last executing test programs: 1m53.708585965s ago: executing program 1 (id=1119): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000001c0)={'Wc9\t', 0x0, 0x6, 0x3, 0x0, 0x0, "09000000e3ff00", "000200", "00ff0200", "798a202d", ["c2fffedbff00ffdfffffffff", "ffff08000000000000042371", "070500110800c1024b00", "38a70ed483c99b9f1600d333"]}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000000000000efff00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) 1m53.650582339s ago: executing program 1 (id=1120): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x2, 0xf0, 0x2}, 0xfd}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f0000000180)={&(0x7f00000004c0)="b003846833bdd790c2", 0x9}}, 0xee) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x0, 0xff, 0x6}, 0xfd}, 0x18) sendmsg$sock(r4, &(0x7f0000000200)={&(0x7f00000005c0)=@can, 0x80, &(0x7f0000000440)=[{0x0}], 0x1}, 0x4000040) 1m52.262567347s ago: executing program 1 (id=1125): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000009004"]) (async) r3 = socket$inet6(0xa, 0x1, 0x8010800000000084) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) (async) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) (async) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) bind$packet(r5, &(0x7f0000000300)={0x11, 0x3, r6}, 0x14) (async) r7 = socket$packet(0x11, 0x3, 0x300) bind$packet(r7, &(0x7f0000000000)={0x11, 0x3, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@newqdisc={0x24, 0x24, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xd}, {0xffff, 0x8}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x2004c890) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x34, r9, 0x1, 0x0, 0x0, {{}, {0x0, 0x400b}, {0x18, 0x17, {0x16, 0x0, @l2={'eth', 0x3a, 'gre0\x00'}}}}}, 0x34}}, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg$inet6(r3, &(0x7f0000000040), 0x0, 0x4008040) (async) fcntl$dupfd(r4, 0x406, r7) 1m51.944415053s ago: executing program 1 (id=1126): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x100, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x4, @empty, 0x8}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) getpeername$inet6(r3, 0x0, &(0x7f0000000340)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xe, 0x7, 0x3, 0x1, 0x101, 0x6, 0x3, 0x7, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000180)={r4, 0x58, &(0x7f0000000100)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}, @in={0x2, 0x4e22, @private=0xa010100}, @in6={0xa, 0x4e21, 0x2, @loopback, 0x4}, @in6={0xa, 0x4e23, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}]}, &(0x7f00000001c0)=0x10) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0), 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000200), 0x2, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000240)=0x2) rt_sigaction(0x4, 0x0, 0x0, 0x0, 0x0) ptrace(0x8, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x8000000000000035, 0xfff, 0x10000000215b9037, 0x40180, 0x1, 0x11, 0x8000000000f2, 0x0, 0xffffffffffffffc0, 0x5, 0x5, 0xc6bd, 0x566, 0x45, 0x5, 0x7], 0x6006, 0x2202}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40800) 1m50.200678073s ago: executing program 1 (id=1136): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x6000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x64, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6c9ecbc1a303434a36bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffdc0fb243c3111dda42112650cc00", 0x0, 0x48) 1m50.161246596s ago: executing program 1 (id=1137): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000240), 0x200000, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x29, 0x800, 0x44040000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x115, 0xfb}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xb3a406bdd74362ab, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x90}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x18, &(0x7f0000000040)={0x3a, 0x2, 0x7, {0x7, 0x0, "34fe801d5e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x2, 0xa5, &(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESDEC=r0], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x41, &(0x7f0000000280)=@string={0x41, 0x3, "bb7872046101e23b32740b334436a787012cf2cc87b331e7eb11cfa79112bb497cb2fe450cc9b6adb305e84a35867f711b1b69e1bb1fd8179676fb8cc88b29"}}, {0x45, &(0x7f0000000080)=@string={0x45, 0x3, "2b41c03d9ea444e2f99aacf3093c139a0290b6e444642dba82311b87eaa687b8186bfb8c7a53034d3355af802c73e1bc35d56787830144b5b48b80d2fd86cba14c6a5e"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000000140)=@lang_id={0x4}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xfcff}}]}) 1m49.356064667s ago: executing program 32 (id=1137): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000240), 0x200000, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x29, 0x800, 0x44040000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x115, 0xfb}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xb3a406bdd74362ab, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x90}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x18, &(0x7f0000000040)={0x3a, 0x2, 0x7, {0x7, 0x0, "34fe801d5e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x2, 0xa5, &(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESDEC=r0], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x41, &(0x7f0000000280)=@string={0x41, 0x3, "bb7872046101e23b32740b334436a787012cf2cc87b331e7eb11cfa79112bb497cb2fe450cc9b6adb305e84a35867f711b1b69e1bb1fd8179676fb8cc88b29"}}, {0x45, &(0x7f0000000080)=@string={0x45, 0x3, "2b41c03d9ea444e2f99aacf3093c139a0290b6e444642dba82311b87eaa687b8186bfb8c7a53034d3355af802c73e1bc35d56787830144b5b48b80d2fd86cba14c6a5e"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000000140)=@lang_id={0x4}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xfcff}}]}) 7.89654383s ago: executing program 2 (id=1659): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a010400000000000000000a0000040900020073797a3100fff50008000a40fffffffc0900010073797a3100000000080005400000000b2c00128028000180090001006c6173740000000004000280140001800c000100636f756e746572000400028008000340000001"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 7.589884574s ago: executing program 2 (id=1663): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000040)={0xa, 0x9, 0x4, @rand_addr=' \x01\x00', 0x8}, 0x1c, 0x0}}], 0x1, 0x4c040) 7.506804262s ago: executing program 3 (id=1664): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="5400000011000008adbd7000ffcfdf2507000000", @ANYRES32=0x0, @ANYBLOB="406000001040000008000d00030000001800198014000500180b81e59214bb7c0a3144813e426be104001400080005"], 0x54}, 0x1, 0x0, 0x0, 0x51}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000004c0), 0x10) sendmsg$inet(r4, &(0x7f0000000400)={&(0x7f0000000000)={0x1d, 0x4e23, @empty}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="1c9ca1fb88a402aed73a4364a5593768ae", 0x11}, {&(0x7f0000000080)="ed463b47a5e15be18f0190e400a6cb790b1936018db66b35d292824c728b1517f91069e7ab23b11bef629a69498cb6a195b05d6aaf8673b3b0bfc4b0eed382c042f46c74b3eee646bc39bda0a9dac149e13d8bed49c206c5b5c84608062af97bde88ec091389baddaf5532323d70a984e14fd56d45b29cd049143c68cbfdf7bce491b98a03eb43e6cb5bc05444d32c79635c7c24e1ba8b256efa97cd013f129613fafdf274e7c365b4841b17b72331183df97b540eb25880548b2941fee9ef4bb4092693f348cc251b834b0f3ef456", 0xcf}, {&(0x7f0000000180)="089ac0c1e955ef204d91740257a17cc3fac9babd1c46685d45f5a83a57fc1f304d66f7a02562a67b601fff40b9d4d33750784dd41e2370f96cd64db637f2f0e1c2a9cd22bb3c50c52b5a2d92e17cde2cc5e10fc9a3c2310e576efefe1320e13e3ffaec8c97b930e56806ec3e54eeecc16511f9c8b6d9d4a0e00475554c53d6e15dead20608c4ad45337ef5a5f75716e97d28f6f07c5b7ce6136d8bc3433069a2ad2c76dd", 0xa4}, {&(0x7f0000000500)="ff52b31410d9bc32656fe6e33de3a8667b01f76b553c389d85235d3a29272e1b5e45da102d3619080bcccc57d12ac1740468589b29ba0da2c5d1258aca5a11b4a086949792fe4b212660a595f6ccfc815906a1ca3df268f38ff5ebef22fea176051bdca251679870b33901d8dd9a01d70231e231000137818f4f1a0dba3814e6b4f30856d470dc0109e7b1de08061c2420c8271bdd4906ec67e1cef27ebdac482cf978477f21a5c0ccea64ece13d4595a5af818817b4ace348ba3a9e496f461dd87b46703be45be02f1542f3d7df72e3ed491f5aee7ea0822abcb2a3f641031323e0ed221eaa28500eb98838cc0884b5d379", 0xf2}, {&(0x7f0000000340)="c83c", 0x2}], 0x5}, 0x20000090) write$binfmt_register(r3, &(0x7f0000000780)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x100000000000000, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xb9&-~\xea(J\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\x12\x95\xbfd1\x88\x06\xb4{G\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xbd\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132?\xb7\xb2\x93B\x01\'#\xc0v\xce{\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde44m\x96+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x8c\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xa1W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a:z\xf9\x83\b.\xdf\xa5\xf1\xe8*\xe5\xed\x05\x87r8\xa1/A\x91*k\x8d}\xff\x82w\xff\x8c\x1d\xce \xfcl\xe0\xea\x02\xf4\xfeV\xd8zUj G\x87\xcdO\xc1\x9b\xc2\xd5', 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, './file0'}, 0x26d) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5"], 0xfd1) 7.451361487s ago: executing program 2 (id=1665): r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000003ac0)={&(0x7f0000003880)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000050) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) capset(0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) recvmmsg$unix(r3, &(0x7f0000003600)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/169, 0xa9}, {&(0x7f0000000180)=""/62, 0x3e}, {&(0x7f00000001c0)=""/6, 0x6}], 0x3, &(0x7f00000002c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{&(0x7f0000000400)=@abs, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000480)=""/192, 0xc0}, {&(0x7f0000000540)=""/144, 0x90}, {&(0x7f0000000600)=""/26, 0x1a}, {&(0x7f0000000640)=""/8, 0x8}, {&(0x7f0000000680)=""/215, 0xd7}], 0x5, &(0x7f0000000880)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000000900)=@abs, 0x6e, &(0x7f0000000b80)=[{0x0}, {&(0x7f0000000a80)=""/208, 0xd0}, {0x0}], 0x3, &(0x7f0000000bc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000f00)=@abs, 0x6e, &(0x7f00000011c0)=[{&(0x7f0000000f80)=""/53, 0x35}, {&(0x7f0000000fc0)=""/208, 0xd0}, {&(0x7f00000010c0)=""/205, 0xcd}], 0x3, &(0x7f0000001200)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f0000001340), 0x6e, &(0x7f0000001740)=[{0x0}, {&(0x7f0000001440)=""/147, 0x93}, {&(0x7f0000001500)=""/129, 0x81}, {&(0x7f00000015c0)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f00000017c0)}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001900)=""/103, 0x67}, {&(0x7f0000001980)=""/29, 0x1d}, {0x0}, {&(0x7f0000001a40)=""/8, 0x8}], 0x4}}, {{&(0x7f0000001b00), 0x6e, &(0x7f0000003000)=[{&(0x7f0000001b80)=""/217, 0xd9}, {&(0x7f0000001c80)=""/14, 0xe}, {&(0x7f0000001cc0)=""/74, 0x4a}, {&(0x7f0000001d40)=""/161, 0xa1}, {&(0x7f0000001e00)=""/21, 0x15}, {0x0}, {&(0x7f0000001ec0)=""/23, 0x17}, {&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/199, 0xc7}], 0x9, &(0x7f00000030c0)=[@cred={{0x1c}}], 0x20}}], 0x8, 0x40012140, &(0x7f0000003840)={0x77359400}) syz_open_dev$dri(&(0x7f0000000a40), 0x6, 0x98000) socket$inet_sctp(0x2, 0x1, 0x84) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0xab02000c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000000)=0x8, 0x4) 6.929586259s ago: executing program 3 (id=1667): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_usb_connect$uac1(0x0, 0xdc, &(0x7f0000001400)=ANY=[@ANYRES16=r0], 0x0) (async) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24, 0x6, @mcast2, 0x3}, 0x1c) (async, rerun: 64) listen(r3, 0x0) (async, rerun: 64) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESDEC=r4, @ANYRESDEC=r1, @ANYRES8=r5, @ANYBLOB="4ea38433ceda035076c5894038118981004e009f0219cdf36dfd5cfce45a96c90426bb3b7ca6007735a6cff3ad99889a64a57eaa123cb27d466910820ea8909963bc3a0481485b2e1ece23b307a22aa7227aba743ef0b1ccd677e601a86266609d716321a07c8633ee66f125acfdbfda317faac0ddb086ec5ae86360", @ANYRES8=r6, @ANYRES16], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000001080045000028006500000f06917864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02ffff90780000"], 0x0) (async) syz_emit_ethernet(0x86, &(0x7f00000008c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x66, 0x0, 0x4, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x19, 0x4, 0x0, 0x0, 0x3, {[@generic={0x0, 0x8, "47dac44f76e4"}, @exp_fastopen={0xfe, 0x14, 0xf989, "e2ac840ffb8dff845cd9d0ec1d738592"}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0x6, [0x4]}, @exp_fastopen={0xfe, 0x14, 0xf989, "c28400016c2c5c0708089d8f9431370d"}, @md5sig={0x13, 0x12, "c46225991ffcf7652759cd7197521cf6"}]}}}}}}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000007480)='ns/ipc\x00') r7 = eventfd(0x0) (async) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x50, 0x5, [{{0x9, 0x4, 0x0, 0xf1, 0x1, 0x7, 0x1, 0x1, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x4, 0xa3, 0xff}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x2, 0x0, 0x3}}]}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x200, 0x7, 0x0, 0x1, 0x40, 0x2}, 0x5, &(0x7f0000000400)={0x5, 0xf, 0x5}, 0x8, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x200a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x43f}}, {0x90, &(0x7f0000000640)=@string={0x90, 0x3, "e0c087b3b76da08204778dc76d3761ffdc5776016ad88b8f5dfff08f51afe9b4248d4bc14ffc568420dbf67f1d7c1769328f2a00e0a6714f389259a0d9ef152b40a0b688a58832e87fab35daf0499050fef044b7a6394d53a371683293cd842a13a2a8e1a25baee3efa6e702c2cfecd67020b09fa1d5b7767868f0e0f6b5c9cff17b860de6a7c7ec586c4d50da3a"}}]}) io_submit(r1, 0x2, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xc2, r7, &(0x7f0000000180)="0100fd6400000000", 0x8, 0x100}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x2, r7, 0x0, 0x0, 0x0, 0x0, 0x1, r7}]) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000780), 0x402, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000140)={@private2={0xfc, 0x2, '\x00', 0x1}}, 0x14) (async, rerun: 32) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async, rerun: 32) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r9, 0xc0045002, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x41448000) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) (rerun: 64) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) socket(0x400000000010, 0x3, 0x0) (rerun: 32) 6.847358223s ago: executing program 2 (id=1669): r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x81, 0x1, "d6"}, 0x0, 0x0, 0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003e00)={@fallback, 0xffffffffffffffff, 0x15, 0x2020}, 0x20) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xafcc, 0x7, 0xffffffffffffffff, 0x8, 0x8001}, 0x7, 0x1}, [{0xe205, 0x80000001, 0x9, 0x1842, 0x1, 0x8000}, {0xfffffff9, 0x8, 0x7, 0xb145, 0x4, 0x8}, {0x0, 0xff, 0x1ff, 0x87, 0xa, 0x5}, {0xf, 0x7e7, 0x9, 0x7, 0x0, 0xa}, {0x1, 0x101, 0x5c78, 0xffffff56, 0xee, 0x8}, {0x3, 0x73, 0xb, 0x7, 0x2, 0x6}, {0x8, 0x5, 0x4, 0x4, 0x2, 0x8}, {0x1ff, 0x1, 0x2f, 0x7, 0x533f, 0x200}, {0x8, 0x4bd5, 0x5, 0x2, 0x2, 0xf8}, {0x2, 0x8, 0x4, 0x7, 0x32, 0x1000}, {0x6, 0xfffff001, 0x0, 0x20000008, 0x6, 0x5}, {0x5, 0x9, 0x1, 0x10, 0x8, 0x4}, {0x4, 0x0, 0x3, 0x80000000, 0x2, 0x1}, {0x6, 0xfffff800, 0xbf, 0x1, 0xffffffff, 0x8}, {0x48a3, 0x3ff, 0x9, 0x6e, 0x3, 0x8}, {0x4, 0x220000, 0xaeb, 0x360, 0x2, 0x400}, {0x0, 0x7ff, 0xbe, 0x1, 0x7, 0x8}, {0x5ad, 0xfaec, 0x401, 0x9, 0x8, 0x45}, {0x3, 0x9, 0x400, 0x3, 0x6, 0x5}, {0xde, 0x0, 0x5, 0x8000, 0x2, 0xffff}, {0x80, 0x3491, 0x83, 0x8001, 0x3, 0x165c}, {0x6d, 0x5, 0xf, 0xe, 0x8, 0xec}, {0x6, 0x1, 0xfffffffc, 0x5, 0xfffffffc, 0x81}, {0xcd0, 0x9, 0x6, 0x7fffffff, 0x80, 0xfffffff8}, {0x7, 0x3, 0x2b0, 0x5, 0x2, 0xd6}, {0x6, 0x3, 0x0, 0x2, 0xc4}, {0x0, 0x99, 0x200, 0x1b8, 0x4, 0x1}, {0x1cff, 0xc7a9, 0x25, 0xffffffff, 0x7, 0x2}, {0xff, 0x4, 0x7fff, 0x7, 0xfffffff9, 0xd46}, {0x7, 0x2, 0xec, 0x0, 0x8}, {0x3, 0x8, 0x0, 0x8, 0xebc, 0x8}, {0x3, 0xfe9, 0x1, 0x4, 0x0, 0x401}, {0x4, 0x0, 0xd, 0x7fff, 0xb, 0x87c}, {0x4a, 0x1000, 0x1, 0x81, 0x6063, 0x1}, {0xfffffe00, 0xe392, 0x0, 0x9, 0x3, 0x9}, {0x8, 0xff, 0x1, 0x101, 0x10000000, 0x4ac9}, {0x8, 0xffffffdb, 0x3, 0xe4c, 0x3, 0x2ca759d6}, {0x5, 0x4, 0x9, 0x9, 0x2, 0xfffffffa}, {0x0, 0x3, 0x4, 0x1, 0x10001, 0x9}, {0x5f21eb86, 0x1, 0x9, 0x40, 0x4, 0x9}, {0x2, 0x8, 0x401, 0x5, 0xffff15fb, 0x40}, {0x7, 0x6, 0x7, 0x8000, 0x81}, {0x4, 0x9, 0x5, 0x6, 0x3, 0x2}, {0x100, 0x4, 0x7, 0x8, 0x66, 0x9}, {0x5, 0x5, 0x3, 0x7ff, 0x2, 0x80000001}, {0x8, 0x6, 0x88, 0x9, 0x6, 0x1}, {0x7b, 0x74, 0x1, 0xd, 0x8, 0x7fff}, {0x69, 0xcd, 0x7f, 0xd, 0x200006, 0xf}, {0x9, 0x0, 0xe0e, 0x4, 0x3, 0x6}, {0x1, 0x2, 0x2, 0xc9, 0x6, 0xfffffff7}, {0xb, 0x2, 0x5, 0x7fde, 0x101, 0x1}, {0x3, 0x392, 0xb19, 0x1, 0x8d, 0x3}, {0xff, 0x5, 0xffff, 0x6972, 0x1, 0xfffffff9}, {0x6, 0x200, 0xb1, 0x1, 0x1000, 0x401}, {0x8, 0x54a0ee99, 0xfffffffa, 0x2, 0xfffffff9, 0x4}, {0x4, 0x2, 0xc979, 0x2, 0x4, 0x7ff}, {0xffffffff, 0x8, 0x7, 0x8, 0x7fffffff, 0x2b25}, {0x85, 0x4, 0xd55, 0xff, 0x0, 0x2}, {0x5, 0x2cfd091, 0x8, 0x9, 0x4, 0x3}, {0x0, 0x8, 0x1b89, 0x6, 0x5, 0x6}, {0x2887b03a, 0xc54, 0x3, 0x0, 0x5, 0x7}, {0x2ee, 0x2, 0x8, 0x7, 0x10001, 0x5}, {0x3, 0x6, 0xe, 0x8, 0x5}, {0x1000, 0x9, 0x6, 0x1, 0x40, 0x7}, {0x9, 0x7fff, 0x4, 0x0, 0x4, 0x10}, {0xffff0000, 0x7, 0x8, 0xe, 0x400, 0xfffff521}, {0x7, 0x6, 0xd65a, 0x2, 0x3, 0xffffff93}, {0x6, 0x7, 0xffffff7b, 0x5, 0x8, 0xfffffffc}, {0x7, 0x800, 0xc, 0x7fff, 0x2, 0x4}, {0x0, 0x6c0, 0x2, 0x3ff, 0x8, 0x7fd7}, {0x0, 0x8000010, 0xa52, 0x3, 0x4, 0xd91}, {0x0, 0x80000000, 0x400, 0x2, 0x6, 0x7}, {0x1, 0xad3, 0x9, 0x12000000, 0x7, 0x6}, {0x7, 0x6, 0x4, 0x5, 0x9, 0x9}, {0x9e2, 0x8, 0x5, 0x1, 0x400, 0x2}, {0x74863fbb, 0x5, 0xffc000, 0x401, 0xffffff8e, 0xfffffff8}, {0xa99b, 0x4, 0x4, 0x5, 0x4, 0xfffffffa}, {0x8001, 0x0, 0xfffffffe, 0x2, 0x0, 0x7}, {0x6, 0x7, 0x0, 0x7, 0x80000000, 0x50}, {0x0, 0x0, 0xc, 0x2, 0x3, 0x4}, {0x1ff, 0x4, 0xb5, 0x7, 0x1cec, 0x8}, {0x5, 0x7, 0x9, 0x1, 0x7, 0x7}, {0x7, 0x2, 0x71e892ab, 0xe8, 0xfffffff8, 0x4}, {0x80000000, 0xb07, 0x1, 0x8, 0x6, 0x3}, {0x9, 0x2, 0x5, 0x2, 0x9, 0x10}, {0xfffffff5, 0x2, 0x0, 0x5, 0x4a3, 0x8}, {0x5, 0x9, 0x4, 0x10000, 0x3, 0x6}, {0x4, 0x3, 0xfff, 0x4, 0x4, 0x1}, {0x1, 0x6, 0x8, 0x4, 0x7, 0x40}, {0x80000001, 0x389, 0x6, 0x400, 0x5, 0x7fffffff}, {0x65, 0x7fffffff, 0x6, 0x6, 0xea8, 0x8}, {0xb, 0x0, 0x4, 0x33, 0xb, 0x7}, {0xc57d, 0x1, 0x5, 0x1, 0x8, 0xb49}, {0x1, 0xd, 0x1ff, 0x7, 0x9, 0x9}, {0xc98f, 0x2, 0x10004, 0x8, 0x6, 0xc2f}, {0x4, 0x80000000, 0xc, 0x100, 0xe961, 0xffffffff}, {0x1, 0x5, 0x8, 0x9, 0xff, 0x800}, {0x5, 0x6, 0x5, 0x77, 0x0, 0x8}, {0x5, 0x10000, 0x81, 0xb, 0x1ff, 0x5}, {0x1, 0x0, 0xfffffff8, 0xc0c, 0x6fa, 0x8c1}, {0x8, 0x80000000, 0x9, 0x8, 0x0, 0x7}, {0x1, 0x0, 0x2, 0x0, 0x100, 0x5}, {0x2, 0x10001, 0x1, 0x53da, 0x2, 0x8001}, {0x401, 0x68c, 0x9, 0x2, 0x8, 0x7}, {0x5, 0x80000001, 0x2000007f, 0x5, 0xb0e, 0xeb}, {0x6, 0xad2b, 0x1, 0x85, 0x101, 0x3ff}, {0x93, 0x7, 0x4, 0x99b, 0x5, 0x11aa729f}, {0x8, 0x3, 0x3, 0x4, 0x32a, 0x10001}, {0x5, 0x80000000, 0x6, 0x1000, 0xffffff81, 0x200}, {0xd4, 0x91000, 0x80, 0xc, 0x4, 0x2}, {0x10000, 0xfffffff4, 0x0, 0x1, 0x6, 0xe5}, {0x3, 0x100, 0x6, 0x2, 0x8, 0x1}, {0x1, 0xffff, 0x10001, 0x1ff, 0x3, 0xfffffff5}, {0x4, 0x7, 0xfffffffc, 0x6, 0x6, 0x2}, {0xf74f, 0xd, 0x0, 0x0, 0x3ff, 0x6}, {0xfff, 0xff, 0x3, 0x2, 0x8, 0xc}, {0x5, 0x9, 0x45, 0x1, 0x6, 0x1000}, {0x4, 0x0, 0x1ff, 0xb, 0xa, 0x1}, {0x5, 0x6, 0x6a5, 0x0, 0x7}, {0x0, 0x5, 0x7fffffff, 0x6, 0x9, 0x9}, {0x18152e2c, 0x5, 0x0, 0xff, 0x2, 0xffffffff}, {0x7554, 0xffffffff, 0x5, 0x1, 0xfffffffe, 0x6}, {0xef6, 0x7, 0x61e, 0x0, 0x4, 0x9}, {0x19, 0x10001, 0x3, 0x3, 0x0, 0xfff}, {0x7, 0x4000, 0x6, 0x10000}, {0x57b, 0x2, 0x7, 0x80, 0x7, 0x5}, {0x9a, 0x5, 0x3, 0x0, 0x3, 0x7fff}, {0x2000000, 0x9, 0x7, 0x0, 0x2, 0x101}], [{0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {}, {0x4}, {}, {0x3}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x4}, {0x4}, {0x5}, {0x5}, {0x6, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x2}, {0x1}, {0x3}, {0x0, 0x1}, {}, {0x5, 0x3}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0xe, 0x1}, {0x3}, {0x1}, {0x5}, {0x1}, {0x6}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x3}, {0x5}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x2}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0xdcdcfc412ebb7d41}, {0x1, 0x1}, {0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x4}, {0x5}, {0x2}, {0x3}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x3}, {0x1}, {}, {0x3}, {0x4}, {0xbe9e5652533709fb}, {0x4}, {}, {0x0, 0x1}, {0x3}, {0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0xf8}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x4800) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x83, 0x2, "39a2"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, 0x0, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0xb5}, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x82, 0x2, "23b4"}, 0x0, 0x0, 0x0}) 6.600656207s ago: executing program 3 (id=1672): io_setup(0x222, &(0x7f0000000180)) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) msgget(0x0, 0x200) msgget(0x0, 0x42) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000200)=0x9) r2 = syz_io_uring_setup(0x3222, &(0x7f0000000380)={0x0, 0xa99e, 0x8, 0x1, 0x2dc}, &(0x7f0000000040), &(0x7f00000001c0)) r3 = syz_io_uring_setup(0x60ed, &(0x7f0000000400)={0x0, 0xcb61, 0x8, 0x3, 0xffdfffff, 0x0, r2}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x18, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0xd0, 0x80c40, 0x23456}) io_uring_enter(r3, 0x47f4, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0, 0x13f}}, 0x20) syz_clone3(&(0x7f0000000300)={0x24000080, &(0x7f0000000000), 0x0, 0x0, {0x27}, &(0x7f00000000c0)=""/180, 0xb4, 0x0, &(0x7f0000000240)}, 0x58) timer_create(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044402, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x404) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 5.243455001s ago: executing program 3 (id=1676): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x311, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x2, 0x1, 0x9, 0x20, 0xbf, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "6584c29f"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x9, 0x4, 0x7f}, {0x6, 0x24, 0x1a, 0x7, 0x30}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x6, 0x80, 0xe}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x8, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x9, 0x37, 0x2}}}}}}}]}}, &(0x7f00000001c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x1, 0x6, 0xd, 0x20, 0x7}, 0x19, &(0x7f0000000100)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "f62566498972b12e5245b7e81809e8fb"}]}, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1409}}, {0x2f, &(0x7f0000000180)=@string={0x2f, 0x3, "84dfe5b9a1b72d866e95905bca39a5c0b3ee24436aa763f0a3fe1c4161c697a65c74444ecf4ceb59c4e96b89b5"}}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000080)={0x0, 0x0, 0x8, "fa0fffffffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000280)={0x10, 0xc}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x20, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0x19, 0x2, "a9fe"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0xba}, 0x0}) 4.828312188s ago: executing program 0 (id=1681): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = syz_open_dev$I2C(&(0x7f00000001c0), 0x0, 0x22500) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000180)={&(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0}, {0x0, 0xfff5, 0x1, &(0x7f0000000880)="d4"}], 0x2}) r3 = gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r1, &(0x7f0000000240)=""/217, 0x111) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) tkill(r3, 0x7) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f00000001c0)) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x600100, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f00000000c0)={0x28, 0x2, r0, 0x0, &(0x7f0000bb3000/0x2000)=nil, 0x2000, 0xa7}) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00003cd000/0x1000)=nil, 0x1000, 0x8) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000540), 0x42a00) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r9, 0xc0505405, &(0x7f0000000580)={{0x3, 0x0, 0x1, 0x1, 0x1}, 0x5, 0xc, 0x400001}) mmap(&(0x7f000065f000/0x1000)=nil, 0x1000, 0x2, 0x20811, r9, 0x23f30000) readv(r8, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1000000000000069) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003f010103fe0000d1a8000000000a000000100001800c00028005000162000000000c0019800800010009"], 0x30}}, 0x4010850) unshare(0x4020400) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000040)={r10}) 4.809605759s ago: executing program 2 (id=1682): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="12011003ea969420ca16021558510102030109021b0001050d9001090434000159492e260905030200047f42ff109e7845fa410ab4923aad5d59da116a1ef0b03227636aa686defb72ef78d1d023cc8888ec15e06dcc2d645f4db8e724d95b654d94a58390a7537a0da5825fab7882ebf37fbceda14365b94f8b1817246381aa00c89763822be17edef7b306561de180aed9e6b8f4e51edebc7072f997808800000000000000000000190d69c01671fc959e273941cd55c1545e7a42f1b58f7708eb68ca75a17fcf2d528bd3b83ce77ba94803c52f065b5d8a12147fac547d68cfd09f0b8f22c1a1"], &(0x7f0000000240)={0x0, 0x0, 0x1, 0x0, 0x155555555555564f, [{0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000394c0d2cc0e680fea48813fe0273acac8738d923da8c115c839c3a5e090b4df7424e60400000032918c008dd97756c91c3d18b79c77cc7c39ac4bb07474fb10b9787e871463"]}, {0x0, &(0x7f0000000040)=@lang_id={0x0, 0x3, 0x458}}, {0x0, &(0x7f0000000080)=@lang_id={0x0, 0x3, 0x441}}, {0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00039a888dba1f00c02f37229deaeca21ecabdbc4f403e2b4f6aa210cd6310000000b17e3f780b000000000000000494885c8425aa31d15cc2bd7c592909d2"]}, {0xfffffffffffffced, &(0x7f0000000200)=@lang_id={0x0, 0x3, 0x44c}}]}) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe53, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x800, 0x8000, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0xa32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0xfec4, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)=@delqdisc={0x24, 0x25, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xfff2, 0xe}, {0x9, 0xfff3}, {0xffff, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) openat$vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r10, 0x4138ae84, &(0x7f00000001c0)={{0x81b7000, 0xdddd0000, 0xe, 0xf1, 0x5, 0xfd, 0x4, 0xd4, 0x0, 0x6, 0x7, 0x7}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x2, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0xfd, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0x0, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x5, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x10000, 0x9, 0x1, 0x3, 0x9, 0xa, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x2, 0xd000, 0x0, 0x6, 0x3, 0x6a, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xeeef0000, 0x8000000, 0xd, 0x5, 0x28, 0x7, 0xa, 0x9, 0x54, 0xc, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0x8000000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) 4.473073828s ago: executing program 0 (id=1685): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000500)="48000000140081fb7059ae08060c040002ff0f03900000000000000400006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}], 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001440)={'pim6reg0\x00', 0x2}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x82080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)=0x20000000) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0xdfe8) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x3802001, &(0x7f0000002400)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=r4, @ANYBLOB]) socket(0x6, 0x3, 0x1) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x20000003, 0x18}, 0x10) read$FUSE(r5, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r5, &(0x7f0000002300)={0x50, 0x0, r6, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r5, 0x0, 0x0) write$FUSE_INTERRUPT(r5, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000002240)='./file1\x00', 0x101042, 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r7, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 4.130676786s ago: executing program 4 (id=1688): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000040)={0xa, 0x9, 0x4, @rand_addr=' \x01\x00', 0x8}, 0x1c, &(0x7f0000000100)}}], 0x1, 0x4c040) 3.463861494s ago: executing program 4 (id=1689): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newsa={0x10c, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x300, 0x3, 0x2, 0xfeffff7f00000000, 0x0, 0x0, 0x0, 0x100000000000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x10c}}, 0x0) 3.190255175s ago: executing program 4 (id=1690): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1000005}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x4000010, 0xffffffffffffffff, 0xb0998000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) landlock_create_ruleset(&(0x7f0000000080)={0x1, 0x4, 0x2}, 0x18, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000330c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f000019f000/0x1000)=nil, 0x1000, 0x4000000, 0x110, r1, 0x0) add_key$user(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffe) 3.115500179s ago: executing program 4 (id=1691): r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000003ac0)={&(0x7f0000003880)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000050) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) capset(0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) recvmmsg$unix(r3, &(0x7f0000003600)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/169, 0xa9}, {&(0x7f0000000180)=""/62, 0x3e}, {&(0x7f00000001c0)=""/6, 0x6}], 0x3, &(0x7f00000002c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{&(0x7f0000000400)=@abs, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000480)=""/192, 0xc0}, {&(0x7f0000000540)=""/144, 0x90}, {&(0x7f0000000600)=""/26, 0x1a}, {&(0x7f0000000640)=""/8, 0x8}, {&(0x7f0000000680)=""/215, 0xd7}], 0x5, &(0x7f0000000880)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000000900)=@abs, 0x6e, &(0x7f0000000b80)=[{0x0}, {&(0x7f0000000a80)=""/208, 0xd0}, {0x0}], 0x3, &(0x7f0000000bc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000f00)=@abs, 0x6e, &(0x7f00000011c0)=[{&(0x7f0000000f80)=""/53, 0x35}, {&(0x7f0000000fc0)=""/208, 0xd0}, {&(0x7f00000010c0)=""/205, 0xcd}], 0x3, &(0x7f0000001200)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f0000001340), 0x6e, &(0x7f0000001740)=[{0x0}, {&(0x7f0000001440)=""/147, 0x93}, {&(0x7f0000001500)=""/129, 0x81}, {&(0x7f00000015c0)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f00000017c0)}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001900)=""/103, 0x67}, {&(0x7f0000001980)=""/29, 0x1d}, {0x0}, {&(0x7f0000001a40)=""/8, 0x8}], 0x4}}, {{&(0x7f0000001b00), 0x6e, &(0x7f0000003000)=[{&(0x7f0000001b80)=""/217, 0xd9}, {&(0x7f0000001c80)=""/14, 0xe}, {&(0x7f0000001cc0)=""/74, 0x4a}, {&(0x7f0000001d40)=""/161, 0xa1}, {&(0x7f0000001e00)=""/21, 0x15}, {0x0}, {&(0x7f0000001ec0)=""/23, 0x17}, {&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/199, 0xc7}], 0x9, &(0x7f00000030c0)=[@cred={{0x1c}}], 0x20}}], 0x8, 0x40012140, &(0x7f0000003840)={0x77359400}) syz_open_dev$dri(&(0x7f0000000a40), 0x6, 0x98000) socket$inet_sctp(0x2, 0x1, 0x84) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0xab02000c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000000)=0x8, 0x4) 3.017174341s ago: executing program 0 (id=1692): syz_open_dev$video(&(0x7f0000000000), 0xf12a, 0x0) io_setup(0x1, &(0x7f00000012c0)=0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) r2 = syz_io_uring_setup(0xeec, &(0x7f0000000780)={0x0, 0x0, 0x8, 0x100, 0x1b9}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)=""/4, 0x4}, {0x0}], 0x2}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r6 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x2}) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r5, 0x0, 0x0, 0x200000000004}]) 2.880498229s ago: executing program 3 (id=1693): syz_emit_ethernet(0x2a, &(0x7f0000000180)={@broadcast, @link_local, @void, {@ipv4={0x86dd, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x80, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_SIZE={0x8}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x40}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x28dfbe57}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x80}}, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x2, 0x81, {0x9, 0x21, 0x677, 0x1, 0x1, {0x22, 0x38}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0x2, 0x2}}}}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x264, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x10, 0x4b, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x4, {0x9, 0x21, 0xffff, 0x6, 0x1, {0x22, 0x603}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6, 0x10, 0x4f}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x3, 0xd, 0x2, 0x10, 0x2}, 0x35, &(0x7f00000000c0)={0x5, 0xf, 0x35, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x4e274fd, 0xff0f, 0x1, [0x0, 0x0, 0x3f00, 0x3fc0]}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "ebf5ef0162a30dbfa439eb33bdd083d5"}]}, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x401}}, {0xbc, &(0x7f0000000140)=@string={0xbc, 0x3, "8586db95e34c4b23b91c679e6d45143e635200fd53c5b6bcf12531349e5725c081f73f7e10bd22d49f42c2951ca0a794f4335d4bda074d7c7b59e09c33cee693c3cb7305ac63ddc63544b2e5e82537d8d742117559c99facc544ca8d95e538681a8d45238b9c280e2442ed23f135e9eb35b9ea56003e92b864a17de78b643cd7fde617ceaba2f53d127d724ad5d141281ea306f7e370725c21b101d33243e6ed7b111491ad836ee604ee23c9e724a36da33cbb1c1d2689900226"}}]}) socket$rds(0x15, 0x5, 0x0) 2.857006105s ago: executing program 0 (id=1694): r0 = socket$nl_route(0x10, 0x3, 0x0) add_key(&(0x7f0000002100)='keyring\x00', 0x0, &(0x7f0000002180)="8ec5", 0x2, 0xfffffffffffffffb) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000734000/0x14000)=nil, 0x14000, &(0x7f0000001240)='ovf\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) socket$netlink(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x20, 0x3, 0x0, 0xfffd}, 0x8, 0x4, 0x0, 0x0, 0x0, 0x20000, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000008c0)={0x3b, @multicast1, 0x4e22, 0x1, 'ovf\x00', 0x32, 0x10000, 0xab}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @private=0x2, 0x2000, 0x200000001, 'sh\x00', 0x9, 0x821}, 0x2c) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r4, 0x4b32, 0xf1a) syz_emit_ethernet(0x3f, &(0x7f00000010c0)=ANY=[@ANYRES16=r2], 0x0) sendmmsg$inet(r0, &(0x7f0000001d40)=[{{&(0x7f0000001100)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001200)=[{&(0x7f0000001140)="a64a83bf9c3d7e925f1a0baab7fd85b9f182ee4bd638d19968c0cedb4af81f7ca848f900519136820b447abcec4aef653cae782effebd1c690179d9596eb508c8d2a68b2eca7", 0x46}, {&(0x7f00000011c0)="abb7cc0482ece0c30537101bba76de6874df85d744a2d87a3c638b99e6abfabba89e2d2e9a6db9", 0x27}], 0x2, &(0x7f00000012c0)=[@ip_tos_int={{0x14}}, @ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}], 0x50}}, {{&(0x7f0000001340)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000001740)=[{&(0x7f0000001380)="d6fb46c531e670558e9d9c3e5d13680c17b15a18f9644110d7838c544d723bb1", 0x20}, {&(0x7f00000013c0)="481f6cca7a9746d7f692804305eccc3ae4666a3c6af5ade322ff3c14f5f312c8b6029927d3e5914cdb978602521bb03c8f22e9f8968f3543e9af5ce9c1c6c7ff984a5f40d170146e05e2d6604b42f2a0ba7820582daad3673c83844761e4b065b63d", 0x62}, {&(0x7f0000001440)="21c2c0dcb39669dca1434a445509b4a4a9f6786c0d074da13a43793d1d4e2732d01155b9a2ff5b726443a0a2083101ebf91488d1e59aec7699e649d6779c2c90d1f91338e2775ab5770574838a51001f0471e5aa9f2362c5f00d9b4191186cadda72f6c6d0b6e2206b40593cd2567f199abc4a06d09e6ef1d245198414f295", 0x7f}, {&(0x7f00000014c0)="f95b810ca4f030c8f5d7ced2f2f45a15dad9bc95f3b5a2bc8bc6ebd21c5d5ecb738ebc40e0e1474cef5312370018a6fb473411856daf6037c6249e9dba489e03b58763422af6a5b426ce77fc18e0749f857da9f84da0542ca1af9e44fc66d8e5ff00abdca6d6cbb8e383be3313f64538f2318c9c4f61bcb17e0dbc2a0eb973e47ff3de54422748553f8aa2c0d951b1910f595c6068ca44471e726f485df19bbd2a49bf456697a75a088bc363f472b690ad9337345e767d0ffa9e28c22384d944ebc1a37e03ac45743041f5f44575", 0xce}, {&(0x7f00000015c0)}, {&(0x7f0000001600)="839f3033f2be72ef8daf983271d07c65b3796285a387911ea697168d5f9ee6b2dd8ed73744dc29b3198550aad7057caf06e3d0581d5d26ec6dd256a367df067cc84d8f5df68f4588e59d73cd93e5022ecaa489c7d3b65d1821df1cf78d0128083daa6052f9", 0x65}, {&(0x7f0000001680)="8b68db88600f5e1a18640e2679dc03cf89223931358933a66201f1eb7957b4e852a67e11dde29012056551ae459a14e054d4e9653a4d72e78e02222d0103ef88aeaa3d1c2e85b1cfa23b2df795e578f994036757067f30f34a3639100b4224c993bee2fe6ca6df5fb2847b80d6405c68dfed27dfa6d9a5a9072d5ea7f252ea043565872595906a9780a1681dc973be81f0cd5840816e46ebdfe85daa2a6dbea17366384aaefe3cd94125e27a", 0xac}], 0x7, &(0x7f00000017c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xe}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fffffff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010101, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9d}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc}}, @ip_retopts={{0x88, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x3c, 0xe1, 0x3, 0x4, [{@broadcast, 0x3000}, {@multicast1, 0xfffffff4}, {@rand_addr=0x64010100, 0x200}, {@multicast1, 0x10}, {@broadcast, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@loopback, 0x7f}]}, @timestamp={0x44, 0x10, 0xba, 0x0, 0x1, [0x7f, 0x9, 0x4]}, @generic={0x89, 0xa, "1b3482334233061c"}, @timestamp={0x44, 0x10, 0xb1, 0x0, 0x9, [0x7fff, 0x3, 0x7]}, @ssrr={0x89, 0xf, 0x6d, [@remote, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4c, 0x24, 0x3, 0xb, [{@empty, 0x7}, {@remote, 0x2}, {@rand_addr=0x64010100, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf8}, {@local, 0x7}, {@loopback, 0xa}, {@local, 0x4}, {@rand_addr=0x64010101, 0x10001}, {@broadcast, 0x42a3}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x71}}, @ip_retopts={{0x98, 0x0, 0x7, {[@ssrr={0x89, 0x27, 0x29, [@local, @local, @private=0xa010100, @rand_addr=0x64010100, @multicast1, @local, @local, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x19}]}, @ssrr={0x89, 0x1f, 0xac, [@broadcast, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x33}, @local, @dev={0xac, 0x14, 0x14, 0x15}, @loopback]}, @lsrr={0x83, 0xb, 0x20, [@multicast1, @broadcast]}, @timestamp_prespec={0x44, 0x34, 0x34, 0x3, 0x1, [{@multicast2, 0x80000001}, {@broadcast, 0x4}, {@remote, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x80000000}, {@broadcast, 0x81}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}]}}}], 0x230}}, {{&(0x7f0000001a00)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000001bc0)=[{&(0x7f0000001a40)="5764520dbf4b3948de5996c156d52463ee826a11291f0643424a506f133f0e9ba90008cb6cbf563b18518b5a2fb32c9ce66915b69d20c01b3fd48400ff07b8d9f4e00b1a8b72163e681ac5fca40050c0164c24f000e4ddeb8d8b7a03a69b50bb0001bd9fab9c3302168154d4ed0a49cfb34fe635d86a78ba7da5e31d5cf9ee4db9ca7307547af6715a7d24f77b378221a269f5659e7929d241584f78f953a9f2824653bcfcda75795b639d108a626d688a17272974e9e3b8", 0xb8}, {&(0x7f0000001b00)="85ec7da16c37417d660f2db4d47b9fb8c6ae46aef1f33be9a7b725c29dade13b493da08104d5c290f04cb62f2b262474938ccc16100501a5011b9db481fb8009da8a4fbde90b092770d2681a501d4ed7c266d7bf982219bf3cfdaaab19cb1d9641c9b43da1798db06a18d93b36b9c7a31f27e765eeee604c899e520180ec9e4f86d4cc2d83be13230df4f007eba2dda1bf64b1dfec39b7681d43c80f4c0b96b2b8219b47f3cb75f2c8766de5cad31db192339b", 0xb3}, {&(0x7f00000021c0)="1d4ef3629a893b4b80dbf460494ce94c9ed729368fbd8ed79294b47f886cf36d897368745295e2bbedfe8d4f926d5144f6c811beec25b1c845b715d4d3e61a0332133c302114ded9ffed13141f0d9aacc02955197b709363159bbd79cc7618f52e4252f338a5f6db24dff39ec085269a0ecda8e639a67ef1809ab7f0bff29d05b942bcabc4fe6fb385ed37f9752d05cda32b44e59f5dbb46615768555199652dabfdfc55eb6f215b2c3ecb1364aa323d1b17d70e63ad37ae7a6ae2f088ada23243bccecff27a0fa0d0d844f5d94027a59b2c9e39479a26d3f9be6c982c8bafe2183428d9d390220f71621f6a36518bc428697d11eea6a257088d46ff367636871be77cb12715238dc5d1413715ab2390addda52f7aec14957a34089047b262a0eabe97457663418fd7994c8d7368780ef8fb89a7dc6c5ade60ed4e4d66df914144daa5fc4c77a0b56ee108d1d4d5a4baaecf463e46a268b2c60936e3c76ef4d0852aa20f972053b1bf0f890a3297ea1f49a839c44eb6c9ee575c6115402a7b8c3887f77a2792f6f6ebd344aa7306455a0193b73506279c803de75a9f848d542e418c0efcfaba134133def8d48d9217cb3cd8b1d0d18a27e80973ecbc07a093d9f440d975bc45e880ec1aece6c54a3e937ff9ecfaf517efa22d9dee54fadbe529c039e12034c7a3015e487b55a336b21fb5804f78f72267e5754921b78c4f11c7c1d21496dd0c3ce320bdcae778c327a09ff523b26aeeb942b4ac37302575f8ac2effdf251b193c9a6a47628c4e5bd66f94dbc583e7530501f3897839c62ad19552c10bd6b3721e1200fc354219dcd159b7b1c070cf692932e90a4db3ec9916c208a232e0c882ede98eba6a7f2fb1bb92a7af6131cd25f7e645738f127726047392b21c8c593172b7ece5abf482916e71544946e4a0d95a3bae00a717918d0a776d3dc4d94ae5019b6d51fc79ad1f3a155896a5896d8d1d28dcf057c54ba688450e8fccea75c7654cc7fd11ad422d3aa2a79c26131c3a36681ba40aacd9624ff8d53ca5b0f965ca748f6497648200a88954051e817df00e0458c69ecdef08645e1cb1d63ae8187d9423405c8662be8c2cdf99e0774314bab64d03ad53951bf66b5d6ec5162d798f8a1af8a110704d1a94d9cd3826bf42ed3559d7df8f17fe3deea4bdb499130963766312f3af8b52eff9fecfd2f97c55ca279f47fb6bb94f63ec403462e786f2f7ee042b41625e1029c39faed2adcddc18681e974bb2329152a5503ff4d7950eb4cf7f9201027aef35fd6f1c59f8f9b410d2a43b3212d314d3b34cfa46935b408fc91db6d27cec3548b947b37c0b7cb297c8a5a434c3e8a1efbf40fba63caac13edc3866fb8a5c35c6d2ed48541aa13fb5bda8291352d8bdba722a9f174ea61231213c5f4e7db21ebd518c8d71acd895e5085cea041bf1d72eea166302183b903141e2519a2c5f06d4a036ce82a7c40f01860710fd6326f598816db90f9dbc2c95a6d039ea729ed4ae75654969bb2d1d1bbc27094d9cec5677dbcdbaed6ded62434b7dd52c83c5ca1df36ff336abbc7aeed8c085ca7ffe9c1ab1cb1366b005b838eae46a2f742fe0ef03e264e7ccd53f35ab9b3b5b67d756bd58c27ed3edc6097782af80239a0d0901e78016c2db2b9b10a858f8ccc82d4c8587bf7bf30c6b18c610cfda7e4beea46d8b640c6a16fd847278d36a69bf1502f7515c7994448d6a9c268210246475a333976ea12c7362a2a78450c77873b161a959840ad4ad4b13f6a2a2541d95e3472f0ebc7183b828004edf22e476df0bbd962a8e5066bb92d93153595864b13b2bec8781bbed6fa658b90d323a16e5d2e84be23002b9f86e2a5cc98418bd3f916097401e94cd2bd7f395b04bdbe5c3d5edcc83b10bfa6220f891ab20bf6ecf9c94dfcce0eb3c6a5dfc679c121ca21b8c29283aa4452e1ec43a0e12191c0b2d3e8bc9fa4bac8aaac4c06f86ee91bdc48f264b4c72a77a154664c94fa33d4ccbb4f2ea9625fba49330b43ed0598f0f3a984bf8a6a435afd5e58e1274bb4ba7581b1c45845792746f6235406658cb46379a5191aebfc7f4f009f47376a415ccc8cf3ec597ff2e266121a5d2bbbdcec356f6c74984d66279c2821771271751caf362e65e1976de03ce615ce69bded566f1aab6fa7b090304def8b8c96b96f56063155376ddde0b5be36e29a1d6f88e1c4d532aeb2d8227f89831e434f1742dc5721b99ba392b841d5a3824e804f2976a95fd4bd3c1df35e3733d0914d20f995998e1923f581023b8d2f70600ee9624db60a6cb7ef530e30477fa8e3d4aedac48022260ca5f0826edf32ec5c1152217803222d70c36b35a4947d75a6740bfd8045c983e9cb196db62a7326221f059f1da38222bcdb751136892f67300bca68612d505b53e679adbe16c50d467d2f986cba6f536ce1197be427a289a2024d1873f76188a557312a794ca2f3e9f0fb2ff7ca41f8c968815d21ced6a9828823ce068d060f7afc99a993ea45d92c0c91fe31af740e86e1d9469eb6ee6286cb5765c20549617425f88731901636b319dd500b475650da4d257724fe84d0b4f24e71cf291f187c259cfaf9b5b3ad86984b9eda076d3c4f23f430032696d2fc78a58102d4edd2c5a903262ed0b738be937b68679645578bccea977df4aab295a5a46fad6168c9352ffb11d53aacfb49c6f8403921bea6d43fa62c11f5b1d8a8f452ee0571293ba172bcb8085213a6c0bb21ca59bd94965c14ebc903e83a0c30d42b0c8c076cc01f8aea38d7dc68e5d1012d848a29eff2defe3adc8f9a5a65fe681ee05b30a32be3019bd2268073a97200eb68f4bcf9c64d7c71b8cbcda2ff98e434cfecb30960a23bc83ba664ca1a96982114c1b011b589e53fe4a6f243370067b15c73b3514866cc6b009d84da4268ec580bc94bba627c502267c6422f5d7e2d5b2a2c883b42ba4a3017dd3708e20c70df2aa73e9593a0b99bc48721e72acff80d683e0035d32de681e47ce94c554caa55fbe02d705d7a863933741e6c43df67f2c16e98fb8cc569ad9045a4e744d0052e862472a4177c1d527aab6848f04a5119d4a76aeb4a5a76e7e801b5780058e81dc9975545d667cf660aef3c32a4f3f1b4c753d7c6b89bed2717463358aa0b1a3678b2867424bf72891a7047855cca7fdbf214ac4fec98df80a9abb276b677509986f37d6e13ff5e37407693f61a1d8e0e6baebe40d39156ea37d34ee3d50eae7342737ed5c64c174cfec4d5cc0a1650f08232120b65ac0382fdfb6c0f89a420002e06e316ce2970384f28300e7c44b5f4cc033ad45fb9bd7a9bb46946195e694d42e46e8104bb3ba761d6a3e09b7a203ed5b7bd3e10803a633fbedd0b032761f64f17a21eccc5072d109b5b5bc32094102801398ee473731d7ac38a451f5dbcc80e08b4f9c5d9fad0d28eda75ac371e76edbf439b103d09084c305f15cf8895efe3ec14a73a6e5ea6eb1e989864890e79209e75381b8f7af594eba674e1386f5a1c5d993f52857674951be0f5fe4faf89e3da2b4fb954ba946e452d42cf23c2c01513c343242c4efb929f6d9b2faaca3e9ef81ca91f96ac064f928a3ac6c54f4858193354acf87d1fee100d4b24b929aaff59d04ee541265014db3dcbad0b43e58abc2214ea63d6e0028855d1fdf1b3106b6eaa1ef9cfc5525edf9be9808d301ef9890d0111dc3b6646696758defd833939f5fdcf233073775dc6a0ce87339b44f085c962b7f5c02f0a21f2040b7ae8be6a0278ea75892007ba9565adc4bf78afe973cb9bfb4495eae3ccf2e7b33ca8d6e4964407b4000a02ae1997bc821d06492e1c44e73bd9d8dd8f6e1779d5b7960e1de421e7c510e03313d45afdd50eef0a595e0ec2a291c8ae69a347ea54593b30b8a54925f4bc3306ba49f325c5f36e35be668e32bbc6a7353fc68e1d9d203d97777fff0dad9b0426fd58077df417c893c5f43df310defcb6e58bc52f3eb87a069c3feffbe08a1f84561168a7564eef926d85ce04fe67da40d06c508a861ce735fa26fc1eadb9f4808bc50f0c494e8b3a03d8ccce0e480705c8f2d5a6071e9b9bcda7d9e09278b66339854d3c677d70c5aca8cbc41b4a7d723c3382aae4d8241d7712913f1ecb78be2a76218bb82b8b06b55d193713e5c17f2ffaa3e1e28ab444b314482b55b8bf319f4d030c362c89fbcb431748b2ffb77be951fa2336a25bebf0db5a5567763d088c6c692aa147ade515c002eeacdc3e00ce7f201e2e792f171b92dcf33615af3371f3e86738011139497daf1effff8d058584cfaf6ce47a5bf501f19e7fc4cef3658edc5da6230011738c27297bfc41ff3595e06bf70280f9324b2c49828bc491928c00b667ae129664356f327156feb4a0470766f705d8d37c88c57759b8fc3895fdaf2fbe58ecfc59bd7a103aeca5871ff9603eb7138d2a322081dc54aa5e46a8532dac7b4656e3b4f0fc76d90f98a47346d071e58128702f8ce7b115419a824d69ff3fb628cdaed9a9277ba2f5ab8b4670482f7d6b3be6656f6c02f6e948204ecbd4346f12a9adcdb01569f7811f059af6a5e209c955c3e1b9123a79266705328a207156c1e75c71ca4e124b3795372a8e60749589f617e78eaa7877dcd3f8a6241cf4cda729088ad72ed837dc0082f074dbaba3d0d805cf9d75532f09f23b1f2d4141bc732d987849e92d7858a25e517d08b2154c312e059573fc4a6c3f65c39083c57ad60cea47410ddeeb4b3a3e34ea66550f92decb4bbd5b53fea46da8fea36cdd5a553b8739facb814df0ee2bff241b4c4febe0546c58cb17bb3f13a2ef276754468fb7531e7023a2bb515143c27d825c54f55cf313a4fcecf0f893fec5ebfe26b0d52385f5ed81e618ef927afeadf4855c9d5ec7d5c5b7d53597762750558c916e08a53fbf223d6a5afdff11131471db42fabe6745a7a0b7e2ade4588ad8331d6f7a9f026cbd8d3d74e6a8a338c53505598aef6e7f02f95cddc3f5cfbd5c0a28901080bb74f0b5ce6e394c03e34a060f7f81ebdc1cd2f28480f70d9fd0037101d83dcca358e6d62842d675eb9d194077e4085f2e63c29f50a3a5512ebaca97a9f9b32146ee088410c8786cfdd4e3aea23e99fd287d143443f49a8eac222d51ae5620dc2848eacc5b537bb9f33dbe42c9b1c4b130892b994b560ce443badb71c17f500d63d093823713fd2e5938df936e56c778e99e4ac9a63e7fe2f3cfd323e9fa678bb12872d76e33efbd3435dd42f52c99a8a01ecb64eb9f15182878addda2de3989a8854fe5e2c1eb1e9620b08443a4fb32d760410e8214b944976440b0ed21a9ee6368421e79b77b4257af5b5a18ae97eabe9f546e927f1f78e61d37f4eb2e2739b917a68e9c42795f3c3ff57b8783cbf6e61ad103bca7a6698acfc78e7522192fb99c324cea059ffc989685f57acb2df1be5c6b115f5eb9eba865bd9aa739db64c0f8b1d4ea8848ec8bad2b3f3d23efdb08d59870fbfd9c710311f1e87c5957a277ffabfc7c2ff51d7f10fdd8f57f3e36abb5ce4deb5555a6c9107effff4cef5d297a72591193f86b45c0b38d871da07e1309448fcc934352f1e9cc950e4463b1c02aac19a4f168be27ee3628337cd932d77e83d6d612a188abd792aa9d5a6810e2aaea5cb2ec7d31175c83ea1d9ece9df5f140679121e58e0dbd9814cac36c4e515783f3b9e375fd1704e6ad15e27e9cf208552f0f724b6a1833ad821afdc22de09c114a8782018a679401cd41888cef0f7ecf7bc423c8a0af81cc86e990390bb618484b6eba96b77", 0x1000}], 0x3, &(0x7f0000001c00)=[@ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @private=0xa010102}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6e}}], 0x50}}, {{&(0x7f0000001c80)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000001cc0)=[{&(0x7f00000031c0)="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", 0x1000}], 0x1, &(0x7f0000001d00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x38}}], 0x4, 0x0) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r5, &(0x7f00000000c0)=""/4096, 0x1000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) 2.818508885s ago: executing program 4 (id=1695): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000000)={0x40, 0x30, 0xc, "008000010a01000000000080"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000380)={0x40, 0x18, 0x28, "fea454b6be399664cb5dc5694f0784caac4e942ab860a54146931560110d6c29c6c5cbda1cd0dc7d"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x28bd, 0x94, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x3, 0x10, {0x9, 0x21, 0x3, 0x9, 0x1, {0x22, 0xa5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x10, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x80, 0xd1, 0x32}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x0, 0x97, 0x8, 0x10, 0x6}, 0x15, &(0x7f0000000240)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x9, 0xff00, 0x94, [0xcf]}]}, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x401}}, {0xa6, &(0x7f00000002c0)=@string={0xa6, 0x3, "916fee56db90768c651ea5a1278a2e56a795a122ec10802a94a67b9170d7af393fdb08752ade1c2db926c85a479ccac6bcd6e9bbc33254fa4c765d7e7475d95c6630662a3591efb16aa21d049fe0ee3761eef11add3451c2482f17602bcca92ddb994ef9be556ce1175c54e795ed48ac8e45890e0b8f97a21eaf1b53c807e2a4df256ae9730fe79af1ff3206c48d799d473c5c0e1219dfa6ee1a85703fa05c1066583af6"}}, {0xc3, &(0x7f00000003c0)=@string={0xc3, 0x3, "e8ab782c98a3afcd2937ae5b96e4844226e7cb787e8eeaf1e7840be0536e8d127698341c46e7798869417eb815f9ae17e8f7181f1009ec78c66a924e4e11d31f301a55434b63c8ba24c1c9966183a1fa29e0fafd443ab55a48c6861dda2cb23094e4d955c1b17f4b3c7bcbd4f37e7de51bbc62defa704ec2a29cd38c5ecbf6c73b6d5b63715b7245d3e3f9543bb1a36c7cd13fdcc777afc257e2cc2c0942184c9acb17b53dd9ba98bcd342f09cc4fc30211123e20da6dc341095062328846a61c2"}}]}) 2.277536624s ago: executing program 2 (id=1697): setitimer(0x2, &(0x7f0000000040)={{}, {0x0, 0x2710}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r2, 0x400, 0x1) close(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x32) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4008881}, 0x40004) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x1a, 0x98, 0x90, 0x8, 0x547, 0x7303, 0x3027, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x27, 0x0, 0x0, 0x9e, 0x41, 0xb3}}]}}]}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010102}}}, &(0x7f00000003c0)=0x84) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4080, 0xff0}], 0x1, 0x0, 0x0, 0x0) dup(r3) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) unshare(0x42040200) 1.878822885s ago: executing program 0 (id=1698): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0xf, 0xff, 0x2, 0x42, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x83e1, 0x6, 0xfffffffe}}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0100001200000827bd7000fcdbdf2507000000", @ANYRES32=r1, @ANYBLOB="c0020000c5400000080025000000000008001c00", @ANYRES32=r2, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x800}, 0x4040011) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) listen(r3, 0xfff) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000000)=0x1000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYRESDEC=0x0, @ANYRES32=r8, @ANYBLOB='\b\x00&\x00'], 0x24}}, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) membarrier(0x2, 0x0) ppoll(&(0x7f0000000040)=[{r6, 0x9620}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r6, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000000)=0x4000) r9 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r9, 0x29, 0x18, &(0x7f00000001c0)=0xffffffc3, 0x4) 1.792570208s ago: executing program 5 (id=1699): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000040)={0xa, 0x9, 0x4, @rand_addr=' \x01\x00', 0x8}, 0x1c, &(0x7f0000000100)}}], 0x1, 0x4c040) 1.400568481s ago: executing program 5 (id=1700): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newsa={0x10c, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x300, 0x3, 0x2, 0xfeffff7f00000000, 0x0, 0x0, 0x200000000000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x10c}}, 0x0) 1.11513926s ago: executing program 5 (id=1701): epoll_create1(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a207ffffffe0a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001", @ANYRES8=r0], 0xe4}}, 0x20000010) 968.573359ms ago: executing program 5 (id=1702): connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYBLOB="0000000000000000b702000014000000b70200000000000085"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000c9ffffffffffffff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x400, 0x2000000000001]}}) 965.153331ms ago: executing program 3 (id=1703): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x402) writev(r1, &(0x7f0000000840)=[{&(0x7f0000000180)="d75b18", 0x3}, {0x0}, {0x0}], 0x3) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) 556.461858ms ago: executing program 4 (id=1704): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x48, 0x0, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x6, @local, 0x3ff}, 0x1c) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000000)=@generic={0x2, 0x9, 0x1}) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000640)=0x10) close(r2) r5 = syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r8, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r8, 0xff7f}}, 0x20}}, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x3c}}, 0x0) 412.181098ms ago: executing program 5 (id=1705): r0 = io_uring_setup(0x24b9, &(0x7f0000000000)={0x0, 0x9db0, 0x800, 0x3, 0x1b4}) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f0000000140)={0xe}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x800440, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(r5, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_GETINFO(r6, 0xffffffff80000502, r7, &(0x7f0000002280)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002440)={r4, &(0x7f00000022c0)="76e699e38d63041e657d57b8918e7766f2bb5627cd26f1a471f9d39a165de02c60b4e65e7c714b4cfa3fd9d52d8a51ef07899e649c0bb7a5b985040617c299dd4f97d07f1c938fb40d39714798e684455d28552d865adf4581d7fe391f4bf7b6b1bdc3c2db54e81dae6e1c1849ec693e73df3270bf58c8c9d1585c8bf79e8fb4e08a25047e1e543a3f3854fb85168e24801afe4acc5619090814ea02c8e41c2b3bdbff1e21ff0bd5be5787a52fb57de74e5a166d43e20e8510dcc90d0e88da5f89cbf0e41961d83ede577f1ea83a4be7447821f4369fc1246636bd62d8690a1afa0936d9", &(0x7f00000023c0)=""/126}, 0x20) sendmsg$AUDIT_DEL_RULE(r4, &(0x7f0000002940)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002900)={&(0x7f00000024c0)={0x43c, 0x3f4, 0x20, 0x70bd27, 0x25dfdbfe, {0x7, 0x0, 0x23, [0x5, 0x40, 0xfc, 0x7fffffff, 0x81, 0x4, 0x100, 0x9, 0x9, 0x8000, 0x2, 0xa, 0xffff, 0xffff, 0x8000, 0xed, 0x1, 0x1, 0xc5, 0x7d, 0x3, 0x9, 0x6, 0x400, 0x8, 0x5, 0x7, 0xc, 0xffffff5d, 0x200, 0x3, 0x6, 0x9, 0xffff, 0x1, 0xfff, 0x3, 0x7, 0x5, 0x8, 0x101, 0x5, 0x4, 0x29, 0x7, 0x9, 0x7fc000, 0xd658, 0x1, 0x5, 0x1, 0xffffff67, 0x9, 0x7, 0x99, 0x9, 0x7fff, 0x9, 0xffff, 0xc, 0x5, 0x11, 0x5, 0x8], [0x5, 0x1, 0x1, 0x3, 0x5, 0xfffffff7, 0x6, 0x5, 0x1, 0xfffffffd, 0x4011, 0x10, 0xd2f, 0xb6, 0x4, 0x10000, 0x82c3, 0x401, 0x1, 0x10001, 0x7, 0x8, 0x2, 0x7, 0xb8e4, 0x6, 0x6, 0x1, 0x0, 0xd, 0x3, 0xa, 0x6, 0x9, 0x4, 0x40, 0x7, 0x5b, 0x5, 0x1, 0x2, 0x80000001, 0x1000, 0x9, 0x4, 0xfffffbff, 0x98ef, 0x80, 0xff, 0x68, 0x7fff, 0x0, 0x9, 0xc4, 0x9, 0xfff, 0x0, 0x134, 0x9, 0xd, 0x2, 0x4, 0x2], [0x7, 0x9, 0x9, 0x5c7c, 0xa06, 0x8f0a, 0xc, 0x7, 0xfffffffe, 0x6, 0x200, 0x6, 0x800, 0x4, 0x4, 0x7, 0x7, 0x4, 0x80, 0x3, 0x7, 0x7ef, 0x5, 0x2, 0x8, 0x8, 0xffffffff, 0xfff, 0x80000001, 0x1, 0xb9, 0xb2d, 0x7ff, 0x7, 0x13, 0x4, 0x6, 0x3ff, 0xffffff09, 0xd983, 0x2, 0x1, 0x1ff, 0xacf, 0xffffffff, 0xfff, 0x8, 0xa5, 0x8, 0xa03f, 0x0, 0x7ff, 0x401, 0x7, 0x1, 0x3, 0xcb93, 0xfffffffd, 0x9, 0x3ff, 0x80000001, 0x10001, 0x10000, 0x3], [0x1, 0x1, 0x6d77, 0x3000, 0x5, 0xfffffffa, 0x8, 0x9, 0xffff0000, 0x63, 0x4, 0x2, 0x1, 0x478, 0xffffff7f, 0x5, 0x8, 0x2823, 0x5, 0x6, 0xc4e, 0x4, 0x8, 0x7, 0x0, 0x5, 0x6, 0x2c3a, 0xfdc1, 0x6, 0x8, 0x8, 0x8, 0x6, 0x3, 0x8, 0xffffff86, 0xd, 0x4, 0x0, 0x2, 0x9, 0x15, 0x101, 0x0, 0x0, 0x4, 0xffffff7f, 0x0, 0x277, 0x9, 0x2, 0x101, 0x3, 0xfff, 0x7f, 0x263, 0x1, 0xffff26db, 0x3, 0x7, 0xa5, 0x9, 0x3], 0x1a, ['-!\x00', '\x00', '[-{%\',]]\x00', '\x00', '\x00', '.))]:\\$%&$\x00']}, ["", "", ""]}, 0x43c}, 0x1, 0x0, 0x0, 0xc0}, 0x400c880) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000002980)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002a00), r2) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f00000033c0)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003380)={&(0x7f0000002a40)={0x91c, r9, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffffb, 0x2}}}}, [@NL80211_ATTR_TX_RATES={0x50, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x4, 0x5, 0x6d, 0x3, 0x2a4c05d1b870ca77, 0x48, 0xb, 0x9, 0x2, 0x5, 0x60, 0x6, 0x16, 0x30, 0x1b, 0x6, 0xc, 0x9, 0x6, 0x5, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x194, 0x3784, 0x7, 0x100, 0x4469, 0x9, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x238, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6, 0x24, 0x1b, 0x24, 0x24, 0xb, 0x16, 0x6c, 0x5, 0x3, 0x1, 0x60, 0x4, 0x0, 0x6, 0x6, 0x5, 0xf0d27e649f41e366, 0x1b, 0x24, 0x30, 0x65]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x16, 0x18, 0x2, 0x6, 0x12, 0x4, 0x9, 0x18, 0x24, 0x4, 0x5, 0x6c, 0x9, 0x24, 0x4, 0xb, 0xc, 0x2, 0xc, 0x12, 0x2, 0x16, 0x4, 0x9, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7, 0x9, 0x2, 0x2, 0x4, 0x800, 0x240]}}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x3, 0x6}, {0x7, 0x8}, {0x1, 0x2}, {0x7, 0x1}, {0x5}, {0x5, 0x2}, {0x2, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x6, 0xa}, {0x3, 0x4}, {0x0, 0x3}, {0x3, 0x1}, {0x3, 0x7}, {0x4, 0xa}, {0x7, 0x9}, {0x3, 0x1}, {0x7, 0x6}, {0x6, 0x7}, {0x4, 0x2}, {0x5, 0x9}, {0x0, 0x9}, {0x1, 0xa}, {0x5, 0x6}, {0x1, 0x4}, {0x1, 0x2}, {0x0, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x5, 0x9, 0x5d, 0x745, 0x5, 0x3, 0x3]}}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0xfb, 0x8e, 0xd657, 0x7f, 0xfffc, 0xfffb, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xc, 0x8, 0x1, 0x401, 0xd, 0x0, 0x1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x4, 0x9}, {0x3, 0x2}, {0x0, 0x6}, {0x2, 0x6}, {0x1, 0x8}, {0x5, 0x3}, {0x2, 0x2}, {0x6, 0x9}, {0x1, 0x2}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x7}, {0x6, 0xa}, {0x3, 0x2}, {0x5, 0x4}, {0x4}, {0x2}, {0x1, 0xa}, {0x4, 0x1}, {0x6, 0xa}, {0x5, 0x5}, {0x6, 0x4}, {0x0, 0xa}, {0x5, 0x2}, {0x7, 0x9}, {0x7, 0x8}, {0x4, 0x2}, {0x2, 0x9}, {0x5, 0x5}, {0x3, 0x1}, {0x1, 0x4}, {0x6, 0x1}, {0x7, 0x3}, {0x7, 0x3}, {0x1, 0x3}, {0x4, 0x7}, {0x4, 0x5}, {0x5, 0x6}, {0x0, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6580, 0x5, 0x0, 0x0, 0x101, 0xa, 0x9, 0x2]}}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x12, 0x4, 0x15, 0x36, 0x30, 0xb, 0x1b, 0x24, 0x6, 0x18, 0x12, 0x3, 0xb, 0x4, 0x1b, 0x17, 0xc]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffe, 0x6, 0x4, 0x1, 0xf, 0xb36, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x81, 0x7, 0x8, 0xa, 0xa53, 0x6, 0x5]}}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xeaa8, 0xfffb, 0x40, 0x0, 0xeb8, 0x89, 0x0, 0x480]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ae, 0xc00, 0x8, 0x5, 0xfff7, 0x8, 0x8000, 0x81]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x7, 0x9, 0xa000, 0x94, 0x1, 0x8001, 0xe]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x0, 0x9, 0x6, 0x401, 0x2c, 0x81, 0xba]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0x3, 0x1, 0xfff, 0x6, 0x7, 0xff7f, 0xff]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x35, 0x36, 0x4]}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x6c, 0x48, 0x60, 0x4, 0x1, 0x24, 0x1, 0x1, 0x60, 0x18, 0x16, 0x1b, 0x9, 0x3, 0x24]}]}]}, @NL80211_ATTR_TX_RATES={0x29c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x423, 0xae, 0xfffb, 0x7, 0x9bd0, 0x8, 0x1, 0xd]}}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x6, 0x5}, {0x7, 0x3}, {0x3}, {0x2, 0x7}, {0x6, 0x3}, {0x1}, {0x0, 0x7}, {0x2, 0x6}, {0x2, 0xa}, {0x1, 0xa}, {0x5, 0xa}, {0x5, 0x4}, {0x3, 0x4}, {0x1, 0x5}, {0x2, 0x3}, {0x1, 0xa}, {0x0, 0x2}, {0x3}, {0x5, 0x2}, {0x4, 0x3}, {0x7}, {0x0, 0x3}, {0x1}, {0x2, 0x6}, {0x4, 0x6}, {0x0, 0x3}, {0x6, 0x9}, {0x2, 0x8}, {0x7, 0x1}, {0x1, 0x2}, {0x7, 0xa}, {0x1, 0xa}, {0x3, 0x4}, {0x4}, {0x2, 0x8}, {0x0, 0x2}, {0x0, 0x3}, {}, {0x3, 0x7}, {0x5, 0x1}, {0x4, 0x1}, {0x7, 0x2}, {0x7, 0x5}, {0x3, 0x1}, {0x1, 0x8}]}]}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x48, 0x3, 0x9, 0x1b, 0x4, 0x6c, 0x18, 0x18, 0x5, 0xb, 0x60, 0x4, 0x48, 0x3, 0x6c, 0x12, 0x4, 0x4e, 0x12, 0x4, 0x9, 0x12, 0x3, 0x6c, 0x5, 0x4, 0x4, 0x6c]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x4, 0x9}, {0x2, 0x2}, {0x2, 0x3}, {0x0, 0x4}, {0x3, 0x3}, {0x4, 0x5}, {0x0, 0x4}, {0x6, 0x5}, {0x7, 0x4}, {0x3, 0x4}, {0x7, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xb6e5, 0x3, 0x0, 0x0, 0x7, 0x2, 0x10]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x6, 0x3}, {0x2, 0x7}, {0x6, 0x1}, {0x7, 0x6}, {0x4, 0x1}, {0x4, 0x8}, {0x4, 0xa}, {0x5, 0x9}, {0x4, 0xa}, {0x0, 0x1}, {0x6, 0x2}, {0x2, 0x9}, {0x1, 0x8}, {0x0, 0x1}, {0x2, 0x9}, {0x4, 0x1}, {0x4, 0x5}, {0x6, 0x9}, {0x1}, {0x5, 0x6}, {0x0, 0x4}, {0x6, 0x9}, {0x4}, {0x7, 0x3}, {0x3, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x5}, {0x3, 0x6}, {0x3, 0x3}, {0x6, 0x7}, {0x3, 0x4}, {0x7}, {0x0, 0x4}, {0x0, 0x8}, {0x0, 0x7}, {0x3, 0x9}, {0x1, 0x6}, {0x3, 0xa}, {0x6, 0x6}, {0x7, 0xa}, {0x5, 0x4}, {0x3, 0x9}, {0x2, 0xa}, {0x4, 0x2}, {0x6, 0x5}, {0x1}, {0x6, 0x9}, {0x2, 0x2}, {0x0, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x7, 0x5}, {0x0, 0x2}, {0x0, 0x9}, {0x5, 0x6}, {0x6, 0x2}, {0x1, 0x9}, {0x2, 0x3}, {0x2, 0x2}, {0x1, 0xa}, {0x1, 0x6}, {0x1, 0x3}, {0x1, 0x3}, {0x3, 0x8}, {0x5, 0x8}, {0x1, 0x8}, {0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x100, 0x8, 0x3, 0x728, 0x6, 0x7, 0x5]}}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x101, 0xb82b, 0x8, 0x57, 0x9, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x8, 0xe60, 0x8, 0x8, 0x8, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x10, 0xff, 0x5, 0xbea6, 0x7, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff8, 0xfff, 0x2, 0x3, 0x7, 0x9b39, 0x7, 0x7]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x0, 0x4}, {0x1, 0x3}, {0x1, 0x2}, {0x7, 0x3}, {0x0, 0x3}, {0x1, 0x5}, {0x4, 0x1}, {0x1}, {0x1, 0x7}, {0x0, 0xa}, {0x7, 0x7}, {0x2, 0x5}, {0x1, 0xa}, {0x4, 0x6}, {0x2, 0x8}, {0x0, 0x7}, {0x6, 0x6}, {0x2, 0x2}, {0x7, 0x3}, {0x1, 0x1}, {0x0, 0x8}, {0x5, 0x1}, {0x7, 0x6}, {0x0, 0x3}, {0x7}, {0x1, 0x1}, {0x1, 0x6}, {0x1, 0x4}, {0x2, 0x3}, {0x7, 0x1}, {0x4, 0x2}, {0x2, 0x3}, {0x2, 0x6}, {0x6, 0xa}, {0x4, 0x2}, {0x7, 0xa}, {0x6, 0x4}, {0x6}, {0x2, 0x5}, {0x0, 0x4}, {0x4, 0x2}, {0x4, 0x1}, {0x4, 0x3}, {0x6, 0x8}, {0x7, 0x7}, {0x0, 0x5}]}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x400, 0x0, 0xff, 0x6, 0x9, 0x3, 0x5b2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xfff1, 0xf0c, 0x1, 0x4, 0x8001, 0x101, 0xdb]}}]}, @NL80211_BAND_6GHZ={0xcc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x10, 0x2, [{0x0, 0x2}, {0x2, 0x3}, {0x7, 0x2}, {0x5, 0x2}, {0x2, 0x8}, {0x7, 0x4}, {0x0, 0x8}, {0x3, 0x5}, {0x5, 0x2}, {0x6}, {0x7, 0x5}, {0x7, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7fff, 0x4, 0x5, 0x6, 0x10, 0x7f, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x44, 0x30, 0x4, 0xc, 0x48, 0x48, 0x2, 0x24, 0x1b, 0x48, 0x1, 0x12, 0xb, 0x36, 0x24, 0x3, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x8, 0xcc15, 0x8, 0xb, 0xa982, 0x2, 0xa]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2cfb, 0x8, 0xbbb, 0x101, 0x7fd, 0x2, 0xae5, 0x1]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x3, 0x16, 0x9, 0x48, 0x39, 0x2, 0xb, 0x9, 0x9, 0x2, 0xb, 0x60, 0x24, 0x6, 0x48]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2, 0xa}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x2}, {0x2, 0x8}, {0x1, 0x9}, {0x2, 0x3}, {0x5, 0x1}, {0x7, 0x7}, {0x5}, {0x1, 0x8}, {0x2, 0x7}, {0x2}, {0x1, 0x2}, {}, {0x6, 0x5}, {0x2, 0xa}, {0x0, 0xa}, {0x1, 0x9}, {0x6, 0x7}, {0x1, 0x8}, {}, {0x7, 0x4}, {0x1, 0x6}, {0x0, 0x4}, {0x1, 0x8}, {0x0, 0x5}, {0x6, 0x3}, {0x1, 0xa}, {0x2, 0x2}, {0x3, 0x7}, {0x5, 0x5}, {0x4, 0xa}, {0x4, 0x6}, {0x2, 0x1}, {0x1, 0x2}, {0x4, 0x1}, {0x0, 0x2}, {0x4, 0x1}, {0x7, 0x6}, {0x2, 0x6}, {0x1, 0x8}, {0x1}, {0x0, 0x4}, {0x5, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2cc, 0x5, 0x1, 0x0, 0xfffd, 0x6, 0x5, 0x5]}}]}]}, @NL80211_ATTR_TX_RATES={0x280, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4}, {0x3, 0x3}, {0x3, 0x2}, {0x2, 0x1}, {0x1, 0x8}, {0x0, 0x8}, {0x6, 0x3}, {0x4, 0xa}, {0x4, 0x8}, {0x3, 0x6}, {0x5, 0x5}, {0x0, 0x1}, {0x7, 0x9}, {0x7, 0x3}, {0x6, 0x7}, {0x5, 0x5}, {0x7, 0x1}, {0x6, 0x9}, {0x1, 0x6}, {0x6, 0x6}, {0x7, 0x9}, {0x3, 0x7}, {0x0, 0x5}, {0x6}, {0x4, 0x3}, {0x0, 0x6}, {0x2, 0x9}, {0x7, 0x3}, {0x1}, {0x0, 0x9}, {0x0, 0x4}, {0x2, 0xa}, {0x2, 0x2}, {0x4}, {0x7, 0x1}, {0x3}, {0x2, 0x9}, {0x2, 0x9}, {0x2, 0x5}, {0x2}, {0x0, 0x9}, {0x4, 0x5}, {0x5, 0x8}, {0x1, 0x5}, {0x0, 0x7}, {0x6, 0x6}, {0x4, 0x8}, {0x2, 0xa}, {0x1, 0x5}, {0x6, 0x4}, {0x2, 0x1}, {0x2, 0x7}, {0x5, 0x2}, {0x7, 0x8}, {0x1, 0x3}, {0x2, 0xa}, {0x1, 0x4}, {0x2}, {0x6, 0x9}, {0x2, 0xa}, {0x1, 0x8}, {0x1, 0x8}]}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x1, 0x1}, {0x1, 0x1}, {0x1, 0x6}, {0x3, 0xa}, {0x3, 0x3}, {0x7, 0x1}, {0x1, 0x8}, {0x2, 0x9}, {0x5, 0x9}, {0x1, 0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x5}, {0x1, 0x3}, {0x4, 0x7}, {0x5, 0x3}, {0x5, 0x9}, {0x1}, {}, {0x2, 0x5}, {0x4, 0xa}, {0x5, 0x3}, {0x0, 0xa}, {0x0, 0x1}, {0x4, 0x6}, {0x5, 0x9}, {0x2}, {0x2, 0x5}, {0x7}, {0x4}, {0x7, 0x9}, {0x1, 0x9}, {0x2}, {0x5, 0x2}, {0x5, 0x3}, {0x6, 0x2}, {0x0, 0x2}, {0x5, 0x2}, {0x1, 0xa}, {0x6, 0x6}, {0x2, 0x4}, {0x5, 0x5}, {0x0, 0x6}, {0x4, 0x2}, {0x5, 0xa}, {0x6, 0x5}, {0x6, 0x8}, {0x4, 0x4}, {0x6, 0x8}, {0x4, 0x9}, {0x3, 0xa}, {0x4, 0x2}, {0x1, 0x6}, {0x1, 0x1}, {0x6, 0x9}, {0x2, 0x5}, {0x0, 0x3}, {0x5}, {0x1}, {0x5, 0x9}, {0x1, 0x3}, {0x3, 0x3}, {0x1, 0x6}, {0x0, 0x3}, {0x6, 0x5}, {0x0, 0x3}, {0x7, 0x7}, {0x5, 0x9}, {0x0, 0x8}, {0x3, 0x2}, {0x2, 0x6}, {0x3, 0x4}, {0x6, 0x7}, {0x3, 0x6}, {0x5, 0x1}, {0x0, 0x4}]}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0xa8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x3, 0x7}, {0x3, 0x1}, {0x5, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x3, 0x7}, {0x7, 0x9}, {0x4, 0x6}, {0x5, 0x6}, {0x4, 0x8}, {0x0, 0x2}, {0x2, 0x6}, {0x6, 0x4}, {}, {0x6, 0x8}, {0x1, 0x2}, {0x5, 0x4}, {0x5, 0x5}, {0x4, 0x7}, {0x5}, {0x2, 0x9}, {0x5, 0x8}, {0x0, 0x7}, {0x2, 0x2}, {0x3, 0x3}, {0x7}, {0x5, 0x5}, {0x7, 0x7}, {0x3, 0xa}, {0x4, 0x2}, {0x0, 0x8}, {0x1}, {0x7, 0x4}, {}, {0x7, 0x5}, {0x4, 0x2}, {0x1, 0x6}, {0x7, 0x5}, {0x7, 0x5}, {0x1}, {0x3, 0x6}, {0x6, 0x2}, {0x3, 0x9}, {0x3, 0x1}, {0x3}, {0x3, 0x6}, {0x3, 0x7}, {0x2, 0xa}, {0x1, 0x4}, {0x0, 0x8}, {0x4, 0x2}, {0x7, 0xa}, {0x7, 0xa}, {0x6}, {0x6, 0x5}, {0x6, 0x4}, {0x5, 0x8}, {0x2, 0x5}, {0x6, 0x1}, {0x3, 0x7}, {0x1, 0x6}, {0x4}, {0x0, 0x8}, {0x0, 0xb}, {0x1, 0x8}, {0x5, 0x7}, {0x2, 0x8}, {0x5, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0xf, 0x80, 0x0, 0x7, 0x0, 0x1]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x16, 0x16, 0x1b, 0x4, 0x18, 0x18, 0x24, 0x36, 0x3, 0x5, 0x4, 0x3, 0x16, 0x1, 0x6, 0xb, 0x48, 0x2, 0x18, 0xc1795431aeac6a1b, 0x1, 0xb, 0x2, 0xf, 0xc]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xbde, 0x4, 0x6, 0x67, 0x8000, 0x1, 0x5386, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x1, 0xa}, {0x1, 0x8}, {0x5, 0x4}, {0x0, 0x9}, {0x3}, {0x4, 0x7}, {0x0, 0x7}, {0x3, 0x5}, {0x5, 0xa}, {0x4, 0x5}, {0x7, 0xa}, {0x7, 0x9}, {0x3, 0x3}, {0x7, 0x7}, {0x5, 0x9}, {0x4, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x4, 0x400, 0x0, 0x7, 0x3, 0x222, 0x401]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0x7, 0x1, 0x4, 0x40, 0x7, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x40, 0x6, 0x7f, 0x5, 0x34, 0x4, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x16, 0x30, 0x30, 0x60, 0x24, 0x48, 0x12, 0x2, 0x6, 0x60, 0x4, 0x5, 0xb, 0x2, 0x48, 0xb, 0x48, 0x16, 0x24, 0x6, 0x2, 0xc, 0x48, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x5, 0x63, 0x1, 0xfde9, 0x7, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x3, 0x8}, {0x1, 0x1}, {0x3, 0x4}, {0x7, 0x9}, {0x4, 0x2}, {0x3, 0x6}, {0x1, 0x8}, {0x3, 0x6}, {0x1, 0x5}, {0x2, 0x7}, {0x5, 0x3}, {0x1, 0x1}, {0x1, 0x3}, {0x4, 0xa}, {0x7, 0x8}, {0x1, 0x1}, {0x3, 0xa}, {0x2, 0x5}, {0x0, 0x7}, {0x1, 0x1}, {0x7, 0x6}]}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x16, 0x5, 0x16, 0x3, 0x4, 0x24, 0x36, 0x6c, 0x4, 0x18, 0x36, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x158, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x6, 0x4}, {0x5, 0x1}, {0x6, 0x8}, {0x7, 0x3}, {0x3}, {}, {0x6, 0x5}, {0x7, 0x4}, {0x5, 0x9}, {0x5, 0x7}, {0x7, 0x3}, {0x5, 0x2}, {0x0, 0xa}, {0x6, 0xa}, {0x7, 0xa}, {0x1, 0x4}, {0x1, 0x4}, {0x0, 0x6}, {0x7, 0x7}, {0x1, 0x9}, {0x4, 0x8}, {0x0, 0x4}, {0x0, 0x7}, {0x7, 0x6}, {0x4, 0xa}, {0x3, 0x4}, {0x7, 0x7}, {0x1, 0x7}, {0x1, 0x3}, {0x0, 0x6}, {0x6}, {0x7, 0x9}, {0x2, 0x5}, {0x1, 0x9}, {0x2}, {0x1, 0x5}, {0x1, 0x9}, {}, {0x0, 0x9}, {0x1, 0x3}, {0x5, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5a67, 0x2, 0x9, 0x1, 0x3, 0x72, 0x4, 0x8]}}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x2, 0x4}, {0x4, 0x5}, {0x3, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x1, 0x2}, {0x1, 0xa}, {0x3}, {0x7}, {0x6, 0x2}, {0x0, 0x4}, {0x6, 0xa}, {0x0, 0x2}, {0x1, 0x3}, {0x3, 0x4}, {0x7, 0x2}, {0x6, 0x9}, {0x2, 0x5}, {0x4, 0xa}, {0x1, 0x4}, {0x6}, {0x4, 0x3}, {0x1, 0xa}, {0x3, 0x8}, {0x5, 0x2}, {0x3, 0x5}, {0x2, 0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x7}, {0x6, 0x2}, {0x3, 0x9}, {0x3, 0x3}, {0x1, 0x4}, {0x1, 0x5}, {0x5, 0x6}, {0x1, 0x4}, {0x0, 0x4}, {0x5, 0x5}, {0x2}, {0x6}, {0x0, 0xa}, {0x1, 0x5}, {0x6, 0x7}, {0x6, 0x9}, {0x1}, {0x2, 0x1}, {0x4, 0x5}, {0x6, 0x1}, {0x4, 0x2}, {0x5, 0x1}, {0x6, 0x7}, {0x0, 0x8}, {0x4}, {0x5, 0x2}, {0x5, 0x4}, {0x7, 0x5}, {0x2, 0x6}, {0x4, 0x8}, {0x0, 0xa}, {0x6, 0x3}, {0x2, 0x6}, {0x2, 0x9}, {0x0, 0x8}, {0x7, 0x8}, {0x2, 0x8}, {0x0, 0x7}, {0x4, 0x3}, {0x0, 0x1}, {0x2, 0xa}, {0x6, 0x2}, {0x0, 0x6}, {0x4, 0x9}, {0x2, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1000, 0xa, 0x3, 0xda50, 0xa41, 0x1563, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7, 0x6, 0x2, 0x2, 0xfc01, 0x4, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0xc}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4d9, 0xfffb, 0x200, 0x80, 0x8001, 0xfffb, 0x7, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0xb, 0x40, 0x9, 0x6a5, 0x200, 0x3ff, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xc, 0x101, 0x72f, 0x0, 0x7, 0x67, 0xf]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}]}, 0x91c}}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000003440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000003600)={&(0x7f0000003400), 0xc, &(0x7f00000035c0)={&(0x7f0000003480)={0x138, r9, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x4}, @NL80211_ATTR_TX_RATES={0x118, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x6f, 0x9, 0x8, 0x8, 0x9, 0xdf8, 0x1]}}]}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1f, 0x9, 0x4000, 0xb, 0xf000, 0x0, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x7, 0x138, 0x6, 0x7f, 0x90d, 0x5, 0x83]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0x0, 0x8, 0xc54b, 0x2, 0x1, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0x4, 0xfffd, 0xd, 0x3ff, 0x9, 0x22a]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x1, 0x2}, {0x0, 0x8}, {0x5, 0x3}, {0x6, 0x6}, {0x1, 0x2}, {0x4, 0x8}, {0x4, 0x8}, {0x4, 0xa}, {0x6, 0x1}, {0x1}, {0x4, 0x8}, {0x6, 0x9}, {0x2, 0x4}, {0x0, 0x1}, {0x4, 0x5}, {0x4, 0x6}, {0x4}, {0x0, 0x9}, {0x6, 0x1}, {0x5, 0x1}, {0x1, 0x8}, {0x1, 0x6}, {0x2, 0x9}, {0x5, 0x9}, {0x1, 0x9}, {0x6, 0x9}, {0x6, 0x1}, {0x0, 0x9}, {0x6, 0x5}, {0x2}, {0x6, 0xa}, {0x1, 0xa}, {0x3, 0x4}, {0x0, 0x7}, {0x7, 0x1}, {0x2, 0xa}, {0x2, 0x4}, {0x1, 0x3}, {0x1, 0x7}, {0x3, 0x6}, {0x7, 0x6}, {0x0, 0x5}, {0x0, 0x2}, {0x5, 0x5}, {0x1, 0x5}, {0x5, 0xa}, {0x0, 0xa}, {0x7, 0x2}, {0x6, 0x5}, {0x1, 0x7}]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x0, 0xa}, {0x3, 0x9}, {0x3, 0x7}, {0x5, 0x2}, {0x5, 0x4}, {0x0, 0x3}]}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x27, 0x2, [{0x4, 0x7}, {0x6, 0xa}, {0x4, 0xa}, {0x5, 0x9}, {0x2, 0x4}, {0x0, 0x4}, {0x6, 0x3}, {0x1, 0x3}, {0x5, 0x7}, {0x4, 0x1}, {0x6, 0x1}, {0x4, 0x5}, {0x6, 0x1}, {0x5, 0x1}, {0x2, 0xa}, {0x7, 0x6}, {0x0, 0x9}, {0x4, 0x2}, {0x3, 0x1}, {0x0, 0x6}, {0x0, 0x7}, {0x7, 0x8}, {0x0, 0x7}, {0x2, 0x2}, {0x6, 0x8}, {0x0, 0x6}, {0x5, 0x5}, {0x2, 0x9}, {0x5, 0x8}, {0x0, 0x2}, {0x3, 0x4}, {0x1, 0x3}, {0x3, 0x2}, {0x4}, {0x1, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x2, 0x8, 0x4361, 0x916a, 0x7, 0x800, 0x401]}}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x40040c5}, 0x400c080) mknod$loop(&(0x7f0000003640)='./file0\x00', 0x4, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000003680)={{r2}, 0xfd40, 0x3, 0x30fd}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f00000036c0)={{0x1, 0x2, 0x7, 0x0, 0x4}, 0xfffffffffffffffa, 0x80, 0x9}) r11 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x2010, r0, 0x10000000) syz_io_uring_submit(0x0, r11, &(0x7f0000003740)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x2, 0x100000000, 0x0, 0xc, 0x4, 0x1, {0x0, r1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000003780)) openat$iommufd(0xffffffffffffff9c, &(0x7f0000003800), 0x42002, 0x0) r12 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000a, 0x80050, r0, 0x0) syz_io_uring_submit(r12, r11, &(0x7f0000003840)=@IORING_OP_POLL_REMOVE={0x7, 0xc, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r1}}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000003880), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000038c0), 0x200040) 314.878156ms ago: executing program 0 (id=1706): memfd_secret(0x0) (async) r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x11, r0, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x11, r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x14cd, 0x4) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x14cd, 0x4) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) (async) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x5, 0xe09, 0x20000, 0x28e7}) read(r3, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x41071, &(0x7f00000001c0)=ANY=[@ANYBLOB="218875", @ANYRESDEC=r0, @ANYBLOB="2c726f6f746d6f64653d301b3030303030303030303030303030303034303030302c757365725f69643d", @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x41071, &(0x7f00000001c0)=ANY=[@ANYBLOB="218875", @ANYRESDEC=r0, @ANYBLOB="2c726f6f746d6f64653d301b3030303030303030303030303030303034303030302c757365725f69643d", @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x800) chdir(&(0x7f0000000140)='./file0\x00') (async) chdir(&(0x7f0000000140)='./file0\x00') close_range(r2, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x10000) close_range(r6, r0, 0x0) 0s ago: executing program 5 (id=1707): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_disconnect(r0) preadv(r1, &(0x7f0000001ac0)=[{&(0x7f00000018c0)=""/220, 0xdc}], 0x1, 0x0, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r3, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(r3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1922b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) kernel console output (not intermixed with test programs): 02 val 2100 [ 282.224762][ T5843] pwc: recv_control_msg error -71 req 04 val 1500 [ 282.270878][T10256] loop2: detected capacity change from 0 to 7 [ 282.278337][ T5843] pwc: recv_control_msg error -71 req 02 val 2500 [ 282.314511][ T5913] Dev loop2: unable to read RDB block 7 [ 282.336550][ T5843] pwc: recv_control_msg error -71 req 02 val 2400 [ 282.351635][ T5913] loop2: AHDI p1 p2 p3 [ 282.371074][ T5913] loop2: partition table partially beyond EOD, truncated [ 282.384303][ T5843] pwc: recv_control_msg error -71 req 02 val 2600 [ 282.412982][ T5843] pwc: recv_control_msg error -71 req 02 val 2900 [ 282.416107][ T5913] loop2: p1 start 1601398130 is beyond EOD, [ 282.420718][ T5843] pwc: recv_control_msg error -71 req 02 val 2800 [ 282.430966][ T5913] truncated [ 282.443336][ T5913] loop2: p2 start 1702059890 is beyond EOD, truncated [ 282.467894][T10256] Dev loop2: unable to read RDB block 7 [ 282.477107][T10256] loop2: AHDI p1 p2 p3 [ 282.483923][T10256] loop2: partition table partially beyond EOD, truncated [ 282.493287][ T5843] pwc: recv_control_msg error -71 req 04 val 1100 [ 282.521059][ T5843] pwc: recv_control_msg error -71 req 04 val 1200 [ 282.553168][T10256] loop2: p1 start 1601398130 is beyond EOD, truncated [ 282.564534][T10256] loop2: p2 start 1702059890 is beyond EOD, truncated [ 282.575678][ T5843] pwc: Registered as video103. [ 282.601250][ T5843] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input24 [ 282.719747][ T5843] usb 5-1: USB disconnect, device number 39 [ 282.793684][ T5905] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 283.019768][ T5905] usb 4-1: Using ep0 maxpacket: 8 [ 283.045291][ T5905] usb 4-1: config 0 interface 0 has no altsetting 0 [ 283.062974][ T5905] usb 4-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 283.082390][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.112310][ T5905] usb 4-1: config 0 descriptor?? [ 283.521116][T10262] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1330'. [ 283.605222][T10262] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1330'. [ 283.615757][T10262] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1330'. [ 283.659798][ T9] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 283.669842][T10265] netlink: 'syz.3.1331': attribute type 3 has an invalid length. [ 283.677447][T10262] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1330'. [ 283.849994][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 283.878448][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.889597][ T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 283.904312][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.925114][ T9] usb 3-1: config 0 descriptor?? [ 284.342938][ T9] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 284.364816][ T9] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 284.402344][ T9] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 284.409471][ T9] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 284.439737][ T9] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 284.460858][ T9] mcp2221 0003:04D8:00DD.000F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 284.481589][ T5905] usbhid 4-1:0.0: can't add hid device: -71 [ 284.487652][ T5905] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 284.516568][ T5905] usb 4-1: USB disconnect, device number 44 [ 284.882666][ T5905] usb 3-1: USB disconnect, device number 44 [ 285.229740][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 285.309753][ T2153] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 285.329757][ T43] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 285.394659][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 285.404672][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 285.414691][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 285.424933][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 285.445209][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 285.455301][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.459801][ T43] usb 1-1: device descriptor read/64, error -71 [ 285.470912][ T2153] usb 4-1: Using ep0 maxpacket: 16 [ 285.476719][ T9] usb 6-1: config 0 descriptor?? [ 285.482729][ T2153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.494829][ T2153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.509186][ T2153] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 285.522360][ T2153] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 285.532226][ T2153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.542825][ T2153] usb 4-1: config 0 descriptor?? [ 285.706972][ T9] hdpvr 6-1:0.0: firmware version 0xd dated jl;S11!vOp [ 285.706972][ T9] 4(r [ 285.706972][ T9] d2}d~٭^r [ 285.731161][ T43] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 285.740049][ T10] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 285.879820][ T43] usb 1-1: device descriptor read/64, error -71 [ 285.904102][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 285.916001][ T9] hdpvr 6-1:0.0: device init failed [ 285.922352][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.943832][ T9] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12 [ 285.953083][ T10] usb 3-1: Product: syz [ 285.959245][ T10] usb 3-1: Manufacturer: syz [ 285.975240][ T2153] microsoft 0003:045E:07DA.0010: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 285.976890][ T9] usb 6-1: USB disconnect, device number 3 [ 285.994744][ T10] usb 3-1: SerialNumber: syz [ 286.010284][ T43] usb usb1-port1: attempt power cycle [ 286.015776][ T2153] microsoft 0003:045E:07DA.0010: no inputs found [ 286.028924][ T2153] microsoft 0003:045E:07DA.0010: could not initialize ff, continuing anyway [ 286.166929][ T2153] usb 4-1: USB disconnect, device number 45 [ 286.306204][T10323] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1348'. [ 286.360406][ T43] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 286.380853][ T43] usb 1-1: device descriptor read/8, error -71 [ 286.423730][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 286.435996][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 286.446528][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 286.458192][ T10] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 286.619872][ T43] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 286.670440][ T43] usb 1-1: device descriptor read/8, error -71 [ 286.781578][ T43] usb usb1-port1: unable to enumerate USB device [ 287.456459][T10347] loop2: detected capacity change from 0 to 7 [ 287.477052][ T5913] Dev loop2: unable to read RDB block 7 [ 287.489764][ T5913] loop2: unable to read partition table [ 287.506833][ T5913] loop2: partition table beyond EOD, truncated [ 287.515366][T10347] Dev loop2: unable to read RDB block 7 [ 287.523816][T10347] loop2: unable to read partition table [ 287.531020][T10347] loop2: partition table beyond EOD, truncated [ 287.546598][T10347] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 287.555935][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b545800: rx timeout, send abort [ 287.564607][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b545800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 287.579072][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b545000: rx timeout, send abort [ 287.587423][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b545000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 287.930718][T10369] netlink: 'syz.3.1362': attribute type 30 has an invalid length. [ 287.938787][T10369] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1362'. [ 287.967005][T10369] bond1: option arp_missed_max: invalid value (0) [ 287.973701][T10369] bond1: option arp_missed_max: allowed values 1 - 255 [ 287.983587][T10369] bond1 (unregistering): Released all slaves [ 288.359741][ T43] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 288.439946][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 288.532468][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.618030][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.638521][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 288.706213][ T43] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 288.713126][ T10] usb 3-1: USB disconnect, device number 45 [ 288.745800][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.775672][ T43] usb 5-1: config 0 descriptor?? [ 288.815988][T10382] loop2: detected capacity change from 0 to 7 [ 288.836868][ T5857] Dev loop2: unable to read RDB block 7 [ 288.847998][ T5857] loop2: unable to read partition table [ 288.855942][ T5857] loop2: partition table beyond EOD, truncated [ 288.864361][T10382] Dev loop2: unable to read RDB block 7 [ 288.873258][T10382] loop2: unable to read partition table [ 288.879122][T10382] loop2: partition table beyond EOD, truncated [ 288.894447][T10382] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 289.032378][T10392] FAULT_INJECTION: forcing a failure. [ 289.032378][T10392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.045698][T10392] CPU: 0 UID: 0 PID: 10392 Comm: syz.0.1370 Not tainted syzkaller #0 PREEMPT(full) [ 289.045724][T10392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 289.045737][T10392] Call Trace: [ 289.045745][T10392] [ 289.045753][T10392] dump_stack_lvl+0x189/0x250 [ 289.045780][T10392] ? __pfx____ratelimit+0x10/0x10 [ 289.045804][T10392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.045828][T10392] ? __pfx__printk+0x10/0x10 [ 289.045868][T10392] should_fail_ex+0x414/0x560 [ 289.045887][T10392] _copy_from_user+0x2d/0xb0 [ 289.045901][T10392] __copy_msghdr+0x3c5/0x5b0 [ 289.045918][T10392] ___sys_sendmsg+0x1a5/0x2a0 [ 289.045941][T10392] ? __pfx____sys_sendmsg+0x10/0x10 [ 289.046006][T10392] ? __fget_files+0x2a/0x420 [ 289.046020][T10392] ? __fget_files+0x3a0/0x420 [ 289.046036][T10392] __x64_sys_sendmsg+0x19b/0x260 [ 289.046052][T10392] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 289.046078][T10392] ? __pfx_ksys_write+0x10/0x10 [ 289.046104][T10392] ? rcu_is_watching+0x15/0xb0 [ 289.046138][T10392] ? do_syscall_64+0xbe/0x3b0 [ 289.046166][T10392] do_syscall_64+0xfa/0x3b0 [ 289.046179][T10392] ? lockdep_hardirqs_on+0x9c/0x150 [ 289.046195][T10392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.046206][T10392] ? clear_bhb_loop+0x60/0xb0 [ 289.046219][T10392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.046232][T10392] RIP: 0033:0x7fece8d8eec9 [ 289.046249][T10392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.046267][T10392] RSP: 002b:00007fece9cc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.046288][T10392] RAX: ffffffffffffffda RBX: 00007fece8fe5fa0 RCX: 00007fece8d8eec9 [ 289.046303][T10392] RDX: 0000000004000040 RSI: 0000200000000200 RDI: 0000000000000006 [ 289.046315][T10392] RBP: 00007fece9cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 289.046322][T10392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.046328][T10392] R13: 00007fece8fe6038 R14: 00007fece8fe5fa0 R15: 00007fece910fa28 [ 289.046344][T10392] [ 289.259921][ T24] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 289.369857][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055e58800: rx timeout, send abort [ 289.379208][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888055e58800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 289.393694][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055e59400: rx timeout, send abort [ 289.402204][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888055e59400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 289.529797][ T2153] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 289.562318][ T24] usb 3-1: too many endpoints for config 0 interface 0 altsetting 144: 127, using maximum allowed: 30 [ 289.573952][ T24] usb 3-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.585627][ T24] usb 3-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.604788][ T24] usb 3-1: config 0 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 289.618472][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 289.625233][ T24] usb 3-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 289.634602][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.657442][ T24] usb 3-1: config 0 descriptor?? [ 289.674588][ T24] hub 3-1:0.0: USB hub found [ 289.679983][ T2153] usb 6-1: Using ep0 maxpacket: 16 [ 289.687693][ T2153] usb 6-1: config 0 has an invalid interface descriptor of length 8, skipping [ 289.697404][ T2153] usb 6-1: config 0 descriptor has 1 excess byte, ignoring [ 289.704750][ T2153] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 289.728217][ T2153] usb 6-1: New USB device found, idVendor=10b9, idProduct=8000, bcdDevice=c0.fa [ 289.742170][ T2153] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.752773][ T2153] usb 6-1: Product: syz [ 289.756978][ T2153] usb 6-1: Manufacturer: syz [ 289.761846][ T2153] usb 6-1: SerialNumber: syz [ 289.776859][ T2153] usb 6-1: config 0 descriptor?? [ 289.821941][T10403] loop2: detected capacity change from 0 to 7 [ 289.829979][T10403] Dev loop2: unable to read RDB block 7 [ 289.835656][T10403] loop2: unable to read partition table [ 289.843518][T10403] loop2: partition table beyond EOD, truncated [ 289.850862][T10403] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 289.885855][ T24] hub 3-1:0.0: 4 ports detected [ 290.086984][ T24] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 290.103795][ T24] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 290.148660][ T24] usb 3-1: USB disconnect, device number 46 [ 290.281219][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880564fe400: rx timeout, send abort [ 290.289615][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880564fe400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 290.289795][ T2153] usb 4-1: new low-speed USB device number 46 using dummy_hcd [ 290.462217][ T2153] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 290.483281][ T2153] usb 4-1: config 0 has no interface number 0 [ 290.490103][ T2153] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 290.501541][ T2153] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 290.513612][ T2153] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 290.523013][ T2153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.539513][ T2153] usb 4-1: config 0 descriptor?? [ 290.545641][T10407] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 290.558103][ T2153] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 290.726592][T10421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1379'. [ 290.732021][T10420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1379'. [ 290.758907][ T10] usb 4-1: USB disconnect, device number 46 [ 290.765092][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 290.774854][ T9] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 290.934476][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 290.944059][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.953153][ T9] usb 1-1: Product: syz [ 290.957575][ T9] usb 1-1: Manufacturer: syz [ 290.962441][ T9] usb 1-1: SerialNumber: syz [ 290.979761][ T5914] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 291.129799][ T5914] usb 3-1: Using ep0 maxpacket: 32 [ 291.144710][ T5914] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.160456][ T5914] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 291.177946][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.186383][ T5914] usb 3-1: Product: syz [ 291.190631][ T5914] usb 3-1: Manufacturer: syz [ 291.195269][ T5914] usb 3-1: SerialNumber: syz [ 291.204581][ T43] usbhid 5-1:0.0: can't add hid device: -71 [ 291.210787][ T5914] usb 3-1: config 0 descriptor?? [ 291.217368][ T43] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 291.233078][ T43] usb 5-1: USB disconnect, device number 40 [ 291.377716][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 291.391220][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 291.406767][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 291.419073][ T9] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 291.431326][ T2153] usb 3-1: USB disconnect, device number 47 [ 291.909600][T10435] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20002 [ 292.059771][ T43] usb 6-1: USB disconnect, device number 4 [ 292.094877][T10437] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1383'. [ 292.237856][T10440] netlink: 'syz.2.1384': attribute type 29 has an invalid length. [ 292.246949][T10440] netlink: 'syz.2.1384': attribute type 29 has an invalid length. [ 292.284963][T10440] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1384'. [ 292.328874][T10440] netem: change failed [ 292.799799][ T43] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 292.939767][ T2153] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 292.949975][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 292.961477][ T43] usb 6-1: config 0 has an invalid interface number: 155 but max is 1 [ 292.979056][ T43] usb 6-1: config 0 has an invalid interface number: 245 but max is 1 [ 292.996108][ T43] usb 6-1: config 0 has no interface number 0 [ 293.011546][ T43] usb 6-1: config 0 has no interface number 1 [ 293.017855][ T43] usb 6-1: config 0 interface 155 has no altsetting 0 [ 293.025078][ T43] usb 6-1: config 0 interface 245 has no altsetting 0 [ 293.038002][ T43] usb 6-1: New USB device found, idVendor=04c8, idProduct=0720, bcdDevice=b8.b6 [ 293.048059][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.059172][ T43] usb 6-1: config 0 descriptor?? [ 293.141806][ T2153] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 293.151508][ T2153] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 293.161792][ T2153] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 293.170860][ T2153] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 293.183542][ T2153] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 293.192659][ T2153] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 293.200734][ T2153] usb 5-1: Product: syz [ 293.204906][ T2153] usb 5-1: Manufacturer: syz [ 293.216320][ T2153] cdc_wdm 5-1:1.0: skipping garbage [ 293.221673][ T2153] cdc_wdm 5-1:1.0: skipping garbage [ 293.228109][ T2153] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 293.234112][ T2153] cdc_wdm 5-1:1.0: Unknown control protocol [ 293.267668][ T43] usb 6-1: string descriptor 0 read error: -71 [ 293.284843][ T43] usb 6-1: USB disconnect, device number 5 [ 293.320169][ T9] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 293.327816][ T5914] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 293.467196][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 293.468624][ T43] usb 5-1: USB disconnect, device number 41 [ 293.473829][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 293.473850][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 293.494898][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 293.506938][ T5914] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 293.517681][ T5914] usb 3-1: config 0 interface 0 has no altsetting 0 [ 293.525060][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 293.535091][ T5914] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 293.544292][ T9] usb 4-1: config 5 has an invalid interface number: 52 but max is 0 [ 293.553380][ T9] usb 4-1: config 5 has no interface number 0 [ 293.559754][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 293.567922][ T5914] usb 3-1: Product: syz [ 293.574581][ T2153] usb 1-1: USB disconnect, device number 60 [ 293.574891][ T9] usb 4-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 293.593298][ T5914] usb 3-1: Manufacturer: syz [ 293.597935][ T5914] usb 3-1: SerialNumber: syz [ 293.615179][ T5914] usb 3-1: config 0 descriptor?? [ 293.621497][ T9] usb 4-1: string descriptor 0 read error: -22 [ 293.627808][ T9] usb 4-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 293.637120][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.647569][T10470] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1393'. [ 293.650917][ T5914] usb 3-1: selecting invalid altsetting 0 [ 293.667511][T10467] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 293.671553][ T1157] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 293.676705][ T9] aircable 4-1:5.52: aircable converter detected [ 293.692421][ T5843] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 293.692445][ T1157] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 293.724180][ T9] usb 4-1: aircable converter now attached to ttyUSB0 [ 293.773803][T10472] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1394'. [ 293.880791][ T5914] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 293.914819][T10467] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 293.976160][T10467] FAULT_INJECTION: forcing a failure. [ 293.976160][T10467] name failslab, interval 1, probability 0, space 0, times 0 [ 293.990201][T10467] CPU: 0 UID: 0 PID: 10467 Comm: syz.3.1392 Not tainted syzkaller #0 PREEMPT(full) [ 293.990228][T10467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 293.990241][T10467] Call Trace: [ 293.990248][T10467] [ 293.990257][T10467] dump_stack_lvl+0x189/0x250 [ 293.990285][T10467] ? __pfx____ratelimit+0x10/0x10 [ 293.990308][T10467] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.990332][T10467] ? __pfx__printk+0x10/0x10 [ 293.990366][T10467] ? __pfx___might_resched+0x10/0x10 [ 293.990387][T10467] ? fs_reclaim_acquire+0x7d/0x100 [ 293.990412][T10467] should_fail_ex+0x414/0x560 [ 293.990445][T10467] should_failslab+0xa8/0x100 [ 293.990467][T10467] __kmalloc_noprof+0xcb/0x7f0 [ 293.990495][T10467] ? tomoyo_encode+0x28b/0x550 [ 293.990529][T10467] tomoyo_encode+0x28b/0x550 [ 293.990563][T10467] tomoyo_realpath_from_path+0x58d/0x5d0 [ 293.990594][T10467] ? tomoyo_domain+0xd9/0x130 [ 293.990628][T10467] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 293.990652][T10467] tomoyo_path_number_perm+0x1e8/0x5a0 [ 293.990680][T10467] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 293.990728][T10467] ? __lock_acquire+0xab9/0xd20 [ 293.990771][T10467] ? __fget_files+0x2a/0x420 [ 293.990793][T10467] ? __fget_files+0x2a/0x420 [ 293.990811][T10467] ? __fget_files+0x3a0/0x420 [ 293.990828][T10467] ? __fget_files+0x2a/0x420 [ 293.990852][T10467] security_file_ioctl+0xcb/0x2d0 [ 293.990877][T10467] __se_sys_ioctl+0x47/0x170 [ 293.990905][T10467] do_syscall_64+0xfa/0x3b0 [ 293.990930][T10467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.990949][T10467] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 293.990968][T10467] ? clear_bhb_loop+0x60/0xb0 [ 293.990991][T10467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.991009][T10467] RIP: 0033:0x7f82b598eec9 [ 293.991026][T10467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.991043][T10467] RSP: 002b:00007f82b687d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 293.991064][T10467] RAX: ffffffffffffffda RBX: 00007f82b5be5fa0 RCX: 00007f82b598eec9 [ 293.991079][T10467] RDX: 0000200000000700 RSI: 000000004008ae89 RDI: 0000000000000009 [ 293.991093][T10467] RBP: 00007f82b687d090 R08: 0000000000000000 R09: 0000000000000000 [ 293.991105][T10467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.991117][T10467] R13: 00007f82b5be6038 R14: 00007f82b5be5fa0 R15: 00007f82b5d0fa28 [ 293.991149][T10467] [ 293.991168][T10467] ERROR: Out of memory at tomoyo_realpath_from_path. [ 294.109457][ T5843] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 294.436365][ T2153] usb 3-1: USB disconnect, device number 48 [ 294.636028][T10491] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1397'. [ 294.754240][ T5914] usb 4-1: USB disconnect, device number 47 [ 295.057826][ T5914] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 295.066902][ T5914] aircable 4-1:5.52: device disconnected [ 295.572106][T10499] fuse: Bad value for 'user_id' [ 295.610408][T10499] fuse: Bad value for 'user_id' [ 295.799778][ T2153] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 295.845404][T10512] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1405'. [ 295.910769][T10516] loop2: detected capacity change from 0 to 7 [ 295.922542][T10516] Dev loop2: unable to read RDB block 7 [ 295.938450][T10516] loop2: AHDI p2 p3 [ 295.943513][T10516] loop2: partition table partially beyond EOD, truncated [ 295.956974][T10516] loop2: p2 start 13841266 is beyond EOD, truncated [ 295.960276][ T2153] usb 3-1: Using ep0 maxpacket: 32 [ 295.990080][ T5843] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 296.003184][ T2153] usb 3-1: unable to get BOS descriptor or descriptor too short [ 296.031059][ T2153] usb 3-1: config 5 has an invalid interface number: 52 but max is 0 [ 296.039185][ T2153] usb 3-1: config 5 has no interface number 0 [ 296.059747][ T2153] usb 3-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 296.084099][ T2153] usb 3-1: string descriptor 0 read error: -22 [ 296.090996][ T2153] usb 3-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 296.118742][ T2153] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.167727][T10498] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 296.177465][ T2153] aircable 3-1:5.52: aircable converter detected [ 296.196799][ T5843] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 296.213317][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.225011][ T2153] usb 3-1: aircable converter now attached to ttyUSB0 [ 296.232205][ T5843] usb 1-1: Product: syz [ 296.236381][ T5843] usb 1-1: Manufacturer: syz [ 296.241687][ T5843] usb 1-1: SerialNumber: syz [ 296.553483][T10498] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 296.685203][ T5843] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 296.705137][ T5843] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 296.725665][ T5843] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 296.755633][ T5843] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 296.841845][ T5843] usb 3-1: USB disconnect, device number 49 [ 296.854966][ T5843] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 296.872164][ T5843] aircable 3-1:5.52: device disconnected [ 297.559874][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 297.805544][ T5843] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 298.011536][T10557] vcan0: tx drop: invalid da for name 0x00000000000000c8 [ 298.030510][ T5843] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 298.039589][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.049184][ T5843] usb 4-1: Product: syz [ 298.053646][ T5843] usb 4-1: Manufacturer: syz [ 298.058225][ T5843] usb 4-1: SerialNumber: syz [ 298.075707][ T5843] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 298.118554][ T43] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 298.906176][ T5914] usb 1-1: USB disconnect, device number 61 [ 299.169846][ T43] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 299.186422][ T43] ath9k_htc: Failed to initialize the device [ 299.230249][ T43] usb 4-1: ath9k_htc: USB layer deinitialized [ 299.258805][ C1] vcan0: j1939_tp_rxtimer: 0xffff888078c07c00: rx timeout, send abort [ 299.267237][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888078c07c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 300.160346][ T2153] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 300.250268][T10589] FAULT_INJECTION: forcing a failure. [ 300.250268][T10589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.267996][T10589] CPU: 0 UID: 0 PID: 10589 Comm: syz.4.1428 Not tainted syzkaller #0 PREEMPT(full) [ 300.268028][T10589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 300.268035][T10589] Call Trace: [ 300.268040][T10589] [ 300.268045][T10589] dump_stack_lvl+0x189/0x250 [ 300.268069][T10589] ? __pfx____ratelimit+0x10/0x10 [ 300.268092][T10589] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.268115][T10589] ? __pfx__printk+0x10/0x10 [ 300.268142][T10589] ? __might_fault+0xb0/0x130 [ 300.268182][T10589] should_fail_ex+0x414/0x560 [ 300.268212][T10589] _copy_from_iter+0x1de/0x1790 [ 300.268238][T10589] ? __pfx__copy_from_iter+0x10/0x10 [ 300.268258][T10589] ? __local_bh_enable_ip+0x12d/0x1c0 [ 300.268282][T10589] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 300.268309][T10589] ? skb_put+0x11b/0x210 [ 300.268333][T10589] j1939_sk_sendmsg+0x810/0x1350 [ 300.268359][T10589] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 300.268369][T10589] ? __lock_acquire+0xab9/0xd20 [ 300.268382][T10589] ? aa_sock_msg_perm+0xf1/0x1d0 [ 300.268412][T10589] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 300.268433][T10589] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 300.268453][T10589] __sock_sendmsg+0x21c/0x270 [ 300.268474][T10589] ____sys_sendmsg+0x505/0x830 [ 300.268492][T10589] ? __pfx_____sys_sendmsg+0x10/0x10 [ 300.268511][T10589] ? import_iovec+0x74/0xa0 [ 300.268525][T10589] ___sys_sendmsg+0x21f/0x2a0 [ 300.268553][T10589] ? __pfx____sys_sendmsg+0x10/0x10 [ 300.268618][T10589] ? __fget_files+0x2a/0x420 [ 300.268630][T10589] ? __fget_files+0x3a0/0x420 [ 300.268645][T10589] __x64_sys_sendmsg+0x19b/0x260 [ 300.268661][T10589] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 300.268684][T10589] ? __pfx_ksys_write+0x10/0x10 [ 300.268709][T10589] ? rcu_is_watching+0x15/0xb0 [ 300.268740][T10589] ? do_syscall_64+0xbe/0x3b0 [ 300.268767][T10589] do_syscall_64+0xfa/0x3b0 [ 300.268780][T10589] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.268791][T10589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.268801][T10589] ? clear_bhb_loop+0x60/0xb0 [ 300.268813][T10589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.268823][T10589] RIP: 0033:0x7f3f6d78eec9 [ 300.268839][T10589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.268857][T10589] RSP: 002b:00007f3f6e673038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.268878][T10589] RAX: ffffffffffffffda RBX: 00007f3f6d9e5fa0 RCX: 00007f3f6d78eec9 [ 300.268892][T10589] RDX: 0000000004000040 RSI: 0000200000000200 RDI: 0000000000000006 [ 300.268905][T10589] RBP: 00007f3f6e673090 R08: 0000000000000000 R09: 0000000000000000 [ 300.268917][T10589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.268923][T10589] R13: 00007f3f6d9e6038 R14: 00007f3f6d9e5fa0 R15: 00007f3f6db0fa28 [ 300.268939][T10589] [ 300.739447][ T5843] usb 4-1: USB disconnect, device number 48 [ 300.773528][ T2153] usb 3-1: Using ep0 maxpacket: 8 [ 300.845438][ T2153] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 300.855908][ T2153] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.874798][ T2153] usb 3-1: Product: syz [ 300.889209][ T2153] usb 3-1: Manufacturer: syz [ 300.899349][ T2153] usb 3-1: SerialNumber: syz [ 300.951259][ T2153] usb 3-1: config 0 descriptor?? [ 301.161594][ T2153] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 301.168648][T10603] vlan2: entered promiscuous mode [ 301.175226][T10603] mac80211_hwsim hwsim16 wlan1: entered promiscuous mode [ 301.219928][ T5843] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 301.301023][ T24] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 301.389763][ T5843] usb 6-1: Using ep0 maxpacket: 16 [ 301.396400][ T5843] usb 6-1: config index 0 descriptor too short (expected 65, got 36) [ 301.404591][ T5843] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.417966][ T5843] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 301.430889][ T5843] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 301.443539][ T5843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.456113][ T5843] usb 6-1: config 0 descriptor?? [ 301.461222][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 301.475346][ T5843] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input26 [ 301.475539][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 301.491077][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031ef7000: rx timeout, send abort [ 301.507828][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 301.509778][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888031ef7000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 301.522068][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 301.591969][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.609171][ T24] usb 4-1: Product: syz [ 301.620330][ T24] usb 4-1: Manufacturer: syz [ 301.624982][ T24] usb 4-1: SerialNumber: syz [ 301.634931][ T24] usb 4-1: config 0 descriptor?? [ 301.655151][ T24] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 301.664869][ T24] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 301.699298][ T5885] usb 6-1: USB disconnect, device number 6 [ 301.747165][T10617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1439'. [ 301.819769][ T9] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 301.887802][ T979] usb 5-1: [UEAGLE-ATM] firmware is not available [ 301.979742][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 301.986463][ T9] usb 1-1: config 8 has an invalid interface number: 39 but max is 0 [ 301.994771][ T9] usb 1-1: config 8 has no interface number 0 [ 302.001046][ T9] usb 1-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 302.012732][ T9] usb 1-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 302.022864][ T9] usb 1-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 302.033116][ T9] usb 1-1: config 8 interface 39 has no altsetting 0 [ 302.041893][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 302.051014][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.059008][ T9] usb 1-1: Product: syz [ 302.063424][ T9] usb 1-1: Manufacturer: syz [ 302.068029][ T9] usb 1-1: SerialNumber: syz [ 302.089771][ T5914] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 302.244402][ T5914] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 302.253428][ T24] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 302.262681][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.263754][ T24] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 302.274380][ T5914] usb 5-1: Product: syz [ 302.282825][ T5914] usb 5-1: Manufacturer: syz [ 302.287476][ T5914] usb 5-1: SerialNumber: syz [ 302.302115][T10621] netlink: 'syz.5.1441': attribute type 1 has an invalid length. [ 302.350576][T10624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.359343][T10624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.372709][T10621] 8021q: adding VLAN 0 to HW filter on device bond2 [ 302.383126][T10621] bond1: (slave bond2): making interface the new active one [ 302.392463][T10621] bond1: (slave bond2): Enslaving as an active interface with an up link [ 302.415903][T10625] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 302.479159][T10621] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1441'. [ 302.491272][T10621] 8021q: adding VLAN 0 to HW filter on device bond1 [ 302.532433][T10619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.543322][T10619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.806272][ T2153] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 302.834252][ T2153] usb 3-1: USB disconnect, device number 50 [ 302.892872][ T24] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 302.904193][ T24] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 302.911968][ T24] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 303.543699][ T24] em28xx 4-1:0.0: AC97 command still being executed: not handled properly! [ 303.552445][ T24] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 303.689787][ T979] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 303.725874][ T24] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 303.737196][T10642] netlink: 'syz.5.1445': attribute type 10 has an invalid length. [ 303.752129][ T24] usb 4-1: USB disconnect, device number 49 [ 303.757412][T10642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.772724][T10642] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 303.787249][T10642] ptrace attach of "./syz-executor exec"[9411] was attempted by ""[10642] [ 303.796211][ T5914] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 303.796722][T10642] netlink: 'syz.5.1445': attribute type 10 has an invalid length. [ 303.810191][ T5914] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 303.817404][T10642] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1445'. [ 303.839214][T10642] batadv0: entered promiscuous mode [ 303.844499][T10642] batadv0: entered allmulticast mode [ 303.853415][ T979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.865147][T10642] bond0: (slave batadv0): Releasing backup interface [ 303.865272][ T979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.881932][ T979] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 303.888054][T10642] bridge0: port 3(batadv0) entered blocking state [ 303.897810][ T979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.901151][T10642] bridge0: port 3(batadv0) entered disabled state [ 303.931573][ T979] usb 3-1: config 0 descriptor?? [ 304.232556][ T5914] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 304.244663][ T5914] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 304.254936][ T5914] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 304.264391][ T36] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 304.274253][ T36] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 304.286171][ T5914] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 304.301284][ T5914] usb 5-1: USB disconnect, device number 42 [ 304.348174][ T979] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 304.365602][ T979] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 304.373749][ T979] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 304.380842][ T979] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 304.387856][ T979] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 304.396016][ T979] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 304.403127][ T979] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 304.414300][ T979] cp2112 0003:10C4:EA90.0011: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 304.467308][T10649] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1447'. [ 304.542471][ T979] cp2112 0003:10C4:EA90.0011: Part Number: 0x00 Device Version: 0x00 [ 304.607672][ T9] ipheth 1-1:8.39: ipheth_get_macaddr: usb_control_msg: -71 [ 304.640116][ T9] ipheth 1-1:8.39: probe with driver ipheth failed with error -71 [ 304.690491][ T9] usb 1-1: USB disconnect, device number 62 [ 304.728708][ T2153] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 304.919820][ T2153] usb 4-1: Using ep0 maxpacket: 16 [ 304.927570][T10654] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 304.933058][ T2153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.937624][T10654] macsec1: entered allmulticast mode [ 304.968534][ T2153] usb 4-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 304.989930][T10654] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 304.998399][ T2153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.040808][T10654] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 305.067375][ T2153] usb 4-1: config 0 descriptor?? [ 305.098642][T10654] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 305.154480][T10635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.163374][T10635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.176169][T10635] cp2112 0003:10C4:EA90.0011: Multi-message I2C transactions not supported [ 305.191972][T10635] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1443'. [ 305.280123][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 305.324200][ T2153] usbhid 4-1:0.0: can't add hid device: -71 [ 305.331040][ T5914] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 305.340027][ T2153] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 305.356417][ T2153] usb 4-1: USB disconnect, device number 50 [ 305.451010][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 305.459184][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 305.468776][ T9] usb 6-1: config 6 has an invalid interface number: 46 but max is 0 [ 305.477345][ T9] usb 6-1: config 6 has an invalid interface association descriptor of length 5, skipping [ 305.488926][ T9] usb 6-1: config 6 has an invalid descriptor of length 13, skipping remainder of the config [ 305.585399][ T9] usb 6-1: config 6 has no interface number 0 [ 305.592437][ T9] usb 6-1: config 6 interface 46 altsetting 99 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 305.605755][ T5914] usb 1-1: descriptor type invalid, skip [ 305.611654][ T5914] usb 1-1: descriptor type invalid, skip [ 305.617692][ T9] usb 6-1: config 6 interface 46 has no altsetting 0 [ 305.626117][ T5914] usb 1-1: config 1 interface 0 has no altsetting 0 [ 305.636280][ T5914] usb 1-1: language id specifier not provided by device, defaulting to English [ 305.647333][ T5914] usb 1-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.40 [ 305.656722][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.667324][ T5914] usb 1-1: Product: Г [ 305.668704][ T9] usb 6-1: New USB device found, idVendor=06f8, idProduct=0001, bcdDevice=e0.c5 [ 305.683572][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.693291][ T5914] usb 1-1: SerialNumber: 榔ↈᝨ䁐躵޺鋜戾ॽ [ 305.700573][ T9] usb 6-1: Product: syz [ 305.719801][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 305.758524][ T9] usb 6-1: Manufacturer: syz [ 305.798494][ T9] usb 6-1: SerialNumber: syz [ 305.975704][ T5914] usbhid 1-1:1.0: can't add hid device: -71 [ 305.982461][ T5914] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 306.032564][ T5914] usb 1-1: USB disconnect, device number 63 [ 306.069364][T10657] fuse: Bad value for 'fd' [ 306.411225][ T979] cp2112 0003:10C4:EA90.0011: error reading lock byte: -71 [ 306.424028][ T979] usb 3-1: USB disconnect, device number 51 [ 306.685854][T10697] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1461'. [ 306.717274][T10697] tipc: Started in network mode [ 306.722494][T10697] tipc: Node identity bab7edff8218, cluster identity 4711 [ 306.731112][T10697] tipc: Enabled bearer , priority 0 [ 306.739203][T10697] syzkaller0: entered promiscuous mode [ 306.746066][T10697] syzkaller0: entered allmulticast mode [ 306.755716][T10697] macvlan0: mtu less than device minimum [ 306.955351][T10705] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20002 [ 307.339903][ T10] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 307.515314][T10695] tipc: Resetting bearer [ 307.543176][T10695] tipc: Disabling bearer [ 307.564971][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.583062][ T10] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 307.630202][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.755213][ T10] usb 3-1: config 0 descriptor?? [ 307.935162][ T9] usb 6-1: USB disconnect, device number 7 [ 307.987929][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 307.995144][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 308.121132][ T10] usb 3-1: USB disconnect, device number 52 [ 308.178199][T10707] fuse: Unknown parameter 'roOtmode' [ 308.489726][ T9] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 308.559725][ T24] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 308.599780][ T10] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 308.651202][ T9] usb 6-1: config 0 has no interfaces? [ 308.657852][ T9] usb 6-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=8c.1e [ 308.681074][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.713572][ T9] usb 6-1: config 0 descriptor?? [ 308.742567][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 308.742966][ T10] usb 3-1: device descriptor read/64, error -71 [ 308.760976][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 308.787530][ T24] usb 1-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 308.798599][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.806915][ T24] usb 1-1: Product: syz [ 308.813182][ T24] usb 1-1: Manufacturer: syz [ 308.818202][ T24] usb 1-1: SerialNumber: syz [ 308.836525][ T24] usb 1-1: config 0 descriptor?? [ 308.992347][T10750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1474'. [ 309.109956][T10750] team1: entered promiscuous mode [ 309.115354][T10750] team1: entered allmulticast mode [ 309.175342][ T10] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 309.219510][ T24] input: Griffin PowerMate as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input27 [ 309.271163][ C1] powermate: config urb returned -71 [ 309.276799][ C1] powermate: config urb returned -71 [ 309.282443][ C1] powermate: config urb returned -71 [ 309.287832][ C1] powermate: config urb returned -71 [ 309.296662][ T24] usb 1-1: USB disconnect, device number 64 [ 309.302634][ C1] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 309.320057][ T10] usb 3-1: device descriptor read/64, error -71 [ 309.383995][T10752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.415172][T10752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.450124][ T10] usb usb3-port1: attempt power cycle [ 309.824072][ T10] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 309.880268][ T10] usb 3-1: device descriptor read/8, error -71 [ 309.950645][T10761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1478'. [ 310.499756][ T10] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 310.565849][ T10] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.594507][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 310.608167][ T10] usb 3-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 310.619813][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.739302][ T10] usb 3-1: config 0 descriptor?? [ 310.794450][T10752] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 311.011497][T10790] loop2: detected capacity change from 0 to 7 [ 311.040355][T10790] Dev loop2: unable to read RDB block 7 [ 311.052566][T10790] loop2: AHDI p1 p2 p3 [ 311.067457][T10785] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 311.073552][T10790] loop2: partition table partially beyond EOD, truncated [ 311.083457][T10790] loop2: p1 start 1601398130 is beyond EOD, truncated [ 311.093141][T10785] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 311.101200][T10790] loop2: p2 start 1702059890 is beyond EOD, truncated [ 311.104441][T10785] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 311.115074][T10785] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 311.122099][T10785] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 311.139746][ T24] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 311.175030][T10785] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 311.194894][T10785] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 311.221290][T10785] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 311.279724][ T24] usb 1-1: device descriptor read/64, error -71 [ 311.520351][ T24] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 311.539787][ T43] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 311.649863][ T24] usb 1-1: device descriptor read/64, error -71 [ 311.692569][ T43] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 311.703038][ T43] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 311.712154][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.728509][ T43] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 311.760280][ T24] usb usb1-port1: attempt power cycle [ 311.820370][ T10] usb 3-1: string descriptor 0 read error: -71 [ 311.834764][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 311.850362][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 311.865122][ T10] usb 3-1: USB disconnect, device number 56 [ 312.099924][ T24] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 312.121418][ T24] usb 1-1: device descriptor read/8, error -71 [ 312.241660][ T10] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 312.269584][ T979] usb 6-1: USB disconnect, device number 8 [ 312.371136][ T24] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 312.420482][ T24] usb 1-1: device descriptor read/8, error -71 [ 312.421768][ T10] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 312.477785][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.499358][ T10] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 312.509818][ T10] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 312.538170][ T10] usb 3-1: Manufacturer: syz [ 312.540274][ T24] usb usb1-port1: unable to enumerate USB device [ 312.557437][ T10] usb 3-1: config 0 descriptor?? [ 312.689833][ T10] rc_core: IR keymap rc-hauppauge not found [ 312.697921][ T10] Registered IR keymap rc-empty [ 312.708361][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 312.722081][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input28 [ 312.760761][ T43] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 312.770254][ T43] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 312.791000][ T43] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 312.810017][ T43] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 312.827325][ T43] usb 5-1: USB disconnect, device number 43 [ 312.909776][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 313.040724][ T10] usb 3-1: USB disconnect, device number 57 [ 313.071721][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 313.083965][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 313.097917][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 313.114984][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 313.127729][ T9] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 313.144775][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 313.154852][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.163992][ T9] usb 6-1: Product: syz [ 313.168372][ T9] usb 6-1: Manufacturer: syz [ 313.169811][ T5850] Bluetooth: hci4: command 0x0406 tx timeout [ 313.173445][ T9] usb 6-1: SerialNumber: syz [ 313.178963][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 313.182817][ T5846] Bluetooth: hci2: command 0x0405 tx timeout [ 313.239804][ T5846] Bluetooth: hci3: command 0x0405 tx timeout [ 313.319765][ T43] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 313.423597][ T9] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 313.441219][ T9] usb 6-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 313.471256][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 313.486087][ T43] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 313.508343][ T43] usb 5-1: config 179 has no interface number 0 [ 313.517283][ T9] usb 6-1: USB disconnect, device number 9 [ 313.532341][ T43] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 313.543953][ T43] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 313.555805][ T43] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 313.570946][ T43] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 313.628184][ T6273] udevd[6273]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 313.636348][T10824] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1493'. [ 313.670193][ T43] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 313.698822][ T43] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 313.723753][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.762116][T10815] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 313.798287][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.825187][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.866303][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.887042][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.939594][T10834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1497'. [ 313.983095][ T43] usb 5-1: USB disconnect, device number 44 [ 313.983157][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 313.983206][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 314.181171][ T979] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 314.256987][T10849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1502'. [ 314.322896][T10852] netlink: 'syz.0.1502': attribute type 4 has an invalid length. [ 314.340166][ T979] usb 4-1: Using ep0 maxpacket: 32 [ 314.350962][ T979] usb 4-1: config 0 has an invalid interface number: 83 but max is 0 [ 314.360390][ T979] usb 4-1: config 0 has no interface number 0 [ 314.370843][T10852] netlink: 'syz.0.1502': attribute type 4 has an invalid length. [ 314.380161][ T9] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 314.392658][ T979] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=92.f7 [ 314.402641][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.411525][ T979] usb 4-1: Product: syz [ 314.415776][ T979] usb 4-1: Manufacturer: syz [ 314.421207][ T979] usb 4-1: SerialNumber: syz [ 314.427814][ T979] usb 4-1: config 0 descriptor?? [ 314.549927][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 314.572988][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 314.581313][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 314.588080][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 314.598184][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.613632][ T9] usb 3-1: config 0 descriptor?? [ 314.689832][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 314.698050][ T10] usb 6-1: device descriptor read/64, error -71 [ 314.867570][T10843] netlink: 'syz.2.1499': attribute type 3 has an invalid length. [ 314.939921][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 315.037363][ T979] peak_usb 4-1:0.83 can0: unable to request usb[type=2 value=5] err=-71 [ 315.057521][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 315.067578][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 315.089852][T10868] loop2: detected capacity change from 0 to 7 [ 315.096265][ T10] usb 6-1: device descriptor read/64, error -71 [ 315.098078][ T6001] Dev loop2: unable to read RDB block 7 [ 315.108617][ T9] usb 3-1: USB disconnect, device number 58 [ 315.116638][ T6001] loop2: AHDI p1 p2 p3 [ 315.133145][ T6001] loop2: partition table partially beyond EOD, truncated [ 315.141523][ T6001] loop2: p1 start 1601398130 is beyond EOD, truncated [ 315.148485][ T6001] loop2: p2 start 1702059890 is beyond EOD, truncated [ 315.157784][ T979] peak_usb 4-1:0.83: probe with driver peak_usb failed with error -71 [ 315.174639][T10868] Dev loop2: unable to read RDB block 7 [ 315.185432][ T979] usb 4-1: USB disconnect, device number 51 [ 315.196511][T10868] loop2: AHDI p1 p2 p3 [ 315.205414][T10868] loop2: partition table partially beyond EOD, truncated [ 315.215165][T10868] loop2: p1 start 1601398130 is beyond EOD, truncated [ 315.221727][ T10] usb usb6-port1: attempt power cycle [ 315.227848][T10868] loop2: p2 start 1702059890 is beyond EOD, truncated [ 315.239770][ T5846] Bluetooth: hci2: command 0x0405 tx timeout [ 315.320302][ T5846] Bluetooth: hci3: command 0x0405 tx timeout [ 315.499818][ T5885] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 315.610217][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 315.638554][ T10] usb 6-1: device descriptor read/8, error -71 [ 315.650618][ T5885] usb 1-1: Using ep0 maxpacket: 8 [ 315.666657][ T5885] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 315.690595][ T5885] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 315.700065][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.708160][ T5885] usb 1-1: Product: syz [ 315.717897][ T5885] usb 1-1: Manufacturer: syz [ 315.723288][ T5885] usb 1-1: SerialNumber: syz [ 315.733909][ T5885] usb 1-1: config 0 descriptor?? [ 315.744414][ T5885] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 315.752679][ T5885] usb 1-1: setting power ON [ 315.757869][ T5885] dvb-usb: bulk message failed: -22 (2/0) [ 315.769954][ T5885] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 315.782062][ T5885] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 315.794177][ T5885] usb 1-1: media controller created [ 315.821889][ T5885] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 315.845184][ T5885] usb 1-1: selecting invalid altsetting 6 [ 315.861694][ T5885] usb 1-1: digital interface selection failed (-22) [ 315.868328][ T5885] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 315.891108][ T5885] usb 1-1: setting power OFF [ 315.896108][ T5885] dvb-usb: bulk message failed: -22 (2/0) [ 315.904472][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 315.913708][ T5885] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 315.923329][ T5885] (NULL device *): no alternate interface [ 315.941160][ T10] usb 6-1: device descriptor read/8, error -71 [ 315.977247][ T5885] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 316.074032][ T10] usb usb6-port1: unable to enumerate USB device [ 316.118418][T10904] loop2: detected capacity change from 0 to 7 [ 316.126813][ T5913] Dev loop2: unable to read RDB block 7 [ 316.134174][ T5913] loop2: AHDI p1 p2 p3 [ 316.138539][ T5913] loop2: partition table partially beyond EOD, truncated [ 316.146628][ T5913] loop2: p1 start 1601398130 is beyond EOD, truncated [ 316.159809][ T5913] loop2: p2 start 1702059890 is beyond EOD, truncated [ 316.178089][T10904] Dev loop2: unable to read RDB block 7 [ 316.183877][T10904] loop2: AHDI p1 p2 p3 [ 316.189471][T10904] loop2: partition table partially beyond EOD, truncated [ 316.224578][T10904] loop2: p1 start 1601398130 is beyond EOD, truncated [ 316.233235][T10904] loop2: p2 start 1702059890 is beyond EOD, [ 316.234922][ T24] usb 1-1: USB disconnect, device number 69 [ 316.246972][T10904] truncated [ 316.649773][ T5970] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 316.719750][ T24] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 316.824880][ T5970] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 316.842852][ T5970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.863795][ T5970] usb 4-1: Product: syz [ 316.869226][ T5970] usb 4-1: Manufacturer: syz [ 316.876999][ T5970] usb 4-1: SerialNumber: syz [ 316.881807][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 316.888754][ T24] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.901742][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 316.912548][ T24] usb 5-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 316.922940][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.938057][ T24] usb 5-1: config 0 descriptor?? [ 317.279910][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.286211][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.322886][ T5970] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 317.337171][ T5970] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 317.348108][ T5970] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 317.362639][ T5970] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 317.371174][T10919] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1524'. [ 317.392671][ T24] kye 0003:0458:0087.0012: unknown main item tag 0x0 [ 317.399443][ T24] kye 0003:0458:0087.0012: unknown main item tag 0x0 [ 317.406775][ T5846] Bluetooth: hci3: command 0x0405 tx timeout [ 317.427376][ T24] kye 0003:0458:0087.0012: unknown main item tag 0x0 [ 317.437234][ T24] kye 0003:0458:0087.0012: unknown main item tag 0x0 [ 317.456243][ T24] kye 0003:0458:0087.0012: unknown main item tag 0x0 [ 317.468016][ T24] kye 0003:0458:0087.0012: hidraw0: USB HID v0.05 Device [HID 0458:0087] on usb-dummy_hcd.4-1/input0 [ 317.600486][ T5970] usb 5-1: USB disconnect, device number 45 [ 317.630731][T10934] fido_id[10934]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 317.716166][T10942] loop2: detected capacity change from 0 to 7 [ 317.725024][T10942] Dev loop2: unable to read RDB block 7 [ 317.732535][T10942] loop2: AHDI p2 p3 [ 317.737863][T10942] loop2: partition table partially beyond EOD, truncated [ 317.745513][T10942] loop2: p2 start 13841266 is beyond EOD, truncated [ 317.789740][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 317.959272][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 317.965985][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 317.977090][ T24] usb 6-1: config 5 has an invalid interface number: 52 but max is 0 [ 317.988431][ T24] usb 6-1: config 5 has no interface number 0 [ 317.995668][ T24] usb 6-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 318.012015][ T24] usb 6-1: string descriptor 0 read error: -22 [ 318.031596][ T24] usb 6-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 318.048052][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.067873][T10933] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 318.083604][ T24] aircable 6-1:5.52: aircable converter detected [ 318.137728][ T24] usb 6-1: aircable converter now attached to ttyUSB0 [ 318.252835][T10951] loop2: detected capacity change from 0 to 7 [ 318.340364][T10951] Dev loop2: unable to read RDB block 7 [ 318.367526][T10951] loop2: AHDI p1 p2 p3 [ 318.377236][T10951] loop2: partition table partially beyond EOD, truncated [ 318.394788][T10933] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 318.404045][T10951] loop2: p1 start 1601398130 is beyond EOD, truncated [ 318.411077][T10951] loop2: p2 start 1702059890 is beyond EOD, truncated [ 318.694231][ T5885] usb 6-1: USB disconnect, device number 14 [ 318.704871][ T5885] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 318.729258][ T5885] aircable 6-1:5.52: device disconnected [ 319.173395][T10972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.191583][T10972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.209775][ T24] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 319.359728][ T24] usb 3-1: device descriptor read/64, error -71 [ 319.390116][ T5885] usb 1-1: new low-speed USB device number 70 using dummy_hcd [ 319.540305][ T5885] usb 1-1: Invalid ep0 maxpacket: 64 [ 319.580987][ T979] usb 4-1: USB disconnect, device number 52 [ 319.620339][ T24] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 319.682494][ T5885] usb 1-1: new low-speed USB device number 71 using dummy_hcd [ 319.708294][T10980] loop2: detected capacity change from 0 to 7 [ 319.733118][ T5913] Dev loop2: unable to read RDB block 7 [ 319.740460][ T5913] loop2: AHDI p2 p3 [ 319.759763][ T24] usb 3-1: device descriptor read/64, error -71 [ 319.768662][ T5913] loop2: partition table partially beyond EOD, truncated [ 319.793074][ T5913] loop2: p2 start 13841266 is beyond EOD, truncated [ 319.809410][T10980] Dev loop2: unable to read RDB block 7 [ 319.815809][T10980] loop2: AHDI p2 p3 [ 319.822592][T10980] loop2: partition table partially beyond EOD, truncated [ 319.836001][T10980] loop2: p2 start 13841266 is beyond EOD, truncated [ 319.843625][ T5885] usb 1-1: Invalid ep0 maxpacket: 64 [ 319.873641][ T5885] usb usb1-port1: attempt power cycle [ 319.880374][ T24] usb usb3-port1: attempt power cycle [ 320.219859][ T5885] usb 1-1: new low-speed USB device number 72 using dummy_hcd [ 320.241054][ T24] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 320.270482][ T24] usb 3-1: device descriptor read/8, error -71 [ 320.271936][ T5885] usb 1-1: Invalid ep0 maxpacket: 64 [ 320.359520][T11004] loop2: detected capacity change from 0 to 7 [ 320.368891][T11004] Dev loop2: unable to read RDB block 7 [ 320.375458][T11004] loop2: unable to read partition table [ 320.381792][T11004] loop2: partition table beyond EOD, truncated [ 320.388089][T11004] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 320.419790][ T5885] usb 1-1: new low-speed USB device number 73 using dummy_hcd [ 320.441261][ T5885] usb 1-1: Invalid ep0 maxpacket: 64 [ 320.452459][ T5843] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 320.457782][ T5885] usb usb1-port1: unable to enumerate USB device [ 320.510105][ T24] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 320.526592][T11008] FAULT_INJECTION: forcing a failure. [ 320.526592][T11008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.541416][T11008] CPU: 1 UID: 0 PID: 11008 Comm: syz.4.1551 Not tainted syzkaller #0 PREEMPT(full) [ 320.541442][T11008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 320.541462][T11008] Call Trace: [ 320.541470][T11008] [ 320.541478][T11008] dump_stack_lvl+0x189/0x250 [ 320.541511][T11008] ? __pfx____ratelimit+0x10/0x10 [ 320.541534][T11008] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.541555][T11008] ? __pfx__printk+0x10/0x10 [ 320.541583][T11008] ? __might_fault+0xb0/0x130 [ 320.541623][T11008] should_fail_ex+0x414/0x560 [ 320.541655][T11008] _copy_from_user+0x2d/0xb0 [ 320.541679][T11008] io_submit_one+0xc2/0x1310 [ 320.541720][T11008] ? __pfx_io_submit_one+0x10/0x10 [ 320.541745][T11008] ? __might_fault+0xb0/0x130 [ 320.541784][T11008] ? __might_fault+0xb0/0x130 [ 320.541815][T11008] __se_sys_io_submit+0x185/0x2f0 [ 320.541840][T11008] ? __pfx___se_sys_io_submit+0x10/0x10 [ 320.541859][T11008] ? ksys_write+0x22a/0x250 [ 320.541898][T11008] ? do_syscall_64+0xbe/0x3b0 [ 320.541924][T11008] do_syscall_64+0xfa/0x3b0 [ 320.541946][T11008] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.541968][T11008] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.541988][T11008] ? clear_bhb_loop+0x60/0xb0 [ 320.542012][T11008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.542030][T11008] RIP: 0033:0x7f3f6d78eec9 [ 320.542048][T11008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.542063][T11008] RSP: 002b:00007f3f6e673038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 320.542080][T11008] RAX: ffffffffffffffda RBX: 00007f3f6d9e5fa0 RCX: 00007f3f6d78eec9 [ 320.542093][T11008] RDX: 0000200000000140 RSI: 0000000000000001 RDI: 00007f3f6e652000 [ 320.542106][T11008] RBP: 00007f3f6e673090 R08: 0000000000000000 R09: 0000000000000000 [ 320.542119][T11008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.542137][T11008] R13: 00007f3f6d9e6038 R14: 00007f3f6d9e5fa0 R15: 00007f3f6db0fa28 [ 320.542168][T11008] [ 320.542624][ T24] usb 3-1: device descriptor read/8, error -71 [ 320.770185][ T5843] usb 4-1: Using ep0 maxpacket: 16 [ 320.777151][ T5843] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 320.788867][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 320.802879][ T5843] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 320.812072][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.820152][ T5843] usb 4-1: Product: syz [ 320.824579][ T5843] usb 4-1: Manufacturer: syz [ 320.829188][ T5843] usb 4-1: SerialNumber: syz [ 320.843558][ T5843] usb 4-1: config 0 descriptor?? [ 320.852081][ T5843] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 320.869795][ T24] usb usb3-port1: unable to enumerate USB device [ 320.877202][ T5843] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 320.933798][T11018] loop2: detected capacity change from 0 to 7 [ 320.941600][T11018] Dev loop2: unable to read RDB block 7 [ 320.947314][T11018] loop2: unable to read partition table [ 320.953990][T11018] loop2: partition table beyond EOD, truncated [ 320.977271][T11018] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 321.674077][ T5843] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 321.691453][ T5843] em28xx 4-1:0.0: Config register raw data: 0x41 [ 321.719846][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 321.897496][ T5843] usb 4-1: USB disconnect, device number 53 [ 321.905291][ T5843] em28xx 4-1:0.0: Disconnecting em28xx [ 321.914625][ T5843] em28xx 4-1:0.0: Freeing device [ 322.296872][T11041] loop2: detected capacity change from 0 to 7 [ 322.311212][T11041] Dev loop2: unable to read RDB block 7 [ 322.316907][T11041] loop2: unable to read partition table [ 322.362206][T11041] loop2: partition table beyond EOD, truncated [ 322.369068][T11041] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 322.422825][T11048] fuse: Unknown parameter 'group_i' [ 322.526854][T11052] FAULT_INJECTION: forcing a failure. [ 322.526854][T11052] name failslab, interval 1, probability 0, space 0, times 0 [ 322.574279][T11052] CPU: 1 UID: 0 PID: 11052 Comm: syz.4.1566 Not tainted syzkaller #0 PREEMPT(full) [ 322.574306][T11052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 322.574317][T11052] Call Trace: [ 322.574325][T11052] [ 322.574333][T11052] dump_stack_lvl+0x189/0x250 [ 322.574361][T11052] ? __pfx____ratelimit+0x10/0x10 [ 322.574384][T11052] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.574407][T11052] ? __pfx__printk+0x10/0x10 [ 322.574437][T11052] ? __pfx___might_resched+0x10/0x10 [ 322.574460][T11052] ? fs_reclaim_acquire+0x7d/0x100 [ 322.574485][T11052] should_fail_ex+0x414/0x560 [ 322.574518][T11052] should_failslab+0xa8/0x100 [ 322.574540][T11052] kmem_cache_alloc_noprof+0x74/0x6e0 [ 322.574568][T11052] ? io_submit_one+0x11f/0x1310 [ 322.574595][T11052] io_submit_one+0x11f/0x1310 [ 322.574633][T11052] ? __pfx_io_submit_one+0x10/0x10 [ 322.574665][T11052] ? __might_fault+0xb0/0x130 [ 322.574700][T11052] ? __might_fault+0xb0/0x130 [ 322.574728][T11052] __se_sys_io_submit+0x185/0x2f0 [ 322.574752][T11052] ? __pfx___se_sys_io_submit+0x10/0x10 [ 322.574770][T11052] ? ksys_write+0x22a/0x250 [ 322.574808][T11052] ? do_syscall_64+0xbe/0x3b0 [ 322.574836][T11052] do_syscall_64+0xfa/0x3b0 [ 322.574858][T11052] ? lockdep_hardirqs_on+0x9c/0x150 [ 322.574878][T11052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.574897][T11052] ? clear_bhb_loop+0x60/0xb0 [ 322.574919][T11052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.574938][T11052] RIP: 0033:0x7f3f6d78eec9 [ 322.574955][T11052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.574973][T11052] RSP: 002b:00007f3f6e673038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 322.574994][T11052] RAX: ffffffffffffffda RBX: 00007f3f6d9e5fa0 RCX: 00007f3f6d78eec9 [ 322.575008][T11052] RDX: 0000200000000140 RSI: 0000000000000001 RDI: 00007f3f6e652000 [ 322.575021][T11052] RBP: 00007f3f6e673090 R08: 0000000000000000 R09: 0000000000000000 [ 322.575032][T11052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.575044][T11052] R13: 00007f3f6d9e6038 R14: 00007f3f6d9e5fa0 R15: 00007f3f6db0fa28 [ 322.575072][T11052] [ 322.824239][T11060] loop2: detected capacity change from 0 to 7 [ 322.832674][ T5913] Dev loop2: unable to read RDB block 7 [ 322.838694][ T5913] loop2: unable to read partition table [ 322.853637][ T5913] loop2: partition table beyond EOD, truncated [ 322.874791][T11060] Dev loop2: unable to read RDB block 7 [ 322.881397][T11060] loop2: unable to read partition table [ 322.887445][T11060] loop2: partition table beyond EOD, truncated [ 322.894049][T11060] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 322.929762][ T979] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 323.024787][T11067] vcan0: tx drop: invalid da for name 0x0000000000000e00 [ 323.096301][ T979] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 323.105554][ T979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.115663][T11070] netlink: 'syz.2.1575': attribute type 3 has an invalid length. [ 323.123692][ T979] usb 6-1: Product: syz [ 323.127971][ T979] usb 6-1: Manufacturer: syz [ 323.133351][ T979] usb 6-1: SerialNumber: syz [ 323.143354][ T979] usb 6-1: config 0 descriptor?? [ 323.272382][ T5885] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 323.423633][ T5885] usb 5-1: device descriptor read/64, error -71 [ 323.763255][ T5885] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 323.925311][ T5885] usb 5-1: device descriptor read/64, error -71 [ 324.040346][ T5885] usb usb5-port1: attempt power cycle [ 324.272542][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055fe2c00: rx timeout, send abort [ 324.281085][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888055fe2c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 324.380841][ T5885] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 324.441027][ T5885] usb 5-1: device descriptor read/8, error -71 [ 324.679745][ T24] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 324.679765][ T5885] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 324.707236][T11082] bond2: option arp_validate: invalid value (18446744073709551614) [ 324.720663][ T5885] usb 5-1: device descriptor read/8, error -71 [ 324.728680][T11082] bond2 (unregistering): Released all slaves [ 324.768061][T11084] netlink: 'syz.2.1578': attribute type 4 has an invalid length. [ 324.830733][ T24] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 324.832717][ T5885] usb usb5-port1: unable to enumerate USB device [ 324.840003][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 324.872468][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 324.965462][T11086] loop2: detected capacity change from 0 to 7 [ 324.987785][T11086] Dev loop2: unable to read RDB block 7 [ 325.017151][T11086] loop2: unable to read partition table [ 325.019688][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 325.023845][T11086] loop2: partition table beyond EOD, truncated [ 325.036354][T11086] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 325.048087][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 325.063146][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 325.084721][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 325.200184][ T979] usb 6-1: f81604_read: reg: 105 failed: -ETIMEDOUT [ 325.215200][ T979] f81604 6-1:0.0: Setting termination of CH#0 failed: -ETIMEDOUT [ 325.230090][ T979] f81604 6-1:0.0: probe with driver f81604 failed with error -110 [ 325.686091][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 325.719779][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 325.754779][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 325.774202][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 325.788502][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 325.814404][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 325.831197][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 325.854958][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 325.880468][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 325.888453][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 325.905055][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 325.932122][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 325.973107][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 326.324314][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 326.347850][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 326.421574][T11099] loop2: detected capacity change from 0 to 7 [ 326.442946][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 326.471871][T11099] Dev loop2: unable to read RDB block 7 [ 326.487488][T11099] loop2: AHDI p1 p2 p3 [ 326.514979][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 326.556838][T11099] loop2: partition table partially beyond EOD, truncated [ 326.575178][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 326.587441][T11099] loop2: p1 start 1601398130 is beyond EOD, truncated [ 326.595056][T11099] loop2: p2 start 1702059890 is beyond EOD, truncated [ 326.601126][ T24] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 326.612407][ T24] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 326.621950][ T24] usb 4-1: Product: syz [ 326.626264][ T24] usb 4-1: Manufacturer: syz [ 326.631554][ T24] usb 4-1: SerialNumber: syz [ 326.652758][ T24] usb 4-1: config 0 descriptor?? [ 326.676995][ T24] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 326.816324][ T30] audit: type=1326 audit(1759855555.699:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11094 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa67cd8eec9 code=0x7ffc0000 [ 326.847387][T11101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1583'. [ 327.018076][ T30] audit: type=1326 audit(1759855555.699:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11094 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa67cd8eec9 code=0x7ffc0000 [ 327.036252][ T5970] usb 4-1: USB disconnect, device number 54 [ 327.186248][ T5970] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 327.268084][ T30] audit: type=1326 audit(1759855555.699:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11094 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fa67cd8eec9 code=0x7ffc0000 [ 327.363642][T11108] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 327.395387][ T30] audit: type=1326 audit(1759855555.699:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11094 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa67cd8eec9 code=0x7ffc0000 [ 327.475787][T11108] team0: Port device batadv2 added [ 327.595903][T11110] hub 9-0:1.0: USB hub found [ 327.613269][T11110] hub 9-0:1.0: 1 port detected [ 327.628895][ T30] audit: type=1326 audit(1759855555.699:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11094 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa67cd8eec9 code=0x7ffc0000 [ 327.835977][ T30] audit: type=1326 audit(1759855555.699:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11094 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fa67cd8eec9 code=0x7ffc0000 [ 327.968367][ T30] audit: type=1326 audit(1759855555.699:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11094 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa67cd8eec9 code=0x7ffc0000 [ 328.122618][ T30] audit: type=1326 audit(1759855555.699:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11094 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa67cd8eec9 code=0x7ffc0000 [ 328.145060][ C1] vkms_vblank_simulate: vblank timer overrun [ 328.346567][ T30] audit: type=1326 audit(1759855555.699:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11094 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fa67cd8eec9 code=0x7ffc0000 [ 328.469775][ T30] audit: type=1326 audit(1759855555.739:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11094 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa67cd8eec9 code=0x7ffc0000 [ 328.950162][ T10] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 329.100471][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 329.118337][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 329.141153][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 148, changing to 7 [ 329.152442][ T5885] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 329.185899][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 329.200027][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.218291][ T10] usb 3-1: Product: ﻖὕᙸ栋팿덀疐૨詯࿮ꯍᓂባ↷؉헍ﭘ좙ཏ금渿 ꑼ걖껰卟레᳸䪕뇘䓯챉幭ᥘ鬡Ԋ䅵ৌ綇듴丆鹧䒉綉馕犺콭ⱏ戣謠റﯿ䖪鲊ꂵㄧ탼ﳞ㖮絵饄퀄⫺꟫㮘Δ吩밚䷝᰺や䍋육鼡芧⤌ [ 329.279736][ T10] usb 3-1: Manufacturer: 셳㭒呼﵁戒긂 [ 329.285682][ T10] usb 3-1: SerialNumber: ࠁ [ 329.339788][ T5885] usb 5-1: Using ep0 maxpacket: 8 [ 329.351920][ T5885] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 329.360831][ T5885] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 329.368976][ T5885] usb 5-1: config 0 has no interface number 0 [ 329.399902][ T5885] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 329.411923][ T5885] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 329.423573][ T5885] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 329.440155][ T5885] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 329.449407][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 329.457526][ T5885] usb 5-1: Product: syz [ 329.466479][ T5885] usb 5-1: config 0 descriptor?? [ 329.472980][T11125] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 329.581998][ T10] usb 3-1: USB disconnect, device number 63 [ 329.609767][ T24] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 329.678385][ T5939] udevd[5939]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 329.761671][ T5914] usb 6-1: USB disconnect, device number 15 [ 329.772721][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 329.819871][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 329.844957][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.878409][ T24] usb 4-1: Product: syz [ 329.894531][ T24] usb 4-1: Manufacturer: syz [ 329.899169][ T24] usb 4-1: SerialNumber: syz [ 330.140114][ T5914] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 330.230070][ T5885] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.21/input/input30 [ 330.319830][ T10] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 330.336320][ T24] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 55 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 330.367808][ T5914] usb 6-1: Using ep0 maxpacket: 32 [ 330.389282][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.416896][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.431378][ T5885] usb 5-1: USB disconnect, device number 50 [ 330.437299][ C0] keyspan_remote 5-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 330.469423][ T5914] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 330.479081][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.590615][ T10] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.602490][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 330.730545][ T10] usb 3-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 330.744671][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.756772][ T5914] usb 6-1: config 0 descriptor?? [ 330.764508][ T10] usb 3-1: config 0 descriptor?? [ 330.781160][ T5914] hub 6-1:0.0: USB hub found [ 331.010604][ T5914] hub 6-1:0.0: 1 port detected [ 331.409897][ T24] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 331.555506][ T10] usb 3-1: string descriptor 0 read error: -71 [ 331.569601][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 331.569889][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 331.575726][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 331.592007][ T24] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 331.600366][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 331.615402][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 331.631067][ T10] usb 3-1: USB disconnect, device number 64 [ 331.637164][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 331.651554][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 331.665424][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 331.675086][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.833041][ T10] hub 6-1:0.0: activate --> -90 [ 331.890113][ T24] usb 5-1: usb_control_msg returned -32 [ 331.896322][ T24] usbtmc 5-1:16.0: can't read capabilities [ 331.935415][T11168] syzkaller0: entered promiscuous mode [ 331.941221][T11168] syzkaller0: entered allmulticast mode [ 332.185361][ T24] usb 6-1: USB disconnect, device number 16 [ 332.251111][T11171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.268284][T11171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.298710][ T5905] usb 5-1: USB disconnect, device number 51 [ 332.418556][ T2153] usb 4-1: USB disconnect, device number 55 [ 332.432635][ T2153] usblp0: removed [ 332.598700][T11181] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1609'. [ 333.119739][ T5905] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 333.255515][T11200] fuse: Bad value for 'user_id' [ 333.263479][T11200] fuse: Bad value for 'user_id' [ 333.342656][ T5905] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.364133][ T5905] usb 5-1: config 0 interface 0 has no altsetting 0 [ 333.380094][ T5905] usb 5-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 333.423191][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.464170][ T5905] usb 5-1: config 0 descriptor?? [ 334.213339][ T5905] usb 5-1: string descriptor 0 read error: -71 [ 334.245365][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 334.253635][ T5905] usbhid 5-1:0.0: can't add hid device: -71 [ 334.271131][ T5905] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 334.305337][ T5905] usb 5-1: USB disconnect, device number 52 [ 334.389095][T11222] netlink: 'syz.0.1622': attribute type 10 has an invalid length. [ 334.397271][T11222] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1622'. [ 334.429921][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 334.462868][ T10] usb 6-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=31.1f [ 334.472321][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.489353][ T10] usb 6-1: Product: syz [ 334.501886][ T10] usb 6-1: Manufacturer: syz [ 334.519319][ T10] usb 6-1: SerialNumber: syz [ 334.569237][ T10] usb 6-1: config 0 descriptor?? [ 334.580104][ T10] (null): radio-mr800 - initialization failed [ 334.586509][ T10] radio-mr800 6-1:0.0: probe with driver radio-mr800 failed with error -22 [ 334.597055][ T10] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 334.908147][ T10] usb 6-1: USB disconnect, device number 17 [ 335.549905][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 335.549922][ T30] audit: type=1326 audit(1759855564.449:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11237 comm="syz.5.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6c18eec9 code=0x7ffc0000 [ 335.656935][ T30] audit: type=1326 audit(1759855564.469:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11237 comm="syz.5.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6c18eec9 code=0x7ffc0000 [ 335.682994][ T30] audit: type=1326 audit(1759855564.469:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11237 comm="syz.5.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f1e6c18eec9 code=0x7ffc0000 [ 335.683822][T11240] loop2: detected capacity change from 0 to 7 [ 335.710082][ T30] audit: type=1326 audit(1759855564.469:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11237 comm="syz.5.1624" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0x200000000006 code=0x7ffc0000 [ 335.735321][ T30] audit: type=1326 audit(1759855564.469:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11237 comm="syz.5.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6c18eec9 code=0x7ffc0000 [ 335.736021][ T5913] Dev loop2: unable to read RDB block 7 [ 335.758364][ T30] audit: type=1326 audit(1759855564.479:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11237 comm="syz.5.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6c18eec9 code=0x7ffc0000 [ 335.790201][ T5913] loop2: unable to read partition table [ 335.796198][ T5913] loop2: partition table beyond EOD, truncated [ 335.811655][T11240] Dev loop2: unable to read RDB block 7 [ 335.817357][T11240] loop2: unable to read partition table [ 335.827666][T11240] loop2: partition table beyond EOD, truncated [ 335.834747][T11240] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 336.227644][T11222] team0: entered promiscuous mode [ 336.237479][T11222] team_slave_0: entered promiscuous mode [ 336.254987][T11222] team_slave_1: entered promiscuous mode [ 336.261196][T11222] team0: entered allmulticast mode [ 336.266388][T11222] team_slave_0: entered allmulticast mode [ 336.272592][T11222] team_slave_1: entered allmulticast mode [ 336.278966][T11222] bridge0: port 3(team0) entered blocking state [ 336.699850][T11222] bridge0: port 3(team0) entered disabled state [ 336.708295][T11222] bridge0: port 3(team0) entered blocking state [ 336.714660][T11222] bridge0: port 3(team0) entered forwarding state [ 337.010157][T11257] fuse: Invalid rootmode [ 337.019886][T11256] fuse: Invalid rootmode [ 337.650909][ T10] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 337.812755][ T10] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.832039][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 337.849146][ T10] usb 4-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 337.862782][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.874315][ T10] usb 4-1: config 0 descriptor?? [ 337.931103][ T5905] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 337.985452][T11281] IPv6: NLM_F_REPLACE set, but no existing node found! [ 337.999895][ T5885] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 338.103561][ T5905] usb 5-1: unable to get BOS descriptor or descriptor too short [ 338.118805][ T5905] usb 5-1: not running at top speed; connect to a high speed hub [ 338.129176][ T5905] usb 5-1: config 219 has an invalid interface number: 147 but max is 1 [ 338.137971][ T5905] usb 5-1: config 219 has an invalid interface number: 147 but max is 1 [ 338.149248][ T5905] usb 5-1: config 219 has 1 interface, different from the descriptor's value: 2 [ 338.159102][ T5905] usb 5-1: config 219 has no interface number 0 [ 338.170345][ T5885] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 338.179781][ T5905] usb 5-1: config 219 interface 147 has no altsetting 0 [ 338.186866][ T5885] usb 1-1: can't read configurations, error -61 [ 338.193818][ T5905] usb 5-1: config 219 interface 147 has no altsetting 1 [ 338.205917][ T5905] usb 5-1: New USB device found, idVendor=07b0, idProduct=0006, bcdDevice=9e.d4 [ 338.219891][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.228046][ T5905] usb 5-1: Product: syz [ 338.233706][ T5905] usb 5-1: Manufacturer: syz [ 338.238474][ T5905] usb 5-1: SerialNumber: syz [ 338.289781][ T5914] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 338.329874][ T5885] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 338.446322][ T5914] usb 3-1: unable to get BOS descriptor or descriptor too short [ 338.482195][ T5905] HFC-S_USB 5-1:219.147: probe with driver HFC-S_USB failed with error -5 [ 338.493874][ T5914] usb 3-1: not running at top speed; connect to a high speed hub [ 338.505972][ T5885] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 338.516180][ T5914] usb 3-1: config 188 has an invalid interface number: 3 but max is 1 [ 338.527626][ T5905] usb 5-1: USB disconnect, device number 53 [ 338.533944][ T5885] usb 1-1: can't read configurations, error -61 [ 338.544280][ T5914] usb 3-1: config 188 has an invalid interface number: 9 but max is 1 [ 338.554850][ T5885] usb usb1-port1: attempt power cycle [ 338.567989][ T5914] usb 3-1: config 188 has no interface number 0 [ 338.575003][ T5914] usb 3-1: config 188 has no interface number 1 [ 338.582826][ T5914] usb 3-1: config 188 interface 3 has no altsetting 0 [ 338.590144][ T5914] usb 3-1: config 188 interface 9 has no altsetting 0 [ 338.602329][ T5914] usb 3-1: New USB device found, idVendor=1410, idProduct=a002, bcdDevice=86.a0 [ 338.613211][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.621639][ T5914] usb 3-1: Product: syz [ 338.627778][ T10] usb 4-1: string descriptor 0 read error: -71 [ 338.637923][ T5914] usb 3-1: Manufacturer: syz [ 338.643819][ T5914] usb 3-1: SerialNumber: syz [ 338.648946][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 338.657754][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 338.679514][ T10] usb 4-1: USB disconnect, device number 56 [ 338.899877][ T5885] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 338.944613][ T5885] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 338.962290][ T5885] usb 1-1: can't read configurations, error -61 [ 338.986856][ T5914] usb 3-1: unknown number of interfaces: 2 [ 339.008529][T11288] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 339.030078][ T5914] usb 3-1: USB disconnect, device number 65 [ 339.134109][ T5885] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 339.192666][ T5885] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 339.215018][ T5885] usb 1-1: can't read configurations, error -61 [ 339.257478][ T5885] usb usb1-port1: unable to enumerate USB device [ 339.452422][T11297] FAULT_INJECTION: forcing a failure. [ 339.452422][T11297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.549915][T11297] CPU: 1 UID: 0 PID: 11297 Comm: syz.4.1642 Not tainted syzkaller #0 PREEMPT(full) [ 339.549941][T11297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 339.549953][T11297] Call Trace: [ 339.549961][T11297] [ 339.549969][T11297] dump_stack_lvl+0x189/0x250 [ 339.549998][T11297] ? __pfx____ratelimit+0x10/0x10 [ 339.550019][T11297] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.550047][T11297] ? __pfx__printk+0x10/0x10 [ 339.550074][T11297] ? __might_fault+0xb0/0x130 [ 339.550114][T11297] should_fail_ex+0x414/0x560 [ 339.550147][T11297] _copy_from_user+0x2d/0xb0 [ 339.550178][T11297] sctp_getsockopt_peer_addr_params+0x103/0xcc0 [ 339.550213][T11297] ? __pfx_sctp_getsockopt_peer_addr_params+0x10/0x10 [ 339.550257][T11297] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 339.550294][T11297] sctp_getsockopt+0x7ed/0xb60 [ 339.550329][T11297] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 339.550361][T11297] do_sock_getsockopt+0x372/0x450 [ 339.550405][T11297] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 339.550431][T11297] ? do_syscall_64+0x40/0x3b0 [ 339.550454][T11297] ? __fget_files+0x3a0/0x420 [ 339.550473][T11297] ? __fget_files+0x2a/0x420 [ 339.550499][T11297] __x64_sys_getsockopt+0x1a5/0x250 [ 339.550525][T11297] ? do_syscall_64+0x40/0x3b0 [ 339.550550][T11297] ? do_syscall_64+0x40/0x3b0 [ 339.550577][T11297] do_syscall_64+0xfa/0x3b0 [ 339.550600][T11297] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.550622][T11297] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.550649][T11297] ? clear_bhb_loop+0x60/0xb0 [ 339.550673][T11297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.550692][T11297] RIP: 0033:0x7f3f6d78eec9 [ 339.550709][T11297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.550727][T11297] RSP: 002b:00007f3f6e673038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 339.550748][T11297] RAX: ffffffffffffffda RBX: 00007f3f6d9e5fa0 RCX: 00007f3f6d78eec9 [ 339.550763][T11297] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 339.550774][T11297] RBP: 00007f3f6e673090 R08: 0000200000000380 R09: 0000000000000000 [ 339.550787][T11297] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 339.550800][T11297] R13: 00007f3f6d9e6038 R14: 00007f3f6d9e5fa0 R15: 00007f3f6db0fa28 [ 339.550831][T11297] [ 340.529936][ T5905] usb 5-1: new low-speed USB device number 54 using dummy_hcd [ 340.679737][ T5905] usb 5-1: device descriptor read/64, error -71 [ 340.799751][ T2153] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 341.158369][ T5905] usb 5-1: new low-speed USB device number 55 using dummy_hcd [ 341.239865][ T2153] usb 4-1: Using ep0 maxpacket: 8 [ 341.276292][ T2153] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 341.300088][ T5905] usb 5-1: device descriptor read/64, error -71 [ 341.323609][ T2153] usb 4-1: config 2 has no interface number 0 [ 341.353294][ T2153] usb 4-1: config 2 interface 31 has no altsetting 0 [ 341.369203][T11332] netlink: 'syz.2.1651': attribute type 15 has an invalid length. [ 341.445375][ T5905] usb usb5-port1: attempt power cycle [ 341.465942][ T2153] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 341.485677][ T2153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.552502][ T2153] usb 4-1: Product: syz [ 341.563020][ T2153] usb 4-1: Manufacturer: syz [ 341.638895][ T2153] usb 4-1: SerialNumber: syz [ 341.694710][ T2153] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22 [ 341.899794][ T5905] usb 5-1: new low-speed USB device number 56 using dummy_hcd [ 342.300607][ T5905] usb 5-1: device descriptor read/8, error -71 [ 342.539741][ T5905] usb 5-1: new low-speed USB device number 57 using dummy_hcd [ 342.558323][ T2153] usb 4-1: USB disconnect, device number 57 [ 342.610425][ T5905] usb 5-1: device descriptor read/8, error -71 [ 342.712570][T11343] FAULT_INJECTION: forcing a failure. [ 342.712570][T11343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.750295][ T5905] usb usb5-port1: unable to enumerate USB device [ 342.779825][T11343] CPU: 0 UID: 0 PID: 11343 Comm: syz.0.1654 Not tainted syzkaller #0 PREEMPT(full) [ 342.779852][T11343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 342.779864][T11343] Call Trace: [ 342.779878][T11343] [ 342.779887][T11343] dump_stack_lvl+0x189/0x250 [ 342.779915][T11343] ? __pfx____ratelimit+0x10/0x10 [ 342.779938][T11343] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.779962][T11343] ? __pfx__printk+0x10/0x10 [ 342.780006][T11343] should_fail_ex+0x414/0x560 [ 342.780038][T11343] _copy_to_user+0x31/0xb0 [ 342.780062][T11343] sctp_getsockopt_peer_addr_params+0x921/0xcc0 [ 342.780097][T11343] ? __pfx_sctp_getsockopt_peer_addr_params+0x10/0x10 [ 342.780141][T11343] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 342.780177][T11343] sctp_getsockopt+0x7ed/0xb60 [ 342.780206][T11343] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 342.780229][T11343] do_sock_getsockopt+0x372/0x450 [ 342.780262][T11343] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 342.780288][T11343] ? do_syscall_64+0x40/0x3b0 [ 342.780311][T11343] ? __fget_files+0x3a0/0x420 [ 342.780330][T11343] ? __fget_files+0x2a/0x420 [ 342.780357][T11343] __x64_sys_getsockopt+0x1a5/0x250 [ 342.780382][T11343] ? do_syscall_64+0x40/0x3b0 [ 342.780407][T11343] ? do_syscall_64+0x40/0x3b0 [ 342.780434][T11343] do_syscall_64+0xfa/0x3b0 [ 342.780457][T11343] ? lockdep_hardirqs_on+0x9c/0x150 [ 342.780478][T11343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.780498][T11343] ? clear_bhb_loop+0x60/0xb0 [ 342.780521][T11343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.780540][T11343] RIP: 0033:0x7fece8d8eec9 [ 342.780556][T11343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.780574][T11343] RSP: 002b:00007fece9cc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 342.780595][T11343] RAX: ffffffffffffffda RBX: 00007fece8fe5fa0 RCX: 00007fece8d8eec9 [ 342.780610][T11343] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 342.780621][T11343] RBP: 00007fece9cc7090 R08: 0000200000000380 R09: 0000000000000000 [ 342.780634][T11343] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 342.780646][T11343] R13: 00007fece8fe6038 R14: 00007fece8fe5fa0 R15: 00007fece910fa28 [ 342.780678][T11343] [ 343.013706][ C0] vkms_vblank_simulate: vblank timer overrun [ 343.520185][T11350] team_slave_0: entered promiscuous mode [ 343.526178][T11350] team_slave_1: entered promiscuous mode [ 343.553451][T11350] vlan2: entered promiscuous mode [ 343.581971][T11350] team0: entered promiscuous mode [ 343.709780][ T5843] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 343.859763][ T5843] usb 5-1: Using ep0 maxpacket: 8 [ 343.878297][ T5843] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 343.888061][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.919465][ T5843] usb 5-1: Product: syz [ 343.943337][ T5843] usb 5-1: Manufacturer: syz [ 343.947979][ T5843] usb 5-1: SerialNumber: syz [ 343.977277][ T5843] usb 5-1: config 0 descriptor?? [ 344.134731][T11381] loop2: detected capacity change from 0 to 7 [ 344.157432][T11381] Dev loop2: unable to read RDB block 7 [ 344.184197][T11381] loop2: AHDI p1 p2 p3 [ 344.188892][T11381] loop2: partition table partially beyond EOD, truncated [ 344.199212][T11384] FAULT_INJECTION: forcing a failure. [ 344.199212][T11384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.204552][ T5843] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 344.222139][T11381] loop2: p1 start 1601398130 is beyond EOD, truncated [ 344.229179][T11381] loop2: p2 start 1702059890 is beyond EOD, truncated [ 344.238800][T11384] CPU: 0 UID: 0 PID: 11384 Comm: syz.5.1666 Not tainted syzkaller #0 PREEMPT(full) [ 344.238833][T11384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 344.238845][T11384] Call Trace: [ 344.238853][T11384] [ 344.238861][T11384] dump_stack_lvl+0x189/0x250 [ 344.238889][T11384] ? __pfx____ratelimit+0x10/0x10 [ 344.238913][T11384] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.238937][T11384] ? __pfx__printk+0x10/0x10 [ 344.238977][T11384] should_fail_ex+0x414/0x560 [ 344.239008][T11384] _copy_to_user+0x31/0xb0 [ 344.239031][T11384] simple_read_from_buffer+0xe1/0x170 [ 344.239065][T11384] proc_fail_nth_read+0x1b3/0x220 [ 344.239092][T11384] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 344.239119][T11384] ? rw_verify_area+0x2a6/0x4d0 [ 344.239143][T11384] ? __lock_acquire+0xab9/0xd20 [ 344.239161][T11384] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 344.239184][T11384] vfs_read+0x1fd/0xa30 [ 344.239206][T11384] ? fdget_pos+0x247/0x320 [ 344.239226][T11384] ? __pfx___mutex_lock+0x10/0x10 [ 344.239247][T11384] ? __pfx_vfs_read+0x10/0x10 [ 344.239274][T11384] ? __fget_files+0x2a/0x420 [ 344.239295][T11384] ? __fget_files+0x3a0/0x420 [ 344.239311][T11384] ? __fget_files+0x2a/0x420 [ 344.239338][T11384] ksys_read+0x145/0x250 [ 344.239362][T11384] ? __pfx_ksys_read+0x10/0x10 [ 344.239383][T11384] ? fput+0xa0/0xd0 [ 344.239404][T11384] ? do_syscall_64+0xbe/0x3b0 [ 344.239430][T11384] do_syscall_64+0xfa/0x3b0 [ 344.239450][T11384] ? lockdep_hardirqs_on+0x9c/0x150 [ 344.239468][T11384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.239484][T11384] ? clear_bhb_loop+0x60/0xb0 [ 344.239504][T11384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.239520][T11384] RIP: 0033:0x7f1e6c18d8dc [ 344.239535][T11384] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 344.239549][T11384] RSP: 002b:00007f1e6d0a3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 344.239569][T11384] RAX: ffffffffffffffda RBX: 00007f1e6c3e5fa0 RCX: 00007f1e6c18d8dc [ 344.239582][T11384] RDX: 000000000000000f RSI: 00007f1e6d0a30a0 RDI: 0000000000000004 [ 344.239592][T11384] RBP: 00007f1e6d0a3090 R08: 0000000000000000 R09: 0000000000000000 [ 344.239602][T11384] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 344.239613][T11384] R13: 00007f1e6c3e6038 R14: 00007f1e6c3e5fa0 R15: 00007f1e6c50fa28 [ 344.239638][T11384] [ 344.475731][ C0] vkms_vblank_simulate: vblank timer overrun [ 344.764939][T11400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.777926][T11400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.929790][ T5885] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 345.019740][ T2153] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 345.085285][ T5885] usb 3-1: unable to get BOS descriptor or descriptor too short [ 345.096708][ T5885] usb 3-1: not running at top speed; connect to a high speed hub [ 345.111371][ T5885] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.121904][ T5885] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 345.138004][ T5885] usb 3-1: string descriptor 0 read error: -22 [ 345.145928][ T5885] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 345.156164][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.169730][ T2153] usb 6-1: Using ep0 maxpacket: 32 [ 345.177227][ T5885] usb 3-1: 0:2 : does not exist [ 345.181685][ T2153] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 345.206312][ T2153] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 345.227292][ T2153] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 56, changing to 9 [ 345.239010][ T2153] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 9275, setting to 1024 [ 345.258775][ T2153] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 345.272567][ T2153] usb 6-1: config 0 interface 0 has no altsetting 0 [ 345.305125][ T2153] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 345.321811][ T2153] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 345.337402][ T2153] usb 6-1: Product: syz [ 345.344749][ T2153] usb 6-1: Manufacturer: syz [ 345.353613][ T2153] usb 6-1: SerialNumber: syz [ 345.367591][ T2153] usb 6-1: config 0 descriptor?? [ 345.382395][T11399] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 345.415921][ T2153] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 345.457899][ T2153] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 345.693294][ T5905] usb 6-1: USB disconnect, device number 18 [ 345.705774][ T5905] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 346.092470][ T5885] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 346.119236][ T5885] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 346.144356][ T5885] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 346.211446][ T5885] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 346.263035][ T5885] usb 3-1: USB disconnect, device number 66 [ 346.436220][T11427] loop2: detected capacity change from 0 to 7 [ 346.448347][ T6001] Dev loop2: unable to read RDB block 7 [ 346.457885][ T6001] loop2: AHDI p1 p2 p3 [ 346.462290][ T6001] loop2: partition table partially beyond EOD, truncated [ 346.471330][ T6001] loop2: p1 start 1601398130 is beyond EOD, truncated [ 346.478307][ T6001] loop2: p2 start 1702059890 is beyond EOD, truncated [ 346.492293][T11427] Dev loop2: unable to read RDB block 7 [ 346.499595][T11427] loop2: AHDI p1 p2 p3 [ 346.505266][T11427] loop2: partition table partially beyond EOD, truncated [ 346.513255][T11427] loop2: p1 start 1601398130 is beyond EOD, truncated [ 346.521882][T11427] loop2: p2 start 1702059890 is beyond EOD, truncated [ 346.533349][ T5843] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 346.589804][ T24] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 346.781365][ T24] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 346.811660][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.847054][ T24] usb 4-1: config 0 descriptor?? [ 346.910653][ T5885] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 346.951138][ T5914] usb 5-1: USB disconnect, device number 58 [ 347.043709][T11450] sg_write: data in/out 31753/14 bytes for SCSI command 0x0-- guessing data in; [ 347.043709][T11450] program syz.4.1686 not setting count and/or reply_len properly [ 347.083543][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 347.098674][ T5885] usb 3-1: unable to get BOS descriptor or descriptor too short [ 347.120579][ T5885] usb 3-1: config 5 has an invalid interface number: 52 but max is 0 [ 347.134272][ T5905] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 347.205463][ T5885] usb 3-1: config 5 has no interface number 0 [ 347.223285][ T5885] usb 3-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 347.243223][ T5885] usb 3-1: string descriptor 0 read error: -22 [ 347.250030][ T5885] usb 3-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 347.260507][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.278837][T11438] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 347.289455][ T5885] aircable 3-1:5.52: aircable converter detected [ 347.300571][ T5885] usb 3-1: aircable converter now attached to ttyUSB0 [ 347.359838][ T5905] usb 6-1: Using ep0 maxpacket: 8 [ 347.369475][ T5905] usb 6-1: unable to get BOS descriptor or descriptor too short [ 347.555877][ T5905] usb 6-1: config 50 has an invalid descriptor of length 0, skipping remainder of the config [ 347.556662][ T24] ath6kl: mismatched byte count 0 vs. expected 12 [ 347.581674][ T5905] usb 6-1: config 50 has 0 interfaces, different from the descriptor's value: 1 [ 347.616684][ T5905] usb 6-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 347.635745][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.647727][T11438] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 347.665041][ T24] ath6kl: Failed to init ath6kl core: -22 [ 347.674556][ T5905] usb 6-1: Product: syz [ 347.678780][ T5905] usb 6-1: Manufacturer: syz [ 347.690433][ T24] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 347.690714][ T5905] usb 6-1: SerialNumber: syz [ 347.774764][ T5914] usb 4-1: USB disconnect, device number 59 [ 347.959837][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 348.093095][T11446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.105773][T11446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.137744][ T5905] usb 6-1: USB disconnect, device number 19 [ 348.424135][T11471] loop2: detected capacity change from 0 to 7 [ 348.436359][ T5913] Dev loop2: unable to read RDB block 7 [ 348.442082][ T5913] loop2: AHDI p1 p2 p3 [ 348.446694][ T5913] loop2: partition table partially beyond EOD, truncated [ 348.456587][ T5913] loop2: p1 start 1601398130 is beyond EOD, truncated [ 348.464577][ T5913] loop2: p2 start 1702059890 is beyond EOD, truncated [ 348.472384][ T5914] usb 3-1: USB disconnect, device number 67 [ 348.494281][T11471] Dev loop2: unable to read RDB block 7 [ 348.508457][T11471] loop2: AHDI p1 p2 p3 [ 348.511464][ T5914] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 348.521658][T11471] loop2: partition table partially beyond EOD, truncated [ 348.527300][ T5914] aircable 3-1:5.52: device disconnected [ 348.537940][T11471] loop2: p1 start 1601398130 is beyond EOD, truncated [ 348.571118][T11471] loop2: p2 start 1702059890 is beyond EOD, truncated [ 348.802739][T11487] veth0_to_bond: entered allmulticast mode [ 348.821617][ T5843] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 348.881092][T11483] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20002 [ 349.024631][ T5914] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 349.030392][T11490] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1696'. [ 349.066029][ T5843] usb 4-1: unable to get BOS descriptor or descriptor too short [ 349.119741][ T5843] usb 4-1: config 1 interface 0 has no altsetting 0 [ 349.132824][ T5843] usb 4-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.40 [ 349.174116][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.195866][ T5914] usb 5-1: Using ep0 maxpacket: 32 [ 349.218940][ T5843] usb 4-1: Product: syz [ 349.219725][ T5914] usb 5-1: config 0 interface 0 has no altsetting 0 [ 349.246519][ T5914] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 349.263281][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.283971][ T5914] usb 5-1: Product: syz [ 349.291876][ T5914] usb 5-1: Manufacturer: syz [ 349.299502][ T5914] usb 5-1: SerialNumber: syz [ 349.310474][ T5914] usb 5-1: config 0 descriptor?? [ 349.328689][ T5843] usb 4-1: Manufacturer: syz [ 349.399760][ T5843] usb 4-1: SerialNumber: syz [ 349.745514][ T5914] gs_usb 5-1:0.0: Configuring for 2 interfaces [ 349.753871][T11476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.881174][T11476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.922057][ T5843] usbhid 4-1:1.0: can't add hid device: -71 [ 349.928747][ T5843] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 349.941346][ T5843] usb 4-1: USB disconnect, device number 60 [ 350.009705][ T24] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 350.142804][T11481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.164266][T11481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.182598][ T5914] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 350.198252][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 350.209239][ T24] usb 3-1: config 0 has an invalid interface number: 39 but max is 0 [ 350.218502][ T24] usb 3-1: config 0 has no interface number 0 [ 350.237331][ T24] usb 3-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=30.27 [ 350.246652][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.255389][ T24] usb 3-1: Product: syz [ 350.259981][ T24] usb 3-1: Manufacturer: syz [ 350.264713][ T24] usb 3-1: SerialNumber: syz [ 350.286894][ T24] usb 3-1: config 0 descriptor?? [ 350.312819][ T24] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 350.345735][ T5914] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 350.508595][ T5914] usb 5-1: USB disconnect, device number 59 [ 350.723219][T11509] loop2: detected capacity change from 0 to 7 [ 350.773540][T11509] Dev loop2: unable to read RDB block 7 [ 350.795687][T11509] loop2: unable to read partition table [ 350.805796][T11509] loop2: partition table beyond EOD, truncated [ 350.818549][T11509] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 350.851565][ T24] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 351.039734][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 351.050489][ T24] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 351.059740][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.081821][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 351.088865][ T24] pvrusb2: ********** [ 351.093024][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 351.103201][ T24] pvrusb2: Important functionality might not be entirely working. [ 351.111059][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 351.123459][ T24] pvrusb2: ********** [ 351.340245][ T2344] pvrusb2: Invalid write control endpoint [ 351.411938][T11518] netlink: 'syz.4.1704': attribute type 1 has an invalid length. [ 351.462227][ T2344] pvrusb2: Invalid write control endpoint [ 351.479260][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 351.556369][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 351.564625][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 351.580954][ T2344] pvrusb2: Device being rendered inoperable [ 351.595809][T11508] pvrusb2: Attempted to execute control transfer when device not ok [ 351.605190][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 351.612878][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 351.632332][ T2344] pvrusb2: Attached sub-driver cx25840 [ 351.638080][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 351.799944][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 378.679958][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 414.519803][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 456.599593][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 456.606578][ C0] rcu: 1-...!: (2 ticks this GP) idle=1004/1/0x4000000000000000 softirq=62939/62939 fqs=0 [ 456.617612][ C0] rcu: (detected by 0, t=10502 jiffies, g=53997, q=254 ncpus=2) [ 456.625359][ C0] Sending NMI from CPU 0 to CPUs 1: [ 456.625395][ C1] NMI backtrace for cpu 1 [ 456.625418][ C1] CPU: 1 UID: 0 PID: 11525 Comm: syz.3.1703 Not tainted syzkaller #0 PREEMPT(full) [ 456.625438][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 456.625452][ C1] RIP: 0010:do_raw_spin_lock+0x15/0x290 [ 456.625484][ C1] Code: eb 86 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 <48> 81 ec 80 00 00 00 48 89 fb 65 48 8b 05 c9 ac ad 10 48 89 44 24 [ 456.625499][ C1] RSP: 0018:ffffc90000a08bc0 EFLAGS: 00000086 [ 456.625515][ C1] RAX: 1e4342567bb9b000 RBX: ffffffff9980ee38 RCX: 1e4342567bb9b000 [ 456.625529][ C1] RDX: 0000000000000000 RSI: ffffffff8d6f8956 RDI: ffffffff9980ee38 [ 456.625542][ C1] RBP: ffffc90000a08bf0 R08: 0000000000000000 R09: ffffffff849105ba [ 456.625554][ C1] R10: ffffc90000a08cb0 R11: fffff52000141198 R12: dffffc0000000000 [ 456.625568][ C1] R13: dffffc0000000000 R14: 0000000000000802 R15: 1ffff92000141180 [ 456.625581][ C1] FS: 00007f82b685c6c0(0000) GS:ffff888126472000(0000) knlGS:0000000000000000 [ 456.625596][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 456.625608][ C1] CR2: 00005555931695c8 CR3: 000000007787a000 CR4: 00000000003526f0 [ 456.625623][ C1] Call Trace: [ 456.625631][ C1] [ 456.625643][ C1] _raw_spin_lock_irqsave+0xb3/0xf0 [ 456.625665][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 456.625692][ C1] debug_object_deactivate+0x9a/0x250 [ 456.625724][ C1] debug_deactivate+0x1d/0x200 [ 456.625748][ C1] __hrtimer_run_queues+0x2b0/0xc60 [ 456.625781][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 456.625800][ C1] ? read_tsc+0x9/0x20 [ 456.625821][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 456.625854][ C1] __sysvec_apic_timer_interrupt+0x108/0x410 [ 456.625878][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 456.625898][ C1] [ 456.625903][ C1] [ 456.625910][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 456.625929][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 456.625948][ C1] Code: 74 05 e8 6b 2c 8b f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 53 bc 53 f6 65 8b 05 3c 6d 0f 07 85 c0 74 40 48 c7 04 24 0e 36 [ 456.625963][ C1] RSP: 0018:ffffc9001c026e00 EFLAGS: 00000206 [ 456.625977][ C1] RAX: 1e4342567bb9b000 RBX: 0000000000000a06 RCX: 1e4342567bb9b000 [ 456.625989][ C1] RDX: 0000000000000002 RSI: ffffffff8d516503 RDI: 0000000000000001 [ 456.626001][ C1] RBP: ffffc9001c026e90 R08: ffffffff8f5c4b77 R09: 1ffffffff1eb896e [ 456.626014][ C1] R10: dffffc0000000000 R11: fffffbfff1eb896f R12: dffffc0000000000 [ 456.626027][ C1] R13: dffffc0000000000 R14: ffff888068dbb2e8 R15: 1ffff92003804dc0 [ 456.626054][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 456.626077][ C1] taprio_change+0x302c/0x3c40 [ 456.626110][ C1] ? __pfx_taprio_change+0x10/0x10 [ 456.626137][ C1] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 456.626173][ C1] taprio_init+0x959/0xbd0 [ 456.626200][ C1] ? __pfx_taprio_init+0x10/0x10 [ 456.626221][ C1] ? lockdep_rtnl_is_held+0x26/0x40 [ 456.626245][ C1] ? qdisc_lookup+0x36d/0x6d0 [ 456.626269][ C1] ? __pfx_taprio_init+0x10/0x10 [ 456.626289][ C1] qdisc_create+0x7a9/0xea0 [ 456.626310][ C1] tc_modify_qdisc+0x1538/0x20e0 [ 456.626334][ C1] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 456.626365][ C1] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 456.626381][ C1] rtnetlink_rcv_msg+0x77c/0xb70 [ 456.626403][ C1] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 456.626422][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 456.626441][ C1] ? ref_tracker_free+0x63a/0x7d0 [ 456.626466][ C1] ? __asan_memcpy+0x40/0x70 [ 456.626488][ C1] ? __pfx_ref_tracker_free+0x10/0x10 [ 456.626511][ C1] ? __skb_clone+0x63/0x7a0 [ 456.626539][ C1] netlink_rcv_skb+0x208/0x470 [ 456.626560][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 456.626580][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 456.626606][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 456.626631][ C1] netlink_unicast+0x82c/0x9e0 [ 456.626654][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 456.626673][ C1] ? netlink_sendmsg+0x642/0xb30 [ 456.626693][ C1] ? skb_put+0x11b/0x210 [ 456.626716][ C1] netlink_sendmsg+0x805/0xb30 [ 456.626741][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.626764][ C1] ? aa_sock_msg_perm+0xf1/0x1d0 [ 456.626814][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 456.626831][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.626853][ C1] __sock_sendmsg+0x21c/0x270 [ 456.626871][ C1] ____sys_sendmsg+0x505/0x830 [ 456.626897][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 456.626924][ C1] ? import_iovec+0x74/0xa0 [ 456.626945][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 456.626969][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 456.627009][ C1] ? __fget_files+0x2a/0x420 [ 456.627026][ C1] ? __fget_files+0x3a0/0x420 [ 456.627051][ C1] __x64_sys_sendmsg+0x19b/0x260 [ 456.627075][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 456.627103][ C1] ? rcu_is_watching+0x15/0xb0 [ 456.627127][ C1] ? do_syscall_64+0xbe/0x3b0 [ 456.627149][ C1] do_syscall_64+0xfa/0x3b0 [ 456.627169][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.627188][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.627205][ C1] ? clear_bhb_loop+0x60/0xb0 [ 456.627223][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.627240][ C1] RIP: 0033:0x7f82b598eec9 [ 456.627256][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.627271][ C1] RSP: 002b:00007f82b685c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.627287][ C1] RAX: ffffffffffffffda RBX: 00007f82b5be6090 RCX: 00007f82b598eec9 [ 456.627300][ C1] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000006 [ 456.627311][ C1] RBP: 00007f82b5a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 456.627321][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.627332][ C1] R13: 00007f82b5be6128 R14: 00007f82b5be6090 R15: 00007f82b5d0fa28 [ 456.627352][ C1] [ 456.627388][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g53997 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 457.231409][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=24238 [ 457.239298][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g53997 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 457.250661][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 457.260624][ C0] rcu: RCU grace-period kthread stack dump: [ 457.266504][ C0] task:rcu_preempt state:I stack:27320 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 457.278429][ C0] Call Trace: [ 457.281709][ C0] [ 457.284644][ C0] __schedule+0x1798/0x4cc0 [ 457.289180][ C0] ? __lock_acquire+0xab9/0xd20 [ 457.294042][ C0] ? __pfx___schedule+0x10/0x10 [ 457.298927][ C0] ? schedule+0x91/0x360 [ 457.303193][ C0] schedule+0x165/0x360 [ 457.307364][ C0] schedule_timeout+0x12b/0x270 [ 457.312222][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 457.317597][ C0] ? __pfx_process_timeout+0x10/0x10 [ 457.322899][ C0] ? prepare_to_swait_event+0x341/0x380 [ 457.328463][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 457.333332][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 457.338280][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.343486][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 457.348769][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 457.354094][ C0] ? finish_swait+0xcd/0x1f0 [ 457.358719][ C0] rcu_gp_kthread+0x99/0x390 [ 457.363330][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 457.368541][ C0] ? __kthread_parkme+0x7b/0x200 [ 457.373495][ C0] ? __kthread_parkme+0x1a1/0x200 [ 457.378543][ C0] kthread+0x70e/0x8a0 [ 457.382631][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 457.387833][ C0] ? __pfx_kthread+0x10/0x10 [ 457.392433][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 457.397634][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.402836][ C0] ? __pfx_kthread+0x10/0x10 [ 457.407434][ C0] ret_from_fork+0x436/0x7d0 [ 457.412064][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 457.417188][ C0] ? __switch_to_asm+0x39/0x70 [ 457.421972][ C0] ? __switch_to_asm+0x33/0x70 [ 457.426740][ C0] ? __pfx_kthread+0x10/0x10 [ 457.431335][ C0] ret_from_fork_asm+0x1a/0x30 [ 457.436120][ C0] [ 465.720022][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!