last executing test programs: 16m4.997122718s ago: executing program 4 (id=1908): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x3) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000004, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000300)={0x0, 0x0, 0x0}) socket$key(0x2d, 0x3, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="c20200007d00000005fa0000006a0000004000000000000000000000000000000010000000020000000000000000000000001f00046e6f6465767b6376666f7825ffffff8102000000000000000000000000003800704a86cec602007dfa673effeb09b5351f5bde054000000000187b8200b500003b595fcb14034354b9fd9ef196a51cd5157adc8106b494e11200fbe161e900000000351e000000000000f313f6005e00f8f67efb716dcf315ecaf385409ac65b9408679d2c3b9e1d52c3d6da9b109a5688dace6cde7ba4a400b4b0b4dbe64f64b1d63f26796dcbec498623d6a838c69a69dfcc9cdd5906f174a666a8529a45773407dbdab2885baf050000000000b3016f6465762d6eb17b2300f9daa1ee23266ecf85fea65eb2d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9aada06834ccc7e274f51685f506ae89480687bd7f3d7f298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d72300000100000000002ee7cac07de09d1d68a60333a882467d2b31aacdf9cf3ee3884002a91c54528b807a89ca184d16645f06188549b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f299f061f75b7797ce1e411ea918ebd888c1e156b84080000000000000009d51a41dd3de304bd7c7ed0a456f0ae12516105c9478f7df5a6e0b6a77d596cf88ba6e5c6397c7d5021d7989528fd1739e1c2d87fff000000000000e01fe52b06681244007461b0ccaaa1933a0e8a826b14d4fcb2989ffaaa1a0b03b3d80e5524f8495fee7e8d88cb5a040302acb0d1260f2584db48e8d9064e8ce178ce396e85b97e4886444049810f25f1ceca975deb491a125bf0d72f87cc10b0154e08936daadd8b1e978a4070ee1e87db55dc65e1400ac91caf955cc6708817ff62f15edefb9545f8087a0d6d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r5], 0x2c2) socket$inet_sctp(0x2, 0x1, 0x84) r7 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0xc1f, 0x9, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x9, 0x2000000000001]}}) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r8) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000440)={0x20, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) 16m2.825412964s ago: executing program 4 (id=1911): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0}], 0x2}, 0x0, 0x40000000, 0x1}) r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1100, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) (fail_nth: 43) 16m2.312849719s ago: executing program 4 (id=1914): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x3b, &(0x7f0000000400)={0x0, 0x2, 0x10100, 0x2, 0x2b5}, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x8000) r2 = openat$vcs(0xffffff9c, &(0x7f0000000000), 0x240c01, 0x0) statfs(0x0, 0x0) io_uring_enter(r2, 0x2d92, 0xc9c7, 0x1a, &(0x7f0000000040)={[0x80000001, 0x2]}, 0x8) sendmsg$NFT_BATCH(r2, 0x0, 0xc0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r5 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r5, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x200000c, 0x13, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') chdir(&(0x7f0000000140)='./file0\x00') preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x141, 0x0) 16m2.159024061s ago: executing program 4 (id=1915): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) unshare(0x20400) (fail_nth: 6) 16m0.773021157s ago: executing program 4 (id=1919): syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="12014d01020000402505a1a440000102030109025c00020100b0000904000005020d0000052414"], 0x0) r0 = socket(0x2b, 0x1, 0x1) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) sendmmsg$unix(r0, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@cred={{0x18, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x18, 0x1}}], 0x1, 0x20088814) syz_usb_connect$uac1(0x3, 0x111, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xff, 0x3, 0x1, 0x5, 0x90, 0x33, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2ebd, 0x4}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x1ff, 0x1, 0x5, 0x40}, @selector_unit={0xa, 0x24, 0x5, 0x5, 0xa, "9965820e4f"}, @selector_unit={0x9, 0x24, 0x5, 0x6, 0x8, "c34a12ef"}, @selector_unit={0x9, 0x24, 0x5, 0x3, 0xf, "ff836211"}, @mixer_unit={0x9, 0x24, 0x4, 0x2, 0xda, 'khp\v'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x81, 0x4, 0x0, 0x6, "0fda"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x5}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4, 0x3, 0x7, 0x1, "", "50ff"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x2, 0x6, 0x1, 'iz', "da"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x4, 0x7f, 0x4, "f7", "6e1729"}, @as_header={0x7, 0x24, 0x1, 0x4, 0xf4, 0x1001}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0x7, 0x2, {0x7, 0x25, 0x1, 0x81, 0xa, 0xb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x5, 0x1, 0x4d, 0x81, "0e"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xc0, 0x2, 0x1, 0xf, "d6b8", "22569f"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x3, 0x1, 0x4e, 0xb2, "dcb82e00dd116ef974"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x8, 0x7, 0x3, "af5cbe48ad11db5847"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x2, 0x7, 0x8, {0x7, 0x25, 0x1, 0x80, 0xc, 0x3}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x311, 0x3, 0xc5, 0x62, 0x20}, 0x31, &(0x7f00000001c0)={0x5, 0xf, 0x31, 0x3, [@ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0x0, 0x1, [0xc000, 0xffc14f, 0xc03f]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x6, 0x6, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x0, 0x4}]}, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x807}}, {0x3e, &(0x7f0000000240)=@string={0x3e, 0x3, "b5f493fd9788d6c7ac6d1af86942960240c5f0874945c73ef2d4c6ac7d1f6e583694ccea45733f2a59cedd0c01c8237c83032c09676b8a4ca5c90eb5"}}, {0x3c, &(0x7f0000000280)=@string={0x3c, 0x3, "4627464f7012e84ad4fd13a2bcd660911b7059581b8c6c0059b447af3d223bfd2d2277c73e5fb72d1a30557231f18bdac05cfa9116ea9f249746"}}]}) 15m59.88871957s ago: executing program 4 (id=1921): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000004, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000300)={0x0, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') socket$key(0x2d, 0x3, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ac4000/0x4000)=nil) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="c20200007d00000005fa0000006a0000004000000000000000000000000000000010000000020000000000000000000000001f00046e6f6465767b6376666f7825ffffff8102000000000000000000000000003800704a86cec602007dfa673effeb09b5351f5bde054000000000187b8200b500003b595fcb14034354b9fd9ef196a51cd5157adc8106b494e11200fbe161e900000000351e000000000000f313f6005e00f8f67efb716dcf315ecaf385409ac65b9408679d2c3b9e1d52c3d6da9b109a5688dace6cde7ba4a400b4b0b4dbe64f64b1d63f26796dcbec498623d6a838c69a69dfcc9cdd5906f174a666a8529a45773407dbdab2885baf050000000000b3016f6465762d6eb17b2300f9daa1ee23266ecf85fea65eb2d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9aada06834ccc7e274f51685f506ae89480687bd7f3d7f298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d72300000100000000002ee7cac07de09d1d68a60333a882467d2b31aacdf9cf3ee3884002a91c54528b807a89ca184d16645f06188549b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f299f061f75b7797ce1e411ea918ebd888c1e156b84080000000000000009d51a41dd3de304bd7c7ed0a456f0ae12516105c9478f7df5a6e0b6a77d596cf88ba6e5c6397c7d5021d7989528fd1739e1c2d87fff000000000000e01fe52b06681244007461b0ccaaa1933a0e8a826b14d4fcb2989ffaaa1a0b03b3d80e5524f8495fee7e8d88cb5a040302acb0d1260f2584db48e8d9064e8ce178ce396e85b97e4886444049810f25f1ceca975deb491a125bf0d72f87cc10b0154e08936daadd8b1e978a4070ee1e87db55dc65e1400ac91caf955cc6708817ff62f15edefb9545f8087a0d6d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r5], 0x2c2) socket$inet_sctp(0x2, 0x1, 0x84) r7 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0xc1f, 0x9, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x9, 0x2000000000001]}}) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r8) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000440)={0x20, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) 15m59.318649977s ago: executing program 32 (id=1921): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000004, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000300)={0x0, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') socket$key(0x2d, 0x3, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ac4000/0x4000)=nil) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r5], 0x2c2) socket$inet_sctp(0x2, 0x1, 0x84) r7 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0xc1f, 0x9, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x9, 0x2000000000001]}}) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r8) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000440)={0x20, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) 13.306456769s ago: executing program 0 (id=5265): r0 = socket$unix(0x1, 0x5, 0x0) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000100)={0x0, 0xc774, 0x1, 0x1, 0x40000}, &(0x7f0000002000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x2004, @fd=r0, 0x80, 0x0, 0x0, 0x0, 0x3, {0x3}}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000105c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000050000000000000a00000000050000000000000c05000000000000000200000d00000000070000040000000000"], 0x0, 0x4e, 0x0, 0x1, 0x10001, 0x10000}, 0x28) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000010540)=ANY=[@ANYBLOB], 0xffe) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r4, 0x7a4, &(0x7f0000000d00)={{@any, 0x4}, 0x0, 0x8, 0x23, 0x5}) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x40010, r0, 0x16d2d000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x8, 0x0) syz_clone(0xa0000200, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r7, 0x41009432, &(0x7f0000000440)="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") ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r9 = dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0xfffffe70, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) 10.947283151s ago: executing program 2 (id=5280): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000004, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000300)={0x0, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') socket$key(0x2d, 0x3, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ac4000/0x4000)=nil) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[], 0x2c2) socket$inet_sctp(0x2, 0x1, 0x84) r7 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0xc1f, 0x9, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x9, 0x2000000000001]}}) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r8) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000440)={0x20, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) 9.907528028s ago: executing program 0 (id=5275): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x3) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000004, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x0, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, 0x0) socket$key(0x2d, 0x3, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="c20200007d00000005fa0000006a0000004000000000000000000000000000000010000000020000000000000000000000001f00046e6f6465767b6376666f7825ffffff8102000000000000000000000000003800704a86cec602007dfa673effeb09b5351f5bde054000000000187b8200b500003b595fcb14034354b9fd9ef196a51cd5157adc8106b494e11200fbe161e900000000351e000000000000f313f6005e00f8f67efb716dcf315ecaf385409ac65b9408679d2c3b9e1d52c3d6da9b109a5688dace6cde7ba4a400b4b0b4dbe64f64b1d63f26796dcbec498623d6a838c69a69dfcc9cdd5906f174a666a8529a45773407dbdab2885baf050000000000b3016f6465762d6eb17b2300f9daa1ee23266ecf85fea65eb2d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9aada06834ccc7e274f51685f506ae89480687bd7f3d7f298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d72300000100000000002ee7cac07de09d1d68a60333a882467d2b31aacdf9cf3ee3884002a91c54528b807a89ca184d16645f06188549b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f299f061f75b7797ce1e411ea918ebd888c1e156b84080000000000000009d51a41dd3de304bd7c7ed0a456f0ae12516105c9478f7df5a6e0b6a77d596cf88ba6e5c6397c7d5021d7989528fd1739e1c2d87fff000000000000e01fe52b06681244007461b0ccaaa1933a0e8a826b14d4fcb2989ffaaa1a0b03b3d80e5524f8495fee7e8d88cb5a040302acb0d1260f2584db48e8d9064e8ce178ce396e85b97e4886444049810f25f1ceca975deb491a125bf0d72f87cc10b0154e08936daadd8b1e978a4070ee1e87db55dc65e1400ac91caf955cc6708817ff62f15edefb9545f8087a0d6d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64], 0x2c2) socket$inet_sctp(0x2, 0x1, 0x84) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0xc1f, 0x9, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x9, 0x2000000000001]}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000440)={0x20, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) 8.387385515s ago: executing program 5 (id=5281): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256-avx2)\x00'}, 0x58) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x1, 0x0, 0x800000081, 0x100000, 0x5, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0x4, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x46000}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x84}, {0x6}]}) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000040)=0x93f) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x200000, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x10044081}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) open_by_handle_at(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000006000000f9ff000008000000030000000c00"/32], 0x20c0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r9, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f00000001c0)={0x1, 0x7, 0x1, 0x1, 0x1000, 0xda9d, "54b3a3b2b309b1eefd246afbea294500", 0x7, 0x7, 0x2, 0x9, 0xa0, 0x4, 0x6f}) ioctl$int_in(r10, 0x5421, &(0x7f0000000140)=0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="7800000014000305000200000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r9, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 8.103873816s ago: executing program 2 (id=5282): r0 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, 0x0, 0x111, 0x2}}, 0x20) unshare(0x2c020400) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = fsopen(&(0x7f0000000040)='nilfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000180)='-\x00', &(0x7f0000000200)='-{{*{/!$#\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000102c0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000300)={"766cace9c303653f121a2d892000", r5, 0x0, {0x81, 0x50000a}, {0x7, 0x8}, 0x5, [0x3, 0x3, 0x4, 0x6, 0x9, 0x400, 0xffffffffffff0003, 0x2, 0x8, 0x7, 0x80100000, 0x81, 0x80000001, 0x522586f, 0xfffffffffffffffb, 0x200000000000007]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c09425, &(0x7f0000010140)={"b00c61ad7b95e44ef84281590e6cd9cb", r5, 0x0, {0x1, 0x80}, {0x1, 0x4}, 0x0, [0x7, 0x9, 0x2, 0x7, 0x3ff, 0x8, 0x8000000000000000, 0x1, 0xb93, 0xf, 0xffffffffffffff00, 0xfffffffffffffff9, 0x8, 0x10, 0x7fffffff, 0x7]}) setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e22, 0x1f0268bc, @empty, 0x10}}, 0x0, 0x0, 0x3fc, 0x1, 0x32, 0xb}, 0x9c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, 0x0, &(0x7f00000006c0), 0x2000000}, 0x20) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = dup(0xffffffffffffffff) syz_open_dev$sndpcmc(0x0, 0xc, 0x2900) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206030000000000000000000000000014000780080012400000000005001500010000800500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000010200)=ANY=[@ANYBLOB="540000000906010200000000000000defccee5cd8d3c00020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070084000000060004404e2200000c000280085294de035b0fa3f4bb30a4ffe41be7efc77f808c3fc5e38a84ee8679bd5906680f1a4610080f075d6a2444b1c2fbf0bb45e6117ab325"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) unshare(0x6a040000) r9 = socket(0x2, 0x80805, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x4, 0xe8, 0xfe, 0x20002, 0x2aa62113b5725273, @loopback, @remote, 0x0, 0x0, 0x0, 0x2}}) 7.180871655s ago: executing program 0 (id=5285): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000100)={0x2, 0x1, 0x2000000000008004, 0xffffff7f}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x10) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002640)=[0x1], &(0x7f0000000000), 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8b3300000000000000000500000008000300", @ANYRES32=0x0], 0x28}}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="140000001000010000000000000000050000000000000000000a03000000000000000000070000000900010073797a300000000074000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d7461000000100002800c00014000000000800000010c0001800700010063740000080003400000011014000000100001000000fe00000000000784000a00"/188], 0xbc}}, 0x20050800) r6 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, 0x0, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r8, &(0x7f00000001c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x64, @mcast1, 0x3}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000040)="14", 0x1}], 0x1}}], 0x1, 0x4048814) r9 = syz_io_uring_setup(0x4ae1, &(0x7f0000000080)={0x0, 0x1c2b, 0x10100, 0x80, 0x1d4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r6, 0x0, 0x0, 0x0, {}, 0x1}) ioctl$FS_IOC_GETVERSION(r4, 0x80047601, &(0x7f00000002c0)) io_uring_enter(r9, 0x2ded, 0xef92, 0x0, 0x0, 0x0) pause() mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x400000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYRESHEX=r5, @ANYRES8=0x0, @ANYRESDEC=r3, @ANYRES8=r9, @ANYRES32=r10, @ANYRES8=r9, @ANYRESHEX=r3], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 7.134715929s ago: executing program 5 (id=5286): r0 = socket$unix(0x1, 0x5, 0x0) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000100)={0x0, 0xc774, 0x1, 0x1, 0x40000}, &(0x7f0000002000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x2004, @fd=r0, 0x80, 0x0, 0x0, 0x0, 0x3, {0x3}}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000105c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000050000000000000a00000000050000000000000c05000000000000000200000d00000000070000040000000000"], 0x0, 0x4e, 0x0, 0x1, 0x10001, 0x10000}, 0x28) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000010540)=ANY=[@ANYBLOB], 0xffe) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r4, 0x7a4, &(0x7f0000000d00)={{@any, 0x4}, 0x0, 0x8, 0x23, 0x5}) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x40010, r0, 0x16d2d000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x8, 0x0) syz_clone(0xa0000200, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r7, 0x41009432, &(0x7f0000000440)="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") ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, 0x0) 6.750728119s ago: executing program 1 (id=5288): openat$uinput(0xffffff9c, &(0x7f0000000140), 0x802, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a010400000000000000000200000038000480340001800a0001006d617463680000002400028008000100756470000e0003007acc6338a900020000d9000008000240000000000900010073797a30000000000900020073797a3200000000140005"], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 6.368666527s ago: executing program 1 (id=5289): mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000001000/0x4000)=nil) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f00000000c0)=[0x4, 0x4]) unshare(0x24060400) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$unix(r3, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) ppoll(&(0x7f0000000100)=[{r3, 0x5082}], 0x1, 0x0, 0x0, 0x0) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000080)=[0xc67, 0x37]) r4 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000008140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x20000000}], 0x1, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r7, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r6, &(0x7f0000000340), 0x41}]) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r8, 0x707, &(0x7f0000000280)={&(0x7f0000002080)=[{0x7, 0x1001, 0x0, 0x0}, {0x50, 0x4000, 0x0, 0x0}], 0x2}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) accept4(r9, 0x0, 0x0, 0x80000) 6.244485718s ago: executing program 2 (id=5290): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0xa, &(0x7f0000ffb000/0x3000)=nil) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffff9c, 0x0, 0x143240, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x20000880) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="58000003", @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r5, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050006000000140004"], 0x58}}, 0x0) 5.770956865s ago: executing program 1 (id=5291): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x3) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000004, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x0, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') socket$key(0x2d, 0x3, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x2c2) socket$inet_sctp(0x2, 0x1, 0x84) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0xc1f, 0x9, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x9, 0x2000000000001]}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000440)={0x20, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) 5.220422406s ago: executing program 2 (id=5292): r0 = io_uring_setup(0x2c4d, &(0x7f0000000480)={0x0, 0x0, 0x400, 0x0, 0xfffffffe}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x4, 0x0, 0x5374}, 0x1d, [0x8000, 0x78, 0xf, 0x2, 0x80, 0x2, 0x203, 0x7e, 0x4, 0x4b, 0x39cc1919, 0x40, 0x9, 0x5, 0xffff2d37, 0xffffffff, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x5, 0x3c5d, 0x1, 0x0, 0x9, 0x2, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0xe, 0x5, 0x1, 0x5, 0x9, 0x3a, 0x7, 0x6, 0x6, 0xfffbffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x4, 0x9, 0x8, 0x7, 0x1f, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c7, 0xf9, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffc, 0x5, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x7c, 0xea4, 0x0, 0x4, 0x22, 0x8000, 0x40009, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x9, 0x5, 0x9, 0x8, 0x800000d, 0x88da, 0x2007, 0xd, 0x1, 0xfe000000, 0x10002, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x8, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x1000042, 0xffff], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x100, 0x8d2, 0x9, 0x800003, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x5, 0x20000005, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x0, 0x3e7, 0xa, 0x5, 0x200, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x7, 0x200, 0x80, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x3, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x10000, 0xffff, 0x2b98, 0x1, 0x4, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x3, 0xa, 0x80000006, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfffd, 0x4, 0x20002, 0x5, 0xe8a0556, 0x2, 0x14c, 0x3, 0x6, 0x6, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x1, 0x0, 0x8, 0x4, 0x30b1d693, 0xa1f, 0xc, 0x800007, 0xfffffffe, 0x3, 0x0, 0xffff, 0x8000007, 0x2bf, 0x3, 0x200, 0x7fffffff, 0x2]}, 0x45c) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000580)={0xff, {{0xa, 0x4e24, 0x7f, @private1, 0x7ff}}}, 0x8c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200d3449b8dad84b476c1a7b2285d2bf2b08060a34277bcc789beb8293483ea76b913f7eda9a725b33f422b1f271e2f1fd2e8a00de45172368f9212e70dc84cc7aeb960c429d75aa72055972fd0acc9d04500969f6bb800f997e29acdee02d4bc0a8ecf36e491f5605d66787f76bc345af0fcabb4ffde3bda811f7d88b81aaf6bee8fb99602074c7e9ba281932ef00c937393b23357ac4d97d49a063a23342a160615f3e10eeb859a6216aee5f06667a8684e5f0702ab05b3e66f483e5be572f2a3ee6d199bc6"], 0x50) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000780)=ANY=[@ANYBLOB='+cpu '], 0xb) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r4, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 5.019349244s ago: executing program 2 (id=5293): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000004, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000300)={0x0, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') socket$key(0x2d, 0x3, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ac4000/0x4000)=nil) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], 0x2c2) socket$inet_sctp(0x2, 0x1, 0x84) r7 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0xc1f, 0x9, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x9, 0x2000000000001]}}) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r8) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000440)={0x20, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) 4.339105455s ago: executing program 1 (id=5294): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result={0xd0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0xfc, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0x80}, @queue}, {0x0, 0x6, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c) write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4) write$sndseq(r1, &(0x7f00000004c0)=[{0x81, 0x80, 0x2, 0x4, @time={0x8, 0x5}, {0x3, 0x31}, {0xff, 0x7f}, @queue={0x80, {0x8, 0x4}}}, {0x8, 0x2, 0x8f, 0x6, @time={0x3, 0x1cddab93}, {0x0, 0x6e}, {0xf2, 0x30}, @addr={0x9, 0x1}}, {0x8, 0x7, 0x0, 0xe3, @time={0x200, 0x9}, {0x8}, {0x6, 0x1}, @raw8={"7aa27555b79e43403e7fa600"}}, {0x0, 0x7, 0x3, 0x6, @time={0x0, 0x7}, {0x8, 0xfd}, {0x93, 0x80}, @queue={0x14, {0x10, 0x80}}}, {0x6, 0x8, 0x3, 0x40, @tick=0xf6, {0x2, 0x8}, {0x3}, @ext={0x0, 0x0}}, {0xba, 0x6, 0x54, 0x7, @time={0xe5b, 0x10001}, {0x80, 0x8}, {0x2, 0x7f}, @control={0x5, 0x40, 0x5}}, {0x3, 0xc, 0x4, 0x6, @time={0x6, 0x1}, {0x10, 0x4}, {0x8, 0xa}, @raw8={"80408bcf99ee1216e4e59519"}}, {0xd2, 0x5, 0xd9, 0x0, @time={0x8, 0x4}, {0x54, 0x6}, {0x8, 0x8}, @result={0x5, 0x6}}, {0xcf, 0x1, 0xff, 0x5, @tick=0x9, {0x4, 0xb3}, {0x80, 0xd}, @control={0x66, 0x800, 0x3}}], 0xfc) write$sndseq(r1, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, @time={0xb, 0x3}, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x2, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x2000}, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x0, 0xe7}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"ce274516c7da5b6da0b16993"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b134b141793d8609365bda4d"}}, {}], 0xfc) write$sndseq(r1, &(0x7f0000000d00)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"49cbee45cad57a0372831665"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}], 0x8c) write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0xfffffffc}, {}, {}, @control}], 0x38) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write$sndseq(r1, &(0x7f00000005c0)=[{0xfd, 0x0, 0x0, 0x0, @tick, {}, {}, @control={0x0, 0x0, 0x5}}, {0x0, 0x0, 0x0, 0x0, @tick=0x6, {}, {}, @quote={{0x0, 0x7}}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x80000009, 0x3ff, 0x1]}}], 0x54) write$dsp(r1, &(0x7f0000001080)="4a13379082a2f5fabc1e6df568c1342336dfdc3afc845ff78fc0bc807f162231f681a9aa9602d9488daaea231b5a803ce8c5ae0dadfd40736290d70210f2a11df551586d84a6bcf95fe86495499092d78fb5e3cbea301561", 0x58) 4.214831185s ago: executing program 1 (id=5295): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x88800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0xfffffffffffffffb, 0x6, 0x0, 0x4, 0x10003, 0x0, 0x400200cc4, 0x5, 0x7d, 0x0, 0x0, 0x0, 0x2, 0x1, 0xb9, 0x8d], 0xeeee8000, 0x2011c0}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x9}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4006044}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r3, 0x20, &(0x7f0000000040)={&(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000280)=""/233, 0xe9}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r6, r8, 0x25, 0x3, @val=@target_btf_id=r9}, 0x14) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000680)) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4040aea0, &(0x7f0000000000)=@x86={0xf4, 0x3, 0x76, 0x0, 0x80, 0xd1, 0x8, 0x53, 0x19, 0x1, 0x1, 0x63, 0x0, 0x7, 0x2, 0xb, 0x8, 0x39, 0x8, '\x00', 0x40, 0x5}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0xfffffffffffffffe, 0x4, 0x20000e695, 0x9, 0x400, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000200d1, 0xfffffffffffffffc, 0x6, 0x4, 0x0, 0xfffffffffffffe], 0x0, 0x8340}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 3.705397658s ago: executing program 3 (id=5296): syz_emit_ethernet(0x7e, &(0x7f0000000300)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "fa0500", 0x48, 0x11, 0x0, @local, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e138060072381f41e5fff9620915b6f78670dfaf9a195fcb2a79cf6b7931c9b4"}}}}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000280)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x4000, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x71, 0x0, [{0x5, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x1, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) 3.588021997s ago: executing program 0 (id=5297): open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) socket$inet6(0xa, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7c, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a0001ff80000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008000200000000001400", @ANYRES64=r0], 0x38}}, 0x0) 3.571099095s ago: executing program 3 (id=5298): r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = openat$autofs(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = syz_clone(0x20a40280, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ptrace(0x10, r2) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x2, 0x400000000000003, 0xad, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e20, @multicast2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6f}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x60}}, 0x0) (async) ptrace$getregset(0x4205, r2, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) (async) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000740)={0x0}) sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) cachestat(r1, &(0x7f00000000c0)={0x80000001, 0x4}, &(0x7f0000000100), 0x0) (async) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000006c0)={0x0, 0x1, 0x4, 0x208, 0x0, 0x40005, 0x0}) (async) sendto$inet6(r0, 0x0, 0x0, 0x8050, 0x0, 0x0) 3.436598235s ago: executing program 5 (id=5299): openat$uinput(0xffffff9c, &(0x7f0000000140), 0x802, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a010400000000000000000200000038000480340001800a0001006d617463680000002400028008000100756470000e0003007acc6338a900020000d9000008000240000000000900010073797a30000000000900020073797a3200000000140005"], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 3.395025622s ago: executing program 0 (id=5300): socket$can_j1939(0x1d, 0x2, 0x7) openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a41, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040)=0x1, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0xc) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000440)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e1209004000f8ff0700a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000180)={r4, @in6={{0xa, 0x4e21, 0xf27c, @remote, 0xfffffffc}}, [0x6, 0x3ff, 0x3, 0x8, 0x5, 0x8, 0x9, 0x5, 0x40, 0x3, 0x7fff, 0x4, 0x5, 0x8, 0x7]}, &(0x7f0000000300)=0xfc) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=r4, &(0x7f0000000200)=0x4) socket$inet6_sctp(0xa, 0x1, 0x84) syz_io_uring_setup(0x10c, &(0x7f0000000340)={0x0, 0x3eac, 0x400, 0x2, 0x105}, 0x0, 0x0) socket(0x10, 0x3, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='statm\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) r9 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1}) io_submit(0x0, 0x3, &(0x7f0000000680)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r8, &(0x7f00000003c0)="ea17fb698031970a4d91035dad12", 0xe, 0x6, 0x0, 0x1}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0xe73, 0xffffffffffffffff, &(0x7f0000000500)="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", 0xfc, 0x6, 0x0, 0x3, r7}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x2, 0x3, r9, &(0x7f0000000e00)="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", 0x1000, 0x7, 0x0, 0x1, r6}]) socket$alg(0x26, 0x5, 0x0) socket(0x400000000010, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 3.331167157s ago: executing program 1 (id=5301): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) dup(r0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x400880, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5b, 0x57, 0xd5, 0x20, 0xfd9, 0x2c, 0x7101, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xfd, 0x20, 0x0, [{{0x9, 0x4, 0x8c, 0x0, 0x0, 0xf6, 0x7b, 0xbf}}]}}]}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f00005fc000/0x1000)=nil, 0x1000, 0x4) ioctl$SNDCTL_SEQ_NRMIDIS(0xffffffffffffffff, 0xc0045103, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001440)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0x9) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000180)) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x5f) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 3.319647502s ago: executing program 3 (id=5302): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result={0xd0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0xfc, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0x80}, @queue}, {0x0, 0x6, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c) write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4) write$sndseq(r1, &(0x7f00000004c0)=[{0x81, 0x80, 0x2, 0x4, @time={0x8, 0x5}, {0x3, 0x31}, {0xff, 0x7f}, @queue={0x80, {0x8, 0x4}}}, {0x8, 0x2, 0x8f, 0x6, @time={0x3, 0x1cddab93}, {0x0, 0x6e}, {0xf2, 0x30}, @addr={0x9, 0x1}}, {0x8, 0x7, 0x0, 0xe3, @time={0x200, 0x9}, {0x8}, {0x6, 0x1}, @raw8={"7aa27555b79e43403e7fa600"}}, {0x0, 0x7, 0x3, 0x6, @time={0x0, 0x7}, {0x8, 0xfd}, {0x93, 0x80}, @queue={0x14, {0x10, 0x80}}}, {0x6, 0x8, 0x3, 0x40, @tick=0xf6, {0x2, 0x8}, {0x3}, @ext={0x0, 0x0}}, {0xba, 0x6, 0x54, 0x7, @time={0xe5b, 0x10001}, {0x80, 0x8}, {0x2, 0x7f}, @control={0x5, 0x40, 0x5}}, {0x3, 0xc, 0x4, 0x6, @time={0x6, 0x1}, {0x10, 0x4}, {0x8, 0xa}, @raw8={"80408bcf99ee1216e4e59519"}}, {0xd2, 0x5, 0xd9, 0x0, @time={0x8, 0x4}, {0x54, 0x6}, {0x8, 0x8}, @result={0x5, 0x6}}, {0xcf, 0x1, 0xff, 0x5, @tick=0x9, {0x4, 0xb3}, {0x80, 0xd}, @control={0x66, 0x800, 0x3}}], 0xfc) write$sndseq(r1, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, @time={0xb, 0x3}, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x2, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x2000}, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x0, 0xe7}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"ce274516c7da5b6da0b16993"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b134b141793d8609365bda4d"}}, {}], 0xfc) write$sndseq(r1, &(0x7f0000000d00)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"49cbee45cad57a0372831665"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}], 0x8c) write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0xfffffffc}, {}, {}, @control}], 0x38) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write$sndseq(r1, &(0x7f00000005c0)=[{0xfd, 0x0, 0x0, 0x0, @tick, {}, {}, @control={0x0, 0x0, 0x5}}, {0x0, 0x0, 0x0, 0x0, @tick=0x6, {}, {}, @quote={{0x0, 0x7}}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x80000009, 0x3ff, 0x1]}}], 0x54) write$dsp(r1, &(0x7f0000001080)="4a13379082a2f5fabc1e6df568c1342336dfdc3afc845ff78fc0bc807f162231f681a9aa9602d9488daaea231b5a803ce8c5ae0dadfd40736290d70210f2a11df551586d84a6bcf95fe86495499092d78fb5e3cbea301561", 0x58) 3.224844299s ago: executing program 5 (id=5303): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0xe64) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0, 0x13f, 0xa}}, 0xfe2f) ioctl$SNDRV_PCM_IOCTL_RESET(r4, 0x4141, 0x1010) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) prctl$PR_MCE_KILL_GET(0x22) r7 = socket$netlink(0x10, 0x3, 0xe) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r7) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x2c, r1, 0x801, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x4}]}]}, 0x2c}}, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f00000019c0)={0x7, [0x7, 0x9, 0x0, 0x6, 0x1, 0x5c4a, 0x1, 0x18, 0x5, 0x4, 0x200, 0x1, 0x5, 0x1d, 0x6, 0xfff3, 0x6, 0x5, 0x7, 0xffff, 0x800, 0x102, 0x807, 0x6, 0x2c, 0x7, 0xfff1, 0x3, 0x6, 0x46, 0x1, 0x4, 0x131b, 0xfffe, 0x100, 0xfff9, 0x3ff, 0x5, 0xa23, 0x49, 0x5, 0x4, 0x6, 0x3, 0x6, 0x7, 0xf3f, 0x8], 0x4}) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000080)={0x0, 0x30, '\x00', 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 3.129656358s ago: executing program 3 (id=5304): syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2, 0x80805, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r4, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f00000001c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x6, @local}, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2b}}, 'netpci0\x00'}) setsockopt$inet_mreq(r4, 0x0, 0x23, 0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc2000001900010000000000fcdbdf250000000000000000000000000000cc03190000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000040000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000010000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa000000000400"/176], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) process_madvise(r9, &(0x7f00000015c0)=[{0x0, 0xb3c9de750fa141ee}, {&(0x7f0000001600)="7fe370522d6af6625215f1793293827ec1fbafd2669ec71d6ec4f18aaa71edae948611d70900e80e4116a3c114041430f19bd4f37e3c7238ed6e6d46979c2220bde96ffe55c88d2e697fd133e5733e1bbb159ba81a1e8e2fb2e51596", 0x1}, {&(0x7f0000001300)="0454c96113b0da138a30557b0c026d7c7ba28c5cf82e468ed91537d279936ddcf06ef737e0943554457a28db61aea38a154bf19b456388daf4df61c9febcd9b8a2b14929c6f097f4ff11e686a8a37381b9321ae19dd77be474863e35633dec7003568e91eab8e870a93a73b6dea475547a826b25021aecd727c201c9cea0bfba0122b00573c286b821d43d0b4e38ec90b7d08565bf81862bdf5115e75886e742c51e058d0752982da309d53a7c0d320fdbd38bfaa998ff981d15928f783b2728ecc210898685dfc72398e665b7892024c0ab0dcfe9d3fc", 0xd7}, {&(0x7f0000001400)="3e519bc4eb7b0a55b33bdb22cc7ca76aba33506ebcf89e67b16583e68404bbca008b995a73322a4cc7a3c436e94da49121c4f225ccd342612b46beb2f569a7a0423c0cf79f2d94c015b7b47bc11d5fe599214dbe7f92c8a14b6d254a8daa074ece2708f10e912eb72cb22efc14a0d0cc7cea79311ead3200c7aca0e920d83c8d7b92db", 0x83}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000014c0)="6b553f4de4ed875c9fadc16852f54981bcd646a5262fc3900592194638585e3d2e79f074f796720749ddc1a2661dcb2471a47d963fb4d817dfdb5f52dc8ab642030c2c771646051d08609527b36368b80794b8cb63fe817c3379951a047c5026c2e99eae6dc05c6845529fb603666d78c0e1e5f7bca8f1d8584b7409ccaf0da598af64d7bdd2ae21ac4fb4e07dee96a92a8dddecee7ccbede2d0a7d4f2da90dc3eb4ae8895091f05db58a786519f6fc924a465cc46ae6a9b8705de0705b8bab4f10cddc7756c53eadf4aa6e2379fd85e9c5e7bfc", 0xd4}], 0x6, 0x9, 0x0) 3.126567328s ago: executing program 2 (id=5314): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000004, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000300)={0x0, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') socket$key(0x2d, 0x3, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ac4000/0x4000)=nil) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], 0x2c2) socket$inet_sctp(0x2, 0x1, 0x84) r7 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0xc1f, 0x9, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x9, 0x2000000000001]}}) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r8) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000440)={0x20, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) 2.411511734s ago: executing program 5 (id=5305): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f00000002c0)={0x8, 0x120, 0xfa00, {0x2, {0xf4, 0x9, "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", 0x4, 0x0, 0x5, 0x5, 0xdf, 0xf7, 0x9, 0x1}, r2}}, 0x128) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000090a05000000000000000000fbff20000900020073797a310000b30008000c"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x21011, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x14, 0x14, 0x3}]}}}]}, 0x38}}, 0x24040084) 2.353777449s ago: executing program 0 (id=5306): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x3) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000004, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x0, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') socket$key(0x2d, 0x3, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x2c2) socket$inet_sctp(0x2, 0x1, 0x84) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0xc1f, 0x9, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x9, 0x2000000000001]}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000440)={0x20, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) 928.127451ms ago: executing program 5 (id=5307): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x3) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000004, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x0, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') socket$key(0x2d, 0x3, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x2c2) socket$inet_sctp(0x2, 0x1, 0x84) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0xc1f, 0x9, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x9, 0x2000000000001]}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000440)={0x20, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) 394.650024ms ago: executing program 3 (id=5308): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_S_STD(r0, 0xc0205647, &(0x7f0000000d00)=0x80000) 0s ago: executing program 3 (id=5309): r0 = socket$unix(0x1, 0x5, 0x0) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000100)={0x0, 0xc774, 0x1, 0x1, 0x40000}, &(0x7f0000002000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x2004, @fd=r0, 0x80, 0x0, 0x0, 0x0, 0x3, {0x3}}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000105c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000050000000000000a00000000050000000000000c05000000000000000200000d00000000070000040000000000"], 0x0, 0x4e, 0x0, 0x1, 0x10001, 0x10000}, 0x28) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000010540)=ANY=[@ANYBLOB], 0xffe) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r4, 0x7a4, &(0x7f0000000d00)={{@any, 0x4}, 0x0, 0x8, 0x23, 0x5}) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x40010, r0, 0x16d2d000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x8, 0x0) syz_clone(0xa0000200, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r7, 0x41009432, &(0x7f0000000440)="86ab7788d1b8b1a101a15d02d06ff40c8457269573745109aa34e31f5e70f379d06207e90940da08059fc024714cdd8bc2c393424c049ae97a96005eee572b31f32c1c3494206fff1ddf6f3148a8bfc9e8d3d5121807d1de2ff6e8fca1afef532230e398064093b9473e1a9c1e457a68bce7eb4097ddc3c99dfaf330a61fee178bd57b41bb59b960c004c495a978ec465c93a63171f617be81e5314c5daa0b327ac9d444fb2e4bae4fdcc5ceb55bc7fc5503a8ecba9e0ba4cc44a16a1894a8dad89232b28dc0178c71e92b3dda0d74323ec0ae28cf447de2e698a822fef18f79f2165529aba3c979a220e40377dd1dfabfe69828fdb0b0394d0ab040d16c3d7b") ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, 0x0) kernel console output (not intermixed with test programs): __ratelimit+0x10/0x10 [ 1492.982033][T24938] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1492.982052][T24938] ? __pfx__printk+0x10/0x10 [ 1492.982077][T24938] ? call_rcu+0x6ff/0x9c0 [ 1492.982095][T24938] ? lockdep_hardirqs_on+0x9c/0x150 [ 1492.982119][T24938] should_fail_ex+0x414/0x560 [ 1492.982151][T24938] should_failslab+0xa8/0x100 [ 1492.982179][T24938] __kmalloc_cache_noprof+0x70/0x3d0 [ 1492.982202][T24938] ? nsim_fib_event_nb+0x187/0x1080 [ 1492.982230][T24938] nsim_fib_event_nb+0x187/0x1080 [ 1492.982263][T24938] notifier_call_chain+0x1b6/0x3e0 [ 1492.982287][T24938] ? atomic_notifier_call_chain+0x26/0x180 [ 1492.982310][T24938] atomic_notifier_call_chain+0xda/0x180 [ 1492.982333][T24938] call_fib_notifiers+0x31/0x60 [ 1492.982355][T24938] call_fib_entry_notifiers+0x14b/0x1f0 [ 1492.982382][T24938] ? __pfx_call_fib_entry_notifiers+0x10/0x10 [ 1492.982411][T24938] ? lockdep_rtnl_is_held+0x26/0x40 [ 1492.982443][T24938] fib_table_insert+0xcab/0x1b50 [ 1492.982483][T24938] ? l3mdev_fib_table+0x18/0x160 [ 1492.982515][T24938] fib_magic+0x2c4/0x390 [ 1492.982546][T24938] ? __pfx_fib_magic+0x10/0x10 [ 1492.982568][T24938] ? queue_work_on+0x1ed/0x270 [ 1492.982605][T24938] ? addr_event+0x34f/0x470 [ 1492.982632][T24938] fib_add_ifaddr+0x144/0x5f0 [ 1492.982662][T24938] ? __pfx_inetaddr_event+0x10/0x10 [ 1492.982690][T24938] fib_inetaddr_event+0x12e/0x190 [ 1492.982723][T24938] notifier_call_chain+0x1b6/0x3e0 [ 1492.982752][T24938] blocking_notifier_call_chain+0x6a/0x90 [ 1492.982776][T24938] __inet_insert_ifa+0xa13/0xbf0 [ 1492.982818][T24938] ? __pfx___inet_insert_ifa+0x10/0x10 [ 1492.982857][T24938] inet_rtm_newaddr+0xf3a/0x18b0 [ 1492.982891][T24938] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1492.982935][T24938] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1492.982957][T24938] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1492.982982][T24938] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1492.983000][T24938] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1492.983017][T24938] ? ref_tracker_free+0x63a/0x7d0 [ 1492.983036][T24938] ? __asan_memcpy+0x40/0x70 [ 1492.983057][T24938] ? __pfx_ref_tracker_free+0x10/0x10 [ 1492.983072][T24938] ? __skb_clone+0x63/0x7a0 [ 1492.983106][T24938] netlink_rcv_skb+0x205/0x470 [ 1492.983128][T24938] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1492.983150][T24938] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1492.983182][T24938] ? netlink_deliver_tap+0x2e/0x1b0 [ 1492.983210][T24938] netlink_unicast+0x82f/0x9e0 [ 1492.983246][T24938] ? __pfx_netlink_unicast+0x10/0x10 [ 1492.983274][T24938] ? netlink_sendmsg+0x642/0xb30 [ 1492.983293][T24938] ? skb_put+0x11b/0x210 [ 1492.983318][T24938] netlink_sendmsg+0x805/0xb30 [ 1492.983349][T24938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1492.983372][T24938] ? __import_iovec+0x5d4/0x7f0 [ 1492.983393][T24938] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1492.983415][T24938] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1492.983435][T24938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1492.983456][T24938] __sock_sendmsg+0x219/0x270 [ 1492.983486][T24938] ____sys_sendmsg+0x505/0x830 [ 1492.983515][T24938] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1492.983557][T24938] ___sys_sendmsg+0x21f/0x2a0 [ 1492.983583][T24938] ? __pfx____sys_sendmsg+0x10/0x10 [ 1492.983653][T24938] ? __fget_files+0x2a/0x420 [ 1492.983670][T24938] ? __fget_files+0x3a0/0x420 [ 1492.983699][T24938] __sys_sendmsg+0x164/0x220 [ 1492.983724][T24938] ? __pfx___sys_sendmsg+0x10/0x10 [ 1492.983764][T24938] ? lockdep_hardirqs_on+0x9c/0x150 [ 1492.983788][T24938] __do_fast_syscall_32+0xb6/0x2b0 [ 1492.983810][T24938] ? lockdep_hardirqs_on+0x9c/0x150 [ 1492.983835][T24938] do_fast_syscall_32+0x34/0x80 [ 1492.983856][T24938] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1492.983878][T24938] RIP: 0023:0xf70be539 [ 1492.983894][T24938] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1492.983910][T24938] RSP: 002b:00000000f54ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1492.983930][T24938] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 1492.983943][T24938] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1492.983954][T24938] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1492.983965][T24938] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1492.983976][T24938] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1492.984006][T24938] [ 1493.048953][ T10] m920x_read = error: -19 [ 1493.468978][T23214] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 1493.477156][T23214] usb 4-1: SerialNumber: syz [ 1493.519267][T23214] usb 4-1: config 0 descriptor?? [ 1493.550146][ T5951] usb 3-1: config 0 has an invalid interface number: 217 but max is 1 [ 1493.550149][T23214] usb 4-1: Found UVC 0.00 device (05ac:8501) [ 1493.550174][ T5951] usb 3-1: config 0 has no interface number 1 [ 1493.559752][T23214] usb 4-1: No valid video chain found. [ 1493.629025][ T5951] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1493.694245][ T5951] usb 3-1: config 0 interface 217 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1493.764726][ T10] dvb-usb: error while querying for an remote control event. [ 1493.781880][T24944] nvme_fabrics: unknown parameter or missing value 'Ô' in ctrl creation request [ 1493.806005][ T5951] usb 3-1: New USB device found, idVendor=0c45, idProduct=628f, bcdDevice=1f.44 [ 1493.826340][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.837031][T24942] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5022'. [ 1493.872267][ T5951] usb 3-1: config 0 descriptor?? [ 1493.888695][ T5951] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628f [ 1493.979063][ T10] m920x_read = error: -19 [ 1493.985864][ T10] dvb-usb: error while querying for an remote control event. [ 1494.087611][T24931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1494.098257][T24931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1494.098880][T18253] m920x_read = error: -19 [ 1494.114756][T18253] dvb-usb: error while querying for an remote control event. [ 1494.248885][ T10] m920x_read = error: -19 [ 1494.253578][ T10] dvb-usb: error while querying for an remote control event. [ 1494.368879][ T10] m920x_read = error: -19 [ 1494.373316][ T10] dvb-usb: error while querying for an remote control event. [ 1494.428715][ T5951] gspca_sn9c20x: Write register 1000 failed -110 [ 1494.439556][ T5951] gspca_sn9c20x: Device initialization failed [ 1494.446104][ T5951] gspca_sn9c20x 3-1:0.0: probe with driver gspca_sn9c20x failed with error -110 [ 1494.496800][ T10] m920x_read = error: -19 [ 1494.504095][ T10] dvb-usb: error while querying for an remote control event. [ 1494.619257][ T10] m920x_read = error: -19 [ 1494.624049][ T10] dvb-usb: error while querying for an remote control event. [ 1494.740908][ T10] m920x_read = error: -19 [ 1494.747575][ T10] dvb-usb: error while querying for an remote control event. [ 1494.818361][T11734] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 1494.869723][ T10] m920x_read = error: -19 [ 1494.875217][ T10] dvb-usb: error while querying for an remote control event. [ 1494.989002][ T10] m920x_read = error: -19 [ 1494.995640][ T10] dvb-usb: error while querying for an remote control event. [ 1494.995667][T11734] usb 6-1: device descriptor read/64, error -71 [ 1495.108930][ T10] m920x_read = error: -19 [ 1495.113441][ T10] dvb-usb: error while querying for an remote control event. [ 1495.228869][ T10] m920x_read = error: -19 [ 1495.236314][ T10] dvb-usb: error while querying for an remote control event. [ 1495.308143][T11734] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 1495.348999][ T10] m920x_read = error: -19 [ 1495.357144][ T10] dvb-usb: error while querying for an remote control event. [ 1495.446649][T24957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5028'. [ 1495.455895][T11734] usb 6-1: device descriptor read/64, error -71 [ 1495.478939][ T10] m920x_read = error: -19 [ 1495.483304][ T10] dvb-usb: error while querying for an remote control event. [ 1495.533213][T24959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5029'. [ 1495.580570][T11734] usb usb6-port1: attempt power cycle [ 1495.598979][ T10] m920x_read = error: -19 [ 1495.600824][T24959] vlan0: entered promiscuous mode [ 1495.616005][ T10] dvb-usb: error while querying for an remote control event. [ 1495.717071][ T10] usb 3-1: USB disconnect, device number 92 [ 1495.729169][T23214] m920x_read = error: -19 [ 1495.733542][T23214] dvb-usb: error while querying for an remote control event. [ 1495.850169][T23214] m920x_read = error: -19 [ 1495.873550][T23214] dvb-usb: error while querying for an remote control event. [ 1495.951266][T11734] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 1495.989496][T11734] usb 6-1: device descriptor read/8, error -71 [ 1496.008424][T18253] m920x_read = error: -19 [ 1496.012850][T18253] dvb-usb: error while querying for an remote control event. [ 1496.124959][T18253] usb 4-1: USB disconnect, device number 58 [ 1496.132781][ T5919] m920x_read = error: -19 [ 1496.137164][ T5919] dvb-usb: error while querying for an remote control event. [ 1496.148893][T23214] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1496.229562][ T10] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1496.247399][T11734] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 1496.258889][ T5919] m920x_read = error: -19 [ 1496.269200][ T5919] dvb-usb: error while querying for an remote control event. [ 1496.283436][T11734] usb 6-1: device descriptor read/8, error -71 [ 1496.306006][T24972] netlink: 21 bytes leftover after parsing attributes in process `syz.3.5035'. [ 1496.315775][T23214] usb 2-1: Using ep0 maxpacket: 32 [ 1496.331002][T23214] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1496.355382][T23214] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1496.374203][T23214] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1496.384501][ T10] usb 3-1: device descriptor read/64, error -71 [ 1496.399051][T18253] m920x_read = error: -19 [ 1496.405792][T11734] usb usb6-port1: unable to enumerate USB device [ 1496.410068][T18253] dvb-usb: error while querying for an remote control event. [ 1496.423845][T23214] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1496.435263][T23214] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.444927][T23214] usb 2-1: Product: syz [ 1496.450456][T23214] usb 2-1: Manufacturer: syz [ 1496.455153][T23214] usb 2-1: SerialNumber: syz [ 1496.539403][T18253] m920x_read = error: -19 [ 1496.543776][T18253] dvb-usb: error while querying for an remote control event. [ 1496.638901][ T10] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1496.670629][T18253] m920x_read = error: -19 [ 1496.692866][T18253] dvb-usb: error while querying for an remote control event. [ 1496.779079][ T10] usb 3-1: device descriptor read/64, error -71 [ 1496.808942][T18253] m920x_read = error: -19 [ 1496.814674][T18253] dvb-usb: error while querying for an remote control event. [ 1496.899099][ T10] usb usb3-port1: attempt power cycle [ 1496.928428][T18253] m920x_read = error: -19 [ 1496.933196][T18253] dvb-usb: error while querying for an remote control event. [ 1497.028504][T11734] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1497.049049][T18253] m920x_read = error: -19 [ 1497.057233][T18253] dvb-usb: error while querying for an remote control event. [ 1497.171400][T18253] m920x_read = error: -19 [ 1497.189367][T18253] dvb-usb: error while querying for an remote control event. [ 1497.242452][T11734] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1497.248473][ T10] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1497.263633][T11734] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1497.276165][T11734] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1497.283632][ T10] usb 3-1: device descriptor read/8, error -71 [ 1497.298405][T11734] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1497.298921][T18253] m920x_read = error: -19 [ 1497.315615][T18253] dvb-usb: error while querying for an remote control event. [ 1497.327120][T11734] usb 4-1: SerialNumber: syz [ 1497.458722][T18253] m920x_read = error: -19 [ 1497.465156][T18253] dvb-usb: error while querying for an remote control event. [ 1497.529602][ T10] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1497.559038][ T10] usb 3-1: device descriptor read/8, error -71 [ 1497.578933][T18253] m920x_read = error: -19 [ 1497.583318][T18253] dvb-usb: error while querying for an remote control event. [ 1497.672689][ T10] usb usb3-port1: unable to enumerate USB device [ 1497.713426][T18253] m920x_read = error: -19 [ 1497.736259][T18253] dvb-usb: error while querying for an remote control event. [ 1497.858450][T18253] m920x_read = error: -19 [ 1497.865083][T18253] dvb-usb: error while querying for an remote control event. [ 1497.999222][ T10] m920x_read = error: -19 [ 1498.003647][ T10] dvb-usb: error while querying for an remote control event. [ 1498.118816][ T10] m920x_read = error: -19 [ 1498.123978][ T10] dvb-usb: error while querying for an remote control event. [ 1498.141538][T18253] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1498.238313][ T10] m920x_read = error: -19 [ 1498.242740][ T10] dvb-usb: error while querying for an remote control event. [ 1498.300984][T18253] usb 6-1: config 0 has an invalid interface number: 217 but max is 1 [ 1498.310165][T18253] usb 6-1: config 0 has no interface number 1 [ 1498.316321][T18253] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1498.329916][T18253] usb 6-1: config 0 interface 217 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1498.341967][T18253] usb 6-1: New USB device found, idVendor=0c45, idProduct=628f, bcdDevice=1f.44 [ 1498.352264][T18253] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1498.361297][ T10] m920x_read = error: -19 [ 1498.365863][ T10] dvb-usb: error while querying for an remote control event. [ 1498.377321][T18253] usb 6-1: config 0 descriptor?? [ 1498.389369][T18253] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628f [ 1498.478463][ T10] m920x_read = error: -19 [ 1498.483254][ T10] dvb-usb: error while querying for an remote control event. [ 1498.590195][T24990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1498.599561][ T10] m920x_read = error: -19 [ 1498.604532][T24990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1498.613744][ T10] dvb-usb: error while querying for an remote control event. [ 1498.733021][ T10] m920x_read = error: -19 [ 1498.741182][ T10] dvb-usb: error while querying for an remote control event. [ 1498.859120][ T10] m920x_read = error: -19 [ 1498.873566][ T10] dvb-usb: error while querying for an remote control event. [ 1498.904166][T18253] gspca_sn9c20x: Write register 1000 failed -110 [ 1498.908847][T24995] vlan3: entered promiscuous mode [ 1498.922490][T18253] gspca_sn9c20x: Device initialization failed [ 1498.952149][T23214] usb 2-1: 0:2 : does not exist [ 1498.959839][T18253] gspca_sn9c20x 6-1:0.0: probe with driver gspca_sn9c20x failed with error -110 [ 1499.003784][T23214] usb 2-1: USB disconnect, device number 80 [ 1499.030468][T18253] m920x_read = error: -19 [ 1499.055373][T18253] dvb-usb: error while querying for an remote control event. [ 1499.090153][ T5912] udevd[5912]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1499.199659][ T10] m920x_read = error: -19 [ 1499.214647][ T10] dvb-usb: error while querying for an remote control event. [ 1499.307089][T25008] FAULT_INJECTION: forcing a failure. [ 1499.307089][T25008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1499.323454][T25008] CPU: 0 UID: 0 PID: 25008 Comm: syz.1.5048 Not tainted syzkaller #0 PREEMPT(full) [ 1499.323479][T25008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1499.323490][T25008] Call Trace: [ 1499.323498][T25008] [ 1499.323507][T25008] dump_stack_lvl+0x189/0x250 [ 1499.323533][T25008] ? __pfx____ratelimit+0x10/0x10 [ 1499.323554][T25008] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1499.323575][T25008] ? __pfx__printk+0x10/0x10 [ 1499.323598][T25008] ? __might_fault+0xb0/0x130 [ 1499.323633][T25008] should_fail_ex+0x414/0x560 [ 1499.323665][T25008] _copy_from_user+0x2d/0xb0 [ 1499.323688][T25008] cmsghdr_from_user_compat_to_kern+0x50b/0x800 [ 1499.323723][T25008] ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10 [ 1499.323757][T25008] ____sys_sendmsg+0x20f/0x830 [ 1499.323785][T25008] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1499.323822][T25008] ___sys_sendmsg+0x21f/0x2a0 [ 1499.323847][T25008] ? __pfx____sys_sendmsg+0x10/0x10 [ 1499.323901][T25008] ? __fget_files+0x2a/0x420 [ 1499.323916][T25008] ? __fget_files+0x3a0/0x420 [ 1499.323942][T25008] __sys_sendmmsg+0x28e/0x430 [ 1499.323970][T25008] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1499.324002][T25008] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1499.324041][T25008] ? ksys_write+0x22a/0x250 [ 1499.324075][T25008] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1499.324099][T25008] __do_fast_syscall_32+0xb6/0x2b0 [ 1499.324121][T25008] ? lockdep_hardirqs_on+0x9c/0x150 [ 1499.324144][T25008] do_fast_syscall_32+0x34/0x80 [ 1499.324165][T25008] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1499.324186][T25008] RIP: 0023:0xf7f34539 [ 1499.324203][T25008] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1499.324219][T25008] RSP: 002b:00000000f542655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 1499.324238][T25008] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800005c0 [ 1499.324251][T25008] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000000 [ 1499.324263][T25008] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1499.324274][T25008] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1499.324284][T25008] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1499.324312][T25008] [ 1499.563155][T23214] m920x_read = error: -19 [ 1499.567519][T23214] dvb-usb: error while querying for an remote control event. [ 1499.690608][ T5951] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1499.690749][T23214] m920x_read = error: -19 [ 1499.703654][T23214] dvb-usb: error while querying for an remote control event. [ 1499.818934][ T10] m920x_read = error: -19 [ 1499.823435][ T10] dvb-usb: error while querying for an remote control event. [ 1499.837547][T25012] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5049'. [ 1499.876001][T25012] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5049'. [ 1499.885712][ T5951] usb 3-1: Using ep0 maxpacket: 32 [ 1499.908426][T11734] usb 4-1: 0:2 : does not exist [ 1499.914961][ T5951] usb 3-1: config 0 has an invalid interface number: 66 but max is 0 [ 1499.932075][T11734] usb 4-1: unit 255 not found! [ 1499.938852][ T10] m920x_read = error: -19 [ 1499.943229][ T10] dvb-usb: error while querying for an remote control event. [ 1499.952336][ T5951] usb 3-1: config 0 has no interface number 0 [ 1499.981195][ T5951] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1500.000509][T11734] usb 4-1: USB disconnect, device number 59 [ 1500.012751][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.026333][ T5951] usb 3-1: Product: syz [ 1500.033779][ T5951] usb 3-1: Manufacturer: syz [ 1500.041222][ T5951] usb 3-1: SerialNumber: syz [ 1500.070906][ T10] m920x_read = error: -19 [ 1500.075416][ T10] dvb-usb: error while querying for an remote control event. [ 1500.085801][ T5912] udevd[5912]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1500.095556][ T5951] usb 3-1: config 0 descriptor?? [ 1500.189842][ T5951] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1500.197477][ T5951] dvb-usb: bulk message failed: -22 (2/0) [ 1500.218994][ T10] m920x_read = error: -19 [ 1500.230494][ T5951] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1500.230938][ T10] dvb-usb: error while querying for an remote control event. [ 1500.240533][ T5951] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1500.240593][ T5951] usb 3-1: media controller created [ 1500.302496][ T5951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1500.337400][ T5951] cxusb: set interface failed [ 1500.346081][ T5951] dvb-usb: bulk message failed: -22 (1/0) [ 1500.378442][T11734] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1500.414197][ T5951] DVB: Unable to find symbol lgdt330x_attach() [ 1500.426305][ T5951] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1500.488887][ T10] m920x_read = error: -19 [ 1500.493337][ T10] dvb-usb: error while querying for an remote control event. [ 1500.531046][T11734] usb 4-1: device descriptor read/64, error -71 [ 1500.538276][ T5951] rc_core: IR keymap rc-dvico-portable not found [ 1500.553729][ T5951] Registered IR keymap rc-empty [ 1500.584758][ T5951] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 1500.622301][ T5951] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input111 [ 1500.628873][ T10] m920x_read = error: -19 [ 1500.637048][ T10] dvb-usb: error while querying for an remote control event. [ 1500.642679][ T5951] dvb-usb: schedule remote query interval to 100 msecs. [ 1500.659415][ T5951] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1500.694882][ T5951] usb 3-1: USB disconnect, device number 97 [ 1500.759500][T18253] m920x_read = error: -19 [ 1500.763897][T18253] dvb-usb: error while querying for an remote control event. [ 1500.780941][T11734] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1500.848853][ T5951] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1500.878916][T18253] m920x_read = error: -19 [ 1500.893103][T18253] dvb-usb: error while querying for an remote control event. [ 1500.918325][T11734] usb 4-1: device descriptor read/64, error -71 [ 1500.936925][ T10] usb 6-1: USB disconnect, device number 11 [ 1501.040170][T11734] usb usb4-port1: attempt power cycle [ 1501.059706][T23214] m920x_read = error: -19 [ 1501.067137][T23214] dvb-usb: error while querying for an remote control event. [ 1501.194990][T25036] netlink: 136 bytes leftover after parsing attributes in process `syz.2.5056'. [ 1501.213526][T23214] m920x_read = error: -19 [ 1501.223553][T23214] dvb-usb: error while querying for an remote control event. [ 1501.362296][T23214] m920x_read = error: -19 [ 1501.376939][T23214] dvb-usb: error while querying for an remote control event. [ 1501.418598][T11734] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1501.459828][T11734] usb 4-1: device descriptor read/8, error -71 [ 1501.518607][T23214] m920x_read = error: -19 [ 1501.523073][T23214] dvb-usb: error while querying for an remote control event. [ 1501.641839][T23214] m920x_read = error: -19 [ 1501.653102][T25046] tipc: Started in network mode [ 1501.659047][T25046] tipc: Node identity e0000002, cluster identity 4711 [ 1501.666343][T25046] tipc: New replicast peer: 0.0.0.0 [ 1501.693754][T23214] dvb-usb: error while querying for an remote control event. [ 1501.702519][T25046] tipc: Enabled bearer , priority 10 [ 1501.738302][T11734] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1501.772548][T11734] usb 4-1: device descriptor read/8, error -71 [ 1501.828773][T23214] m920x_read = error: -19 [ 1501.833236][T23214] dvb-usb: error while querying for an remote control event. [ 1501.908632][T11734] usb usb4-port1: unable to enumerate USB device [ 1501.965968][T23214] m920x_read = error: -19 [ 1501.980650][T23214] dvb-usb: error while querying for an remote control event. [ 1502.105519][T23214] m920x_read = error: -19 [ 1502.114120][T23214] dvb-usb: error while querying for an remote control event. [ 1502.238585][T23214] m920x_read = error: -19 [ 1502.243097][T23214] dvb-usb: error while querying for an remote control event. [ 1502.576691][T23214] m920x_read = error: -19 [ 1502.581654][T23214] dvb-usb: error while querying for an remote control event. [ 1502.752316][T23214] m920x_read = error: -19 [ 1502.756658][T23214] dvb-usb: error while querying for an remote control event. [ 1502.832436][T23214] tipc: Node number set to 3758096386 [ 1502.987203][T23214] m920x_read = error: -19 [ 1502.999297][T23214] dvb-usb: error while querying for an remote control event. [ 1503.119729][T23214] m920x_read = error: -19 [ 1503.120474][T11734] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1503.144495][T23214] dvb-usb: error while querying for an remote control event. [ 1503.289795][T18253] m920x_read = error: -19 [ 1503.297341][T18253] dvb-usb: error while querying for an remote control event. [ 1503.309335][T11734] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1503.320213][T11734] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1503.371153][T11734] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1503.383322][T11734] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1503.392336][T11734] usb 2-1: SerialNumber: syz [ 1503.449624][T23214] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1503.463294][T18253] m920x_read = error: -19 [ 1503.471814][T18253] dvb-usb: error while querying for an remote control event. [ 1503.609246][T18253] m920x_read = error: -19 [ 1503.613713][T18253] dvb-usb: error while querying for an remote control event. [ 1503.622231][T23214] usb 4-1: Using ep0 maxpacket: 32 [ 1503.638947][T23214] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1503.654880][T23214] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1503.666327][T23214] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1503.683102][T23214] usb 4-1: Product: syz [ 1503.687431][T23214] usb 4-1: Manufacturer: syz [ 1503.691626][ T5951] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1503.693571][T23214] usb 4-1: SerialNumber: syz [ 1503.766085][T18253] m920x_read = error: -19 [ 1503.805544][T23214] usb 4-1: config 0 descriptor?? [ 1503.818853][T18253] dvb-usb: error while querying for an remote control event. [ 1503.824854][T25073] FAULT_INJECTION: forcing a failure. [ 1503.824854][T25073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1504.011586][ T5951] usb 6-1: Using ep0 maxpacket: 8 [ 1504.063179][ T5951] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1504.072179][ T5951] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1504.072401][T25073] CPU: 0 UID: 0 PID: 25073 Comm: syz.0.5068 Not tainted syzkaller #0 PREEMPT(full) [ 1504.072423][T25073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1504.072434][T25073] Call Trace: [ 1504.072442][T25073] [ 1504.072450][T25073] dump_stack_lvl+0x189/0x250 [ 1504.072478][T25073] ? __pfx____ratelimit+0x10/0x10 [ 1504.072498][T25073] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1504.072518][T25073] ? __pfx__printk+0x10/0x10 [ 1504.072541][T25073] ? __might_fault+0xb0/0x130 [ 1504.072575][T25073] should_fail_ex+0x414/0x560 [ 1504.072612][T25073] _copy_from_user+0x2d/0xb0 [ 1504.072636][T25073] vmci_host_unlocked_ioctl+0xa98/0x2650 [ 1504.072662][T25073] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 1504.072701][T25073] ? kasan_quarantine_put+0xdd/0x220 [ 1504.072732][T25073] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1504.072757][T25073] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1504.072784][T25073] ? do_vfs_ioctl+0xbe8/0x1430 [ 1504.072807][T25073] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1504.072841][T25073] ? __lock_acquire+0xab9/0xd20 [ 1504.072884][T25073] ? __fget_files+0x2a/0x420 [ 1504.072904][T25073] ? __fget_files+0x3a0/0x420 [ 1504.072918][T25073] ? __fget_files+0x2a/0x420 [ 1504.072937][T25073] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1504.072962][T25073] __ia32_compat_sys_ioctl+0x543/0x840 [ 1504.072987][T25073] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1504.073008][T25073] ? __fget_files+0x3a0/0x420 [ 1504.073031][T25073] ? fput+0xa0/0xd0 [ 1504.073049][T25073] ? ksys_write+0x22a/0x250 [ 1504.073080][T25073] ? lockdep_hardirqs_on+0x9c/0x150 [ 1504.073101][T25073] __do_fast_syscall_32+0xb6/0x2b0 [ 1504.073122][T25073] ? lockdep_hardirqs_on+0x9c/0x150 [ 1504.073144][T25073] do_fast_syscall_32+0x34/0x80 [ 1504.073163][T25073] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1504.073183][T25073] RIP: 0023:0xf705e539 [ 1504.073198][T25073] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1504.073213][T25073] RSP: 002b:00000000f544e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1504.073232][T25073] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000000007a5 [ 1504.073245][T25073] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1504.073256][T25073] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1504.073266][T25073] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1504.073277][T25073] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1504.073303][T25073] [ 1504.073750][T25065] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1504.336713][ T5951] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1504.338911][T18253] m920x_read = error: -19 [ 1504.347331][ T5951] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1504.361443][T18253] dvb-usb: error while querying for an remote control event. [ 1504.469036][T23214] m920x_read = error: -19 [ 1504.474111][T23214] dvb-usb: error while querying for an remote control event. [ 1504.477782][ T5951] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1504.595999][T23214] m920x_read = error: -19 [ 1504.603013][T23214] dvb-usb: error while querying for an remote control event. [ 1504.628410][ T5951] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1504.728989][T23214] m920x_read = error: -19 [ 1504.733647][T23214] dvb-usb: error while querying for an remote control event. [ 1504.742782][ T5951] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1504.858333][T23214] m920x_read = error: -19 [ 1504.862881][T23214] dvb-usb: error while querying for an remote control event. [ 1504.988885][T23214] m920x_read = error: -19 [ 1504.993369][T23214] dvb-usb: error while querying for an remote control event. [ 1505.022518][ T5951] usb 6-1: GET_CAPABILITIES returned 0 [ 1505.022548][ T5951] usbtmc 6-1:16.0: can't read capabilities [ 1505.075853][ T5951] usb 6-1: USB disconnect, device number 12 [ 1505.109012][T23214] m920x_read = error: -19 [ 1505.122055][T23214] dvb-usb: error while querying for an remote control event. [ 1505.248636][T23214] m920x_read = error: -19 [ 1505.253344][T23214] dvb-usb: error while querying for an remote control event. [ 1505.369413][T23214] m920x_read = error: -19 [ 1505.374367][T23214] dvb-usb: error while querying for an remote control event. [ 1505.499193][T23214] m920x_read = error: -19 [ 1505.507219][T23214] dvb-usb: error while querying for an remote control event. [ 1505.707111][T23214] m920x_read = error: -19 [ 1505.713971][T23214] dvb-usb: error while querying for an remote control event. [ 1506.068989][T23214] m920x_read = error: -19 [ 1506.075492][T23214] dvb-usb: error while querying for an remote control event. [ 1506.154540][T11734] usb 2-1: 0:2 : does not exist [ 1506.201042][T11734] usb 2-1: unit 255 not found! [ 1506.209753][T23214] m920x_read = error: -19 [ 1506.216474][T23214] dvb-usb: error while querying for an remote control event. [ 1506.333198][T11734] usb 2-1: USB disconnect, device number 81 [ 1506.384066][ T5912] udevd[5912]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1506.398706][T23214] m920x_read = error: -19 [ 1506.406650][T23214] dvb-usb: error while querying for an remote control event. [ 1506.559173][T23214] m920x_read = error: -19 [ 1506.608817][T23214] dvb-usb: error while querying for an remote control event. [ 1506.752930][ T10] m920x_read = error: -19 [ 1506.757300][ T10] dvb-usb: error while querying for an remote control event. [ 1506.888729][ T10] m920x_read = error: -19 [ 1506.895455][ T10] dvb-usb: error while querying for an remote control event. [ 1507.032585][ T10] m920x_read = error: -19 [ 1507.036962][ T10] dvb-usb: error while querying for an remote control event. [ 1507.220722][ T10] m920x_read = error: -19 [ 1507.220748][ T10] dvb-usb: error while querying for an remote control event. [ 1507.329166][ T10] m920x_read = error: -19 [ 1507.333897][ T10] dvb-usb: error while querying for an remote control event. [ 1507.495599][ T5951] usb 4-1: USB disconnect, device number 64 [ 1507.502162][ T10] m920x_read = error: -19 [ 1507.567571][ T10] dvb-usb: error while querying for an remote control event. [ 1507.889226][ T10] m920x_read = error: -19 [ 1507.893578][ T10] dvb-usb: error while querying for an remote control event. [ 1507.902205][T25119] syz_tun: entered allmulticast mode [ 1507.913230][T25119] dvmrp8: entered allmulticast mode [ 1507.954415][T25118] syz_tun: left allmulticast mode [ 1507.973243][T25118] dvmrp8: left allmulticast mode [ 1507.988841][T18253] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 1508.031877][ T10] m920x_read = error: -19 [ 1508.038273][ T10] dvb-usb: error while querying for an remote control event. [ 1508.168808][ T5919] m920x_read = error: -19 [ 1508.173254][ T5919] dvb-usb: error while querying for an remote control event. [ 1508.190852][T18253] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 1508.217044][T18253] usb 3-1: config 0 has no interface number 0 [ 1508.241404][T18253] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1508.259446][T18253] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.267529][T18253] usb 3-1: Product: syz [ 1508.289056][ T5919] m920x_read = error: -19 [ 1508.293410][ T5919] dvb-usb: error while querying for an remote control event. [ 1508.313830][T18253] usb 3-1: Manufacturer: syz [ 1508.343945][T18253] usb 3-1: SerialNumber: syz [ 1508.358818][T18253] usb 3-1: config 0 descriptor?? [ 1508.404819][T25124] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5083'. [ 1508.420857][T18253] m920x_read = error: -19 [ 1508.426374][T18253] dvb-usb: error while querying for an remote control event. [ 1508.557495][T25124] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1508.558990][T18253] m920x_read = error: -19 [ 1508.630507][T25117] netlink: 'syz.2.5080': attribute type 1 has an invalid length. [ 1508.654435][T18253] dvb-usb: error while querying for an remote control event. [ 1508.854018][T18253] m920x_read = error: -19 [ 1508.893515][T18253] dvb-usb: error while querying for an remote control event. [ 1509.071264][T25146] ======================================================= [ 1509.071264][T25146] WARNING: The mand mount option has been deprecated and [ 1509.071264][T25146] and is ignored by this kernel. Remove the mand [ 1509.071264][T25146] option from the mount to silence this warning. [ 1509.071264][T25146] ======================================================= [ 1509.089033][T18253] m920x_read = error: -19 [ 1509.106102][ C1] vkms_vblank_simulate: vblank timer overrun [ 1509.123483][T25134] bond2: (slave bridge3): making interface the new active one [ 1509.142501][T18253] dvb-usb: error while querying for an remote control event. [ 1509.167460][T25134] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 1509.258981][ T5919] m920x_read = error: -19 [ 1509.263374][ T5919] dvb-usb: error while querying for an remote control event. [ 1509.346399][T25122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5082'. [ 1509.378888][ T5919] m920x_read = error: -19 [ 1509.385274][ T5919] dvb-usb: error while querying for an remote control event. [ 1509.445232][T25122] vlan0: entered promiscuous mode [ 1509.504351][ T5919] m920x_read = error: -19 [ 1509.614149][ T5919] dvb-usb: error while querying for an remote control event. [ 1509.729202][ T5919] m920x_read = error: -19 [ 1509.733600][ T5919] dvb-usb: error while querying for an remote control event. [ 1509.918827][ T5919] m920x_read = error: -19 [ 1509.947502][ T5919] dvb-usb: error while querying for an remote control event. [ 1510.068943][ T5919] m920x_read = error: -19 [ 1510.073315][ T5919] dvb-usb: error while querying for an remote control event. [ 1510.368922][ T5919] m920x_read = error: -19 [ 1510.373298][ T5919] dvb-usb: error while querying for an remote control event. [ 1510.488903][ T5919] m920x_read = error: -19 [ 1510.493367][ T5919] dvb-usb: error while querying for an remote control event. [ 1510.601653][ T5951] usb 3-1: USB disconnect, device number 98 [ 1510.633216][ T5919] m920x_read = error: -19 [ 1510.717523][ T5919] dvb-usb: error while querying for an remote control event. [ 1511.189942][T18253] m920x_read = error: -19 [ 1511.194316][T18253] dvb-usb: error while querying for an remote control event. [ 1511.518577][ T5951] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1511.697539][T18253] m920x_read = error: -19 [ 1511.702463][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1511.702494][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1511.704513][ T5951] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1511.948301][T18240] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1511.958791][T18253] dvb-usb: error while querying for an remote control event. [ 1512.025355][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.098935][T18253] m920x_read = error: -19 [ 1512.110775][T18253] dvb-usb: error while querying for an remote control event. [ 1512.148273][ T5951] usb 4-1: Product: syz [ 1512.153182][ T5951] usb 4-1: Manufacturer: syz [ 1512.167733][T18240] usb 6-1: Using ep0 maxpacket: 32 [ 1512.178360][ T5951] usb 4-1: SerialNumber: syz [ 1512.184897][T18240] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1512.209906][ T5951] usb 4-1: config 0 descriptor?? [ 1512.227513][T18240] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1512.258365][T18240] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1512.259023][T18253] m920x_read = error: -19 [ 1512.267469][T18240] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.308456][T18240] usb 6-1: config 0 descriptor?? [ 1512.345391][T18240] hub 6-1:0.0: USB hub found [ 1512.434965][T18253] dvb-usb: error while querying for an remote control event. [ 1512.668464][T18240] hub 6-1:0.0: config failed, can't read hub descriptor (err -90) [ 1512.778976][T18253] m920x_read = error: -19 [ 1512.783520][T18253] dvb-usb: error while querying for an remote control event. [ 1512.836168][T25199] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5103'. [ 1512.886245][T25199] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5103'. [ 1512.909089][T18253] m920x_read = error: -19 [ 1512.913473][T18253] dvb-usb: error while querying for an remote control event. [ 1513.041028][T18253] m920x_read = error: -19 [ 1513.062300][T18253] dvb-usb: error while querying for an remote control event. [ 1513.136486][T18240] hid-generic 0003:046D:C31C.0034: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0 [ 1513.198801][T18253] m920x_read = error: -19 [ 1513.210535][T18253] dvb-usb: error while querying for an remote control event. [ 1513.379287][ T5919] m920x_read = error: -19 [ 1513.388551][ T5919] dvb-usb: error while querying for an remote control event. [ 1513.398655][T24427] usb 6-1: USB disconnect, device number 13 [ 1513.419336][T25207] fido_id[25207]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1513.538569][ T5919] m920x_read = error: -19 [ 1513.543091][ T5919] dvb-usb: error while querying for an remote control event. [ 1513.699072][ T5919] m920x_read = error: -19 [ 1513.703445][ T5919] dvb-usb: error while querying for an remote control event. [ 1513.818973][ T5919] m920x_read = error: -19 [ 1513.823436][ T5919] dvb-usb: error while querying for an remote control event. [ 1513.969462][T25202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5104'. [ 1514.038998][T18253] m920x_read = error: -19 [ 1514.043452][T18253] dvb-usb: error while querying for an remote control event. [ 1514.086181][T25202] vlan2: entered promiscuous mode [ 1514.160776][ T5919] m920x_read = error: -19 [ 1514.165254][ T5919] dvb-usb: error while querying for an remote control event. [ 1514.309037][ T5919] m920x_read = error: -19 [ 1514.313415][ T5919] dvb-usb: error while querying for an remote control event. [ 1514.448887][ T5919] m920x_read = error: -19 [ 1514.453264][ T5919] dvb-usb: error while querying for an remote control event. [ 1514.622189][ T5919] m920x_read = error: -19 [ 1514.646951][ T5919] dvb-usb: error while querying for an remote control event. [ 1514.690531][ T5951] usb 4-1: USB disconnect, device number 65 [ 1514.799195][ T5919] m920x_read = error: -19 [ 1514.803807][ T5919] dvb-usb: error while querying for an remote control event. [ 1514.831198][T22423] udevd[22423]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1514.928843][ T5919] m920x_read = error: -19 [ 1514.933263][ T5919] dvb-usb: error while querying for an remote control event. [ 1514.969200][T25223] FAULT_INJECTION: forcing a failure. [ 1514.969200][T25223] name failslab, interval 1, probability 0, space 0, times 0 [ 1515.048928][ T5919] m920x_read = error: -19 [ 1515.053305][ T5919] dvb-usb: error while querying for an remote control event. [ 1515.082197][T25223] CPU: 1 UID: 0 PID: 25223 Comm: syz.5.5108 Not tainted syzkaller #0 PREEMPT(full) [ 1515.082221][T25223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1515.082232][T25223] Call Trace: [ 1515.082240][T25223] [ 1515.082248][T25223] dump_stack_lvl+0x189/0x250 [ 1515.082274][T25223] ? __pfx____ratelimit+0x10/0x10 [ 1515.082292][T25223] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1515.082312][T25223] ? __pfx__printk+0x10/0x10 [ 1515.082343][T25223] ? __pfx___might_resched+0x10/0x10 [ 1515.082364][T25223] should_fail_ex+0x414/0x560 [ 1515.082391][T25223] ? create_io_worker+0x27/0x5d0 [ 1515.082416][T25223] should_failslab+0xa8/0x100 [ 1515.082443][T25223] __kmalloc_cache_noprof+0x70/0x3d0 [ 1515.082466][T25223] ? create_io_worker+0xac/0x5d0 [ 1515.082490][T25223] ? create_io_worker+0x27/0x5d0 [ 1515.082513][T25223] create_io_worker+0xac/0x5d0 [ 1515.082541][T25223] io_wq_enqueue+0x62c/0x850 [ 1515.082564][T25223] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 1515.082591][T25223] io_poll_task_func+0xb3e/0xfc0 [ 1515.082619][T25223] ? __pfx_io_poll_task_func+0x10/0x10 [ 1515.082643][T25223] ? percpu_ref_get_many+0x18c/0x1e0 [ 1515.082664][T25223] ? __pfx_io_poll_task_func+0x10/0x10 [ 1515.082682][T25223] io_handle_tw_list+0x1f5/0x4c0 [ 1515.082710][T25223] tctx_task_work_run+0x99/0x370 [ 1515.082734][T25223] tctx_task_work+0x3f/0x90 [ 1515.082756][T25223] task_work_run+0x1d4/0x260 [ 1515.082782][T25223] ? __pfx_task_work_run+0x10/0x10 [ 1515.082817][T25223] get_signal+0x11ed/0x1340 [ 1515.082857][T25223] arch_do_signal_or_restart+0x9a/0x750 [ 1515.082887][T25223] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1515.082920][T25223] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1515.082960][T25223] ? exit_to_user_mode_loop+0x40/0x110 [ 1515.082988][T25223] exit_to_user_mode_loop+0x75/0x110 [ 1515.083012][T25223] ? asm_int80_emulation+0x1a/0x20 [ 1515.083029][T25223] do_int80_emulation+0x2a0/0x390 [ 1515.083050][T25223] ? clear_bhb_loop+0x60/0xb0 [ 1515.083067][T25223] ? clear_bhb_loop+0x60/0xb0 [ 1515.083089][T25223] asm_int80_emulation+0x1a/0x20 [ 1515.083105][T25223] RIP: 0023:0xf70be539 [ 1515.083122][T25223] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1515.083137][T25223] RSP: 002b:00000000f548d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000000 [ 1515.083157][T25223] RAX: fffffffffffffdfc RBX: 0000000000000002 RCX: 0000000000000000 [ 1515.083169][T25223] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1515.083180][T25223] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1515.083191][T25223] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1515.083202][T25223] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1515.083231][T25223] [ 1515.198964][ T5919] m920x_read = error: -19 [ 1515.203904][ C1] vkms_vblank_simulate: vblank timer overrun [ 1515.398278][ T5951] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 1515.412981][T25234] FAULT_INJECTION: forcing a failure. [ 1515.412981][T25234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1515.434110][T25234] CPU: 0 UID: 0 PID: 25234 Comm: syz.1.5111 Not tainted syzkaller #0 PREEMPT(full) [ 1515.434136][T25234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1515.434148][T25234] Call Trace: [ 1515.434156][T25234] [ 1515.434165][T25234] dump_stack_lvl+0x189/0x250 [ 1515.434191][T25234] ? __pfx____ratelimit+0x10/0x10 [ 1515.434211][T25234] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1515.434231][T25234] ? __pfx__printk+0x10/0x10 [ 1515.434262][T25234] should_fail_ex+0x414/0x560 [ 1515.434293][T25234] _copy_to_user+0x31/0xb0 [ 1515.434316][T25234] simple_read_from_buffer+0xe1/0x170 [ 1515.434344][T25234] proc_fail_nth_read+0x1b3/0x220 [ 1515.434367][T25234] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1515.434389][T25234] ? rw_verify_area+0x2a6/0x4d0 [ 1515.434411][T25234] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1515.434431][T25234] vfs_read+0x200/0xa30 [ 1515.434456][T25234] ? rds_setsockopt+0x139/0xc40 [ 1515.434480][T25234] ? __pfx_vfs_read+0x10/0x10 [ 1515.434501][T25234] ? aa_sk_perm+0x81e/0x950 [ 1515.434529][T25234] ? __pfx_aa_sk_perm+0x10/0x10 [ 1515.434557][T25234] ksys_read+0x145/0x250 [ 1515.434580][T25234] ? __pfx_ksys_read+0x10/0x10 [ 1515.434612][T25234] ? lockdep_hardirqs_on+0x9c/0x150 [ 1515.434634][T25234] __do_fast_syscall_32+0xb6/0x2b0 [ 1515.434653][T25234] ? lockdep_hardirqs_on+0x9c/0x150 [ 1515.434671][T25234] do_fast_syscall_32+0x34/0x80 [ 1515.434688][T25234] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1515.434707][T25234] RIP: 0023:0xf7f34539 [ 1515.434723][T25234] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1515.434738][T25234] RSP: 002b:00000000f5426590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1515.434756][T25234] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5426620 [ 1515.434767][T25234] RDX: 000000000000000f RSI: 00000000f73c5ff4 RDI: 0000000000000000 [ 1515.434778][T25234] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1515.434789][T25234] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1515.434800][T25234] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1515.434826][T25234] [ 1515.455152][T25236] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20002 [ 1515.531899][ T5919] dvb-usb: error while querying for an remote control event. [ 1515.618425][ T5951] usb 4-1: device descriptor read/64, error -71 [ 1515.728944][ T5919] m920x_read = error: -19 [ 1515.749317][ T5919] dvb-usb: error while querying for an remote control event. [ 1515.859612][ T10] m920x_read = error: -19 [ 1515.864061][ T10] dvb-usb: error while querying for an remote control event. [ 1515.874845][T25246] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 1515.983792][ T10] m920x_read = error: -19 [ 1515.989398][ T10] dvb-usb: error while querying for an remote control event. [ 1515.998732][ T5919] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1516.101581][T18253] m920x_read = error: -19 [ 1516.105995][T18253] dvb-usb: error while querying for an remote control event. [ 1516.261358][T18253] m920x_read = error: -19 [ 1516.268439][T18253] dvb-usb: error while querying for an remote control event. [ 1516.378335][ T10] m920x_read = error: -19 [ 1516.383140][ T10] dvb-usb: error while querying for an remote control event. [ 1516.398829][T18253] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1516.418437][ T5951] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 1516.478452][T24427] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1516.498785][T23214] m920x_read = error: -19 [ 1516.503160][T23214] dvb-usb: error while querying for an remote control event. [ 1516.555076][T18253] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1516.569244][T18253] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1516.581098][ T5951] usb 4-1: device descriptor read/64, error -71 [ 1516.596559][T18253] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1516.610205][T18253] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1516.620856][T23214] m920x_read = error: -19 [ 1516.625194][T23214] dvb-usb: error while querying for an remote control event. [ 1516.633405][T18253] usb 2-1: SerialNumber: syz [ 1516.645337][T24427] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1516.657076][T24427] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1516.670811][T24427] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1516.685873][T24427] usb 3-1: config 220 has no interface number 2 [ 1516.696245][ T5951] usb usb4-port1: attempt power cycle [ 1516.705761][T24427] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1516.734727][T24427] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1516.745529][T24427] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1516.748827][T23214] m920x_read = error: -19 [ 1516.753558][T24427] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1516.756788][T23214] dvb-usb: error while querying for an remote control event. [ 1516.771484][T24427] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1516.786295][T24427] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1516.800318][T24427] usb 3-1: Product: syz [ 1516.809935][T24427] usb 3-1: Manufacturer: syz [ 1516.814546][T24427] usb 3-1: SerialNumber: syz [ 1516.899060][T23214] m920x_read = error: -19 [ 1516.906260][T23214] dvb-usb: error while querying for an remote control event. [ 1517.018974][ T10] m920x_read = error: -19 [ 1517.023469][ T10] dvb-usb: error while querying for an remote control event. [ 1517.048388][ T5951] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 1517.082358][ T5951] usb 4-1: device descriptor read/8, error -71 [ 1517.139042][ T10] m920x_read = error: -19 [ 1517.144070][T24427] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 1517.145417][ T10] dvb-usb: error while querying for an remote control event. [ 1517.175460][T24427] usb 3-1: No valid video chain found. [ 1517.194547][T24427] usb 3-1: selecting invalid altsetting 0 [ 1517.233630][T24427] usb 3-1: selecting invalid altsetting 0 [ 1517.248258][T24427] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 1517.268513][ T5919] m920x_read = error: -19 [ 1517.273727][T24427] usb 3-1: USB disconnect, device number 99 [ 1517.281121][ T5919] dvb-usb: error while querying for an remote control event. [ 1517.388300][ T5951] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 1517.420042][ T5951] usb 4-1: device descriptor read/8, error -71 [ 1517.509002][ T5919] m920x_read = error: -19 [ 1517.518847][ T5919] dvb-usb: error while querying for an remote control event. [ 1517.528892][ T5951] usb usb4-port1: unable to enumerate USB device [ 1517.651075][ T5919] m920x_read = error: -19 [ 1517.670704][ T5919] dvb-usb: error while querying for an remote control event. [ 1517.768348][T25259] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5119'. [ 1517.799097][ T5919] m920x_read = error: -19 [ 1517.803629][ T5919] dvb-usb: error while querying for an remote control event. [ 1517.883130][T25259] ip6gretap0: entered promiscuous mode [ 1517.892937][T25259] vlan2: entered promiscuous mode [ 1517.919354][ T5919] m920x_read = error: -19 [ 1517.926935][ T5919] dvb-usb: error while querying for an remote control event. [ 1518.022597][T25270] netlink: 160 bytes leftover after parsing attributes in process `syz.3.5122'. [ 1518.033552][T25270] netlink: 160 bytes leftover after parsing attributes in process `syz.3.5122'. [ 1518.079226][ T5919] m920x_read = error: -19 [ 1518.083782][ T5919] dvb-usb: error while querying for an remote control event. [ 1518.208904][ T5919] m920x_read = error: -19 [ 1518.213417][ T5919] dvb-usb: error while querying for an remote control event. [ 1518.246083][T25273] netlink: 160 bytes leftover after parsing attributes in process `syz.5.5123'. [ 1518.273316][T25273] netlink: 160 bytes leftover after parsing attributes in process `syz.5.5123'. [ 1518.322349][T25273] binfmt_misc: register: failed to install interpreter file ./file1 [ 1518.348875][ T5919] m920x_read = error: -19 [ 1518.353278][ T5919] dvb-usb: error while querying for an remote control event. [ 1518.469048][ T5951] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1518.490266][ T5919] m920x_read = error: -19 [ 1518.494721][ T5919] dvb-usb: error while querying for an remote control event. [ 1518.512920][T25283] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5126'. [ 1518.618739][ T5919] m920x_read = error: -19 [ 1518.623332][ T5919] dvb-usb: error while querying for an remote control event. [ 1518.659410][ T5951] usb 4-1: device descriptor read/64, error -71 [ 1518.779256][ T5919] m920x_read = error: -19 [ 1518.826095][ T5919] dvb-usb: error while querying for an remote control event. [ 1518.846473][T18253] usb 2-1: 0:2 : does not exist [ 1518.856315][T18253] usb 2-1: unit 255 not found! [ 1518.886532][T18253] usb 2-1: USB disconnect, device number 82 [ 1518.928763][ T5951] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1518.968416][T11734] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1518.972587][ T5912] udevd[5912]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1519.009557][ T5919] m920x_read = error: -19 [ 1519.032858][ T5919] dvb-usb: error while querying for an remote control event. [ 1519.091749][ T5951] usb 4-1: device descriptor read/64, error -71 [ 1519.138446][T11734] usb 6-1: Using ep0 maxpacket: 8 [ 1519.147233][T11734] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1519.161399][T11734] usb 6-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1519.172169][T11734] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 1519.188546][ T5919] m920x_read = error: -19 [ 1519.192933][ T5919] dvb-usb: error while querying for an remote control event. [ 1519.195128][T11734] usb 6-1: SerialNumber: syz [ 1519.328651][ T5919] m920x_read = error: -19 [ 1519.330820][ T5951] usb usb4-port1: attempt power cycle [ 1519.336540][ T5919] dvb-usb: error while querying for an remote control event. [ 1519.379057][T18253] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1519.379263][T11734] usb 6-1: config 0 descriptor?? [ 1519.455403][T11734] usb 6-1: Found UVC 0.00 device (05ac:8501) [ 1519.469806][ T5919] m920x_read = error: -19 [ 1519.474422][ T5919] dvb-usb: error while querying for an remote control event. [ 1519.485809][T11734] usb 6-1: No valid video chain found. [ 1519.518687][T18253] usb 2-1: device descriptor read/64, error -71 [ 1519.619541][ T5919] m920x_read = error: -19 [ 1519.624034][ T5919] dvb-usb: error while querying for an remote control event. [ 1519.720110][ T5951] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1519.748820][ T5919] m920x_read = error: -19 [ 1519.753380][ T5919] dvb-usb: error while querying for an remote control event. [ 1519.754068][ T5951] usb 4-1: device descriptor read/8, error -71 [ 1519.761944][T18253] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1519.888452][ T5919] m920x_read = error: -19 [ 1519.892910][ T5919] dvb-usb: error while querying for an remote control event. [ 1519.908782][T18253] usb 2-1: device descriptor read/64, error -71 [ 1520.008892][ T5919] m920x_read = error: -19 [ 1520.013276][ T5919] dvb-usb: error while querying for an remote control event. [ 1520.031328][ T5951] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1520.031516][T18253] usb usb2-port1: attempt power cycle [ 1520.081107][ T5951] usb 4-1: device descriptor read/8, error -71 [ 1520.148879][ T5919] m920x_read = error: -19 [ 1520.153269][ T5919] dvb-usb: error while querying for an remote control event. [ 1520.188961][ T5951] usb usb4-port1: unable to enumerate USB device [ 1520.269024][ T5919] m920x_read = error: -19 [ 1520.273397][ T5919] dvb-usb: error while querying for an remote control event. [ 1520.378778][T18253] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1520.398838][ T5919] m920x_read = error: -19 [ 1520.403300][ T5919] dvb-usb: error while querying for an remote control event. [ 1520.412814][T18253] usb 2-1: device descriptor read/8, error -71 [ 1520.529988][ T5919] m920x_read = error: -19 [ 1520.535596][ T5919] dvb-usb: error while querying for an remote control event. [ 1520.545274][T25302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5133'. [ 1520.565323][T25302] vlan2: entered promiscuous mode [ 1520.649988][T23214] m920x_read = error: -19 [ 1520.654351][T23214] dvb-usb: error while querying for an remote control event. [ 1520.666689][T18253] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1520.689882][T18253] usb 2-1: device descriptor read/8, error -71 [ 1520.781596][T23214] m920x_read = error: -19 [ 1520.786167][T23214] dvb-usb: error while querying for an remote control event. [ 1520.799360][T18253] usb usb2-port1: unable to enumerate USB device [ 1520.899000][T18253] m920x_read = error: -19 [ 1520.903382][T18253] dvb-usb: error while querying for an remote control event. [ 1521.019012][T18253] m920x_read = error: -19 [ 1521.023514][T18253] dvb-usb: error while querying for an remote control event. [ 1521.139684][T18253] m920x_read = error: -19 [ 1521.144037][T18253] dvb-usb: error while querying for an remote control event. [ 1521.255271][T25307] binder: 25306:25307 ioctl c0306201 80000240 returned -14 [ 1521.262441][T23214] m920x_read = error: -19 [ 1521.271123][T23214] dvb-usb: error while querying for an remote control event. [ 1521.388955][T18253] m920x_read = error: -19 [ 1521.393336][T18253] dvb-usb: error while querying for an remote control event. [ 1521.528500][ T5951] usb 6-1: USB disconnect, device number 15 [ 1521.548829][T18253] m920x_read = error: -19 [ 1521.554229][T18253] dvb-usb: error while querying for an remote control event. [ 1521.792777][T23214] m920x_read = error: -19 [ 1521.797130][T23214] dvb-usb: error while querying for an remote control event. [ 1521.919026][T18253] m920x_read = error: -19 [ 1521.923413][T18253] dvb-usb: error while querying for an remote control event. [ 1522.048317][T18253] m920x_read = error: -19 [ 1522.052746][T18253] dvb-usb: error while querying for an remote control event. [ 1522.060663][T23214] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1522.198859][ T10] m920x_read = error: -19 [ 1522.203269][ T10] dvb-usb: error while querying for an remote control event. [ 1522.234693][T23214] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1522.246035][T23214] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1522.265504][T23214] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1522.351087][T18253] m920x_read = error: -19 [ 1522.357417][T18253] dvb-usb: error while querying for an remote control event. [ 1522.366077][T23214] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1522.469865][T18253] m920x_read = error: -19 [ 1522.474208][T18253] dvb-usb: error while querying for an remote control event. [ 1522.482737][T23214] usb 6-1: SerialNumber: syz [ 1522.715131][T18253] m920x_read = error: -19 [ 1522.750866][T18253] dvb-usb: error while querying for an remote control event. [ 1522.893899][ T5919] m920x_read = error: -19 [ 1522.901539][ T5919] dvb-usb: error while querying for an remote control event. [ 1523.109069][ T5919] m920x_read = error: -19 [ 1523.114999][ T5919] dvb-usb: error while querying for an remote control event. [ 1523.301355][ T5919] m920x_read = error: -19 [ 1523.318808][ T5919] dvb-usb: error while querying for an remote control event. [ 1523.393644][T25340] tun0: tun_chr_ioctl cmd 1074025675 [ 1523.423940][T25340] tun0: persist enabled [ 1523.435168][T25337] tun0: tun_chr_ioctl cmd 1074025675 [ 1523.489026][ T5919] m920x_read = error: -19 [ 1523.493460][ T5919] dvb-usb: error while querying for an remote control event. [ 1523.537736][T25337] tun0: persist enabled [ 1523.658967][ T5919] m920x_read = error: -19 [ 1523.664349][ T5919] dvb-usb: error while querying for an remote control event. [ 1523.828579][ T5919] m920x_read = error: -19 [ 1523.861815][ T5919] dvb-usb: error while querying for an remote control event. [ 1524.018388][ T5919] m920x_read = error: -19 [ 1524.025135][ T5919] dvb-usb: error while querying for an remote control event. [ 1524.149391][ T5919] m920x_read = error: -19 [ 1524.153900][ T5919] dvb-usb: error while querying for an remote control event. [ 1524.174598][T25345] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1524.279023][ T5919] m920x_read = error: -19 [ 1524.283544][ T5919] dvb-usb: error while querying for an remote control event. [ 1524.316476][T25348] bond3: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 1524.329470][T25351] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.5149'. [ 1524.382888][T22936] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1524.406238][ T5919] m920x_read = error: -19 [ 1524.412440][ T5919] dvb-usb: error while querying for an remote control event. [ 1524.549697][ T5919] m920x_read = error: -19 [ 1524.554270][ T5919] dvb-usb: error while querying for an remote control event. [ 1524.568927][ T3012] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1524.708947][ T5919] m920x_read = error: -19 [ 1524.716896][ T5919] dvb-usb: error while querying for an remote control event. [ 1524.858699][ T10] m920x_read = error: -19 [ 1524.863083][ T10] dvb-usb: error while querying for an remote control event. [ 1524.969998][T23214] usb 6-1: 0:2 : does not exist [ 1524.978867][T18253] m920x_read = error: -19 [ 1524.983231][T18253] dvb-usb: error while querying for an remote control event. [ 1525.012062][T23214] usb 6-1: unit 255 not found! [ 1525.075923][ T5919] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1525.130947][T23214] usb 6-1: USB disconnect, device number 16 [ 1525.170198][ T10] m920x_read = error: -19 [ 1525.180736][ T10] dvb-usb: error while querying for an remote control event. [ 1525.323087][ T5919] usb 3-1: Using ep0 maxpacket: 8 [ 1525.328094][ T5912] udevd[5912]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1525.368848][ T10] m920x_read = error: -19 [ 1525.373345][ T10] dvb-usb: error while querying for an remote control event. [ 1525.797517][ T5919] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1525.931418][ T5919] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1525.950671][ T10] m920x_read = error: -19 [ 1525.955038][ T10] dvb-usb: error while querying for an remote control event. [ 1525.988740][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 1526.078287][ T5951] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 1526.090967][ T5919] usb 3-1: SerialNumber: syz [ 1526.218791][T23214] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1526.230500][ T10] m920x_read = error: -19 [ 1526.231541][ T5951] usb 4-1: device descriptor read/64, error -71 [ 1526.234947][ T10] dvb-usb: error while querying for an remote control event. [ 1526.248248][T11734] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1526.252532][ T5919] usb 3-1: config 0 descriptor?? [ 1526.342858][ T5919] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 1526.358786][ T5919] usb 3-1: No valid video chain found. [ 1526.420558][T23214] usb 2-1: Using ep0 maxpacket: 8 [ 1526.438897][T11734] usb 6-1: Using ep0 maxpacket: 16 [ 1526.445972][T11734] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 1526.456862][T11734] usb 6-1: config 0 has no interface number 0 [ 1526.464057][T11734] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1526.476482][T11734] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1526.497378][T11734] usb 6-1: config 0 interface 41 has no altsetting 0 [ 1526.504777][ T5951] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 1526.519698][T11734] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1526.533229][T11734] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.543410][ T5919] m920x_read = error: -19 [ 1526.570711][ T5919] dvb-usb: error while querying for an remote control event. [ 1526.580755][T11734] usb 6-1: Product: syz [ 1526.593246][T11734] usb 6-1: Manufacturer: syz [ 1526.611810][T11734] usb 6-1: SerialNumber: syz [ 1526.637216][T11734] usb 6-1: config 0 descriptor?? [ 1526.643510][ T5951] usb 4-1: device descriptor read/64, error -71 [ 1526.664274][T25384] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1526.677066][T25384] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1526.746389][T23214] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1526.771244][ T5951] usb usb4-port1: attempt power cycle [ 1526.858801][ T5919] m920x_read = error: -19 [ 1526.899232][ T5919] dvb-usb: error while querying for an remote control event. [ 1526.977544][T23214] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1527.021118][T23214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 1527.034419][T25384] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1527.062486][T23214] usb 2-1: SerialNumber: syz [ 1527.105009][T11734] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 1527.131504][ T5951] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 1527.162447][ T5919] m920x_read = error: -19 [ 1527.172943][T23214] usb 2-1: config 0 descriptor?? [ 1527.175182][T11734] usb 6-1: USB disconnect, device number 17 [ 1527.323955][ T5951] usb 4-1: device descriptor read/8, error -71 [ 1527.346252][ T5919] dvb-usb: error while querying for an remote control event. [ 1527.437121][T23214] usb 2-1: Found UVC 0.00 device (05ac:8501) [ 1527.459478][T23214] usb 2-1: No valid video chain found. [ 1527.488888][T23214] m920x_read = error: -19 [ 1527.493256][T23214] dvb-usb: error while querying for an remote control event. [ 1527.588552][ T5951] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 1527.608910][T23214] m920x_read = error: -19 [ 1527.614042][T23214] dvb-usb: error while querying for an remote control event. [ 1527.636572][ T5951] usb 4-1: device descriptor read/8, error -71 [ 1527.683641][T25394] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1527.749881][T23214] m920x_read = error: -19 [ 1527.765394][T23214] dvb-usb: error while querying for an remote control event. [ 1527.808755][ T5951] usb usb4-port1: unable to enumerate USB device [ 1527.838201][T11734] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1527.898884][T23214] m920x_read = error: -19 [ 1527.903336][T23214] dvb-usb: error while querying for an remote control event. [ 1528.014267][T11734] usb 6-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1528.019056][T23214] m920x_read = error: -19 [ 1528.029155][T23214] dvb-usb: error while querying for an remote control event. [ 1528.059460][T11734] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.072493][T11734] usb 6-1: Product: syz [ 1528.077230][T11734] usb 6-1: Manufacturer: syz [ 1528.082631][T11734] usb 6-1: SerialNumber: syz [ 1528.096640][T11734] usb 6-1: config 0 descriptor?? [ 1528.150970][T23214] m920x_read = error: -19 [ 1528.161987][T23214] dvb-usb: error while querying for an remote control event. [ 1528.278827][T23214] m920x_read = error: -19 [ 1528.283387][T23214] dvb-usb: error while querying for an remote control event. [ 1528.379041][T11734] mos7840 6-1:0.0: required endpoints missing [ 1528.408947][T23214] m920x_read = error: -19 [ 1528.413852][T23214] dvb-usb: error while querying for an remote control event. [ 1528.461700][T23214] usb 3-1: USB disconnect, device number 100 [ 1528.538913][ T5919] m920x_read = error: -19 [ 1528.543415][ T5919] dvb-usb: error while querying for an remote control event. [ 1528.582648][ T5919] usb 6-1: USB disconnect, device number 18 [ 1528.658374][ T10] m920x_read = error: -19 [ 1528.662819][ T10] dvb-usb: error while querying for an remote control event. [ 1528.778830][ T10] m920x_read = error: -19 [ 1528.790977][ T10] dvb-usb: error while querying for an remote control event. [ 1528.978854][ T10] m920x_read = error: -19 [ 1528.983229][ T10] dvb-usb: error while querying for an remote control event. [ 1529.032246][T25425] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5165'. [ 1529.074931][ T5951] usb 2-1: USB disconnect, device number 87 [ 1529.150297][ T10] m920x_read = error: -19 [ 1529.183900][ T10] dvb-usb: error while querying for an remote control event. [ 1529.360270][T23214] m920x_read = error: -19 [ 1529.364677][T23214] dvb-usb: error while querying for an remote control event. [ 1529.497204][T23214] m920x_read = error: -19 [ 1529.535090][T23214] dvb-usb: error while querying for an remote control event. [ 1529.610972][T25437] dvmrp0: left allmulticast mode [ 1529.700043][T23214] m920x_read = error: -19 [ 1529.710839][T23214] dvb-usb: error while querying for an remote control event. [ 1529.715346][T25447] FAULT_INJECTION: forcing a failure. [ 1529.715346][T25447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1529.742008][T25447] CPU: 1 UID: 0 PID: 25447 Comm: syz.0.5174 Not tainted syzkaller #0 PREEMPT(full) [ 1529.742031][T25447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1529.742041][T25447] Call Trace: [ 1529.742049][T25447] [ 1529.742057][T25447] dump_stack_lvl+0x189/0x250 [ 1529.742082][T25447] ? __pfx____ratelimit+0x10/0x10 [ 1529.742103][T25447] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1529.742124][T25447] ? __pfx__printk+0x10/0x10 [ 1529.742148][T25447] ? __might_fault+0xb0/0x130 [ 1529.742186][T25447] should_fail_ex+0x414/0x560 [ 1529.742217][T25447] _copy_from_user+0x2d/0xb0 [ 1529.742242][T25447] kstrtouint_from_user+0xc4/0x170 [ 1529.742265][T25447] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1529.742302][T25447] proc_fail_nth_write+0x88/0x200 [ 1529.742321][T25447] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1529.742357][T25447] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1529.742379][T25447] vfs_write+0x27b/0xb30 [ 1529.742410][T25447] ? __pfx_vfs_write+0x10/0x10 [ 1529.742435][T25447] ? __fget_files+0x2a/0x420 [ 1529.742457][T25447] ? __fget_files+0x3a0/0x420 [ 1529.742472][T25447] ? __fget_files+0x2a/0x420 [ 1529.742499][T25447] ksys_write+0x145/0x250 [ 1529.742525][T25447] ? __pfx_ksys_write+0x10/0x10 [ 1529.742545][T25447] ? __secure_computing+0xe2/0x2a0 [ 1529.742574][T25447] __do_fast_syscall_32+0xb6/0x2b0 [ 1529.742596][T25447] ? lockdep_hardirqs_on+0x9c/0x150 [ 1529.742620][T25447] do_fast_syscall_32+0x34/0x80 [ 1529.742639][T25447] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1529.742660][T25447] RIP: 0023:0xf705e539 [ 1529.742675][T25447] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1529.742691][T25447] RSP: 002b:00000000f544e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1529.742710][T25447] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f544e620 [ 1529.742722][T25447] RDX: 0000000000000001 RSI: 00000000f73f5ff4 RDI: 0000000000000000 [ 1529.742733][T25447] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1529.742744][T25447] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1529.742753][T25447] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1529.742783][T25447] [ 1529.858855][T23214] m920x_read = error: -19 [ 1530.195961][T23214] dvb-usb: error while querying for an remote control event. [ 1530.322412][ T5934] m920x_read = error: -19 [ 1530.326792][ T5934] dvb-usb: error while querying for an remote control event. [ 1531.138922][T23214] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 1531.263021][ T5934] m920x_read = error: -19 [ 1531.267422][ T5934] dvb-usb: error while querying for an remote control event. [ 1531.289438][T23214] usb 2-1: device descriptor read/64, error -71 [ 1531.389063][T25468] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5180'. [ 1531.419089][ T5934] m920x_read = error: -19 [ 1531.423908][ T5934] dvb-usb: error while querying for an remote control event. [ 1531.530778][T23214] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 1531.578597][ T5934] m920x_read = error: -19 [ 1531.595616][ T5934] dvb-usb: error while querying for an remote control event. [ 1531.927214][T23214] usb 2-1: device descriptor read/64, error -71 [ 1531.946813][T25479] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5182'. [ 1531.989124][ T5919] m920x_read = error: -19 [ 1531.993571][ T5919] dvb-usb: error while querying for an remote control event. [ 1532.083325][T23214] usb usb2-port1: attempt power cycle [ 1532.108776][ T5919] m920x_read = error: -19 [ 1532.113187][ T5919] dvb-usb: error while querying for an remote control event. [ 1532.238407][ T5919] m920x_read = error: -19 [ 1532.242920][ T5919] dvb-usb: error while querying for an remote control event. [ 1532.369029][T25490] syzkaller1: entered promiscuous mode [ 1532.374515][T25490] syzkaller1: entered allmulticast mode [ 1532.395109][ T5919] m920x_read = error: -19 [ 1532.428920][T23214] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 1532.538666][ T5919] dvb-usb: error while querying for an remote control event. [ 1532.590818][T23214] usb 2-1: device descriptor read/8, error -71 [ 1532.689572][ T5919] m920x_read = error: -19 [ 1532.696928][ T5919] dvb-usb: error while querying for an remote control event. [ 1532.809349][ T5919] m920x_read = error: -19 [ 1532.814175][ T5919] dvb-usb: error while querying for an remote control event. [ 1532.835442][T23214] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 1532.873298][T23214] usb 2-1: device descriptor read/8, error -71 [ 1532.930329][ T5919] m920x_read = error: -19 [ 1532.936003][ T5919] dvb-usb: error while querying for an remote control event. [ 1533.034674][T23214] usb usb2-port1: unable to enumerate USB device [ 1533.050176][T23214] m920x_read = error: -19 [ 1533.055352][T23214] dvb-usb: error while querying for an remote control event. [ 1533.168488][T23214] m920x_read = error: -19 [ 1533.174038][T23214] dvb-usb: error while querying for an remote control event. [ 1533.289233][T23214] m920x_read = error: -19 [ 1533.294666][T23214] dvb-usb: error while querying for an remote control event. [ 1533.518959][T23214] m920x_read = error: -19 [ 1533.595995][T23214] dvb-usb: error while querying for an remote control event. [ 1533.738456][T11734] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1533.788088][T25505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5189'. [ 1533.902624][T11734] usb 2-1: Using ep0 maxpacket: 8 [ 1533.916217][T23214] m920x_read = error: -19 [ 1533.921762][T23214] dvb-usb: error while querying for an remote control event. [ 1533.946005][T11734] usb 2-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 1533.968548][T11734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.044132][T11734] usb 2-1: Product: syz [ 1534.058584][T23214] m920x_read = error: -19 [ 1534.062932][T23214] dvb-usb: error while querying for an remote control event. [ 1534.183986][T23214] m920x_read = error: -19 [ 1534.191780][T23214] dvb-usb: error while querying for an remote control event. [ 1534.210689][T11734] usb 2-1: Manufacturer: syz [ 1534.215313][T11734] usb 2-1: SerialNumber: syz [ 1534.309092][T23214] m920x_read = error: -19 [ 1534.313516][T23214] dvb-usb: error while querying for an remote control event. [ 1534.438854][ T5919] m920x_read = error: -19 [ 1534.443344][ T5919] dvb-usb: error while querying for an remote control event. [ 1534.466095][T11734] usb 2-1: config 0 descriptor?? [ 1534.472863][T25534] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5195'. [ 1534.509978][T11734] cdc_ether 2-1:0.0: skipping garbage [ 1534.535848][T11734] usb 2-1: bad CDC descriptors [ 1534.590991][ T5919] m920x_read = error: -19 [ 1534.595365][ T5919] dvb-usb: error while querying for an remote control event. [ 1534.614640][T11734] usb 2-1: unsupported MDLM descriptors [ 1534.670069][T11734] cdc_acm 2-1:0.0: skipping garbage [ 1534.729370][ T5919] m920x_read = error: -19 [ 1534.733746][ T5919] dvb-usb: error while querying for an remote control event. [ 1534.744594][T11734] usb 2-1: USB disconnect, device number 92 [ 1534.909201][ T5919] m920x_read = error: -19 [ 1534.913573][ T5919] dvb-usb: error while querying for an remote control event. [ 1535.058677][ T5919] m920x_read = error: -19 [ 1535.068778][ T5919] dvb-usb: error while querying for an remote control event. [ 1535.222776][ T5919] m920x_read = error: -19 [ 1535.233289][ T5919] dvb-usb: error while querying for an remote control event. [ 1535.389614][ T5919] m920x_read = error: -19 [ 1535.393981][ T5919] dvb-usb: error while querying for an remote control event. [ 1535.447607][T25550] syzkaller1: entered promiscuous mode [ 1535.455188][T25550] syzkaller1: entered allmulticast mode [ 1535.508847][ T5919] m920x_read = error: -19 [ 1535.513341][ T5919] dvb-usb: error while querying for an remote control event. [ 1535.631954][ T5919] m920x_read = error: -19 [ 1535.636332][ T5919] dvb-usb: error while querying for an remote control event. [ 1535.637094][T25556] FAULT_INJECTION: forcing a failure. [ 1535.637094][T25556] name failslab, interval 1, probability 0, space 0, times 0 [ 1535.658251][T25556] CPU: 1 UID: 0 PID: 25556 Comm: syz.1.5200 Not tainted syzkaller #0 PREEMPT(full) [ 1535.658275][T25556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1535.658286][T25556] Call Trace: [ 1535.658295][T25556] [ 1535.658303][T25556] dump_stack_lvl+0x189/0x250 [ 1535.658328][T25556] ? __pfx____ratelimit+0x10/0x10 [ 1535.658349][T25556] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1535.658370][T25556] ? __pfx__printk+0x10/0x10 [ 1535.658401][T25556] ? __pfx___might_resched+0x10/0x10 [ 1535.658418][T25556] ? fs_reclaim_acquire+0x7d/0x100 [ 1535.658441][T25556] should_fail_ex+0x414/0x560 [ 1535.658473][T25556] should_failslab+0xa8/0x100 [ 1535.658499][T25556] __kmalloc_noprof+0xcb/0x4f0 [ 1535.658520][T25556] ? kfree+0x4d/0x440 [ 1535.658539][T25556] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1535.658565][T25556] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1535.658587][T25556] ? tomoyo_domain+0xd9/0x130 [ 1535.658613][T25556] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1535.658637][T25556] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1535.658662][T25556] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1535.658700][T25556] ? __lock_acquire+0xab9/0xd20 [ 1535.658743][T25556] ? __fget_files+0x2a/0x420 [ 1535.658763][T25556] ? __fget_files+0x3a0/0x420 [ 1535.658776][T25556] ? __fget_files+0x2a/0x420 [ 1535.658795][T25556] security_file_ioctl_compat+0xcb/0x2d0 [ 1535.658819][T25556] __ia32_compat_sys_ioctl+0x128/0x840 [ 1535.658843][T25556] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1535.658863][T25556] ? __fget_files+0x3a0/0x420 [ 1535.658885][T25556] ? fput+0xa0/0xd0 [ 1535.658904][T25556] ? ksys_write+0x22a/0x250 [ 1535.658933][T25556] ? lockdep_hardirqs_on+0x9c/0x150 [ 1535.658957][T25556] __do_fast_syscall_32+0xb6/0x2b0 [ 1535.658977][T25556] ? lockdep_hardirqs_on+0x9c/0x150 [ 1535.659005][T25556] do_fast_syscall_32+0x34/0x80 [ 1535.659025][T25556] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1535.659043][T25556] RIP: 0023:0xf7f34539 [ 1535.659059][T25556] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1535.659074][T25556] RSP: 002b:00000000f542655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1535.659094][T25556] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008953 [ 1535.659106][T25556] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1535.659118][T25556] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1535.659128][T25556] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1535.659137][T25556] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1535.659163][T25556] [ 1535.662220][T25556] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1535.818909][ T5919] m920x_read = error: -19 [ 1536.303245][ T5919] dvb-usb: error while querying for an remote control event. [ 1536.348158][T25576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5204'. [ 1536.648789][ T5919] m920x_read = error: -19 [ 1536.649345][T11734] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1536.653178][ T5919] dvb-usb: error while querying for an remote control event. [ 1536.802702][T25587] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5206'. [ 1536.878575][ T5919] m920x_read = error: -19 [ 1536.882933][ T5919] dvb-usb: error while querying for an remote control event. [ 1536.949865][T11734] usb 3-1: Using ep0 maxpacket: 8 [ 1537.050294][T25592] FAULT_INJECTION: forcing a failure. [ 1537.050294][T25592] name failslab, interval 1, probability 0, space 0, times 0 [ 1537.078978][ T5919] m920x_read = error: -19 [ 1537.083352][ T5919] dvb-usb: error while querying for an remote control event. [ 1537.093313][T11734] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1537.103585][T25592] CPU: 0 UID: 0 PID: 25592 Comm: syz.5.5207 Not tainted syzkaller #0 PREEMPT(full) [ 1537.103607][T25592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1537.103619][T25592] Call Trace: [ 1537.103628][T25592] [ 1537.103637][T25592] dump_stack_lvl+0x189/0x250 [ 1537.103671][T25592] ? __pfx____ratelimit+0x10/0x10 [ 1537.103691][T25592] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1537.103713][T25592] ? __pfx__printk+0x10/0x10 [ 1537.103744][T25592] ? __pfx___might_resched+0x10/0x10 [ 1537.103767][T25592] should_fail_ex+0x414/0x560 [ 1537.103799][T25592] ? alloc_netdev_mqs+0xa3/0x11b0 [ 1537.103822][T25592] should_failslab+0xa8/0x100 [ 1537.103850][T25592] __kvmalloc_node_noprof+0x161/0x5f0 [ 1537.103875][T25592] ? alloc_netdev_mqs+0xa3/0x11b0 [ 1537.103897][T25592] ? __pfx_snprintf+0x10/0x10 [ 1537.103925][T25592] alloc_netdev_mqs+0xa3/0x11b0 [ 1537.103947][T25592] ? __pfx_vlan_setup+0x10/0x10 [ 1537.103975][T25592] register_vlan_device+0x24f/0x4c0 [ 1537.104000][T25592] ? __pfx_register_vlan_device+0x10/0x10 [ 1537.104022][T25592] ? security_capable+0x7e/0x2e0 [ 1537.104053][T25592] vlan_ioctl_handler+0x281/0x650 [ 1537.104072][T25592] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 1537.104089][T25592] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1537.104117][T25592] ? do_vfs_ioctl+0xbe8/0x1430 [ 1537.104141][T25592] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1537.104163][T25592] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 1537.104183][T25592] sock_ioctl+0x60d/0x790 [ 1537.104209][T25592] ? __pfx_sock_ioctl+0x10/0x10 [ 1537.104233][T25592] ? __lock_acquire+0xab9/0xd20 [ 1537.104269][T25592] compat_sock_ioctl+0x285/0xc80 [ 1537.104300][T25592] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1537.104328][T25592] ? __fget_files+0x3a0/0x420 [ 1537.104342][T25592] ? __fget_files+0x2a/0x420 [ 1537.104360][T25592] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1537.104385][T25592] __ia32_compat_sys_ioctl+0x543/0x840 [ 1537.104410][T25592] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1537.104432][T25592] ? __fget_files+0x3a0/0x420 [ 1537.104454][T25592] ? fput+0xa0/0xd0 [ 1537.104473][T25592] ? ksys_write+0x22a/0x250 [ 1537.104504][T25592] ? lockdep_hardirqs_on+0x9c/0x150 [ 1537.104527][T25592] __do_fast_syscall_32+0xb6/0x2b0 [ 1537.104548][T25592] ? lockdep_hardirqs_on+0x9c/0x150 [ 1537.104570][T25592] do_fast_syscall_32+0x34/0x80 [ 1537.104590][T25592] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1537.104610][T25592] RIP: 0023:0xf70be539 [ 1537.104627][T25592] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1537.104641][T25592] RSP: 002b:00000000f54ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1537.104665][T25592] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008982 [ 1537.104678][T25592] RDX: 0000000080000380 RSI: 0000000000000000 RDI: 0000000000000000 [ 1537.104689][T25592] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1537.104700][T25592] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1537.104711][T25592] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1537.104739][T25592] [ 1537.670980][ T5919] m920x_read = error: -19 [ 1537.696501][ T5919] dvb-usb: error while querying for an remote control event. [ 1537.758785][T11734] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1537.777371][T11734] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 1537.796093][T11734] usb 3-1: SerialNumber: syz [ 1537.816993][T11734] usb 3-1: config 0 descriptor?? [ 1537.845236][T11734] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 1537.873502][T25601] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5210'. [ 1537.922264][T11734] usb 3-1: No valid video chain found. [ 1537.959157][ T5919] m920x_read = error: -19 [ 1537.963819][ T5919] dvb-usb: error while querying for an remote control event. [ 1537.989327][T25601] bridge0: port 2(bridge_slave_1) entered disabled state [ 1537.997469][T25601] bridge0: port 1(bridge_slave_0) entered disabled state [ 1538.089199][ T5919] m920x_read = error: -19 [ 1538.093793][ T5919] dvb-usb: error while querying for an remote control event. [ 1538.208833][ T5919] m920x_read = error: -19 [ 1538.213360][ T5919] dvb-usb: error while querying for an remote control event. [ 1538.329574][ T5919] m920x_read = error: -19 [ 1538.334036][ T5919] dvb-usb: error while querying for an remote control event. [ 1538.450994][ T5919] m920x_read = error: -19 [ 1538.455384][ T5919] dvb-usb: error while querying for an remote control event. [ 1538.555922][T25588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5202'. [ 1538.627018][ T5919] m920x_read = error: -19 [ 1538.632147][ T5919] dvb-usb: error while querying for an remote control event. [ 1538.653163][T25588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5202'. [ 1538.763001][ T5919] m920x_read = error: -19 [ 1538.767506][ T5919] dvb-usb: error while querying for an remote control event. [ 1538.888663][ T5919] m920x_read = error: -19 [ 1538.893068][ T5919] dvb-usb: error while querying for an remote control event. [ 1539.009043][ T5919] m920x_read = error: -19 [ 1539.013510][ T5919] dvb-usb: error while querying for an remote control event. [ 1539.017749][ T5951] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1539.132236][ T5919] m920x_read = error: -19 [ 1539.136608][ T5919] dvb-usb: error while querying for an remote control event. [ 1539.257581][ T5919] m920x_read = error: -19 [ 1539.303119][ T5919] dvb-usb: error while querying for an remote control event. [ 1539.314052][ T5934] usb 3-1: USB disconnect, device number 101 [ 1539.470344][T25621] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.5213'. [ 1539.479651][ T5919] m920x_read = error: -19 [ 1539.479680][ T5919] dvb-usb: error while querying for an remote control event. [ 1539.653819][ T5919] m920x_read = error: -19 [ 1539.697325][ T5919] dvb-usb: error while querying for an remote control event. [ 1539.829012][ T5934] m920x_read = error: -19 [ 1539.833377][ T5934] dvb-usb: error while querying for an remote control event. [ 1540.160648][ T5951] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1540.171813][ T5951] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1540.240318][ T5951] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1540.249777][ T5934] m920x_read = error: -19 [ 1540.249806][ T5934] dvb-usb: error while querying for an remote control event. [ 1540.271143][ T5951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1540.319374][ T5951] usb 2-1: SerialNumber: syz [ 1540.359523][ T5934] m920x_read = error: -19 [ 1540.367370][ T5934] dvb-usb: error while querying for an remote control event. [ 1540.488915][ T5934] m920x_read = error: -19 [ 1540.493397][ T5934] dvb-usb: error while querying for an remote control event. [ 1540.641286][ T5934] m920x_read = error: -19 [ 1540.679304][ T5934] dvb-usb: error while querying for an remote control event. [ 1540.788836][ T5919] m920x_read = error: -19 [ 1540.793524][ T5919] dvb-usb: error while querying for an remote control event. [ 1540.918670][ T5919] m920x_read = error: -19 [ 1540.923079][ T5919] dvb-usb: error while querying for an remote control event. [ 1541.098890][ T5919] m920x_read = error: -19 [ 1541.144096][ T5919] dvb-usb: error while querying for an remote control event. [ 1541.299102][ T5919] m920x_read = error: -19 [ 1541.303787][ T5919] dvb-usb: error while querying for an remote control event. [ 1541.438963][ T5919] m920x_read = error: -19 [ 1541.443518][ T5919] dvb-usb: error while querying for an remote control event. [ 1541.671119][ T5919] m920x_read = error: -19 [ 1541.675556][ T5919] dvb-usb: error while querying for an remote control event. [ 1541.906035][ T5919] m920x_read = error: -19 [ 1541.944012][ T5919] dvb-usb: error while querying for an remote control event. [ 1542.100121][ T5919] m920x_read = error: -19 [ 1542.110575][ T5919] dvb-usb: error while querying for an remote control event. [ 1542.366707][ T5919] m920x_read = error: -19 [ 1542.398778][ T5919] dvb-usb: error while querying for an remote control event. [ 1542.538842][ T5919] m920x_read = error: -19 [ 1542.543227][ T5919] dvb-usb: error while querying for an remote control event. [ 1542.728849][ T5919] m920x_read = error: -19 [ 1542.733229][ T5919] dvb-usb: error while querying for an remote control event. [ 1542.927524][T25640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5217'. [ 1543.279316][ T5919] m920x_read = error: -19 [ 1543.314172][T25640] vlan3: entered promiscuous mode [ 1543.343180][ T5919] dvb-usb: error while querying for an remote control event. [ 1543.346367][ T5951] usb 2-1: 0:2 : does not exist [ 1543.383092][ T5951] usb 2-1: unit 255 not found! [ 1543.469115][ T5919] m920x_read = error: -19 [ 1543.474747][ T5919] dvb-usb: error while querying for an remote control event. [ 1543.614735][ T5919] m920x_read = error: -19 [ 1543.624488][T25670] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5222'. [ 1543.644125][ T5919] dvb-usb: error while querying for an remote control event. [ 1543.707962][ T5951] usb 2-1: USB disconnect, device number 93 [ 1543.947112][ T5919] m920x_read = error: -19 [ 1543.956322][ T5919] dvb-usb: error while querying for an remote control event. [ 1544.050751][ T5912] udevd[5912]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1544.138850][ T5934] m920x_read = error: -19 [ 1544.143229][ T5934] dvb-usb: error while querying for an remote control event. [ 1544.378835][ T5919] m920x_read = error: -19 [ 1544.383196][ T5919] dvb-usb: error while querying for an remote control event. [ 1544.518510][ T5951] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1544.721686][ T5919] m920x_read = error: -19 [ 1544.730398][ T5919] dvb-usb: error while querying for an remote control event. [ 1544.737789][T25685] pim6reg: entered allmulticast mode [ 1544.769213][ T5951] usb 2-1: Using ep0 maxpacket: 8 [ 1544.806800][ T5951] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1544.833261][ T5951] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1544.860841][ T5951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 1544.943590][ T5951] usb 2-1: SerialNumber: syz [ 1544.961241][ T5951] usb 2-1: config 0 descriptor?? [ 1544.978813][ T5919] m920x_read = error: -19 [ 1544.983174][ T5919] dvb-usb: error while querying for an remote control event. [ 1545.000830][ T5951] usb 2-1: Found UVC 0.00 device (05ac:8501) [ 1545.033414][ T5951] usb 2-1: No valid video chain found. [ 1545.169166][ T10] m920x_read = error: -19 [ 1545.173567][ T10] dvb-usb: error while querying for an remote control event. [ 1545.379266][ T5919] m920x_read = error: -19 [ 1545.383650][ T5919] dvb-usb: error while querying for an remote control event. [ 1545.529120][ T5919] m920x_read = error: -19 [ 1545.535199][ T5919] dvb-usb: error while querying for an remote control event. [ 1545.543303][ T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1545.670087][ T5919] m920x_read = error: -19 [ 1545.677115][ T5919] dvb-usb: error while querying for an remote control event. [ 1545.685247][ T10] usb 6-1: device descriptor read/64, error -71 [ 1545.725694][T25695] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5227'. [ 1545.838936][ T5919] m920x_read = error: -19 [ 1545.843409][ T5919] dvb-usb: error while querying for an remote control event. [ 1545.958653][ T10] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1545.977142][ T5919] m920x_read = error: -19 [ 1546.001641][ T5919] dvb-usb: error while querying for an remote control event. [ 1546.024050][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.031633][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.140392][ T10] usb 6-1: device descriptor read/64, error -71 [ 1546.174931][ T5919] m920x_read = error: -19 [ 1546.197531][ T5919] dvb-usb: error while querying for an remote control event. [ 1546.278778][ T10] usb usb6-port1: attempt power cycle [ 1546.583985][ T5919] m920x_read = error: -19 [ 1546.589468][ T5919] dvb-usb: error while querying for an remote control event. [ 1546.699977][ T5919] m920x_read = error: -19 [ 1546.704387][ T5919] dvb-usb: error while querying for an remote control event. [ 1546.828348][ T5919] m920x_read = error: -19 [ 1546.832728][ T5919] dvb-usb: error while querying for an remote control event. [ 1546.854738][T25722] fuse: Bad value for 'fd' [ 1546.869331][ T10] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1546.888983][ T10] usb 6-1: device descriptor read/8, error -71 [ 1546.968816][ T5919] m920x_read = error: -19 [ 1546.973168][ T5919] dvb-usb: error while querying for an remote control event. [ 1547.088864][ T5919] m920x_read = error: -19 [ 1547.096441][ T5919] dvb-usb: error while querying for an remote control event. [ 1547.128059][ T10] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1547.148302][T18240] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1547.159243][ T10] usb 6-1: device descriptor read/8, error -71 [ 1547.208474][T23214] m920x_read = error: -19 [ 1547.212888][T23214] dvb-usb: error while querying for an remote control event. [ 1547.248275][ T5951] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1547.269608][ T10] usb usb6-port1: unable to enumerate USB device [ 1547.379767][T18240] usb 4-1: Using ep0 maxpacket: 32 [ 1547.386570][T18240] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 114, changing to 10 [ 1547.398635][T18240] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26412, setting to 1024 [ 1547.398759][ T10] m920x_read = error: -19 [ 1547.420135][T11734] usb 2-1: USB disconnect, device number 94 [ 1547.427561][ T10] dvb-usb: error while querying for an remote control event. [ 1547.435956][T18240] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1547.465954][T18240] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.502676][ T5951] usb 3-1: config 0 has no interfaces? [ 1547.521982][T18240] usb 4-1: config 0 descriptor?? [ 1547.530120][ T5951] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1547.539221][ T10] m920x_read = error: -19 [ 1547.539250][ T10] dvb-usb: error while querying for an remote control event. [ 1547.559828][T25725] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1547.581496][T18240] hub 4-1:0.0: USB hub found [ 1547.625353][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1547.641324][ T5951] usb 3-1: Product: syz [ 1547.645787][ T5951] usb 3-1: Manufacturer: syz [ 1547.651083][ T5951] usb 3-1: SerialNumber: syz [ 1547.651591][ T10] m920x_read = error: -19 [ 1547.666215][ T10] dvb-usb: error while querying for an remote control event. [ 1547.666822][ T5951] usb 3-1: config 0 descriptor?? [ 1547.827213][ T10] m920x_read = error: -19 [ 1547.836999][ T10] dvb-usb: error while querying for an remote control event. [ 1547.842151][T25734] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5241'. [ 1547.958888][ T10] m920x_read = error: -19 [ 1547.964914][ T10] dvb-usb: error while querying for an remote control event. [ 1548.109397][ T5919] m920x_read = error: -19 [ 1548.115019][ T5919] dvb-usb: error while querying for an remote control event. [ 1548.248972][ T10] m920x_read = error: -19 [ 1548.253476][ T10] dvb-usb: error while querying for an remote control event. [ 1548.268821][T23214] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1548.283949][T25726] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5238'. [ 1548.368174][ T10] m920x_read = error: -19 [ 1548.372554][ T10] dvb-usb: error while querying for an remote control event. [ 1548.418872][T23214] usb 2-1: Using ep0 maxpacket: 8 [ 1548.431378][T23214] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1548.454030][T23214] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1548.464806][T23214] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1548.475803][T23214] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1548.487002][T23214] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1548.504289][ T10] m920x_read = error: -19 [ 1548.518941][T23214] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1548.529484][ T10] dvb-usb: error while querying for an remote control event. [ 1548.543024][T23214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.659110][ T10] m920x_read = error: -19 [ 1548.664918][ T10] dvb-usb: error while querying for an remote control event. [ 1548.780234][T23214] usb 2-1: usb_control_msg returned -32 [ 1548.788807][ T10] m920x_read = error: -19 [ 1548.793295][T23214] usbtmc 2-1:16.0: can't read capabilities [ 1548.803063][ T10] dvb-usb: error while querying for an remote control event. [ 1548.836894][T25746] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5245'. [ 1548.846947][T25746] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5245'. [ 1548.979176][ T10] m920x_read = error: -19 [ 1548.983561][ T10] dvb-usb: error while querying for an remote control event. [ 1549.098988][ T10] m920x_read = error: -19 [ 1549.104234][ T10] dvb-usb: error while querying for an remote control event. [ 1549.219150][ T10] m920x_read = error: -19 [ 1549.229601][ T10] dvb-usb: error while querying for an remote control event. [ 1549.349287][ T10] m920x_read = error: -19 [ 1549.362037][ T10] dvb-usb: error while querying for an remote control event. [ 1549.508870][ T10] m920x_read = error: -19 [ 1549.513385][ T10] dvb-usb: error while querying for an remote control event. [ 1549.535260][T25753] usbtmc 2-1:16.0: usb_clear_halt returned -32 [ 1549.639095][ T10] m920x_read = error: -19 [ 1549.646634][ T10] dvb-usb: error while querying for an remote control event. [ 1549.671104][T25759] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -90 [ 1549.763941][T18240] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 1549.778603][ T10] m920x_read = error: -19 [ 1549.783656][ T10] dvb-usb: error while querying for an remote control event. [ 1549.861229][T25766] trusted_key: encrypted_key: keylen parameter is missing [ 1549.884006][T18240] usbhid 4-1:0.0: can't add hid device: -71 [ 1549.904215][T18240] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1549.991819][ T5951] usb 3-1: USB disconnect, device number 102 [ 1550.008560][ T10] m920x_read = error: -19 [ 1550.015094][ T10] dvb-usb: error while querying for an remote control event. [ 1550.148771][ T10] m920x_read = error: -19 [ 1550.153410][ T10] dvb-usb: error while querying for an remote control event. [ 1550.219640][T18240] usb 4-1: reset high-speed USB device number 78 using dummy_hcd [ 1550.227493][T11734] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1550.237538][T18240] usb 4-1: device reset changed ep0 maxpacket size! [ 1550.314921][T18240] usb 4-1: USB disconnect, device number 78 [ 1550.321574][ T10] m920x_read = error: -19 [ 1550.326412][ T10] dvb-usb: error while querying for an remote control event. [ 1550.448905][ T10] m920x_read = error: -19 [ 1550.453323][ T10] dvb-usb: error while querying for an remote control event. [ 1550.468586][T11734] usb 6-1: Using ep0 maxpacket: 8 [ 1550.782018][ T10] m920x_read = error: -19 [ 1550.795362][T11734] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1550.807384][ T10] dvb-usb: error while querying for an remote control event. [ 1550.816825][T11734] usb 6-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1550.844123][T18240] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1550.861717][T11734] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 1550.932029][ T10] m920x_read = error: -19 [ 1550.936485][ T10] dvb-usb: error while querying for an remote control event. [ 1550.950234][T11734] usb 6-1: SerialNumber: syz [ 1550.989604][T11734] usb 6-1: config 0 descriptor?? [ 1551.071041][ T10] m920x_read = error: -19 [ 1551.091231][ T10] dvb-usb: error while querying for an remote control event. [ 1551.098336][T18240] usb 4-1: Using ep0 maxpacket: 8 [ 1551.125893][T18240] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1551.143922][T18240] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.179285][ T5919] hid (null): invalid report_size 28520 [ 1551.195101][T11734] usb 6-1: Found UVC 0.00 device (05ac:8501) [ 1551.212840][T18240] usb 4-1: config 0 descriptor?? [ 1551.230413][T11734] usb 6-1: No valid video chain found. [ 1551.260155][ T5919] hid-generic 00A0:0006:0003.0035: invalid report_size 28520 [ 1551.301610][ T10] usb 2-1: USB disconnect, device number 95 [ 1551.315653][ T5919] hid-generic 00A0:0006:0003.0035: item 0 2 1 7 parsing failed [ 1551.369289][ T5934] m920x_read = error: -19 [ 1551.373665][ T5934] dvb-usb: error while querying for an remote control event. [ 1551.435503][ T5919] hid-generic 00A0:0006:0003.0035: probe with driver hid-generic failed with error -22 [ 1551.488644][T23214] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 1551.936367][ T5919] m920x_read = error: -19 [ 1551.946577][ T5919] dvb-usb: error while querying for an remote control event. [ 1552.069451][ T10] m920x_read = error: -19 [ 1552.073880][ T10] dvb-usb: error while querying for an remote control event. [ 1552.108512][T23214] usb 3-1: config 0 has no interfaces? [ 1552.118752][T23214] usb 3-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 1552.235308][ T10] m920x_read = error: -19 [ 1552.292749][ T10] dvb-usb: error while querying for an remote control event. [ 1552.303246][T23214] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1552.384404][T11734] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1552.394890][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 1552.433543][ T5919] m920x_read = error: -19 [ 1552.445372][T23214] usb 3-1: config 0 descriptor?? [ 1552.453866][ T5919] dvb-usb: error while querying for an remote control event. [ 1552.529819][T11734] usb 2-1: device descriptor read/64, error -32 [ 1552.569149][T23214] m920x_read = error: -19 [ 1552.573533][T23214] dvb-usb: error while querying for an remote control event. [ 1552.693241][T23214] m920x_read = error: -19 [ 1552.710713][T23214] dvb-usb: error while querying for an remote control event. [ 1552.833349][T11734] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1552.857292][T23214] m920x_read = error: -19 [ 1552.876643][T23214] dvb-usb: error while querying for an remote control event. [ 1552.954784][ T5951] usb 6-1: USB disconnect, device number 23 [ 1553.026923][T11734] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1553.038297][T23214] m920x_read = error: -19 [ 1553.038326][T23214] dvb-usb: error while querying for an remote control event. [ 1553.101219][T11734] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1553.149224][T23214] m920x_read = error: -19 [ 1553.157057][T23214] dvb-usb: error while querying for an remote control event. [ 1553.269799][T11734] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1553.291490][T11734] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1553.300329][T18240] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 1553.318311][T11734] usb 2-1: SerialNumber: syz [ 1553.319298][T23214] m920x_read = error: -19 [ 1553.331821][T18240] asix 4-1:0.0: probe with driver asix failed with error -71 [ 1553.337572][T23214] dvb-usb: error while querying for an remote control event. [ 1553.365979][T18240] usb 4-1: USB disconnect, device number 79 [ 1553.498870][T23214] m920x_read = error: -19 [ 1553.541054][T23214] dvb-usb: error while querying for an remote control event. [ 1553.745880][T23214] m920x_read = error: -19 [ 1553.781011][T23214] dvb-usb: error while querying for an remote control event. [ 1553.899113][T23214] m920x_read = error: -19 [ 1553.903674][T23214] dvb-usb: error while querying for an remote control event. [ 1554.139058][T23214] m920x_read = error: -19 [ 1554.143434][T23214] dvb-usb: error while querying for an remote control event. [ 1554.278529][T23214] m920x_read = error: -19 [ 1554.282905][T23214] dvb-usb: error while querying for an remote control event. [ 1554.410023][T18240] usb 3-1: USB disconnect, device number 103 [ 1554.438811][T23214] m920x_read = error: -19 [ 1554.466610][T23214] dvb-usb: error while querying for an remote control event. [ 1554.523755][T25811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5262'. [ 1554.603187][T25811] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5262'. [ 1554.628959][T23214] m920x_read = error: -19 [ 1554.633332][T23214] dvb-usb: error while querying for an remote control event. [ 1554.665380][T25811] gtp0: entered promiscuous mode [ 1554.705013][T25811] gtp0: entered allmulticast mode [ 1554.798825][T23214] m920x_read = error: -19 [ 1554.810167][T23214] dvb-usb: error while querying for an remote control event. [ 1554.918839][T23214] m920x_read = error: -19 [ 1554.923203][T23214] dvb-usb: error while querying for an remote control event. [ 1554.937530][T11734] usb 2-1: 0:2 : does not exist [ 1554.958698][T11734] usb 2-1: unit 255 not found! [ 1554.966133][T18240] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 1555.019507][T25826] netlink: 'syz.1.5268': attribute type 13 has an invalid length. [ 1555.029367][T11734] usb 2-1: USB disconnect, device number 97 [ 1555.056943][ T5912] udevd[5912]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1555.090388][T23214] m920x_read = error: -19 [ 1555.095023][T23214] dvb-usb: error while querying for an remote control event. [ 1555.488600][T23214] m920x_read = error: -19 [ 1555.492954][T23214] dvb-usb: error while querying for an remote control event. [ 1555.795548][T23214] m920x_read = error: -19 [ 1555.808992][T23214] dvb-usb: error while querying for an remote control event. [ 1555.836934][T18240] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1555.906852][T18240] usb 3-1: not running at top speed; connect to a high speed hub [ 1555.940136][ T10] m920x_read = error: -19 [ 1555.944307][T18240] usb 3-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1555.944496][ T10] dvb-usb: error while querying for an remote control event. [ 1556.002437][T18240] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1556.068580][ T10] m920x_read = error: -19 [ 1556.073075][ T10] dvb-usb: error while querying for an remote control event. [ 1556.137267][T18240] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1556.147192][T18240] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.155736][T18240] usb 3-1: Product: syz [ 1556.170407][T18240] usb 3-1: Manufacturer: syz [ 1556.175416][T18240] usb 3-1: SerialNumber: syz [ 1556.203324][ T10] m920x_read = error: -19 [ 1556.211161][ T10] dvb-usb: error while querying for an remote control event. [ 1556.324814][T25836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5269'. [ 1556.424045][T18240] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 1556.444242][T18240] usb 3-1: USB disconnect, device number 104 [ 1556.690509][ T10] m920x_read = error: -19 [ 1556.705310][ T10] dvb-usb: error while querying for an remote control event. [ 1556.989402][ T10] m920x_read = error: -19 [ 1557.002269][ T10] dvb-usb: error while querying for an remote control event. [ 1557.158352][ T10] m920x_read = error: -19 [ 1557.162810][ T10] dvb-usb: error while querying for an remote control event. [ 1557.328926][T23214] m920x_read = error: -19 [ 1557.333304][T23214] dvb-usb: error while querying for an remote control event. [ 1557.578312][T11734] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1557.588708][ T10] m920x_read = error: -19 [ 1557.660050][ T10] dvb-usb: error while querying for an remote control event. [ 1557.788526][T23214] m920x_read = error: -19 [ 1557.796099][T23214] dvb-usb: error while querying for an remote control event. [ 1557.835812][T11734] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1557.850966][T11734] usb 4-1: config 0 has no interface number 0 [ 1557.862593][T25849] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5274'. [ 1557.872569][T11734] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1557.872598][T11734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1557.872639][T11734] usb 4-1: Product: syz [ 1557.872654][T11734] usb 4-1: Manufacturer: syz [ 1557.872668][T11734] usb 4-1: SerialNumber: syz [ 1557.875793][T11734] usb 4-1: config 0 descriptor?? [ 1557.929555][T23214] m920x_read = error: -19 [ 1557.956239][T23214] dvb-usb: error while querying for an remote control event. [ 1558.078759][T23214] m920x_read = error: -19 [ 1558.089165][T25853] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1558.108794][T23214] dvb-usb: error while querying for an remote control event. [ 1558.228536][ T10] m920x_read = error: -19 [ 1558.232891][ T10] dvb-usb: error while querying for an remote control event. [ 1558.364567][ T10] m920x_read = error: -19 [ 1558.390308][ T10] dvb-usb: error while querying for an remote control event. [ 1558.459583][T25865] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.5278'. [ 1558.553250][ T10] m920x_read = error: -19 [ 1558.673330][ T10] dvb-usb: error while querying for an remote control event. [ 1558.848856][T23214] m920x_read = error: -19 [ 1558.854382][T23214] dvb-usb: error while querying for an remote control event. [ 1558.868679][T11734] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1558.899735][T11734] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1558.936844][T25872] IPVS: Error joining to the multicast group [ 1558.978870][T23214] m920x_read = error: -19 [ 1558.983271][T23214] dvb-usb: error while querying for an remote control event. [ 1559.215781][T11734] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1559.418806][T23214] m920x_read = error: -19 [ 1559.423158][T23214] dvb-usb: error while querying for an remote control event. [ 1559.639869][T11734] usb 4-1: media controller created [ 1559.648919][T23214] m920x_read = error: -19 [ 1559.653278][T23214] dvb-usb: error while querying for an remote control event. [ 1559.695509][T11734] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1559.764982][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1559.764995][ T30] audit: type=1326 audit(1759129137.324:3784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25876 comm="syz.5.5281" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x0 [ 1559.826763][T25879] netlink: 'syz.5.5281': attribute type 1 has an invalid length. [ 1559.958383][ T10] m920x_read = error: -19 [ 1559.962740][ T10] dvb-usb: error while querying for an remote control event. [ 1560.159753][ T10] m920x_read = error: -19 [ 1560.164694][ T10] dvb-usb: error while querying for an remote control event. [ 1560.287018][T25879] bond2: entered promiscuous mode [ 1560.318893][ T10] m920x_read = error: -19 [ 1560.338783][ T10] dvb-usb: error while querying for an remote control event. [ 1560.381126][T11734] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 1560.391814][T25879] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1560.519110][ T10] m920x_read = error: -19 [ 1560.528834][ T10] dvb-usb: error while querying for an remote control event. [ 1560.538705][T25890] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5282'. [ 1560.588955][T11734] usb 4-1: USB disconnect, device number 80 [ 1560.678840][ T10] m920x_read = error: -19 [ 1560.737459][ T10] dvb-usb: error while querying for an remote control event. [ 1560.764868][T25897] FAULT_INJECTION: forcing a failure. [ 1560.764868][T25897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1560.868818][T25897] CPU: 0 UID: 0 PID: 25897 Comm: syz.3.5284 Not tainted syzkaller #0 PREEMPT(full) [ 1560.868841][T25897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1560.868848][T25897] Call Trace: [ 1560.868853][T25897] [ 1560.868859][T25897] dump_stack_lvl+0x189/0x250 [ 1560.868876][T25897] ? __pfx____ratelimit+0x10/0x10 [ 1560.868888][T25897] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1560.868899][T25897] ? __pfx__printk+0x10/0x10 [ 1560.868919][T25897] should_fail_ex+0x414/0x560 [ 1560.868937][T25897] _copy_to_user+0x31/0xb0 [ 1560.868951][T25897] simple_read_from_buffer+0xe1/0x170 [ 1560.868969][T25897] proc_fail_nth_read+0x1b3/0x220 [ 1560.868982][T25897] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1560.868995][T25897] ? rw_verify_area+0x2a6/0x4d0 [ 1560.869008][T25897] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1560.869019][T25897] vfs_read+0x200/0xa30 [ 1560.869033][T25897] ? __asan_memset+0x22/0x50 [ 1560.869046][T25897] ? __pfx_vfs_read+0x10/0x10 [ 1560.869057][T25897] ? xsk_setsockopt+0x319/0x8d0 [ 1560.869073][T25897] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1560.869088][T25897] ? __pfx_aa_sk_perm+0x10/0x10 [ 1560.869109][T25897] ksys_read+0x145/0x250 [ 1560.869123][T25897] ? __pfx_ksys_read+0x10/0x10 [ 1560.869137][T25897] ? lockdep_hardirqs_on+0x9c/0x150 [ 1560.869150][T25897] __do_fast_syscall_32+0xb6/0x2b0 [ 1560.869162][T25897] ? lockdep_hardirqs_on+0x9c/0x150 [ 1560.869174][T25897] do_fast_syscall_32+0x34/0x80 [ 1560.869185][T25897] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1560.869198][T25897] RIP: 0023:0xf7f12539 [ 1560.869208][T25897] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1560.869217][T25897] RSP: 002b:00000000f5406590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1560.869228][T25897] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5406620 [ 1560.869235][T25897] RDX: 000000000000000f RSI: 00000000f73a5ff4 RDI: 0000000000000000 [ 1560.869241][T25897] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1560.869246][T25897] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1560.869252][T25897] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1560.869266][T25897] [ 1561.158779][ T10] m920x_read = error: -19 [ 1561.163144][ T10] dvb-usb: error while querying for an remote control event. [ 1561.279199][T23214] m920x_read = error: -19 [ 1561.283546][T23214] dvb-usb: error while querying for an remote control event. [ 1561.425979][T23214] m920x_read = error: -19 [ 1561.433555][T23214] dvb-usb: error while querying for an remote control event. [ 1561.515273][T25912] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5288'. [ 1561.546243][T11734] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1561.569421][T23214] m920x_read = error: -19 [ 1561.574302][T23214] dvb-usb: error while querying for an remote control event. [ 1561.708300][T23214] m920x_read = error: -19 [ 1561.712646][T23214] dvb-usb: error while querying for an remote control event. [ 1561.718178][T11734] usb 4-1: Using ep0 maxpacket: 32 [ 1561.741962][T11734] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1561.759457][T11734] usb 4-1: config 0 has no interfaces? [ 1561.767040][T11734] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1561.781157][T11734] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1561.789882][ T5926] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 1561.797551][T11734] usb 4-1: Product: syz [ 1561.802480][T11734] usb 4-1: Manufacturer: syz [ 1561.807524][T11734] usb 4-1: SerialNumber: syz [ 1561.815554][T11734] usb 4-1: config 0 descriptor?? [ 1561.848823][T23214] m920x_read = error: -19 [ 1561.859065][T23214] dvb-usb: error while querying for an remote control event. [ 1561.928522][ T5926] usb 6-1: device descriptor read/64, error -71 [ 1561.968307][T23214] m920x_read = error: -19 [ 1561.975621][T23214] dvb-usb: error while querying for an remote control event. [ 1562.000092][T25920] pim6reg: entered allmulticast mode [ 1562.099604][T23214] m920x_read = error: -19 [ 1562.104114][T23214] dvb-usb: error while querying for an remote control event. [ 1562.178308][ T5926] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 1562.218768][T23214] m920x_read = error: -19 [ 1562.223150][T23214] dvb-usb: error while querying for an remote control event. [ 1562.318475][ T5926] usb 6-1: device descriptor read/64, error -71 [ 1562.401037][T23214] m920x_read = error: -19 [ 1562.405422][T23214] dvb-usb: error while querying for an remote control event. [ 1562.429173][ T5926] usb usb6-port1: attempt power cycle [ 1562.519007][T23214] m920x_read = error: -19 [ 1562.523536][T23214] dvb-usb: error while querying for an remote control event. [ 1562.698796][T23214] m920x_read = error: -19 [ 1562.703173][T23214] dvb-usb: error while querying for an remote control event. [ 1562.778107][ T5926] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 1562.798939][T25926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5292'. [ 1562.809152][ T5926] usb 6-1: device descriptor read/8, error -71 [ 1562.821476][T23214] m920x_read = error: -19 [ 1562.830506][T23214] dvb-usb: error while querying for an remote control event. [ 1563.068379][ T5926] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 1563.068940][T23214] m920x_read = error: -19 [ 1563.083424][T23214] dvb-usb: error while querying for an remote control event. [ 1563.099500][ T5926] usb 6-1: device descriptor read/8, error -71 [ 1563.201752][T23214] m920x_read = error: -19 [ 1563.250399][T23214] dvb-usb: error while querying for an remote control event. [ 1563.287111][ T5926] usb usb6-port1: unable to enumerate USB device [ 1563.369437][T23214] m920x_read = error: -19 [ 1563.373813][T23214] dvb-usb: error while querying for an remote control event. [ 1563.529515][T23214] m920x_read = error: -19 [ 1563.536737][T23214] dvb-usb: error while querying for an remote control event. [ 1563.669098][T23214] m920x_read = error: -19 [ 1563.673593][T23214] dvb-usb: error while querying for an remote control event. [ 1563.803245][T23214] m920x_read = error: -19 [ 1563.810386][T23214] dvb-usb: error while querying for an remote control event. [ 1563.938836][T23214] m920x_read = error: -19 [ 1563.943317][T23214] dvb-usb: error while querying for an remote control event. [ 1564.044568][T25936] lo: Caught tx_queue_len zero misconfig [ 1564.069030][T23214] m920x_read = error: -19 [ 1564.073422][T23214] dvb-usb: error while querying for an remote control event. [ 1564.262578][T11734] usb 4-1: USB disconnect, device number 81 [ 1564.329295][T25936] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1564.429423][ T10] m920x_read = error: -19 [ 1564.433804][ T10] dvb-usb: error while querying for an remote control event. [ 1564.558710][T23214] m920x_read = error: -19 [ 1564.563216][T23214] dvb-usb: error while querying for an remote control event. [ 1564.633764][T25950] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5299'. [ 1564.708994][T23214] m920x_read = error: -19 [ 1564.713377][T23214] dvb-usb: error while querying for an remote control event. [ 1564.806075][T25957] netlink: 'syz.0.5300': attribute type 64 has an invalid length. [ 1564.829764][T25957] netlink: 'syz.0.5300': attribute type 4 has an invalid length. [ 1564.902016][T23214] m920x_read = error: -19 [ 1564.906360][T23214] dvb-usb: error while querying for an remote control event. [ 1564.937256][T25957] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5300'. [ 1564.949703][T25961] sctp: [Deprecated]: syz.0.5300 (pid 25961) Use of int in maxseg socket option. [ 1564.949703][T25961] Use struct sctp_assoc_value instead [ 1565.028850][T23214] m920x_read = error: -19 [ 1565.033225][T23214] dvb-usb: error while querying for an remote control event. [ 1565.219472][T23214] m920x_read = error: -19 [ 1565.223856][T23214] dvb-usb: error while querying for an remote control event. [ 1565.225095][T11734] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 1565.358679][T23214] m920x_read = error: -19 [ 1565.363176][T23214] dvb-usb: error while querying for an remote control event. [ 1565.556440][T23214] m920x_read = error: -19 [ 1565.572367][T23214] dvb-usb: error while querying for an remote control event. [ 1565.768979][T23214] m920x_read = error: -19 [ 1565.773364][T23214] dvb-usb: error while querying for an remote control event. [ 1565.922815][T23214] m920x_read = error: -19 [ 1565.927174][T23214] dvb-usb: error while querying for an remote control event. [ 1565.999284][T25975] netlink: 212388 bytes leftover after parsing attributes in process `syz.5.5305'. [ 1566.009754][T25975] openvswitch: netlink: Message has 5 unknown bytes. [ 1566.103967][T11734] usb 2-1: config 0 has an invalid interface number: 140 but max is 0 [ 1566.104291][T25975] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5305'. [ 1566.128869][T23214] m920x_read = error: -19 [ 1566.314305][T23214] dvb-usb: error while querying for an remote control event. [ 1566.323402][T11734] usb 2-1: config 0 has no interface number 0 [ 1566.363084][T11734] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice=71.01 [ 1566.379322][T11734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.668438][ T5919] m920x_read = error: -19 [ 1566.672817][ T5919] dvb-usb: error while querying for an remote control event. [ 1566.875721][T11734] usb 2-1: Product: syz [ 1566.875954][ T5919] m920x_read = error: -19 [ 1566.880595][T11734] usb 2-1: Manufacturer: syz [ 1566.880616][T11734] usb 2-1: SerialNumber: syz [ 1566.963988][T11734] usb 2-1: config 0 descriptor?? [ 1567.005452][ T5919] dvb-usb: error while querying for an remote control event. [ 1567.132735][ T5919] m920x_read = error: -19 [ 1567.180045][ T5919] dvb-usb: error while querying for an remote control event. [ 1567.388809][ T5919] m920x_read = error: -19 [ 1567.393305][ T5919] dvb-usb: error while querying for an remote control event. [ 1567.538342][T25962] tap0: tun_chr_ioctl cmd 2147767521 [ 1567.555044][ T5919] m920x_read = error: -19 [ 1567.588876][ T5919] dvb-usb: error while querying for an remote control event. [ 1567.857232][ T5919] m920x_read = error: -19 [ 1568.003328][ T5919] dvb-usb: error while querying for an remote control event. [ 1568.052217][ T3012] ================================================================== [ 1568.060322][ T3012] BUG: KASAN: use-after-free in __linkwatch_run_queue+0x5d3/0x7e0 [ 1568.068144][ T3012] Read of size 8 at addr ffff888049e94008 by task kworker/u8:8/3012 [ 1568.076130][ T3012] [ 1568.078475][ T3012] CPU: 1 UID: 0 PID: 3012 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 1568.078501][ T3012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1568.078515][ T3012] Workqueue: events_unbound linkwatch_event [ 1568.078544][ T3012] Call Trace: [ 1568.078553][ T3012] [ 1568.078562][ T3012] dump_stack_lvl+0x189/0x250 [ 1568.078584][ T3012] ? __kasan_check_byte+0x12/0x40 [ 1568.078609][ T3012] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1568.078629][ T3012] ? lock_release+0x4b/0x3e0 [ 1568.078656][ T3012] ? __virt_addr_valid+0x4a5/0x5c0 [ 1568.078677][ T3012] print_report+0xca/0x240 [ 1568.078693][ T3012] ? __linkwatch_run_queue+0x5d3/0x7e0 [ 1568.078712][ T3012] kasan_report+0x118/0x150 [ 1568.078736][ T3012] ? __linkwatch_run_queue+0x5d3/0x7e0 [ 1568.078761][ T3012] __linkwatch_run_queue+0x5d3/0x7e0 [ 1568.078786][ T3012] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 1568.078809][ T3012] ? _raw_spin_unlock_irq+0x23/0x50 [ 1568.078825][ T3012] ? process_scheduled_works+0x9ef/0x17b0 [ 1568.078842][ T3012] ? process_scheduled_works+0x9ef/0x17b0 [ 1568.078859][ T3012] linkwatch_event+0x4c/0x60 [ 1568.078879][ T3012] process_scheduled_works+0xade/0x17b0 [ 1568.078908][ T3012] ? __pfx_process_scheduled_works+0x10/0x10 [ 1568.078932][ T3012] worker_thread+0x8a0/0xda0 [ 1568.078958][ T3012] kthread+0x711/0x8a0 [ 1568.078979][ T3012] ? __pfx_worker_thread+0x10/0x10 [ 1568.078995][ T3012] ? __pfx_kthread+0x10/0x10 [ 1568.079015][ T3012] ? _raw_spin_unlock_irq+0x23/0x50 [ 1568.079031][ T3012] ? lockdep_hardirqs_on+0x9c/0x150 [ 1568.079048][ T3012] ? __pfx_kthread+0x10/0x10 [ 1568.079077][ T3012] ret_from_fork+0x439/0x7d0 [ 1568.079096][ T3012] ? __pfx_ret_from_fork+0x10/0x10 [ 1568.079117][ T3012] ? __switch_to_asm+0x39/0x70 [ 1568.079138][ T3012] ? __switch_to_asm+0x33/0x70 [ 1568.079158][ T3012] ? __pfx_kthread+0x10/0x10 [ 1568.079178][ T3012] ret_from_fork_asm+0x1a/0x30 [ 1568.079207][ T3012] [ 1568.079214][ T3012] [ 1568.265270][ T3012] The buggy address belongs to the physical page: [ 1568.271673][ T3012] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888049e94340 pfn:0x49e94 [ 1568.281731][ T3012] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1568.288837][ T3012] raw: 00fff00000000000 ffffea0000d67008 ffff8880b873fd80 0000000000000000 [ 1568.297407][ T3012] raw: ffff888049e94340 0000000000000000 00000000ffffffff 0000000000000000 [ 1568.305971][ T3012] page dumped because: kasan: bad access detected [ 1568.312376][ T3012] page_owner tracks the page as freed [ 1568.317732][ T3012] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x446dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 25962, tgid 25953 (syz.1.5301), ts 1567429405270, free_ts 1568051469314 [ 1568.339607][ T3012] post_alloc_hook+0x240/0x2a0 [ 1568.344372][ T3012] get_page_from_freelist+0x21e4/0x22c0 [ 1568.349904][ T3012] __alloc_frozen_pages_noprof+0x181/0x370 [ 1568.355695][ T3012] alloc_pages_mpol+0x232/0x4a0 [ 1568.360619][ T3012] ___kmalloc_large_node+0x5f/0x1b0 [ 1568.365808][ T3012] __kmalloc_large_node_noprof+0x18/0x90 [ 1568.371430][ T3012] __kvmalloc_node_noprof+0x6d/0x5f0 [ 1568.376702][ T3012] alloc_netdev_mqs+0xa3/0x11b0 [ 1568.381537][ T3012] tun_set_iff+0x532/0xef0 [ 1568.385937][ T3012] __tun_chr_ioctl+0x788/0x1df0 [ 1568.390770][ T3012] __ia32_compat_sys_ioctl+0x543/0x840 [ 1568.396223][ T3012] __do_fast_syscall_32+0xb6/0x2b0 [ 1568.401334][ T3012] do_fast_syscall_32+0x34/0x80 [ 1568.406210][ T3012] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1568.412540][ T3012] page last free pid 25962 tgid 25953 stack trace: [ 1568.419025][ T3012] __free_frozen_pages+0xbc4/0xd30 [ 1568.424136][ T3012] free_large_kmalloc+0x13a/0x1f0 [ 1568.429149][ T3012] device_release+0x99/0x1c0 [ 1568.433731][ T3012] kobject_put+0x22b/0x480 [ 1568.438145][ T3012] netdev_run_todo+0xd2e/0xea0 [ 1568.442924][ T3012] tun_chr_close+0x13c/0x1c0 [ 1568.447521][ T3012] __fput+0x449/0xa70 [ 1568.451489][ T3012] task_work_run+0x1d4/0x260 [ 1568.456074][ T3012] exit_to_user_mode_loop+0xec/0x110 [ 1568.461361][ T3012] __do_fast_syscall_32+0x1f4/0x2b0 [ 1568.466559][ T3012] do_fast_syscall_32+0x34/0x80 [ 1568.471413][ T3012] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1568.477971][ T3012] [ 1568.480289][ T3012] Memory state around the buggy address: [ 1568.485910][ T3012] ffff888049e93f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1568.493976][ T3012] ffff888049e93f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1568.502568][ T3012] >ffff888049e94000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1568.510627][ T3012] ^ [ 1568.514942][ T3012] ffff888049e94080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1568.522988][ T3012] ffff888049e94100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1568.531217][ T3012] ================================================================== [ 1568.539360][ C1] vkms_vblank_simulate: vblank timer overrun [ 1568.539512][ T5919] m920x_read = error: -19 [ 1568.566431][ T5919] dvb-usb: error while querying for an remote control event. [ 1568.704940][ T5919] m920x_read = error: -19 [ 1568.738720][ T5919] dvb-usb: error while querying for an remote control event. [ 1568.759375][ T5874] Bluetooth: hci3: command 0x0406 tx timeout [ 1568.865920][ T3012] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1568.873138][ T3012] CPU: 0 UID: 0 PID: 3012 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 1568.882584][ T3012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1568.892715][ T3012] Workqueue: events_unbound linkwatch_event [ 1568.898606][ T3012] Call Trace: [ 1568.901885][ T3012] [ 1568.904817][ T3012] dump_stack_lvl+0x99/0x250 [ 1568.909586][ T3012] ? __asan_memcpy+0x40/0x70 [ 1568.914176][ T3012] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1568.919383][ T3012] ? __pfx__printk+0x10/0x10 [ 1568.923975][ T3012] vpanic+0x281/0x750 [ 1568.927954][ T3012] ? preempt_schedule+0xae/0xc0 [ 1568.932815][ T3012] ? __pfx_vpanic+0x10/0x10 [ 1568.937320][ T3012] ? preempt_schedule_common+0x83/0xd0 [ 1568.942777][ T3012] ? preempt_schedule+0xae/0xc0 [ 1568.947640][ T3012] ? __pfx_preempt_schedule+0x10/0x10 [ 1568.953003][ T3012] panic+0xb9/0xc0 [ 1568.956705][ T3012] ? __pfx_panic+0x10/0x10 [ 1568.961102][ T3012] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1568.966979][ T3012] ? __linkwatch_run_queue+0x5d3/0x7e0 [ 1568.972443][ T3012] check_panic_on_warn+0x89/0xb0 [ 1568.977367][ T3012] ? __linkwatch_run_queue+0x5d3/0x7e0 [ 1568.982812][ T3012] end_report+0x78/0x160 [ 1568.987045][ T3012] kasan_report+0x129/0x150 [ 1568.991534][ T3012] ? __linkwatch_run_queue+0x5d3/0x7e0 [ 1568.996979][ T3012] __linkwatch_run_queue+0x5d3/0x7e0 [ 1569.002258][ T3012] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 1569.008046][ T3012] ? _raw_spin_unlock_irq+0x23/0x50 [ 1569.013250][ T3012] ? process_scheduled_works+0x9ef/0x17b0 [ 1569.018952][ T3012] ? process_scheduled_works+0x9ef/0x17b0 [ 1569.024664][ T3012] linkwatch_event+0x4c/0x60 [ 1569.029236][ T3012] process_scheduled_works+0xade/0x17b0 [ 1569.034845][ T3012] ? __pfx_process_scheduled_works+0x10/0x10 [ 1569.040904][ T3012] worker_thread+0x8a0/0xda0 [ 1569.045579][ T3012] kthread+0x711/0x8a0 [ 1569.049635][ T3012] ? __pfx_worker_thread+0x10/0x10 [ 1569.054724][ T3012] ? __pfx_kthread+0x10/0x10 [ 1569.059298][ T3012] ? _raw_spin_unlock_irq+0x23/0x50 [ 1569.064490][ T3012] ? lockdep_hardirqs_on+0x9c/0x150 [ 1569.069687][ T3012] ? __pfx_kthread+0x10/0x10 [ 1569.074263][ T3012] ret_from_fork+0x439/0x7d0 [ 1569.078834][ T3012] ? __pfx_ret_from_fork+0x10/0x10 [ 1569.083926][ T3012] ? __switch_to_asm+0x39/0x70 [ 1569.088673][ T3012] ? __switch_to_asm+0x33/0x70 [ 1569.093420][ T3012] ? __pfx_kthread+0x10/0x10 [ 1569.098021][ T3012] ret_from_fork_asm+0x1a/0x30 [ 1569.102786][ T3012] [ 1569.106072][ T3012] Kernel Offset: disabled [ 1569.110389][ T3012] Rebooting in 86400 seconds..