb 5-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice=de.a6 [ 528.301243][ T889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.318254][ T889] usb 5-1: Product: syz [ 528.322469][ T889] usb 5-1: Manufacturer: syz [ 528.337485][ T889] usb 5-1: SerialNumber: syz [ 528.843798][ T889] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:3.216/input/input57 [ 528.866026][ T5202] bcm5974 5-1:3.216: could not read from device [ 528.894916][ T5202] bcm5974 5-1:3.216: could not read from device [ 528.915161][ T889] usb 5-1: USB disconnect, device number 125 [ 528.944784][ T5202] bcm5974 5-1:3.216: could not read from device [ 529.946473][T12857] loop6: detected capacity change from 0 to 524288000 [ 530.026969][T12857] support for the xor transformation has been removed. [ 530.436743][ T5976] usb 6-1: new low-speed USB device number 58 using dummy_hcd [ 530.615469][ T5976] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 530.623209][ T5976] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 530.644164][ T5976] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 530.668222][ T5976] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 530.868954][ T5976] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 530.991023][ T5976] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 531.004233][ T5976] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 531.019211][ T5976] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 531.096322][ T5976] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 531.127966][ T5976] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 531.163451][ T5976] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 531.171310][ T5976] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 531.194170][ T5976] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 531.212383][ T5976] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 531.236899][ T5976] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 531.273042][ T5976] usb 6-1: string descriptor 0 read error: -22 [ 531.285156][ T5976] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 531.294953][ T5976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.320892][ T5976] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 531.564460][T12859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.573689][T12859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.587459][T12859] loop2: detected capacity change from 0 to 7 [ 531.594302][T12859] Dev loop2: unable to read RDB block 7 [ 531.601852][T12859] loop2: AHDI p1 p2 p3 [ 531.606133][T12859] loop2: partition table partially beyond EOD, truncated [ 531.614271][T12859] loop2: p1 start 1601398130 is beyond EOD, truncated [ 531.631808][T12859] loop2: p2 start 1702059890 is beyond EOD, truncated [ 531.707736][ T5976] usb 6-1: USB disconnect, device number 58 [ 533.502330][T12867] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.802527][T12890] Cannot find add_set index 1 as target [ 533.856853][ T5976] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 534.036611][ T5976] usb 5-1: Using ep0 maxpacket: 32 [ 534.073292][ T5976] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 534.086697][ T889] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 534.090676][ T5976] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 534.165280][ T5976] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 534.201839][ T5976] usb 5-1: config 1 has no interface number 0 [ 534.223033][ T5976] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 534.251161][ T5976] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 534.274597][ T889] usb 4-1: config 0 has an invalid interface number: 244 but max is 0 [ 534.287110][ T5976] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 534.296335][ T5976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.312429][ T889] usb 4-1: config 0 has no interface number 0 [ 534.319940][ T5976] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 534.367394][ T889] usb 4-1: New USB device found, idVendor=19d2, idProduct=1566, bcdDevice=ed.64 [ 534.408671][ T889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.433576][ T889] usb 4-1: Product: syz [ 534.450562][ T889] usb 4-1: Manufacturer: syz [ 534.463666][ T889] usb 4-1: SerialNumber: syz [ 534.490889][ T889] usb 4-1: config 0 descriptor?? [ 534.512601][ T889] option 4-1:0.244: GSM modem (1-port) converter detected [ 534.522617][ T5976] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 534.744672][ T889] usb 5-1: USB disconnect, device number 126 [ 534.772353][ T889] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 535.047000][ T5976] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 535.222100][ T5976] usb 2-1: config 0 has no interfaces? [ 535.231273][ T5976] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 535.240622][ T5976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.255743][ T5976] usb 2-1: Product: syz [ 535.266610][ T5976] usb 2-1: Manufacturer: syz [ 535.276776][ T5976] usb 2-1: SerialNumber: syz [ 535.284348][ T5976] usb 2-1: config 0 descriptor?? [ 535.318246][ T5959] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 535.364646][T12921] fuse: Unknown parameter 'ÑH´F\4¼-~Ì-ˆ'¶‘ÝsðdAmd“"!8D(ûeBÌòèß5?dÀ:fíÅLZá4èH¨Œa¢ânæÀ' [ 535.476765][ T5959] usb 6-1: device descriptor read/64, error -71 [ 535.609109][ T10] usb 2-1: USB disconnect, device number 113 [ 535.791216][ T5959] usb 6-1: new full-speed USB device number 60 using dummy_hcd [ 535.946630][ T5959] usb 6-1: device descriptor read/64, error -71 [ 536.067116][ T5959] usb usb6-port1: attempt power cycle [ 536.086734][ T889] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 536.279104][ T889] usb 3-1: Using ep0 maxpacket: 32 [ 536.311309][ T889] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 536.337499][ T889] usb 3-1: config 0 has no interface number 0 [ 536.360827][ T889] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 536.378114][ T889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.397896][ T889] usb 3-1: Product: syz [ 536.402216][ T889] usb 3-1: Manufacturer: syz [ 536.413594][ T889] usb 3-1: SerialNumber: syz [ 536.426839][ T5959] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 536.435683][ T889] usb 3-1: config 0 descriptor?? [ 536.457238][ T5959] usb 6-1: device descriptor read/8, error -71 [ 536.460499][ T889] smsc95xx v2.0.0 [ 536.656684][ T5915] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 536.696641][ T5959] usb 6-1: new full-speed USB device number 62 using dummy_hcd [ 536.728479][ T5959] usb 6-1: device descriptor read/8, error -71 [ 536.816768][ T5915] usb 5-1: Using ep0 maxpacket: 32 [ 536.845903][ T5915] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 536.855901][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.856663][ T10] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 536.874609][ T889] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 536.887303][ T5959] usb usb6-port1: unable to enumerate USB device [ 536.897470][ T5915] usb 5-1: config 0 descriptor?? [ 536.952055][ T5959] usb 4-1: USB disconnect, device number 120 [ 536.958986][ T5959] option 4-1:0.244: device disconnected [ 537.005401][ T889] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 537.017845][ T5915] gspca_main: sunplus-2.14.0 probing 041e:400b [ 537.066655][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 537.261310][T12943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.303025][T12943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.668978][ T5959] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 537.826704][ T5959] usb 4-1: Using ep0 maxpacket: 16 [ 537.869603][ T5915] gspca_sunplus: reg_w_riv err -71 [ 537.875572][ T5915] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 537.919222][ T5915] usb 5-1: USB disconnect, device number 127 [ 538.143964][T12959] loop9: detected capacity change from 0 to 7 [ 538.164535][T12962] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1651'. [ 538.322168][T12959] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 538.329732][T12959] loop9: partition table partially beyond EOD, truncated [ 538.344787][T12959] loop9: p1 size 501170297 extends beyond EOD, truncated [ 538.534346][ T6704] udevd[6704]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 538.682608][T12966] binder: 12964:12966 ioctl c0306201 2000000000c0 returned -22 [ 539.227019][ T5930] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 539.376645][ T5930] usb 5-1: Using ep0 maxpacket: 16 [ 539.384091][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.395875][ T5930] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 539.405217][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.417722][ T5930] usb 5-1: config 0 descriptor?? [ 539.844640][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 539.887189][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 539.895970][ T5930] kye 0003:0458:5016.0028: control desc unexpectedly large [ 539.904718][ T10] usb 2-1: can't read configurations, error -71 [ 539.915698][T12976] netlink: 41 bytes leftover after parsing attributes in process `syz.5.1655'. [ 539.938924][ T5930] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0028/input/input59 [ 539.957854][T12976] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1655'. [ 540.000405][T12978] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1655'. [ 540.044033][T12976] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1655'. [ 540.056772][ T5930] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0028/input/input60 [ 540.102273][T12971] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1653'. [ 540.255982][ T5930] kye 0003:0458:5016.0028: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 540.370723][ T889] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000000: -71 [ 540.431558][ T889] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 540.475526][ T889] usb 3-1: USB disconnect, device number 117 [ 540.562859][ T5930] usb 5-1: USB disconnect, device number 2 [ 540.686499][T12985] fido_id[12985]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 540.761746][ T5959] usb 4-1: unable to get BOS descriptor or descriptor too short [ 540.842011][ T5959] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 540.864933][ T5959] usb 4-1: can't read configurations, error -71 [ 542.726810][ T889] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 542.906597][ T889] usb 3-1: Using ep0 maxpacket: 16 [ 542.923259][T13020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1666'. [ 543.796806][T13049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1674'. [ 543.909556][T13052] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1675'. [ 543.957951][T13056] !: renamed from dummy0 (while UP) [ 544.146665][ T5915] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 544.296632][ T5915] usb 5-1: Using ep0 maxpacket: 8 [ 544.307348][ T5915] usb 5-1: unable to get BOS descriptor or descriptor too short [ 544.320128][ T5915] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 544.330124][ T5915] usb 5-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config [ 544.341150][ T5915] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 544.353590][ T5915] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 544.363462][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.371967][ T5915] usb 5-1: Product: syz [ 544.376440][ T5915] usb 5-1: Manufacturer: syz [ 544.381676][ T5915] usb 5-1: SerialNumber: syz [ 544.615239][ T5915] usb 5-1: 0:2 : does not exist [ 544.661554][ T5915] usb 5-1: USB disconnect, device number 3 [ 544.750938][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 544.936293][ T889] usb 3-1: unable to get BOS descriptor or descriptor too short [ 544.953556][ T889] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 544.963242][ T889] usb 3-1: can't read configurations, error -71 [ 545.036691][ T5901] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 545.210481][ T5901] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 545.279222][ T5901] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 545.319540][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.342206][ T5901] usb 6-1: Product: syz [ 545.356070][ T5901] usb 6-1: Manufacturer: syz [ 545.368651][ T5901] usb 6-1: SerialNumber: syz [ 545.431006][ T10] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 545.559251][T13080] loop2: detected capacity change from 0 to 7 [ 545.568412][ T6704] loop2: p1 [ 545.571727][ T6704] loop2: partition table partially beyond EOD, truncated [ 545.580435][ T6704] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 545.590760][ T5901] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 63 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 545.611266][T13080] loop2: p1 [ 545.614625][T13080] loop2: partition table partially beyond EOD, truncated [ 545.629159][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 545.637535][T13080] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 545.641690][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 545.697356][ T6704] udevd[6704]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 545.754151][ T5844] udevd[5844]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 545.797166][ T5901] usb 6-1: USB disconnect, device number 63 [ 545.804922][ T5901] usblp0: removed [ 545.813366][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 545.914570][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 546.123910][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.133653][ T10] usb 4-1: Product: syz [ 546.139558][ T10] usb 4-1: Manufacturer: syz [ 546.144307][ T10] usb 4-1: SerialNumber: syz [ 546.153642][ T10] usb 4-1: config 0 descriptor?? [ 546.167641][ T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 546.179624][ T10] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 546.263555][T13091] loop2: detected capacity change from 0 to 7 [ 546.306038][T13091] loop2: p1 [ 546.351680][T13091] loop2: partition table partially beyond EOD, truncated [ 546.394520][T13091] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 546.517281][ T5844] udevd[5844]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 546.795457][ T10] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 546.855237][ T10] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 547.106809][ T5930] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 547.478441][ T10] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 547.486046][ T10] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 547.528617][ T5930] usb 3-1: Using ep0 maxpacket: 16 [ 547.558522][T13105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1690'. [ 548.176718][ T9] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 548.246640][ T5901] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 548.337143][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 548.345698][ T9] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 548.356284][ T9] usb 2-1: config 0 has no interface number 0 [ 548.362752][ T9] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 548.362764][ T889] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 548.384321][ T9] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 548.394631][ T9] usb 2-1: config 0 interface 126 has no altsetting 0 [ 548.408221][ T9] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 548.421038][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.431864][ T5901] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 548.442511][ T5901] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 56 [ 548.456437][ T9] usb 2-1: Product: syz [ 548.456464][ T5901] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 548.473782][ T9] usb 2-1: Manufacturer: syz [ 548.481498][ T9] usb 2-1: SerialNumber: syz [ 548.489326][ T9] usb 2-1: config 0 descriptor?? [ 548.499920][ T5901] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 548.501329][T13118] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 548.512148][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.524913][T13118] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 548.534428][ T889] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 12336, setting to 64 [ 548.550614][ T5901] usb 6-1: Product: syz [ 548.555144][ T889] usb 5-1: config 0 interface 0 has no altsetting 0 [ 548.566604][ T5901] usb 6-1: Manufacturer: syz [ 548.576187][ T5901] usb 6-1: SerialNumber: syz [ 548.585208][ T889] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 548.596109][ T889] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 548.605988][T13095] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 548.615848][T13095] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 548.626125][ T889] usb 5-1: Product: syz [ 548.631959][ T889] usb 5-1: Manufacturer: syz [ 548.637190][ T889] usb 5-1: SerialNumber: syz [ 548.645644][ T889] usb 5-1: config 0 descriptor?? [ 548.659646][ T889] usb 5-1: selecting invalid altsetting 0 [ 548.756236][T13118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.779902][T13118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.798919][ T9] ir_usb 2-1:0.126: IR Dongle converter detected [ 548.816162][ T9] usb 2-1: IRDA class descriptor not found, device not bound [ 548.833383][ T9] usb 2-1: USB disconnect, device number 116 [ 548.836338][ T5901] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 548.873947][ T889] usb 5-1: USB disconnect, device number 4 [ 548.902946][ T5901] usb 6-1: USB disconnect, device number 64 [ 548.983466][T13073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.994464][T13073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.008733][ T10] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 549.020413][ T10] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 549.035059][ T10] usb 4-1: USB disconnect, device number 123 [ 549.409072][T13123] loop2: detected capacity change from 0 to 7 [ 549.418668][T13123] loop2: p1 [ 549.422043][T13123] loop2: partition table partially beyond EOD, truncated [ 549.429956][T13123] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 549.545751][ T5844] udevd[5844]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 549.904811][ T5930] usb 3-1: unable to get BOS descriptor or descriptor too short [ 550.136765][ T889] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 550.146438][ T5930] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 550.167518][T13133] loop2: detected capacity change from 0 to 7 [ 550.181517][ T5844] loop2: p1 [ 550.261675][T13134] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 550.313049][ T5844] loop2: partition table partially beyond EOD, truncated [ 550.327367][T13134] trusted_key: encrypted_key: insufficient parameters specified [ 550.335233][ T5844] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 550.386719][ T5930] usb 3-1: can't read configurations, error -71 [ 550.408498][T13134] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 550.435865][ T889] usb 4-1: Using ep0 maxpacket: 16 [ 550.452779][T13133] loop2: p1 [ 550.456101][T13133] loop2: partition table partially beyond EOD, truncated [ 550.463672][T13133] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 550.482300][ T889] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 550.746651][ T889] usb 4-1: config 0 has no interface number 0 [ 550.775566][ T889] usb 4-1: too many endpoints for config 0 interface 41 altsetting 2: 171, using maximum allowed: 30 [ 550.778744][ T5844] udevd[5844]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 550.786985][ T889] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 550.806777][ T5930] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 550.988895][ T5844] udevd[5844]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 551.020113][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 551.039893][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.049958][ T5930] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 551.092257][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.129249][ T5930] usb 3-1: config 0 descriptor?? [ 551.184846][ T889] usb 4-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 551.215654][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 551.215674][ T30] audit: type=1326 audit(1752040380.288:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13128 comm="syz.5.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb1d52ab19 code=0x7ffc0000 [ 551.252946][ T889] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 551.266613][ T5901] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 551.307220][ T889] usb 4-1: config 0 interface 41 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 171 [ 551.355454][ T889] usb 4-1: config 0 interface 41 has no altsetting 0 [ 551.367194][ T30] audit: type=1326 audit(1752040380.298:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13128 comm="syz.5.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb1d52ab19 code=0x7ffc0000 [ 551.412784][ T30] audit: type=1326 audit(1752040380.298:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13128 comm="syz.5.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1d58e929 code=0x7ffc0000 [ 551.441755][ T30] audit: type=1326 audit(1752040380.298:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13128 comm="syz.5.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb1d52ab19 code=0x7ffc0000 [ 551.465793][ T30] audit: type=1326 audit(1752040380.298:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13128 comm="syz.5.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb1d52ab19 code=0x7ffc0000 [ 551.489604][ T30] audit: type=1326 audit(1752040380.298:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13128 comm="syz.5.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1d58e929 code=0x7ffc0000 [ 551.512378][ T889] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 551.521783][ T889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.536781][ T889] usb 4-1: Product: syz [ 551.544551][ T889] usb 4-1: Manufacturer: syz [ 551.581672][ T889] usb 4-1: SerialNumber: syz [ 551.589377][ T889] usb 4-1: config 0 descriptor?? [ 551.604829][ T30] audit: type=1326 audit(1752040380.298:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13128 comm="syz.5.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1d58e929 code=0x7ffc0000 [ 551.618125][T13148] netlink: set zone limit has 4 unknown bytes [ 551.720167][T13137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.745501][T13127] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 551.760087][T13137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.768251][ T889] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -22 [ 552.108604][ T30] audit: type=1326 audit(1752040380.298:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13128 comm="syz.5.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb1d52ab19 code=0x7ffc0000 [ 552.131183][ T30] audit: type=1326 audit(1752040380.298:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13128 comm="syz.5.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1d58e929 code=0x7ffc0000 [ 552.155357][ T30] audit: type=1326 audit(1752040380.298:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13128 comm="syz.5.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb1d52ab19 code=0x7ffc0000 [ 552.195457][ T10] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 552.352617][T13158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.365689][T13158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.446299][T13142] openvswitch: netlink: VXLAN extension message has 16 unknown bytes. [ 552.826675][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 552.844475][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 552.988104][ T10] usb 2-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 553.046476][ T10] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0106, bcdDevice=20.39 [ 553.154132][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.216643][ T10] usb 2-1: Product: syz [ 553.244377][ T10] usb 2-1: Manufacturer: syz [ 553.272851][ T10] usb 2-1: SerialNumber: syz [ 553.544818][ T5930] usbhid 3-1:0.0: can't add hid device: -71 [ 553.555453][ T10] kvaser_usb 2-1:251.0: error -ENODEV: Cannot get usb endpoint(s) [ 553.567079][ T5930] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 553.629368][ T5930] usb 3-1: USB disconnect, device number 121 [ 553.635591][ T10] usb 2-1: USB disconnect, device number 117 [ 553.796670][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 553.816219][T13169] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1707'. [ 553.911820][T13171] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1708'. [ 554.035465][ T9] usb 5-1: config 0 has no interfaces? [ 554.237438][ T9] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 554.246735][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.255581][ T9] usb 5-1: Product: syz [ 554.342372][ T9] usb 5-1: Manufacturer: syz [ 554.362224][ T9] usb 5-1: SerialNumber: syz [ 554.397923][ T9] usb 5-1: config 0 descriptor?? [ 554.768243][T13187] loop4: detected capacity change from 0 to 1 [ 554.795940][T13187] Dev loop4: unable to read RDB block 1 [ 554.873331][T13187] loop4: unable to read partition table [ 554.903851][T13187] loop4: partition table beyond EOD, truncated [ 554.938277][T13187] loop_reread_partitions: partition scan of loop4 (þ被xü^>Ñà– ) failed (rc=-5) [ 554.966788][ T9] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 554.984581][T13190] netlink: 'syz.2.1713': attribute type 2 has an invalid length. [ 555.129342][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 555.143866][T13186] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1711'. [ 555.276867][T13194] kvm: kvm [13193]: vcpu0, guest rIP: 0x2a3 Unhandled WRMSR(0xc1) = 0x8e00000035ff [ 555.292372][T13194] kvm: kvm [13193]: vcpu0, guest rIP: 0x2a3 Unhandled WRMSR(0xc1) = 0xa60000002dff [ 555.322570][T13194] kvm: kvm [13193]: vcpu0, guest rIP: 0x2a3 Unhandled WRMSR(0xc1) = 0xb100000035ff [ 555.360960][T13194] kvm: kvm [13193]: vcpu0, guest rIP: 0x2a3 Unhandled WRMSR(0xc2) = 0xd400000035ff [ 555.378508][T13194] kvm: kvm [13193]: vcpu0, guest rIP: 0x2a3 Unhandled WRMSR(0xc1) = 0xea0000002dff [ 555.388569][ T889] usb 4-1: USB disconnect, device number 124 [ 555.395284][T13194] kvm: kvm [13193]: vcpu0, guest rIP: 0x2a3 Unhandled WRMSR(0xc1) = 0x600000035ff [ 555.434171][T13194] kvm: kvm [13193]: vcpu0, guest rIP: 0x2a3 Unhandled WRMSR(0xc2) = 0x5200000022ff [ 555.667734][T13205] tipc: Resetting bearer [ 555.687555][T13205] tipc: Resetting bearer [ 556.431579][ T889] usb 5-1: USB disconnect, device number 5 [ 556.588144][T13227] loop4: detected capacity change from 0 to 1 [ 556.633113][ T5858] Dev loop4: unable to read RDB block 1 [ 556.662431][ T5858] loop4: unable to read partition table [ 556.692451][ T5858] loop4: partition table beyond EOD, truncated [ 556.719645][T13227] Dev loop4: unable to read RDB block 1 [ 556.725529][T13227] loop4: unable to read partition table [ 556.733784][T13227] loop4: partition table beyond EOD, truncated [ 556.751575][T13227] loop_reread_partitions: partition scan of loop4 (þ被xü^>Ñà– ) failed (rc=-5) [ 557.496677][ T5930] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 557.656674][ T5930] usb 4-1: Using ep0 maxpacket: 32 [ 557.665183][ T5930] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 557.675168][ T5930] usb 4-1: config 0 has no interface number 0 [ 557.752055][ T5930] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 557.829777][ T5930] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 557.875230][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.937678][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 557.937697][ T30] audit: type=1326 audit(1752040387.028:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13251 comm="syz.2.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d5372ab19 code=0x7ffc0000 [ 557.983592][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 557.995608][ T9] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 558.005340][ T5930] usb 4-1: Product: syz [ 558.011857][ T5930] usb 4-1: Manufacturer: syz [ 558.016740][ T9] usb 6-1: can't read configurations, error -71 [ 558.023710][ T5930] usb 4-1: SerialNumber: syz [ 558.077620][ T5930] usb 4-1: config 0 descriptor?? [ 558.093693][ T5930] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 558.104400][ T5930] em28xx 4-1:0.132: Video interface 132 found: [ 558.170677][ T30] audit: type=1326 audit(1752040387.058:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13251 comm="syz.2.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d5372ab19 code=0x7ffc0000 [ 558.241393][ T30] audit: type=1326 audit(1752040387.068:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13251 comm="syz.2.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d5372ab19 code=0x7ffc0000 [ 558.297150][ T30] audit: type=1326 audit(1752040387.068:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13251 comm="syz.2.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5378e929 code=0x7ffc0000 [ 558.397068][ T9] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 558.475580][ T30] audit: type=1326 audit(1752040387.068:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13251 comm="syz.2.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d5372ab19 code=0x7ffc0000 [ 558.495226][T13244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.550379][T13244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.616646][ T9] usb 6-1: config 0 has an invalid interface number: 230 but max is 0 [ 558.635079][ T30] audit: type=1326 audit(1752040387.068:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13251 comm="syz.2.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5378e929 code=0x7ffc0000 [ 558.645300][ T9] usb 6-1: config 0 has no interface number 0 [ 558.696865][ T30] audit: type=1326 audit(1752040387.068:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13251 comm="syz.2.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5378e929 code=0x7ffc0000 [ 558.761947][ T9] usb 6-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 558.789743][ T5930] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 558.817869][ T9] usb 6-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 558.828980][ T30] audit: type=1326 audit(1752040387.068:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13251 comm="syz.2.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d5372ab19 code=0x7ffc0000 [ 558.829028][ T30] audit: type=1326 audit(1752040387.068:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13251 comm="syz.2.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d5372ab19 code=0x7ffc0000 [ 558.829071][ T30] audit: type=1326 audit(1752040387.068:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13251 comm="syz.2.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5378e929 code=0x7ffc0000 [ 558.874051][ C0] vkms_vblank_simulate: vblank timer overrun [ 558.941352][ T9] usb 6-1: config 0 interface 230 has no altsetting 0 [ 558.954540][ T9] usb 6-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 558.967127][ T5930] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 558.977962][ T5930] em28xx 4-1:0.132: board has no eeprom [ 559.018275][T13264] netlink: 'syz.3.1736': attribute type 4 has an invalid length. [ 559.029773][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.046691][ T5930] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 559.101440][ T5930] em28xx 4-1:0.132: analog set to bulk mode. [ 559.111776][ T9] usb 6-1: Product: syz [ 559.119663][ T9] usb 6-1: Manufacturer: syz [ 559.124637][ T5959] em28xx 4-1:0.132: Registering V4L2 extension [ 559.168654][ T5930] usb 4-1: USB disconnect, device number 125 [ 559.185672][ T9] usb 6-1: SerialNumber: syz [ 559.201516][ T5930] em28xx 4-1:0.132: Disconnecting em28xx [ 559.226046][ T9] usb 6-1: config 0 descriptor?? [ 559.236984][ T10] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 559.265201][T13255] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 559.283856][T13255] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 559.369735][ T9] ums-usbat 6-1:0.230: USB Mass Storage device detected [ 559.463416][ T9] ums-usbat 6-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 559.777437][T13281] loop4: detected capacity change from 0 to 1 [ 559.800469][ T6704] Dev loop4: unable to read RDB block 1 [ 559.820548][ T5959] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 559.829942][ T5959] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 559.843102][ T5959] em28xx 4-1:0.132: No AC97 audio processor [ 559.880428][ T5959] usb 4-1: Decoder not found [ 559.886712][ T6704] loop4: unable to read partition table [ 559.904086][ T6704] loop4: partition table beyond EOD, truncated [ 559.911537][ T5959] em28xx 4-1:0.132: failed to create media graph [ 559.941289][ T5959] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 559.954721][T13281] Dev loop4: unable to read RDB block 1 [ 559.962145][T13281] loop4: unable to read partition table [ 559.969816][T13281] loop4: partition table beyond EOD, truncated [ 559.980139][ T5959] em28xx 4-1:0.132: Remote control support is not available for this card. [ 559.989162][T13281] loop_reread_partitions: partition scan of loop4 (þ被xü^>Ñà– ) failed (rc=-5) [ 560.006783][ T5930] em28xx 4-1:0.132: Closing input extension [ 560.072761][ T5930] em28xx 4-1:0.132: Freeing device [ 561.116679][ T889] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 561.217454][T13312] ================================================================== [ 561.225648][T13312] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 561.234239][T13312] Write of size 1280 at addr ffffc9000d6bcb40 by task vivid-000-vid-c/13312 [ 561.243690][T13312] [ 561.246024][T13312] CPU: 0 UID: 0 PID: 13312 Comm: vivid-000-vid-c Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 561.246046][T13312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 561.246057][T13312] Call Trace: [ 561.246067][T13312] [ 561.246076][T13312] dump_stack_lvl+0x189/0x250 [ 561.246102][T13312] ? __pfx_dump_stack_lvl+0x10/0x10 [ 561.246123][T13312] ? __pfx__printk+0x10/0x10 [ 561.246151][T13312] ? __pfx__printk+0x10/0x10 [ 561.246172][T13312] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 561.246198][T13312] ? __virt_addr_valid+0xdc/0x5c0 [ 561.246222][T13312] print_report+0xd2/0x2b0 [ 561.246238][T13312] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 561.246257][T13312] kasan_report+0x118/0x150 [ 561.246280][T13312] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 561.246301][T13312] kasan_check_range+0x2b0/0x2c0 [ 561.246323][T13312] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 561.246342][T13312] __asan_memcpy+0x40/0x70 [ 561.246359][T13312] tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 561.246405][T13312] vivid_thread_vid_cap_tick+0xfff/0x5fd0 [ 561.246440][T13312] ? trace_irq_disable+0x37/0x110 [ 561.246465][T13312] ? preempt_schedule_irq+0xde/0x150 [ 561.246493][T13312] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 561.246521][T13312] vivid_thread_vid_cap+0x8da/0x10d0 [ 561.246549][T13312] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 561.246567][T13312] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 561.246591][T13312] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 561.246619][T13312] ? __kthread_parkme+0x7b/0x200 [ 561.246641][T13312] ? __kthread_parkme+0x1a1/0x200 [ 561.246664][T13312] kthread+0x70e/0x8a0 [ 561.246689][T13312] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 561.246706][T13312] ? __pfx_kthread+0x10/0x10 [ 561.246729][T13312] ? _raw_spin_unlock_irq+0x23/0x50 [ 561.246752][T13312] ? lockdep_hardirqs_on+0x9c/0x150 [ 561.246776][T13312] ? __pfx_kthread+0x10/0x10 [ 561.246800][T13312] ret_from_fork+0x3f9/0x770 [ 561.246819][T13312] ? __pfx_ret_from_fork+0x10/0x10 [ 561.246839][T13312] ? __switch_to_asm+0x39/0x70 [ 561.246861][T13312] ? __switch_to_asm+0x33/0x70 [ 561.246883][T13312] ? __pfx_kthread+0x10/0x10 [ 561.246907][T13312] ret_from_fork_asm+0x1a/0x30 [ 561.246934][T13312] [ 561.246941][T13312] [ 561.464786][T13312] The buggy address belongs to the virtual mapping at [ 561.464786][T13312] [ffffc9000d6b9000, ffffc9000d6be000) created by: [ 561.464786][T13312] vb2_vmalloc_alloc+0xef/0x340 [ 561.482689][T13312] [ 561.485007][T13312] The buggy address belongs to the physical page: [ 561.491410][T13312] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x340ad [ 561.500170][T13312] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 561.507287][T13312] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 561.515861][T13312] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 561.524446][T13312] page dumped because: kasan: bad access detected [ 561.530968][T13312] page_owner tracks the page as allocated [ 561.536684][T13312] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 13311, tgid 13309 (syz.2.1746), ts 561160274327, free_ts 561138068490 [ 561.556057][T13312] post_alloc_hook+0x240/0x2a0 [ 561.560830][T13312] get_page_from_freelist+0x21e4/0x22c0 [ 561.566375][T13312] __alloc_frozen_pages_noprof+0x181/0x370 [ 561.572179][T13312] alloc_pages_mpol+0x232/0x4a0 [ 561.577028][T13312] alloc_pages_noprof+0xa9/0x190 [ 561.581966][T13312] __vmalloc_node_range_noprof+0x97d/0x12f0 [ 561.588378][T13312] vmalloc_user_noprof+0xad/0xf0 [ 561.593309][T13312] vb2_vmalloc_alloc+0xef/0x340 [ 561.598154][T13312] __vb2_queue_alloc+0x9bf/0x15a0 [ 561.603172][T13312] vb2_core_reqbufs+0xc31/0x1420 [ 561.608102][T13312] __vb2_init_fileio+0x318/0xff0 [ 561.613043][T13312] vb2_core_poll+0x4c1/0x840 [ 561.617630][T13312] vb2_fop_poll+0x168/0x380 [ 561.622123][T13312] v4l2_poll+0x144/0x2c0 [ 561.626354][T13312] do_sys_poll+0x8c6/0x1070 [ 561.630854][T13312] __se_sys_ppoll+0x1ff/0x260 [ 561.635524][T13312] page last free pid 23 tgid 23 stack trace: [ 561.641488][T13312] __free_frozen_pages+0xc71/0xe70 [ 561.646596][T13312] __tlb_remove_table+0x2d2/0x3b0 [ 561.651616][T13312] tlb_remove_table_rcu+0x85/0x100 [ 561.656724][T13312] rcu_core+0xca8/0x1710 [ 561.660958][T13312] handle_softirqs+0x286/0x870 [ 561.665717][T13312] run_ksoftirqd+0x9b/0x100 [ 561.670235][T13312] smpboot_thread_fn+0x53f/0xa60 [ 561.675250][T13312] kthread+0x70e/0x8a0 [ 561.679319][T13312] ret_from_fork+0x3f9/0x770 [ 561.683903][T13312] ret_from_fork_asm+0x1a/0x30 [ 561.688666][T13312] [ 561.690977][T13312] Memory state around the buggy address: [ 561.696953][T13312] ffffc9000d6bcf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 561.705008][T13312] ffffc9000d6bcf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 561.713061][T13312] >ffffc9000d6bd000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 561.721111][T13312] ^ [ 561.725164][T13312] ffffc9000d6bd080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 561.733214][T13312] ffffc9000d6bd100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 561.741270][T13312] ================================================================== [ 561.749386][ C0] vkms_vblank_simulate: vblank timer overrun [ 561.787024][T13312] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 561.794270][T13312] CPU: 0 UID: 0 PID: 13312 Comm: vivid-000-vid-c Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 561.806780][T13312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 561.816872][T13312] Call Trace: [ 561.820163][T13312] [ 561.823103][T13312] dump_stack_lvl+0x99/0x250 [ 561.827713][T13312] ? __asan_memcpy+0x40/0x70 [ 561.832315][T13312] ? __pfx_dump_stack_lvl+0x10/0x10 [ 561.837895][T13312] ? __pfx__printk+0x10/0x10 [ 561.842562][T13312] panic+0x2db/0x790 [ 561.846481][T13312] ? __pfx_panic+0x10/0x10 [ 561.850928][T13312] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 561.856944][T13312] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 561.863313][T13312] ? print_memory_metadata+0x314/0x400 [ 561.868830][T13312] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 561.874486][T13312] check_panic_on_warn+0x89/0xb0 [ 561.879456][T13312] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 561.885107][T13312] end_report+0x78/0x160 [ 561.889369][T13312] kasan_report+0x129/0x150 [ 561.893901][T13312] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 561.899646][T13312] kasan_check_range+0x2b0/0x2c0 [ 561.904607][T13312] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 561.910242][T13312] __asan_memcpy+0x40/0x70 [ 561.914746][T13312] tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 561.920233][T13312] vivid_thread_vid_cap_tick+0xfff/0x5fd0 [ 561.925969][T13312] ? trace_irq_disable+0x37/0x110 [ 561.930999][T13312] ? preempt_schedule_irq+0xde/0x150 [ 561.936307][T13312] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 561.942560][T13312] vivid_thread_vid_cap+0x8da/0x10d0 [ 561.947954][T13312] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 561.953679][T13312] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 561.959573][T13312] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 561.965920][T13312] ? __kthread_parkme+0x7b/0x200 [ 561.970867][T13312] ? __kthread_parkme+0x1a1/0x200 [ 561.975892][T13312] kthread+0x70e/0x8a0 [ 561.979966][T13312] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 561.985680][T13312] ? __pfx_kthread+0x10/0x10 [ 561.990290][T13312] ? _raw_spin_unlock_irq+0x23/0x50 [ 561.995765][T13312] ? lockdep_hardirqs_on+0x9c/0x150 [ 562.000980][T13312] ? __pfx_kthread+0x10/0x10 [ 562.005575][T13312] ret_from_fork+0x3f9/0x770 [ 562.010171][T13312] ? __pfx_ret_from_fork+0x10/0x10 [ 562.015277][T13312] ? __switch_to_asm+0x39/0x70 [ 562.020037][T13312] ? __switch_to_asm+0x33/0x70 [ 562.024892][T13312] ? __pfx_kthread+0x10/0x10 [ 562.029482][T13312] ret_from_fork_asm+0x1a/0x30 [ 562.034252][T13312] [ 562.037525][T13312] Kernel Offset: disabled [ 562.041848][T13312] Rebooting in 86400 seconds..