last executing test programs: 9.215753946s ago: executing program 4 (id=774): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x7fff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000050010000500000005"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380)}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r3, &(0x7f0000000100), &(0x7f0000000180)=""/177}, 0x20) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r4 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x86100) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000005c0)={r5, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r6 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r6) (async, rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (rerun: 32) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) socket$inet(0xa, 0x801, 0x84) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x6, 0x0, &(0x7f0000001440)={0xffffffffffffffff}) getsockopt$TIPC_CONN_TIMEOUT(r8, 0x10f, 0x82, &(0x7f0000001480), &(0x7f00000014c0)=0x4) write$binfmt_script(r7, &(0x7f0000000200), 0xfffffd9d) munlockall() 8.614107072s ago: executing program 3 (id=776): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00"], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x20000000) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f00000001c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) 8.108663109s ago: executing program 4 (id=778): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f00000026c0)={0x0, 'hsr0\x00', {0x3}, 0x8}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000003640)={0x0, 'hsr0\x00', {0x1}, 0x7}) r2 = creat(&(0x7f0000000600)='./file0\x00', 0x18) pwrite64(r2, 0xfffffffffffffffd, 0x0, 0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x960, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100}, &(0x7f00000000c0), &(0x7f0000000340), &(0x7f0000000000)) select(0x40, &(0x7f0000000680)={0x7, 0x800, 0x80, 0x6, 0xfffffffffffffffb, 0x34, 0x3}, 0x0, &(0x7f0000000700)={0xf, 0x8, 0x40, 0x5, 0x1, 0xac, 0xed6f, 0xe21}, &(0x7f0000000740)={0x0, 0xea60}) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x400) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0xfff, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x100, 0x80, 0x8, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xb, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x41], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f4, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x7, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x4, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x407, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0x403d, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfae, 0x1000, 0xa2, 0x8, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x24], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x9d2, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xfffff7ff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff038}, {0x20, 0xf, 0x0, 0xffffefff}, {0x6}]}, 0x10) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x50}}, 0x4004800) timer_create(0x1, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x4000190, 0xc03e) 7.932017632s ago: executing program 3 (id=780): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) mmap(&(0x7f00008c9000/0x2000)=nil, 0x2000, 0xb635773f06ebbeef, 0x30, r0, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYRES16=0x0, @ANYRES64, @ANYRES16=r1, @ANYRESDEC, @ANYRESHEX=r1, @ANYRES64=r2, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000240)=ANY=[@ANYRESHEX=r1], 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000001080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ftruncate(r2, 0x9) capset(&(0x7f0000000440)={0x19980330}, &(0x7f0000000080)={0xa, 0xe30, 0x4, 0x80000000, 0x4, 0x8}) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000000224e0000", 0x58}], 0x1) fcntl$addseals(r3, 0x409, 0x3) 6.475714185s ago: executing program 0 (id=787): r0 = socket(0x2b, 0x1, 0x1) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x215000, 0x800, 0x0, 0x1}, 0x20) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260"], 0x0) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_current(r2, &(0x7f0000000440)=ANY=[@ANYBLOB='changeprofile ://&'], 0x17) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f0000004b80)=[{{&(0x7f0000000000)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, &(0x7f0000000180)=""/126, 0x7e}, 0x7fff}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)=""/69, 0x45}], 0x1, &(0x7f0000000340)=""/182, 0xb6}, 0xf8de}, {{&(0x7f0000000400)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000480)=""/195, 0xc3}, {&(0x7f0000000580)=""/169, 0xa9}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f00000007c0)=""/166, 0xa6}, {&(0x7f0000000880)=""/93, 0x5d}, {&(0x7f0000000900)=""/130, 0x82}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000000a00)=""/163, 0xa3}, {&(0x7f0000000ac0)=""/246, 0xf6}], 0x9, &(0x7f0000000c80)=""/18, 0x12}, 0x3ff}, {{&(0x7f0000000cc0)=@pppoe, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000d40)=""/143, 0x8f}, {&(0x7f0000000e00)=""/184, 0xb8}], 0x2, &(0x7f0000000f00)=""/31, 0x1f}, 0x152}, {{&(0x7f0000000f40)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000fc0)=""/44, 0x2c}, {&(0x7f0000001000)=""/150, 0x96}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f00000030c0)=""/59, 0x3b}, {&(0x7f0000003100)=""/188, 0xbc}], 0x6, &(0x7f0000003240)=""/253, 0xfd}, 0x81}, {{&(0x7f0000003340)=@ethernet={0x0, @random}, 0x80, &(0x7f0000003640)=[{&(0x7f00000033c0)=""/146, 0x92}, {&(0x7f0000003480)=""/15, 0xf}, {&(0x7f00000034c0)=""/198, 0xc6}, {&(0x7f00000035c0)=""/65, 0x41}], 0x4, &(0x7f0000003680)=""/48, 0x30}, 0x4}, {{&(0x7f00000036c0)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000003840)=[{&(0x7f0000003740)=""/154, 0x9a}, {&(0x7f0000003800)=""/4, 0x4}], 0x2, &(0x7f0000003880)=""/111, 0x6f}, 0x2}, {{&(0x7f0000003900)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000004ac0)=[{&(0x7f0000003980)=""/149, 0x95}, {&(0x7f0000003a40)=""/45, 0x2d}, {&(0x7f0000003a80)=""/4096, 0x1000}, {&(0x7f0000004a80)=""/58, 0x3a}], 0x4, &(0x7f0000004b00)=""/73, 0x49}, 0x3ff}], 0x8, 0x2, 0x0) sendmmsg$unix(r4, &(0x7f000000d6c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x20000000}}], 0x1, 0x4018080) (async) r5 = userfaultfd(0x80800) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f0000000740)={{&(0x7f0000426000/0x4000)=nil, 0x4000}}) 4.951326895s ago: executing program 4 (id=791): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r4 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001440)=@newlink={0xd4, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r7, 0x2b24d, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x98, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x715, 0xdd58}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x647, 0x7f}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xfffffffa, 0x80}}]}, {0x54, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x4847, 0x3}}, @IFLA_VF_RATE={0x10, 0x6, {0x7, 0x9783, 0x1000}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x6, 0x80000000}}, @IFLA_VF_MAC={0x28, 0x1, {0x8, @multicast}}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x6}]}, 0xd4}, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) msgget$private(0x0, 0x4a0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) mmap$IORING_OFF_SQ_RING(0xfffffffffffff001, 0xfffffffc, 0x2000004, 0x20010, r0, 0x0) 3.785324331s ago: executing program 4 (id=796): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000000)=0x1) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x6, 0x3, 0x100}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1, 0x7, 0x6, 0x9, 0x0, r5, 0x100}, 0x50) r7 = inotify_init() r8 = syz_open_dev$video4linux(&(0x7f0000000200), 0x2000000000, 0x29b040) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0), 0x2800, 0x0) ioctl$RTC_UIE_OFF(r9, 0x7004) poll(&(0x7f0000000280)=[{r7, 0xe409}, {r8, 0x2301}, {0xffffffffffffffff, 0x1010}], 0x3, 0x1) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r6, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r10}, &(0x7f0000000880), &(0x7f00000008c0)=r5}, 0x20) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x34, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x34) r11 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) r12 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0xe8, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9a4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff01}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffcb90}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffff368}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9635}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffff29}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4048001}, 0x4000800) setsockopt$XDP_RX_RING(r12, 0x11b, 0x2, &(0x7f00000000c0)=0x200, 0x4) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000000980)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000940)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x5}]}}, @NFT_MSG_DELRULE={0xd8, 0x8, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0xb1, 0x7, 0x1, 0x0, "400fb39e3b6d7552d471cdf3ed5154d206d65a8c67ca5f84c679a876c6d55a87bfa11ce927b6aeae50240ed6cfc299a888c404dd99bab775fdc340d795dfd7abaa904e32823054a0e427394c9599a72fb226a8b36ab54975fbe92f85b890a99e4e6f723d7cf67b0cbe0f11ec2d3680b57debf24192dceebfb7786d5c648a9b4fdbb78092cb9daec22102a0dacef8e27e0dc144a7c90885a49e26e72c47b8dbd53e2d35850dc3179969e5b6bfb0"}]}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x7}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWCHAIN={0x108, 0x3, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_CHAIN_USERDATA={0x17, 0xc, "041857d48b39f91d563bb8de56cac22ea65f09"}, @NFTA_CHAIN_USERDATA={0xa, 0xc, "0f8034c492d5"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x40, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x14756114}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x396a4259}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x748166ed}, @NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3d5fb09f}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_HOOK={0x40, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd418772}, @NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x67a444da}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6e7687e3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x507c07bb}]}, @NFTA_CHAIN_HOOK={0x44, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9a84e44}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x488b7756}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x260}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r12, 0x0) r14 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r11, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r14}) 3.724784261s ago: executing program 3 (id=797): r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x80000) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000100)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)=""/147, 0x93}, {&(0x7f0000000240)=""/136, 0x88}], 0x2, &(0x7f0000000340)=""/138, 0x8a}, 0x40) r1 = socket(0x10, 0x3, 0x9) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffffffffffff) 3.412615252s ago: executing program 0 (id=798): unshare(0x22020400) socket$netlink(0x10, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x3f7, 0x13500, 0x0, 0x163}, &(0x7f0000000240), &(0x7f0000001880), &(0x7f0000000000)) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x300000a, 0x20010, r0, 0xcf6a2000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000340)=0x800000100000002) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x10010, r1, 0x17e63000) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000003c0)={0x28, 0x0, 0x0, r0, 0x0, 0x0, 0x8, 0x2, 0x1}, 0x1) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x4, 0x0, 0xffffffff}, 0x7, 0x0, &(0x7f0000000040), 0x5, 0x0}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x8044) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, 0x0) 3.020457651s ago: executing program 1 (id=800): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000080)={0x0, 0x2f, 0x28, {0x28, 0x1, "f70ba3810b0000000000000000cb4fdca0560fb30d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) sendmsg$sock(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x8820) close(0x3) 2.903215103s ago: executing program 2 (id=801): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) bind$packet(r0, &(0x7f0000000140)={0x11, 0x1a, r1, 0x1, 0x1b, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @broadcast}, 0x10) r3 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)={0x2002}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x20) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x3, 0x3, 0x7f, 0x0, 0xffffffff, 0x3}, [@TCA_NETEM_CORR={0x10, 0x1, {0xffff, 0x7fffffff, 0x1}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) symlinkat(&(0x7f0000000080)='./file0\x00', r4, &(0x7f0000000140)='./file0\x00') openat(r4, &(0x7f00000000c0)='./file0\x00', 0x10f602, 0x52abe154ad664fa4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, r10, 0x1, 0x70bd2b, 0x25dfdbfc, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x8081}, 0x4000000) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0x8, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x2, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x14}, 0x4000) r13 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtfilter={0xa8, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0xb, 0x8}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x4, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x1ad, 0xd5}}, @TCA_U32_ACT={0x64, 0x7, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x100000, 0x5, 0x4, 0x6, 0x1}, 0x5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x81}, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xcc, r10, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x44) 2.777792784s ago: executing program 3 (id=802): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000190000000000000000000000d78b000000000000950000000000000059b7eb3cede80f212a81fa5e9c66c81b81a4481de43b09d585976a2a567c003e6e678d8a86ce984cb92bf7795acf5f8dfbe71b4aa6f82e23009b491d7a64c2f06c1189ae00"/113], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') getdents64(r0, 0x0, 0x0) (async, rerun: 64) r1 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 64) recvmsg(0xffffffffffffffff, 0x0, 0x2120) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="880000001c000b07000000000000002502000000", @ANYRES32, @ANYBLOB="8000200514000100fe88000000000000000000000000000108"], 0x88}}, 0x0) (async) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'\x00', &(0x7f0000000140)=@ethtool_cmd={0x11, 0x80000000, 0x20000009, 0x9, 0xf, 0xb, 0x5, 0xfc, 0x0, 0xff, 0x0, 0x2003, 0x6, 0xff, 0x2}}) (async, rerun: 32) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') (rerun: 32) preadv(r3, &(0x7f0000000840)=[{&(0x7f0000000340)=""/211, 0xd3}], 0x1, 0x100, 0x2) (async) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000880)=""/8192, 0x2000, 0x0, 0x0, 0x3}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) (async, rerun: 64) r4 = socket(0x1e, 0x3, 0x20000100) (rerun: 64) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff0100000001000c005600000025000000190004000400400800040000000000000000", 0x32}], 0x1) (async) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x2, r7, 0x0, 0x0}, 0x10) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r10 = dup(r9) write$binfmt_elf32(r10, &(0x7f0000000700)=ANY=[@ANYBLOB="7f454c464a0304035a93febcf18a83513786947fb05eff0700530003000400e2020000007fab957e00003e03000038000000d6000000977000007e0320000000070008000700"/86], 0x38) execveat(r10, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={r3, 0x20, &(0x7f0000000540)={&(0x7f00000001c0)=""/159, 0x9f, 0x0, &(0x7f0000000440)=""/236, 0xec}}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r10, r0, 0x31, 0x0, @val=@target_btf_id=r11}, 0x14) ptrace(0x10, r8) 2.527889937s ago: executing program 2 (id=803): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f00000001c0)={0x0, 0x7ff, 0x2}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r6, 0x1, 0x31, &(0x7f0000001600), 0x4) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519dc00fb1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x12) ppoll(&(0x7f0000000280)=[{r8}], 0x1, 0x0, 0x0, 0x0) close(r2) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c000000050a010100000000000000000a00000a0900010073797a31000000000c000240000000000000000120000000080a010100000000000000000a000009090001007379923f0bc1f27a3100000000140000001100010000000000000000000000000a"], 0x74}, 0x1, 0x0, 0x0, 0xb0}, 0x20008890) 2.415653939s ago: executing program 0 (id=804): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10, 0x10000, 0x80000001, 0x3, 0x3, 0x80000000, 0x5, 0xbf, 0x4, 0xf4, 0xffffffff, 0x7, 0x1, 0x81, 0x80000000, 0x81, 0x6, 0x0, 0x7, 0x9cc7, 0xfff, 0xff, 0x9, 0x5, 0x7f, 0x9, 0x3, 0x3, 0x4, 0x9, 0x0, 0x2, 0x1, 0x6, 0xffffff09, 0x4, 0x3, 0x8, 0x0, 0x1, 0xd, 0x40, 0x0, 0x0, 0x7fffffff, 0x9, 0x101, 0x107, 0x263, 0x98, 0x3, 0x80000001, 0x6, 0x4, 0xfffffffa, 0x5, 0x0, 0x9, 0x4, 0x5, 0x8, 0x0, 0x8, 0xfffffe01, 0x7d4, 0x0, 0x1389, 0x53b7, 0xd18, 0x6, 0x7, 0x56, 0x645ec805, 0x4, 0x3, 0x3, 0x5007, 0x3, 0x2, 0x8a92, 0x4, 0x7, 0x4, 0xbbb, 0x0, 0x3, 0x9, 0x271, 0xffffe819, 0xa, 0xe8, 0x3, 0x200, 0x8001, 0x3, 0x87d7, 0x9, 0x851, 0x2, 0x8, 0x3, 0x7, 0x8, 0x6f47, 0x3, 0x5c90, 0x4, 0x1ff, 0x0, 0xf02, 0x1e, 0x57e7, 0x5adaaf8c, 0x3f8, 0x4, 0x79, 0x7, 0x5, 0x4, 0x2, 0x2, 0x1, 0xa, 0x3ff, 0x85f, 0x8, 0x2, 0x3, 0x2, 0x25a, 0x4, 0x3, 0x0, 0xfffffff8, 0x8001, 0xffff6a70, 0x6, 0x5, 0x2, 0x8, 0x3, 0x5, 0x5, 0x1, 0xffffffc0, 0x9, 0x3ff, 0x5, 0x9, 0x7, 0x7, 0xf, 0xfffffff7, 0x8, 0x7fff, 0x0, 0x2e7, 0x3ff, 0x8, 0x450, 0x7, 0x7fffffff, 0x5, 0x5, 0x5, 0x2, 0x1, 0x1000, 0x5, 0x3, 0x4, 0x7, 0x2, 0x0, 0x0, 0x1, 0x80, 0x6670, 0x5, 0x16d, 0x2, 0x4, 0x9, 0x200, 0xc, 0x9, 0x13f9, 0x9, 0x0, 0x5, 0x7, 0x45, 0x80000001, 0xb, 0x3, 0x2, 0x0, 0x6, 0x8000, 0x4, 0x3, 0x6, 0x2, 0x7, 0xa262, 0x1, 0xc, 0x6, 0x7, 0x400, 0x2, 0x401, 0x8, 0x205, 0xa, 0x1000, 0x1, 0x58ba, 0x5, 0x42bc, 0x5, 0x120, 0x3, 0x5, 0x5, 0x6f1da0e, 0x80000001, 0x2, 0x8, 0x4, 0x696, 0x7, 0x8, 0x2, 0x1e, 0x3, 0x0, 0x8, 0x2, 0x8f0d, 0x4, 0xa, 0xfffffff6, 0xfffffff7, 0x6, 0x6, 0x1, 0x80, 0x5, 0x0, 0x6, 0x8e, 0xb5d, 0x9, 0xfffffd49]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc2, 0x10000000, 0x859, 0xaedb, 0x7, {0x7, 0x0, 0xd, 0x8, 0x4, 0xfa6}, {0x8, 0x0, 0x7ff, 0xf95b, 0x2, 0x280000}, 0x10001, 0xfffffffd, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4009, 0x0, 0xfffffffe, 0x10, 0x8, 0x0, 0x9, 0x0, 0x7, 0x8, 0x4d8b, 0x9, 0x40, 0x1, 0x0, 0x81, 0x0, 0xf, 0x0, 0x0, 0x5, 0x8, 0x8000, 0x4, 0x9, 0x9, 0x81, 0xa00000, 0xe, 0x4, 0x80000000, 0x6, 0x8, 0x3, 0x2, 0x7, 0x7, 0x1, 0x152, 0x8, 0x200, 0x7, 0x5, 0x69, 0x84, 0x3ff, 0x0, 0xf0e7, 0x7, 0x487, 0x4, 0x8, 0x7fffffff, 0x3ff, 0x7fffffff, 0x0, 0xbd, 0x6, 0x0, 0xa, 0x10001, 0x2, 0x43, 0x1, 0x9, 0xffffff00, 0x6, 0x333f, 0x7, 0xc8a, 0x6, 0x1, 0x10, 0x7f, 0x7, 0x8, 0x100, 0x8003, 0x8, 0x4, 0x9, 0x81, 0x5, 0x7, 0x4, 0x0, 0x7f, 0x9, 0x3, 0x4, 0x4, 0x2, 0x9, 0x2, 0xfffffff8, 0x4, 0x4e, 0x3, 0x4, 0x1ff, 0x4, 0x4, 0x5b3c, 0xfffffff7, 0x6d, 0x8001, 0x10000, 0x1, 0x2c29, 0x7, 0x4, 0x0, 0x5, 0x0, 0xfffffffb, 0xea, 0x0, 0x9, 0x40, 0xfffffffa, 0xffffff00, 0x1, 0x8001, 0xda, 0x7f, 0x4003, 0x8566, 0x2f, 0x9, 0xfffffff9, 0xb, 0xa97e, 0x8, 0x9, 0x2b36, 0x4, 0x4, 0x6, 0x2, 0x7f, 0x5, 0x1ff, 0x7f, 0x101, 0xfffffffa, 0xd, 0x6, 0x0, 0xf, 0x9, 0xb, 0x7f, 0x1, 0x10, 0x0, 0x5, 0x1038, 0x9, 0x5, 0xf0, 0x200, 0x0, 0x6, 0x80000000, 0x5, 0xffffffff, 0x6, 0x2, 0x3ff, 0x3, 0x7ff, 0x6, 0x1, 0xd, 0x3, 0x632, 0x2, 0xc4, 0xffff, 0x8, 0x0, 0x9, 0x3, 0x8, 0x5, 0x7, 0x3, 0x10001, 0xd, 0xd, 0x7, 0x7, 0xf2, 0x5, 0x600000, 0x7, 0x4, 0xfffffff7, 0x1, 0x3, 0x33fbb166, 0x9, 0x3, 0x4, 0x8, 0x4, 0xc, 0x7fffffff, 0x400, 0x9, 0x8, 0x1, 0x2e5c, 0x5, 0x7, 0x5, 0x1, 0x7fff, 0x80000001, 0x8c, 0xffffffc0, 0x80000000, 0x7, 0x7d3, 0xfff0, 0x1, 0x8, 0xb, 0x7ff, 0x4, 0x0, 0x6, 0x4, 0x5, 0x6, 0xd143, 0x4, 0x3a6, 0x7, 0x6, 0x7, 0x1000, 0x1, 0x4, 0x2b, 0x7, 0xa, 0x6, 0xdfb, 0x30d, 0xfff, 0x1, 0x3ff, 0x7ff, 0xfffffffd, 0x7]}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x28, r9, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x5f}, @void, @val={0xc, 0x99, {0xb, 0x6d}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x4000881) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x204001, 0x0) close(r10) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$kcm(0x11, 0x3, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10, 0x10000, 0x80000001, 0x3, 0x3, 0x80000000, 0x5, 0xbf, 0x4, 0xf4, 0xffffffff, 0x7, 0x1, 0x81, 0x80000000, 0x81, 0x6, 0x0, 0x7, 0x9cc7, 0xfff, 0xff, 0x9, 0x5, 0x7f, 0x9, 0x3, 0x3, 0x4, 0x9, 0x0, 0x2, 0x1, 0x6, 0xffffff09, 0x4, 0x3, 0x8, 0x0, 0x1, 0xd, 0x40, 0x0, 0x0, 0x7fffffff, 0x9, 0x101, 0x107, 0x263, 0x98, 0x3, 0x80000001, 0x6, 0x4, 0xfffffffa, 0x5, 0x0, 0x9, 0x4, 0x5, 0x8, 0x0, 0x8, 0xfffffe01, 0x7d4, 0x0, 0x1389, 0x53b7, 0xd18, 0x6, 0x7, 0x56, 0x645ec805, 0x4, 0x3, 0x3, 0x5007, 0x3, 0x2, 0x8a92, 0x4, 0x7, 0x4, 0xbbb, 0x0, 0x3, 0x9, 0x271, 0xffffe819, 0xa, 0xe8, 0x3, 0x200, 0x8001, 0x3, 0x87d7, 0x9, 0x851, 0x2, 0x8, 0x3, 0x7, 0x8, 0x6f47, 0x3, 0x5c90, 0x4, 0x1ff, 0x0, 0xf02, 0x1e, 0x57e7, 0x5adaaf8c, 0x3f8, 0x4, 0x79, 0x7, 0x5, 0x4, 0x2, 0x2, 0x1, 0xa, 0x3ff, 0x85f, 0x8, 0x2, 0x3, 0x2, 0x25a, 0x4, 0x3, 0x0, 0xfffffff8, 0x8001, 0xffff6a70, 0x6, 0x5, 0x2, 0x8, 0x3, 0x5, 0x5, 0x1, 0xffffffc0, 0x9, 0x3ff, 0x5, 0x9, 0x7, 0x7, 0xf, 0xfffffff7, 0x8, 0x7fff, 0x0, 0x2e7, 0x3ff, 0x8, 0x450, 0x7, 0x7fffffff, 0x5, 0x5, 0x5, 0x2, 0x1, 0x1000, 0x5, 0x3, 0x4, 0x7, 0x2, 0x0, 0x0, 0x1, 0x80, 0x6670, 0x5, 0x16d, 0x2, 0x4, 0x9, 0x200, 0xc, 0x9, 0x13f9, 0x9, 0x0, 0x5, 0x7, 0x45, 0x80000001, 0xb, 0x3, 0x2, 0x0, 0x6, 0x8000, 0x4, 0x3, 0x6, 0x2, 0x7, 0xa262, 0x1, 0xc, 0x6, 0x7, 0x400, 0x2, 0x401, 0x8, 0x205, 0xa, 0x1000, 0x1, 0x58ba, 0x5, 0x42bc, 0x5, 0x120, 0x3, 0x5, 0x5, 0x6f1da0e, 0x80000001, 0x2, 0x8, 0x4, 0x696, 0x7, 0x8, 0x2, 0x1e, 0x3, 0x0, 0x8, 0x2, 0x8f0d, 0x4, 0xa, 0xfffffff6, 0xfffffff7, 0x6, 0x6, 0x1, 0x80, 0x5, 0x0, 0x6, 0x8e, 0xb5d, 0x9, 0xfffffd49]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc2, 0x10000000, 0x859, 0xaedb, 0x7, {0x7, 0x0, 0xd, 0x8, 0x4, 0xfa6}, {0x8, 0x0, 0x7ff, 0xf95b, 0x2, 0x280000}, 0x10001, 0xfffffffd, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4009, 0x0, 0xfffffffe, 0x10, 0x8, 0x0, 0x9, 0x0, 0x7, 0x8, 0x4d8b, 0x9, 0x40, 0x1, 0x0, 0x81, 0x0, 0xf, 0x0, 0x0, 0x5, 0x8, 0x8000, 0x4, 0x9, 0x9, 0x81, 0xa00000, 0xe, 0x4, 0x80000000, 0x6, 0x8, 0x3, 0x2, 0x7, 0x7, 0x1, 0x152, 0x8, 0x200, 0x7, 0x5, 0x69, 0x84, 0x3ff, 0x0, 0xf0e7, 0x7, 0x487, 0x4, 0x8, 0x7fffffff, 0x3ff, 0x7fffffff, 0x0, 0xbd, 0x6, 0x0, 0xa, 0x10001, 0x2, 0x43, 0x1, 0x9, 0xffffff00, 0x6, 0x333f, 0x7, 0xc8a, 0x6, 0x1, 0x10, 0x7f, 0x7, 0x8, 0x100, 0x8003, 0x8, 0x4, 0x9, 0x81, 0x5, 0x7, 0x4, 0x0, 0x7f, 0x9, 0x3, 0x4, 0x4, 0x2, 0x9, 0x2, 0xfffffff8, 0x4, 0x4e, 0x3, 0x4, 0x1ff, 0x4, 0x4, 0x5b3c, 0xfffffff7, 0x6d, 0x8001, 0x10000, 0x1, 0x2c29, 0x7, 0x4, 0x0, 0x5, 0x0, 0xfffffffb, 0xea, 0x0, 0x9, 0x40, 0xfffffffa, 0xffffff00, 0x1, 0x8001, 0xda, 0x7f, 0x4003, 0x8566, 0x2f, 0x9, 0xfffffff9, 0xb, 0xa97e, 0x8, 0x9, 0x2b36, 0x4, 0x4, 0x6, 0x2, 0x7f, 0x5, 0x1ff, 0x7f, 0x101, 0xfffffffa, 0xd, 0x6, 0x0, 0xf, 0x9, 0xb, 0x7f, 0x1, 0x10, 0x0, 0x5, 0x1038, 0x9, 0x5, 0xf0, 0x200, 0x0, 0x6, 0x80000000, 0x5, 0xffffffff, 0x6, 0x2, 0x3ff, 0x3, 0x7ff, 0x6, 0x1, 0xd, 0x3, 0x632, 0x2, 0xc4, 0xffff, 0x8, 0x0, 0x9, 0x3, 0x8, 0x5, 0x7, 0x3, 0x10001, 0xd, 0xd, 0x7, 0x7, 0xf2, 0x5, 0x600000, 0x7, 0x4, 0xfffffff7, 0x1, 0x3, 0x33fbb166, 0x9, 0x3, 0x4, 0x8, 0x4, 0xc, 0x7fffffff, 0x400, 0x9, 0x8, 0x1, 0x2e5c, 0x5, 0x7, 0x5, 0x1, 0x7fff, 0x80000001, 0x8c, 0xffffffc0, 0x80000000, 0x7, 0x7d3, 0xfff0, 0x1, 0x8, 0xb, 0x7ff, 0x4, 0x0, 0x6, 0x4, 0x5, 0x6, 0xd143, 0x4, 0x3a6, 0x7, 0x6, 0x7, 0x1000, 0x1, 0x4, 0x2b, 0x7, 0xa, 0x6, 0xdfb, 0x30d, 0xfff, 0x1, 0x3ff, 0x7ff, 0xfffffffd, 0x7]}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) (async) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x28, r9, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x5f}, @void, @val={0xc, 0x99, {0xb, 0x6d}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x4000881) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x204001, 0x0) (async) close(r10) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) (async) 2.333912571s ago: executing program 3 (id=805): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x1000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'vlan0\x00', 0x20}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2aa000, 0x0) close(r5) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r4) (async) close(0x4) 2.144474867s ago: executing program 0 (id=806): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r4 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001440)=@newlink={0xd4, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r7, 0x2b24d, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x98, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x715, 0xdd58}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x647, 0x7f}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xfffffffa, 0x80}}]}, {0x54, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x4847, 0x3}}, @IFLA_VF_RATE={0x10, 0x6, {0x7, 0x9783, 0x1000}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x6, 0x80000000}}, @IFLA_VF_MAC={0x28, 0x1, {0x8, @multicast}}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x6}]}, 0xd4}, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) msgget$private(0x0, 0x4a0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) mmap$IORING_OFF_SQ_RING(0xfffffffffffff001, 0xfffffffc, 0x2000004, 0x20010, r0, 0x0) 2.133317845s ago: executing program 2 (id=807): r0 = syz_open_dev$vim2m(&(0x7f0000000e40), 0x8, 0x2) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000540)={r2, @in={{0x2, 0x4e24, @private=0xa010101}}}, 0x84) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x27, 0x0, 0x3, "a677c16c5a000000000000000000000000000000000010000000004000", 0x31324d59}) 2.050777375s ago: executing program 3 (id=808): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f0000000100)={0x30, r1, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xd, 0x39}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4f0}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x609, 0x4, 0x0, &(0x7f0000000140)="dd800000", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) syz_usb_connect$midi(0x5, 0xc9, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0xe41, 0x4151, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb7, 0x1, 0x1, 0xd3, 0x40, 0x40, "", {{{0x9, 0x4, 0x0, 0x0, 0x7, 0x1, 0x3, 0x0, 0x3, [@midi_out_jack={0x17, 0x24, 0x3, 0x2, 0x2, 0x8, [{0x85, 0x2}, {0x3, 0xff}, {0x4, 0x2}, {0x7}, {0x62, 0xf5}, {0x7f, 0x4}, {0x5, 0x9}, {0x0, 0xff}], 0x4}], [{{0x9, 0x5, 0x0, 0x0, 0x20, 0xb, 0x3, 0xa, {0x11, 0x25, 0x1, 0xd, "cb33ed80809c4364a09e356e56"}}}, {{0x9, 0x5, 0x5, 0x3, 0x20, 0x8, 0x4, 0x3, {0xf, 0x25, 0x1, 0xb, "f732a54c4f452758535d8a"}}}, {{0x9, 0x5, 0x4, 0x10, 0x28, 0x0, 0x5, 0x5, {0x8, 0x25, 0x1, 0x4, "ff446c71"}}}, {{0x9, 0x5, 0x8, 0xc, 0x10, 0x8, 0x7, 0xcf, {0x8, 0x25, 0x1, 0x4, "867155d1"}}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x36, 0x5, 0x1, {0x6, 0x25, 0x1, 0x2, "bad6"}}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0xcf, 0xd, 0x4, {0x6, 0x25, 0x1, 0x2, '\a$'}}}, {{0x9, 0x5, 0x4, 0x4, 0x8, 0x8, 0x9b, 0x8, {0x13, 0x25, 0x1, 0xf, "8033d8095bf2c0735c71992e024e7b"}}}]}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x0, 0x2, 0x6, 0x7, 0x0, 0x8}, 0x29, &(0x7f00000002c0)={0x5, 0xf, 0x29, 0x4, [@wireless={0xb, 0x10, 0x1, 0x4, 0x6, 0x8, 0x8, 0x4, 0x5}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x6, 0x0, 0x1000, 0xff00, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xfa, 0x6, 0xff}]}, 0x9, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x423}}, {0xc5, &(0x7f00000003c0)=@string={0xc5, 0x3, "d9da886d35fc13577345b007a4159afdcd9298e3714b5633277632418095eeac9f51bf8a55d2bf8456c6cc3062a281e0924d0c7f4cc07c20068fb0a5895857c825ad3b8ccfaf58d09e2c6c38710bcaff7cb44bd910c243eb720a7b6914e98d8ce8cb73dee1d07ba5d2c6db0c2628f58df22c4967ced4ffedeae319643b0a7414c4b9109f49955cf235ea01cecc69ef44edc9e144c31fb3cefde92e46da171e48386cdcc7738beda0a284c24cf0276451bf17a4c173bb55466df8118479e8e3ea277ebf"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x843}}, {0x3a, &(0x7f0000000500)=@string={0x3a, 0x3, "2fd4d028d616f247d2afcd93ca1fc5780f88b1747f5d1d9098e078a32c7d3019e4745a82f11ac6d0e56f29d766e48ca62544032cc602cb8d"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x1001}}, {0x2c, &(0x7f0000000580)=@string={0x2c, 0x3, "1920e439ce0a1905a53e5c72c96f787a325c29f220a2365a6cb33286ed06c0212d3d936755418914da5c"}}, {0xbf, &(0x7f00000005c0)=@string={0xbf, 0x3, "4d60962d3a332bc7668050af2be25c584f97030c36f180bb9a0fca17e1dbb56a5dcfdedc83859e3eb01c7623a63caa0536a2a1db43d5913b8964ef996664df4dd0edffaf4d6701c43ab74f95a9b35144073ac03500c3304a654be3b8cb9e27799f3aae15fc554b7c01c05885403a4c66b1f6ed10a07ce7e06016e034e51f29b2cd63382459182ef913cbd6afe2c7011800f13699b99dd65d7e180491686a10211b9dbeb3aac9803a9e65a06479104ea8df0f84af8f4ac7e9b3712167c5"}}]}) 1.79939065s ago: executing program 4 (id=809): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, 0x0, 0x0, 0x0, 0x25dfdbfb}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000340)={0xa, 0x4e23, 0x1000, @local, 0x879}, 0x1c) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x5, 0x6, "b7a34d", 0x8, 0x0, 0x0, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, {[@routing={0x6, 0x0, 0x0, 0x7}]}}}}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd29000084"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000006c0), 0x10020005, r5}, 0x38) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000088945b406d04b3088eca0000000109021200017f00c0000904"], 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=ANY=[@ANYBLOB="24010000180001000000000000000000ac141400000000000000000000000000fe800000000000000000000006"], 0x124}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r9 = io_uring_setup(0x6a7, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x1, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x60, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x64}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6vti={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x14, 0x4, @mcast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xb}]]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x60}, 0x1, 0x0, 0x0, 0x600}, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x408}, {r1, 0x50}], 0x2, &(0x7f0000000180), &(0x7f0000000340)={[0x9]}, 0x8) 1.166943505s ago: executing program 2 (id=810): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_usb_connect$midi(0x2, 0x9c, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x4b4, 0x9320, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x1, 0x1, 0x5, 0xd0, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x20, 0x3, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x80, 0x40}, @ms_header={0x7, 0x24, 0x1, 0x9, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x4, 0x9}, @ms_header={0x7, 0x24, 0x1, 0x7, 0x7}, @midi_out_jack={0xb, 0x24, 0x3, 0x2, 0x96, 0x2, [{0x9, 0x1}, {0x3f, 0x9}], 0x8}, @ms_header={0x7, 0x24, 0x1, 0x180, 0x7}], [{{0x9, 0x5, 0x6, 0x10, 0x20, 0x2, 0x8, 0x7f, {0x4}}}, {{0x9, 0x5, 0x2, 0x1f, 0x40, 0x6, 0x9, 0x7f, {0x5, 0x25, 0x1, 0x1, '^'}}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x5, 0x8, 0x40, {0xb, 0x25, 0x1, 0x7, "d9edb64032b42a"}}}, {{0x9, 0x5, 0x2, 0x2, 0x200, 0x8, 0x8, 0x6, {0x5, 0x25, 0x1, 0x1, "1e"}}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x73, 0x1, 0x3, {0x6, 0x25, 0x1, 0x2, "a273"}}}]}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x300, 0x70, 0x1, 0x1, 0x10, 0xd}, 0x5, &(0x7f0000000540)={0x5, 0xf, 0x5}, 0x1, [{0x4c, &(0x7f0000000580)=@string={0x4c, 0x3, "df6a8e7cf6d06bf8774817155b8260249c0c236ea12a4cbf1b8a5f596f2414c57268709c2783a8ddf9695d30e48abd743ad2cc1a256c21bffd4df19993339787576b83005357e037f031"}}]}) (async) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000ff0100"}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r4, 0x40a0ae49, &(0x7f0000000180)={0x1fe, 0x4, 0x80a0000, 0x2000, &(0x7f0000c08000/0x2000)=nil, 0x4000001000, r5}) (async) ioctl$KVM_SET_USER_MEMORY_REGION2(r4, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x4, 0x5000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x4000000000, r5}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 32) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_create(0x0, 0x0, &(0x7f0000000240)=0x0) timer_settime(r9, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(r8, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_settime(r8, 0x1, &(0x7f0000000200)={{}, {0x0, 0x3938700}}, 0x0) (async) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)={0x14, r7, 0x605, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x24) 1.165775292s ago: executing program 1 (id=811): r0 = socket(0x2b, 0x1, 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async) r3 = socket(0x11, 0x2, 0x0) bind$packet(r3, &(0x7f0000000500)={0x11, 0x0, r2, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14) (async) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x450, 0x0, 0x1f8, 0xffffffff, 0x2a0, 0x2a0, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, &(0x7f0000000000), {[{{@ip={@remote, @dev={0xac, 0x14, 0x14, 0xe}, 0xffffffff, 0xff000000, 'bond_slave_0\x00', 'dvmrp1\x00', {}, {}, 0x89, 0x3, 0x40}, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4, 0x1, 0x3, 0x5], 0x3}}}, @common=@set={{0x40}, {{0x4, [0x5, 0x0, 0x0, 0x5, 0x4, 0x7], 0x3, 0x2}}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x30, @local, @multicast1, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="70cffd116f3b", 0xfff, 0x2, [0x0, 0x18, 0xd, 0x36, 0x11, 0x2e, 0x7, 0x11, 0x37, 0x3b, 0x2b, 0x32, 0x7, 0x13, 0x27, 0x3], 0x2, 0xffffffff, 0xd7b}}}, {{@ip={@private=0xa010102, @local, 0xffffffff, 0xa5b032d5430c32a7, 'ip_vti0\x00', 'ip6gretap0\x00', {}, {0xff}, 0x2, 0x1, 0x8}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x4, @loopback, @multicast1, @icmp_id=0x65, @gre_key=0x9}}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@addrtype={{0x30}, {0x240, 0x4, 0x0, 0x1}}, @common=@set={{0x40}, {{0xffffffffffffffff, [0x6, 0x5, 0x0, 0x2, 0x6, 0x2], 0x3, 0x4}}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xc, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @gre_key=0xfff, @gre_key=0x9}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) (async, rerun: 32) r9 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 32) r10 = socket$kcm(0x11, 0x3, 0x0) (async) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10, 0x10000, 0x80000001, 0x3, 0x3, 0x80000000, 0x5, 0xbf, 0x4, 0xf4, 0xffffffff, 0x7, 0x1, 0x81, 0x80000000, 0x81, 0x6, 0x0, 0x7, 0x9cc7, 0xfff, 0xff, 0x9, 0x9, 0x7f, 0x9, 0x3, 0x3, 0x4, 0x9, 0x0, 0x2, 0x1, 0x6, 0xffffff09, 0x4, 0x3, 0x8, 0x0, 0x1, 0xd, 0x40, 0x0, 0x0, 0x7fffffff, 0x9, 0x101, 0x107, 0x263, 0x98, 0x3, 0x80000001, 0x6, 0x1, 0xfffffffa, 0x5, 0x0, 0x9, 0x4, 0x5, 0x8, 0x0, 0x8, 0xfffffe01, 0x7d4, 0x0, 0x1389, 0x53b7, 0xd18, 0x6, 0x7, 0x56, 0x645ec805, 0x4, 0x3, 0x3, 0x5007, 0x3, 0x2, 0x8a92, 0x4, 0x7, 0x4, 0xbbb, 0x0, 0x3, 0x9, 0x271, 0xffffe819, 0xa, 0xe8, 0x3, 0x200, 0x8001, 0x3, 0x87d7, 0x9, 0x851, 0x2, 0x8, 0x3, 0x7, 0x8, 0x6f47, 0x3, 0x5c90, 0x4, 0x1ff, 0x0, 0xf02, 0x1e, 0x57e7, 0x5adaaf8c, 0x3f8, 0x4, 0x79, 0x7, 0x5, 0x4, 0x2, 0x2, 0x1, 0xa, 0x3ff, 0x85f, 0x8, 0x2, 0x3, 0x2, 0x25a, 0x4, 0x3, 0x0, 0xfffffff8, 0x8001, 0xffff6a70, 0x6, 0x5, 0x2, 0x8, 0x3, 0x5, 0x5, 0x1, 0xffffffc0, 0x9, 0x3ff, 0x5, 0x9, 0x7, 0x7, 0xf, 0xfffffff7, 0x8, 0x7fff, 0x0, 0x2e7, 0x3ff, 0x8, 0x450, 0x7, 0x7fffffff, 0x5, 0x5, 0x5, 0x2, 0x1, 0x1000, 0x5, 0x3, 0x4, 0x7, 0x2, 0x0, 0x0, 0x1, 0x80, 0x6670, 0x5, 0x16d, 0x2, 0x4, 0x9, 0x401, 0xc, 0x9, 0x13f9, 0x9, 0x0, 0x5, 0x7, 0x45, 0x80000001, 0xb, 0x3, 0x2, 0x0, 0x6, 0x8000, 0x4, 0x3, 0x6, 0x2, 0x7, 0xa262, 0x1, 0xc, 0x6, 0x7, 0x400, 0x2, 0x401, 0x6, 0x205, 0xa, 0x1000, 0x1, 0x58ba, 0x5, 0x42bc, 0x5, 0x120, 0x3, 0x5, 0x3, 0x6f1da0e, 0x80000001, 0x2, 0x8, 0x4, 0x696, 0x7, 0x8, 0x2, 0x1e, 0x3, 0x0, 0x8, 0x4, 0x8f0d, 0x4, 0xa, 0xfffffff6, 0xfffffff7, 0x6, 0x6, 0x1, 0x80, 0x5, 0x0, 0x6, 0x8e, 0xb5d, 0x9, 0xfffffd4c]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc2, 0x6, 0x859, 0xaedb, 0x7, {0x7, 0x0, 0xd, 0x8, 0x4, 0x8fa6}, {0x8, 0x2, 0x7ff, 0xf95b, 0x4002, 0x280000}, 0x10001, 0xfffffffd, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0xfffffffe, 0x10, 0x8, 0x0, 0x9, 0x0, 0x7, 0x8, 0x4d8b, 0x6, 0x40, 0x1, 0x0, 0x81, 0x0, 0xf, 0x0, 0x0, 0x5, 0x8, 0x8000, 0x4, 0x9, 0x9, 0x81, 0xa00000, 0xe, 0x4, 0x80000000, 0x6, 0xfffffff9, 0x3, 0x2, 0x7, 0x7, 0x1, 0x14f, 0x8, 0x200, 0x7, 0x5, 0x69, 0x84, 0x3ff, 0x0, 0xf0e7, 0x7, 0x487, 0x4, 0xc, 0x7fffffff, 0x3ff, 0x7fffffff, 0x0, 0xbd, 0x6, 0x0, 0xa, 0x10001, 0x2, 0x43, 0x1, 0x7, 0xffffff00, 0x6, 0x333f, 0x7, 0xc8a, 0x6, 0x1, 0x10, 0x7f, 0x2, 0x8, 0x100, 0x8001, 0x8, 0x4, 0x9, 0x81, 0x5, 0x7, 0x4, 0x0, 0x7f, 0x9, 0x3, 0x4, 0x4, 0x2, 0x9, 0x2, 0xfffffff8, 0x4, 0x4e, 0x37d53691, 0x4, 0x1ff, 0xc0000000, 0x4, 0x5b3c, 0xfffffff7, 0x6d, 0x8001, 0x400, 0x1, 0x2c29, 0x7, 0x4, 0x0, 0x5, 0x0, 0xfffffffb, 0xea, 0x0, 0x9, 0x40, 0xfffffffa, 0xffffff00, 0x1, 0x8001, 0xda, 0x7f, 0x3, 0x8566, 0x2f, 0x9, 0xfffffff9, 0xb, 0x1, 0x8, 0x9, 0x82b36, 0x4, 0x4, 0x6, 0x2, 0x7f, 0x5, 0x1ff, 0x7f, 0x101, 0xfffffffa, 0xd, 0x6, 0x0, 0xf, 0x9, 0xb, 0x7f, 0x1, 0x10, 0x0, 0x5, 0x1038, 0x9, 0x5, 0xf0, 0x200, 0x0, 0x6, 0x80000000, 0x5, 0xffffffff, 0x6, 0x2, 0x3ff, 0x3, 0x7ff, 0x8000006, 0x1, 0xd, 0x3, 0x632, 0x2, 0xc4, 0xffff, 0x8, 0x0, 0x9, 0x3, 0x8, 0x5, 0x7, 0x3, 0x10001, 0xd, 0xd, 0x7, 0x7, 0xf2, 0x5, 0x600000, 0x7, 0x4, 0xfffffff7, 0x1, 0x3, 0x33fbb166, 0x9, 0x3, 0x4, 0x8, 0x4, 0xc, 0x7fffffff, 0x400, 0x9, 0x8, 0x1, 0x2e5c, 0x5, 0x7, 0x5, 0x3, 0x7fff, 0x80000001, 0x8c, 0xffffffc0, 0x80000000, 0x7, 0x7d3, 0xfff0, 0x1, 0x8, 0xb, 0x7ff, 0x4, 0x0, 0x6, 0x4, 0x5, 0x6, 0xd143, 0x4, 0x3a6, 0x7, 0x6, 0x7, 0x1000, 0x1, 0x4, 0x2b, 0x7, 0xa, 0x6, 0xdff, 0x30d, 0x1003, 0x1, 0x3ff, 0x7ff, 0xfffffffd, 0x7]}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) (async) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x204001, 0x0) close(r14) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @multicast}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 64) sendmsg$kcm(r10, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r15, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x4601, &(0x7f0000000900)) (async, rerun: 32) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x108) (rerun: 32) 1.105756083s ago: executing program 0 (id=812): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="3b2972c6172ae0602c7961ebb99b0b9c1d73974038e62b064a71f7b73386", 0x1e) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async, rerun: 32) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0xe, 0x0, 0x0) (async, rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x4c8, 0xffffffff, 0x328, 0x100, 0x328, 0xffffffff, 0xffffffff, 0x3f8, 0x3f8, 0x3f8, 0xffffffff, 0x4, &(0x7f00000002c0), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x4, 0x1, 0x7f, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0x200, 0x228, 0x0, {}, [@common=@srh1={{0x90}, {0x33, 0x6, 0x90, 0xf9, 0x9, @loopback, @local, @loopback, [0xff, 0xff, 0xff000000, 0xff], [0xffffff00, 0xffffffff, 0xff], [0xff000000, 0xff, 0x0, 0xffffffff], 0x300a, 0x40}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@rand_addr=0x64010101, [0xdba0ab10777018d3, 0xff000000, 0xff000000], @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, [0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xff], @ipv4=@dev={0xac, 0x14, 0x14, 0x25}, [0xff, 0xffffffff, 0xff000000, 0xffffff00], 0x2, 0x9a, 0x87, 0x4e24, 0x4e22, 0x4e20, 0x4e22, 0x40, 0x9}, 0x41, 0x1050, 0x4e22, 0x4e24, 0x4e22, 0x4e21}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@empty, @private2, [0xffffffff, 0x0, 0x0, 0xff], [0x0, 0xff000000, 0x0, 0xff], 'geneve1\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0x11, 0x3d, 0x0, 0x50}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x528) (rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x92000102}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv6_getmulticast={0x14, 0x3a, 0x100, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4040) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0500feffffff000000000600000008000300", @ANYRES32=r7, @ANYBLOB="080005000a"], 0x24}}, 0x4004800) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.033920182s ago: executing program 1 (id=813): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0, 0x7b, &(0x7f0000000480)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x8a, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0, 0x7b, &(0x7f0000000480)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x8a, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7, 0x64}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7, 0x64}}, './file0\x00'}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) io_setup(0x202, &(0x7f0000000240)=0x0) fstat(r5, 0x0) io_submit(r6, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r5, 0x0, 0x0, 0xf}]) landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x30, 0x0) (async) r7 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x30, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r7, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x50) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000780), 0x10002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x13, &(0x7f0000000100)=@raw=[@ldst={0x2, 0x3a6c499523f89d, 0x2, 0x7, 0x8, 0x20}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @generic={0x9, 0x5, 0x1, 0xfff7, 0x400}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], &(0x7f00000001c0)='GPL\x00', 0x1, 0xc5, &(0x7f0000000200)=""/197, 0x40f00, 0x0, '\x00', r2, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0xa, 0x400, 0x4}, 0x10, r3, r4, 0x0, &(0x7f00000007c0)=[r5, r8, r9], 0x0, 0x10, 0x1}, 0x94) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe) (async) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000040)=0x10001, 0x4, 0x0) (async) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000040)=0x10001, 0x4, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0xff, 0x2}, {0x5371}}}}, 0xf) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0xff, 0x2}, {0x5371}}}}, 0xf) 851.697113ms ago: executing program 1 (id=814): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x3c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000001c0)="5c00000012006bab9a3ff36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb00"/74, 0x4a}, {&(0x7f0000000380)="1ed68483068e7e7b115365cde0c05b774875", 0x12}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="10"], 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x44040) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000880)={&(0x7f00000003c0)={{@hyper, 0x153}, {}, 0x400, "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"}, 0x418, 0x9fd}) sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'ecn\x00'}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x4, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x20008010) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x96, 0x0, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 846.512965ms ago: executing program 2 (id=815): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x84) fcntl$setlease(r0, 0x400, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000a40)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000e00)=ANY=[@ANYBLOB="ec000000210001000040000000000000fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011007f000001000000000000000000000000fc000000000600000000000000000001fc020000000000000000000000000000fe8000000001000000000000000000aa33000000fffffffb020002fd00000000000000000000ffff7f000001fc020000000000000000000000000000fc020000000000000000000000000001fc0200000000000000000000000000003c"], 0xec}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r3, 0x400, 0x2) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f00000000c0)=0x1) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) landlock_create_ruleset(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) gettid() sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1400000010230100000000000000000105000000000000000000000001000000000380180003fd763ae70076657468315f746f5f627269646765000900020073797a30000000000900010073797a3000000200140000201100010000000000000000000300000a"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb1e9a000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x80, 0x3, 0x255, 0x0, r5}, &(0x7f0000000940)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x0, 0x0, 0x800146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0x2, 0x4, 0x0, 0x0}}, 0x0) 788.234909ms ago: executing program 0 (id=816): socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x31) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c1e00000104010000000000000000000200000005000196489412660003000000"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000001040102000000000000000002000000"], 0x14}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000010580)=ANY=[@ANYBLOB="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"], 0x17c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000100001c300000000fcffc75900000400", @ANYBLOB="31200000000000000c002b80080003000200000008001b0000"], 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r5 = socket$inet(0x2, 0x4000000000000006, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240)={0x0, 0x6, 0x6, 0x5, 0xe7}, 0x14) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x4810, &(0x7f0000e68000)={0x2, 0x4e23, @broadcast}, 0x3d) sendto$inet(r5, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58) syz_usb_connect$cdc_ncm(0x2, 0x0, 0x0, 0x0) 552.651702ms ago: executing program 1 (id=817): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_XEN_HVM(r1, 0x4068aea3, &(0x7f0000000300)={0x26, 0x0, 0x50}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x70, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 406.940918ms ago: executing program 1 (id=818): set_mempolicy(0x5, &(0x7f0000000340)=0x4000000ff9, 0xf) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r0, 0x0, 0x0, 0xc17) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000004c0)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, 0x0}) open(0x0, 0x10000, 0x2) (async) r3 = open(0x0, 0x10000, 0x2) flock(r3, 0x1) (async) flock(r3, 0x1) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000200)={0x9, 0x6, 0x4, {0x1, @win={{0x3, 0x8}, 0x3, 0x4226508f, &(0x7f0000000180)={{0x3, 0x8f2c, 0x1, 0x6}, &(0x7f0000000100)={{0xfffffffb, 0x24ff6b62, 0xf, 0x80000001}, &(0x7f00000000c0)={{0x2, 0x81, 0x9dd3, 0x7}, &(0x7f0000000080)={{0x7, 0x7, 0x6, 0x6}}}}}, 0x9, &(0x7f00000001c0), 0x7}}, 0x2}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r2}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r2}) ioctl(r1, 0x3b8e, &(0x7f0000000580)="10") ioctl(r1, 0x3b89, &(0x7f00000005c0)="3000000004000000030000000100000000000000000000000000000000000000000000000000000005") r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) (async) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x8001) (async) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x8001) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup, 0xa, 0x1, 0x94a, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], &(0x7f0000000600)=[0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup, 0xa, 0x1, 0x94a, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], &(0x7f0000000600)=[0x0]}, 0x40) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvfrom(r5, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x408880, 0x0) writev(r5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) accept$inet6(r5, 0x0, &(0x7f00000001c0)) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r7, r6, 0x0, 0x7ffffffd) socket(0x15, 0x80005, 0x0) (async) socket(0x15, 0x80005, 0x0) 169.153468ms ago: executing program 4 (id=819): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)="0fae258275b7e60b216111d11e496708304494316a8aed98f068140d197a7e54", 0x20}], 0x1, &(0x7f0000000500), 0x0, 0x80}], 0x1, 0x41) recvmsg(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0xf500f0ff}, 0x0) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000280)=0x8, 0x4) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000040)={0x22, 0x40000000, 0x0, 0x0}) ioctl(r2, 0x4048aec9, &(0x7f0000000200)="01000000000000000900"/72) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x1000, 0x1000, &(0x7f000000b000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000500)={0x1, 0x0, 0x9000, 0x1000, &(0x7f000000c000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x11, r4, 0x0) ioctl(r4, 0x4048aecb, &(0x7f0000000100)="070000000000000001000000ffffffff0100"/72) ioctl(r0, 0x4048aecb, &(0x7f0000000300)="0000000000000000001000"/72) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x20400, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, 0x0}) r7 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r7, 0x110, 0x1, &(0x7f00000000c0)=']\x00', 0x2) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r6, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000003c0)={0x28, 0x2, r6, 0x0, &(0x7f000000b000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r6, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000}) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) getsockopt$inet6_opts(r8, 0x29, 0x39, 0x0, &(0x7f0000000180)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) close(0x3) 0s ago: executing program 2 (id=820): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f00000000c0)={0x74, 0x0, 0x13}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff1, 0xfff3}, {}, {0x8, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004014}, 0x0) r8 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r9 = syz_kvm_add_vcpu$x86(r8, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000200)={{0x50000, 0x1, 0x9, 0x1, 0xcd, 0x9, 0x6, 0x1, 0x0, 0x3, 0x5, 0xeb}, {0x3000, 0x80a0000, 0xd, 0xe, 0x5, 0x7, 0x4, 0x14, 0x4, 0x5, 0x0, 0x1}, {0x8000000, 0x102f8000, 0x1e, 0x5, 0x6, 0x7, 0x81, 0x3, 0x80, 0x1, 0xe, 0x78}, {0xeeef0000, 0x6000, 0x0, 0x3, 0x6, 0x9, 0xc3, 0x0, 0x0, 0x0, 0x80, 0x2e}, {0x2, 0x2000, 0xa, 0xff, 0x8, 0x8, 0x6, 0x7, 0x8, 0x6, 0x4, 0xfc}, {0x10d000, 0x0, 0x9, 0xb9, 0x6, 0x5, 0x42, 0x6, 0x5, 0x1, 0xd, 0x9}, {0xdddd1000, 0x0, 0x0, 0x1, 0xa, 0x8, 0x4, 0x63, 0x1c, 0x5, 0x1, 0xd}, {0xdddd1000, 0x4000, 0xa, 0x23, 0xc, 0x3, 0x9, 0x4a, 0x7, 0x8, 0x43, 0x3}, {0xeeee0000, 0x5}, {0xffff1000}, 0x0, 0x0, 0xdddd0000, 0x150690, 0x3, 0x4000, 0xeeee0c00, [0x1, 0x1004, 0x4, 0x1000]}) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f0000000740)={"d28cbffc70113aa16b365924c3128c89fe8764c41caa3ec7a095ce3692ae1fe3160c3dd483cc71d285c48c8fa445272281beb44357aa96da39f0ef45a90bfac537ba4c98038e0b871c2ba811d3d568ccdddd1e0e7edef9061d12bdd0fc1c83093613293d1779955c62df6a03c3a539051393b577bb6645c4ed2ddfd06df82c7359de2082e16a4c302d18db9ce698f22b519d55adbbe4881dda46ddbbab0a1ca428e404f0640e62eb7d76c8ca94cff34f26de20c2f44c22228eee44edcbec829ed8b5f24a8259fcc97d67b96441486cf9832274eff5271d3843178cd90827052ef8e6dee13ef4f8e23b8396f5bc4b03b8ee875350ac778233a13551f55cac915ce11f145063ef5b5111272d0859d6cdb62ab72a92f24d83ef5ff87aa8f6eae3986c403add562c0a17839921dea6186d3b71b3d466070a005541677a477392f9a499322ed2f09c6e1b401ad81bb6673274e7c344152c2617edc2f667329b51bcc9d235de56d8642823643e0107339044417e2708d10e7dafefb5b2e72f696e1dc37c48f3c9266c9c8d2e771aabd4b7e4e7c2bccde0345d5d43ad7a4d98e9e1e3e152784ca29d286fe783f3579055a428ab231b9e81d77bd8ca4007607cd2ff60953a2d68353c4cc677124b7431edca5f604841f3baa90d46235ddaa03f158dd78c219be7f0c53dddd4cea58ecac6cef53e7a5b347b0842bb163bd35e19d2ed1b67e63a7e82ac470619ae164c3949884286c101417e6deeff735b8b3b9109e47725bbd5c400b24489fec1afe6771d5c8871f7cd31e7390cef6dce398b8a1dd7213229d282cb581a71c04ca04e9eb516a197583ba8470b0df0b2158a076bf257520500a7bfb42766c883231c1a2a4527dabb5037f9fa00172bc8b9327494b553735a4ebbfb8c9e7f5034b442418c7490919f81308b4a73bd46d57e1ebcc3b6cf7d1ba20e55d06e40e5796e568c206d51adc1be7186cb80962e8dfa41c354acd9ad5fbf4c59b6fa6dd83aa9aa0a23210b057328efa4239b8211b3a5f21ce22a193eb93f69c4d525f53e733b397786d808b928297748a3d54e5bb71bab6139d5e2721d237f4c99896a2e398d049df2e9c63c424606fc73cece699407f3041826cc271a3cb44cc4d76ab77ddb15ef7dda76ddfa4830c5ba28cf7dcc154e88ef9f228a8158d6ae6fdc32ef2af1642e48d5218f10ba7c222e43da4e13f59e96ab4b467283b76d8b0c36665f02d943936041c00d7dbd2a3ab101aa56277b9ec5111428c047fb8b144f260b2fae62db101aad238ee50d222202969ed5929c2f8ab41e6e342ad1b0037be7e2d887f0563a722be94364dfe62482f7862da76fd58827712a1a80f69cc85f2fa9ba92cbfc48f7e4f11b2b87c71e6733a95d8ded91da74913fcf81bb1bb9cb8f380f402abf9df0990e0100750c49f9328238eced88d16068bce90b"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000340)={0x2, 0x0, @ioapic={0x0, 0xfffffffe, 0x7ffffffd, 0xfffffff5, 0x0, [{0x86, 0x40, 0x3, '\x00', 0x2}, {0x2a, 0xff, 0xad, '\x00', 0x10}, {0x35, 0x23, 0xb, '\x00', 0xfe}, {0x0, 0x1, 0x82, '\x00', 0x72}, {0x6, 0x1, 0x27, '\x00', 0x9}, {0x0, 0x8, 0xfd, '\x00', 0x7}, {0xcf, 0x20, 0xc5, '\x00', 0xe6}, {0x6, 0xce, 0x5, '\x00', 0xe}, {0x5, 0x7f, 0x7, '\x00', 0x4d}, {0xc, 0xd, 0x0, '\x00', 0x3b}, {0x0, 0x8, 0x0, '\x00', 0x8}, {0x7, 0x6, 0x0, '\x00', 0x3}, {0x2, 0xc0, 0xa, '\x00', 0x4}, {0x6, 0x7, 0x7, '\x00', 0xfe}, {0x8, 0x5, 0x9, '\x00', 0xa9}, {0x6, 0x7, 0x8}, {0xff, 0x5, 0x6, '\x00', 0xda}, {0x5, 0xfd, 0x6, '\x00', 0x8}, {0x45, 0x4, 0xff, '\x00', 0x6}, {0x9, 0x9, 0x7a, '\x00', 0x36}, {0x2, 0xa, 0x4, '\x00', 0x5}, {0x2, 0x9, 0x8, '\x00', 0xc4}, {0x3, 0xff, 0x12, '\x00', 0x6}, {0x7, 0xa9, 0x1c, '\x00', 0xa}]}}) ioctl$KVM_RUN(r9, 0xae80, 0x0) kernel console output (not intermixed with test programs): 177.500372][ T5360] usb 5-1: config 0 interface 0 has no altsetting 0 [ 177.513667][ T5360] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 177.525316][ T5360] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 177.545059][ T5360] usb 5-1: Product: syz [ 177.553395][ T5360] usb 5-1: Manufacturer: syz [ 177.566886][ T5360] usb 5-1: SerialNumber: syz [ 177.590406][ T5360] usb 5-1: config 0 descriptor?? [ 177.603649][ T7572] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 177.635095][ T5360] usb 5-1: selecting invalid altsetting 0 [ 177.787411][ T7581] netlink: 'syz.0.489': attribute type 1 has an invalid length. [ 177.859079][ T7571] snd-usb-audio 5-1:0.0: Runtime PM usage count underflow! [ 177.897596][ T5360] usb 5-1: USB disconnect, device number 22 [ 178.010319][ T7581] bond2: entered promiscuous mode [ 178.053940][ T7581] 8021q: adding VLAN 0 to HW filter on device bond2 [ 178.115216][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.250965][ T7584] 8021q: adding VLAN 0 to HW filter on device bond2 [ 178.270147][ T7584] bond2: (slave gre2): The slave device specified does not support setting the MAC address [ 178.287281][ T7584] bond2: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 178.339956][ T7584] bond2: (slave gre2): making interface the new active one [ 178.364180][ T7584] gre2: entered promiscuous mode [ 178.391155][ T7584] bond2: (slave gre2): Enslaving as an active interface with an up link [ 178.512907][ T189] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 178.582821][ T189] usb 3-1: USB disconnect, device number 34 [ 178.635664][ T189] usblp0: removed [ 178.832789][ T7599] syzkaller0: entered promiscuous mode [ 178.839649][ T7608] netlink: 204 bytes leftover after parsing attributes in process `syz.2.495'. [ 178.859139][ T7599] syzkaller0: entered allmulticast mode [ 178.900663][ T7605] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 178.927112][ T7613] vxcan0: tx drop: invalid da for name 0xfffffffffffffffc [ 179.402675][ T24] usb 2-1: new low-speed USB device number 36 using dummy_hcd [ 179.437966][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 179.437981][ T29] audit: type=1800 audit(1785838721.137:651): pid=7623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.499" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=558 res=0 errno=0 [ 179.639384][ T24] usb 2-1: Invalid ep0 maxpacket: 64 [ 179.769448][ T24] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 179.873596][ T7627] netlink: 16 bytes leftover after parsing attributes in process `syz.3.501'. [ 179.941055][ T5360] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 179.980294][ T24] usb 2-1: Invalid ep0 maxpacket: 64 [ 179.999853][ T24] usb usb2-port1: attempt power cycle [ 180.110277][ T5360] usb 5-1: Using ep0 maxpacket: 8 [ 180.143876][ T5360] usb 5-1: config 0 has an invalid interface number: 92 but max is 0 [ 180.181105][ T5360] usb 5-1: config 0 has no interface number 0 [ 180.193018][ T5360] usb 5-1: New USB device found, idVendor=10c4, idProduct=8857, bcdDevice=6f.95 [ 180.214830][ T5360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.235700][ T5360] usb 5-1: config 0 descriptor?? [ 180.278414][ T5360] cp210x 5-1:0.92: cp210x converter detected [ 180.359851][ T24] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 180.402151][ T24] usb 2-1: Invalid ep0 maxpacket: 64 [ 180.476260][ T7625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.502354][ T7625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.559829][ T24] usb 2-1: new low-speed USB device number 39 using dummy_hcd [ 180.600168][ T24] usb 2-1: Invalid ep0 maxpacket: 64 [ 180.630945][ T24] usb usb2-port1: unable to enumerate USB device [ 180.688808][ T5360] cp210x 5-1:0.92: failed to get vendor val 0x370b size 1: -71 [ 180.714399][ T5360] cp210x 5-1:0.92: querying part number failed [ 180.744386][ T5360] usb 5-1: cp210x converter now attached to ttyUSB0 [ 180.787411][ T5360] usb 5-1: USB disconnect, device number 23 [ 180.822858][ T5360] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 180.839394][ T10] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 180.847512][ T5360] cp210x 5-1:0.92: device disconnected [ 180.939395][ T189] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 181.001200][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.017341][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.039370][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 181.053133][ T10] usb 4-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 181.065378][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.079025][ T10] usb 4-1: config 0 descriptor?? [ 181.109331][ T189] usb 1-1: Using ep0 maxpacket: 32 [ 181.122763][ T189] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1056, setting to 1024 [ 181.138343][ T189] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 132, changing to 7 [ 181.169484][ T189] usb 1-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 181.198142][ T189] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.217257][ T189] usb 1-1: Product: syz [ 181.227153][ T189] usb 1-1: Manufacturer: syz [ 181.232877][ T7647] xt_CT: No such helper "netbios-ns" [ 181.255024][ T189] usb 1-1: SerialNumber: syz [ 181.275033][ T29] audit: type=1326 audit(1785838722.967:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.4.505" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f7239e019 code=0x0 [ 181.309935][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 181.320848][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 181.344197][ T10] usb 4-1: USB disconnect, device number 38 [ 181.472139][ T7643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.484552][ T7643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.499081][ T189] usb 1-1: Fast Track Pro switching to config #2 [ 181.531532][ T189] usb 1-1: USB disconnect, device number 36 [ 181.619371][ T5753] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 181.781267][ T5753] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 181.802102][ T5753] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 181.841007][ T5753] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 181.866315][ T5753] usb 5-1: Product: syz [ 181.876782][ T5753] usb 5-1: Manufacturer: syz [ 181.882108][ T5753] usb 5-1: SerialNumber: syz [ 181.966187][ T7657] syzkaller0: entered promiscuous mode [ 181.971818][ T7657] syzkaller0: entered allmulticast mode [ 182.151363][ T5753] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 182.193895][ T7659] vxcan0: tx drop: invalid da for name 0xfffffffffffffffc [ 182.222466][ T5753] usb 5-1: USB disconnect, device number 24 [ 182.264707][ T5753] usblp0: removed [ 182.474333][ T7669] atomic_op ffff8880798cb198 conn xmit_atomic 0000000000000000 [ 182.491971][ T29] audit: type=1326 audit(1785838724.187:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.3.513" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbfdf19e019 code=0x0 [ 182.559334][ T5360] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 182.599326][ T24] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 182.649356][ T5708] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 182.751453][ T5360] usb 1-1: unable to get BOS descriptor or descriptor too short [ 182.764127][ T5360] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 182.773753][ T5360] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.786372][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 182.796101][ T5360] usb 1-1: Product: syz [ 182.800749][ T24] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 182.810588][ T5360] usb 1-1: Manufacturer: syz [ 182.819624][ T24] usb 3-1: config 0 has no interface number 0 [ 182.827435][ T5360] usb 1-1: SerialNumber: syz [ 182.838352][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 182.847620][ T5708] usb 2-1: Using ep0 maxpacket: 16 [ 182.863773][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.879180][ T24] usb 3-1: Product: syz [ 182.884157][ T5708] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.899524][ T24] usb 3-1: Manufacturer: syz [ 182.906057][ T24] usb 3-1: SerialNumber: syz [ 182.912896][ T5708] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.930386][ T24] usb 3-1: config 0 descriptor?? [ 182.937098][ T5708] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 182.967317][ T5708] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 182.985726][ T5708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.999366][ T5708] usb 2-1: config 0 descriptor?? [ 183.076191][ T189] IPVS: starting estimator thread 0... [ 183.096583][ T5360] usb 1-1: Unsupported UAC3 BADD profile [ 183.174671][ T5360] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 183.189490][ T7674] IPVS: using max 35 ests per chain, 84000 per kthread [ 183.205555][ T5360] usb 1-1: USB disconnect, device number 37 [ 183.249965][ T6553] udevd[6553]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 183.388952][ T24] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 183.401510][ T24] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 183.690738][ T5708] usbhid 2-1:0.0: can't add hid device: -71 [ 183.711960][ T5708] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 183.743967][ T5708] usb 2-1: USB disconnect, device number 40 [ 184.054540][ T7684] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.249606][ T5723] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 184.402039][ T189] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 184.432570][ T5723] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.462192][ T5723] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 184.480258][ T5723] usb 5-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 184.512252][ T5723] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 184.526939][ T5723] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.540348][ T5723] usb 5-1: Product: syz [ 184.553993][ T5723] usb 5-1: Manufacturer: syz [ 184.565941][ T189] usb 4-1: not running at top speed; connect to a high speed hub [ 184.577209][ T5723] usb 5-1: SerialNumber: syz [ 184.589749][ T189] usb 4-1: config 2 has an invalid interface number: 85 but max is 0 [ 184.606961][ T5723] usb-storage 5-1:1.0: USB Mass Storage device detected [ 184.614251][ T189] usb 4-1: config 2 has no interface number 0 [ 184.626990][ T189] usb 4-1: config 2 interface 85 has no altsetting 0 [ 184.640504][ T5723] usb-storage 5-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 184.652432][ T189] usb 4-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=a7.d5 [ 184.662691][ T5723] scsi host1: usb-storage 5-1:1.0 [ 184.669009][ T189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.683250][ T189] usb 4-1: Product: syz [ 184.688602][ T189] usb 4-1: Manufacturer: syz [ 184.694348][ T189] usb 4-1: SerialNumber: syz [ 184.821472][ T7682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.836885][ T7682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.896567][ T7690] netlink: 20 bytes leftover after parsing attributes in process `syz.1.519'. [ 184.977321][ T189] gspca_main: conex-2.14.0 probing 0572:0041 [ 185.275178][ T189] usb 4-1: USB disconnect, device number 39 [ 185.368255][ T5723] usb 5-1: USB disconnect, device number 25 [ 185.929426][ T5723] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 186.100573][ T5723] usb 5-1: Using ep0 maxpacket: 16 [ 186.109345][ T5360] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 186.126540][ T5723] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.155591][ T5723] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 186.183854][ T5723] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 186.208764][ T5723] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.236690][ T5723] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 186.253016][ T24] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000008: -71 [ 186.273652][ T5723] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 186.301855][ T5360] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.314852][ T24] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 186.328144][ T5723] usb 5-1: Manufacturer: syz [ 186.347109][ T5360] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 186.347385][ T5723] usb 5-1: config 0 descriptor?? [ 186.366023][ T24] usb 3-1: USB disconnect, device number 35 [ 186.391961][ T5360] usb 1-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x55, changing to 0x5 [ 186.441413][ T5360] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 186.489132][ T5360] usb 1-1: New USB device found, idVendor=0582, idProduct=0102, bcdDevice= 0.40 [ 186.505838][ T5360] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.522258][ T5360] usb 1-1: Product: syz [ 186.530471][ T5360] usb 1-1: Manufacturer: syz [ 186.551896][ T5360] usb 1-1: SerialNumber: syz [ 186.842823][ T7718] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 187.150373][ T24] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 187.245482][ T5753] usb 5-1: USB disconnect, device number 26 [ 187.315090][ T24] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 187.340963][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.370828][ T7724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.527'. [ 187.392775][ T7724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.527'. [ 187.395091][ T24] usb 3-1: config 0 descriptor?? [ 187.417709][ T24] cp210x 3-1:0.0: cp210x converter detected [ 187.426475][ T7724] netlink: 'syz.1.527': attribute type 15 has an invalid length. [ 187.447605][ T7724] netlink: 'syz.1.527': attribute type 18 has an invalid length. [ 187.773379][ T7732] syzkaller0: entered allmulticast mode [ 187.830076][ T24] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 188.064489][ T7720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.093467][ T7720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.159399][ T7742] xt_hashlimit: size too large, truncated to 1048576 [ 188.209134][ T24] usb 3-1: cp210x converter now attached to ttyUSB0 [ 188.475597][ T24] usb 3-1: USB disconnect, device number 36 [ 188.497842][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 188.526632][ T24] cp210x 3-1:0.0: device disconnected [ 188.881973][ T7754] netlink: 132 bytes leftover after parsing attributes in process `syz.1.536'. [ 188.908688][ T7756] GUP no longer grows the stack in syz.3.535 (7756): 200000004000-200000005000 (200000001000) [ 188.923522][ T7754] netlink: 132 bytes leftover after parsing attributes in process `syz.1.536'. [ 188.935503][ T7756] CPU: 1 UID: 0 PID: 7756 Comm: syz.3.535 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.935541][ T7756] Tainted: [L]=SOFTLOCKUP [ 188.935563][ T7756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 188.935574][ T7756] Call Trace: [ 188.935582][ T7756] [ 188.935590][ T7756] dump_stack_lvl+0xe8/0x150 [ 188.935642][ T7756] __get_user_pages+0x238c/0x2720 [ 188.935681][ T7756] ? __gup_longterm_locked+0xc3b/0x15c0 [ 188.935732][ T7756] __gup_longterm_locked+0xd52/0x15c0 [ 188.935776][ T7756] ? lock_acquire+0x106/0x350 [ 188.935832][ T7756] gup_fast_fallback+0x1d8c/0x20e0 [ 188.935905][ T7756] ? __pfx_gup_fast_fallback+0x10/0x10 [ 188.935936][ T7756] ? is_valid_gup_args+0x11f/0x200 [ 188.935965][ T7756] ? get_user_pages_fast+0x4d/0xb0 [ 188.935999][ T7756] __iov_iter_get_pages_alloc+0x378/0xa40 [ 188.936024][ T7756] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 188.936047][ T7756] iov_iter_get_pages2+0x5e/0xa0 [ 188.936073][ T7756] __se_sys_vmsplice+0x7b5/0x1660 [ 188.936100][ T7756] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 188.936116][ T7756] ? __pfx_futex_wait+0x10/0x10 [ 188.936170][ T7756] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.936182][ T7756] do_syscall_64+0x174/0x580 [ 188.936197][ T7756] ? clear_bhb_loop+0x40/0x90 [ 188.936210][ T7756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.936221][ T7756] RIP: 0033:0x7fbfdf19e019 [ 188.936233][ T7756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.936257][ T7756] RSP: 002b:00007fbfe00f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 188.936275][ T7756] RAX: ffffffffffffffda RBX: 00007fbfdf425fa0 RCX: 00007fbfdf19e019 [ 188.936283][ T7756] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000005 [ 188.936290][ T7756] RBP: 00007fbfdf23500c R08: 0000000000000000 R09: 0000000000000000 [ 188.936296][ T7756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.936302][ T7756] R13: 00007fbfdf426038 R14: 00007fbfdf425fa0 R15: 00007fbfdf54fa48 [ 188.936319][ T7756] [ 188.959391][ T5753] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 188.965056][ T7754] netlink: 132 bytes leftover after parsing attributes in process `syz.1.536'. [ 189.169005][ T7756] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.535'. [ 189.198456][ T7756] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 189.278113][ T7759] bond2: entered allmulticast mode [ 189.295751][ T5753] usb 5-1: unable to get BOS descriptor or descriptor too short [ 189.315917][ T5753] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.345306][ T7759] gre2: entered allmulticast mode [ 189.357897][ T5753] usb 5-1: string descriptor 0 read error: -22 [ 189.372005][ T5753] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 189.393578][ T5753] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.407935][ T7760] dvmrp8: entered allmulticast mode [ 189.420697][ T7758] bond2: left allmulticast mode [ 189.431881][ T7758] gre2: left allmulticast mode [ 189.465983][ T7762] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 189.500981][ T7762] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.663316][ T7749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.702159][ T7749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.753428][ T29] audit: type=1326 audit(1785838731.447:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7746 comm="syz.4.534" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8f7239e019 code=0x0 [ 190.182353][ T5723] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 190.210769][ T5753] usb 5-1: failed to read current rate; disabling the check [ 190.232813][ T5360] usb 1-1: unit 4 not found! [ 190.253810][ T5360] usb 1-1: 6:0: failed to get current value for ch 0 (-71) [ 190.339409][ T5723] usb 3-1: device descriptor read/64, error -71 [ 190.425111][ T5360] usb 1-1: USB disconnect, device number 38 [ 190.601071][ T5723] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 190.749499][ T5723] usb 3-1: device descriptor read/64, error -71 [ 190.880118][ T5723] usb usb3-port1: attempt power cycle [ 191.179852][ T5753] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 191.229547][ T5723] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 191.261285][ T5723] usb 3-1: device descriptor read/8, error -71 [ 191.349972][ T5753] usb 4-1: Using ep0 maxpacket: 32 [ 191.362438][ T5753] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 191.383358][ T5753] usb 4-1: config 0 has no interface number 0 [ 191.397580][ T5753] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 191.423917][ T5753] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 191.440974][ T5753] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.458699][ T5753] usb 4-1: Product: syz [ 191.473993][ T5753] usb 4-1: Manufacturer: syz [ 191.486780][ T5753] usb 4-1: SerialNumber: syz [ 191.508128][ T5753] usb 4-1: config 0 descriptor?? [ 191.515128][ T5723] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 191.553299][ T5753] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 191.568044][ T5753] em28xx 4-1:0.132: Video interface 132 found: [ 191.574737][ T5723] usb 3-1: device descriptor read/8, error -71 [ 191.690247][ T5723] usb usb3-port1: unable to enumerate USB device [ 191.752828][ T5723] usb 5-1: USB disconnect, device number 27 [ 191.850094][ T5695] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 191.947670][ T5753] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 192.051651][ T5695] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 192.063054][ T5695] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 192.074347][ T5695] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 192.085404][ T5695] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 192.098390][ T5695] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 192.107528][ T5695] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.115668][ T5695] usb 2-1: Product: 鿤訤᧞溳㬔攫癍俬駚㗖ਟ毱ỳ⫛ꑰຕ櫲襪⯤ጝ럠嗽뛄吶梛热籩ታ꽦棭⫭팔濑왱뒤᜙舁鳛寭വ蟖莾᤯꽜㊻⠓艚僬ᑁ襃쓅궼㟊㷟뜎鰽鲾쀆ﲹ媢鞆䛘̛栛᮴⭷᭚Ɥ儦繩㠳슷ﺕ셎猯䍻ㄋ컧헤신ꮥ๹誡闢栱៸욄㲋 [ 192.146923][ T5695] usb 2-1: Manufacturer: с [ 192.151539][ T5695] usb 2-1: SerialNumber: Ф [ 192.157894][ T7788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.168451][ T7790] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 192.177967][ T7788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.188306][ T7788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.197488][ T7788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.205682][ T5723] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 192.219629][ T7788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.235398][ T7788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.258320][ T5753] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 192.269599][ T5753] em28xx 4-1:0.132: board has no eeprom [ 192.329884][ T5753] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 192.348117][ T5723] usb 5-1: device descriptor read/64, error -71 [ 192.354761][ T5753] em28xx 4-1:0.132: analog set to bulk mode. [ 192.359013][ T7799] input: syz1 as /devices/virtual/input/input18 [ 192.362248][ T189] em28xx 4-1:0.132: Registering V4L2 extension [ 192.387010][ T5753] usb 4-1: USB disconnect, device number 40 [ 192.410108][ T5753] em28xx 4-1:0.132: Disconnecting em28xx [ 192.524882][ T189] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 192.535980][ T189] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 192.546314][ T189] em28xx 4-1:0.132: No AC97 audio processor [ 192.558666][ T189] usb 4-1: Decoder not found [ 192.563453][ T189] em28xx 4-1:0.132: failed to create media graph [ 192.573102][ T189] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 192.594162][ T5695] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 192.601794][ T5723] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 192.623185][ T189] em28xx 4-1:0.132: Remote control support is not available for this card. [ 192.663692][ T5753] em28xx 4-1:0.132: Closing input extension [ 192.799741][ T5723] usb 5-1: device descriptor read/64, error -71 [ 192.883764][ T5753] em28xx 4-1:0.132: Freeing device [ 192.895255][ T5695] usb 2-1: USB disconnect, device number 41 [ 192.917378][ T7808] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 192.932574][ T5723] usb usb5-port1: attempt power cycle [ 193.324458][ T5723] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 193.374067][ T5723] usb 5-1: device descriptor read/8, error -71 [ 193.650218][ T5723] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 193.700445][ T5723] usb 5-1: device descriptor read/8, error -71 [ 193.822078][ T5723] usb usb5-port1: unable to enumerate USB device [ 193.886557][ T7840] ip_tunnel_core: Dead loop on virtual device gre2 (net 21), fix it urgently! [ 193.899192][ T7840] ip_tunnel_core: Dead loop on virtual device gre2 (net 21), fix it urgently! [ 193.915249][ T7840] ip_tunnel_core: Dead loop on virtual device gre2 (net 21), fix it urgently! [ 193.937632][ T7840] ip_tunnel_core: Dead loop on virtual device gre2 (net 21), fix it urgently! [ 193.963569][ T7840] ip_tunnel_core: Dead loop on virtual device gre2 (net 21), fix it urgently! [ 193.985909][ T7840] ip_tunnel_core: Dead loop on virtual device gre2 (net 21), fix it urgently! [ 194.017037][ T7840] ip_tunnel_core: Dead loop on virtual device gre2 (net 21), fix it urgently! [ 194.037550][ T7840] ip_tunnel_core: Dead loop on virtual device gre2 (net 21), fix it urgently! [ 194.224878][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.232356][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.469736][ T7840] net_ratelimit: 126 callbacks suppressed [ 194.469751][ T7840] ip_tunnel_core: Dead loop on virtual device gre2 (net 21), fix it urgently! [ 194.501112][ T7840] ip_tunnel_core: Dead loop on virtual device gre2 (net 21), fix it urgently! [ 194.511662][ T7840] ip_tunnel_core: Dead loop on virtual device gre2 (net 21), fix it urgently! [ 194.522208][ T7840] ip_tunnel_core: Dead loop on virtual device gre2 (net 21), fix it urgently! [ 194.532430][ T7840] ip_tunnel_core: Dead loop on virtual device gre2 (net 21), fix it urgently! [ 194.575785][ T7840] ip_tunnel_core: Dead loop on virtual device gre2 (net 21), fix it urgently! [ 194.602190][ T7840] ip_tunnel_core: Dead loop on virtual device gre2 (net 21), fix it urgently! [ 194.639341][ T7840] ip_tunnel_core: Dead loop on virtual device gre2 (net 21), fix it urgently! [ 194.653912][ T7840] ip_tunnel_core: Dead loop on virtual device gre2 (net 21), fix it urgently! [ 194.665096][ T7840] ip_tunnel_core: Dead loop on virtual device gre2 (net 21), fix it urgently! [ 194.859398][ T5728] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 194.896308][ T7859] loop4: detected capacity change from 0 to 2640 [ 194.916682][ T7859] buffer_io_error: 8 callbacks suppressed [ 194.916698][ T7859] Buffer I/O error on dev loop4, logical block 0, async page read [ 194.959373][ T7859] Buffer I/O error on dev loop4, logical block 0, async page read [ 195.007424][ T7859] Buffer I/O error on dev loop4, logical block 0, async page read [ 195.007463][ T7859] Buffer I/O error on dev loop4, logical block 0, async page read [ 195.007491][ T7859] Buffer I/O error on dev loop4, logical block 0, async page read [ 195.007538][ T7859] Buffer I/O error on dev loop4, logical block 0, async page read [ 195.007579][ T7859] Buffer I/O error on dev loop4, logical block 0, async page read [ 195.007905][ T7859] Buffer I/O error on dev loop4, logical block 0, async page read [ 195.007926][ T7859] ldm_validate_partition_table(): Disk read failed. [ 195.007954][ T7859] Buffer I/O error on dev loop4, logical block 0, async page read [ 195.007983][ T7859] Buffer I/O error on dev loop4, logical block 0, async page read [ 195.008026][ T7859] Dev loop4: unable to read RDB block 0 [ 195.008187][ T7859] loop4: unable to read partition table [ 195.025103][ T5728] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 195.025134][ T5728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.025147][ T5728] usb 2-1: Product: syz [ 195.025155][ T5728] usb 2-1: Manufacturer: syz [ 195.025163][ T5728] usb 2-1: SerialNumber: syz [ 195.027540][ T5728] usb 2-1: config 0 descriptor?? [ 195.048736][ T7859] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 195.396171][ T4993] ldm_validate_partition_table(): Disk read failed. [ 195.396212][ T4993] Dev loop4: unable to read RDB block 0 [ 195.396328][ T4993] loop4: unable to read partition table [ 195.654134][ T4993] ldm_validate_partition_table(): Disk read failed. [ 195.685652][ T4993] Dev loop4: unable to read RDB block 0 [ 195.712576][ T4993] loop4: unable to read partition table [ 195.775790][ T5728] usb 2-1: USB disconnect, device number 42 [ 196.335144][ T7840] syz.0.560 (7840) used greatest stack depth: 16560 bytes left [ 196.439535][ T5723] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 196.453627][ T7879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.569'. [ 196.599310][ T24] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 196.645604][ T5723] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 196.683930][ T5723] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 196.706762][ T5723] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 196.726541][ T5723] usb 5-1: Product: syz [ 196.733474][ T5723] usb 5-1: Manufacturer: syz [ 196.751009][ T5723] usb 5-1: SerialNumber: syz [ 196.760016][ T24] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 196.776421][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 196.795284][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 196.822249][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 196.838474][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 196.853900][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 196.900257][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 196.919406][ T29] audit: type=1326 audit(1785838738.607:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7882 comm="syz.0.570" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10419e019 code=0x7ffc0000 [ 196.964822][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 196.992303][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 196.992943][ T7888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.570'. [ 197.024266][ T29] audit: type=1326 audit(1785838738.617:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7882 comm="syz.0.570" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10419e019 code=0x7ffc0000 [ 197.055598][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 197.102337][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 197.124174][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 197.150440][ T29] audit: type=1326 audit(1785838738.617:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7882 comm="syz.0.570" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10419e019 code=0x7ffc0000 [ 197.183950][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 197.214436][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 197.239919][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 197.263683][ T29] audit: type=1326 audit(1785838738.617:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7882 comm="syz.0.570" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7fc10419e019 code=0x7ffc0000 [ 197.295850][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 197.320378][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 197.343753][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 197.365848][ T29] audit: type=1326 audit(1785838738.617:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7882 comm="syz.0.570" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10419e019 code=0x7ffc0000 [ 197.403436][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 197.441960][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 197.455780][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 197.470413][ T29] audit: type=1326 audit(1785838738.617:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7882 comm="syz.0.570" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10419e019 code=0x7ffc0000 [ 197.504821][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 197.528165][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 197.548532][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 197.561683][ T29] audit: type=1326 audit(1785838738.687:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7882 comm="syz.0.570" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10419e019 code=0x7ffc0000 [ 197.608159][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 197.631776][ T24] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 197.648486][ T29] audit: type=1326 audit(1785838738.687:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7882 comm="syz.0.570" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10419e019 code=0x7ffc0000 [ 197.675666][ T24] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 197.694225][ T24] usb 2-1: Product: syz [ 197.703355][ T24] usb 2-1: Manufacturer: syz [ 197.714129][ T24] usb 2-1: SerialNumber: syz [ 197.728574][ T29] audit: type=1326 audit(1785838738.687:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7882 comm="syz.0.570" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc10419e019 code=0x7ffc0000 [ 197.762329][ T24] usb 2-1: config 0 descriptor?? [ 197.796346][ T24] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 197.811101][ T29] audit: type=1326 audit(1785838738.767:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7882 comm="syz.0.570" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc10419dd82 code=0x7ffc0000 [ 197.949701][ T7888] hsr_slave_0 (unregistering): left promiscuous mode [ 198.147666][ C1] usb 2-1: yurex_control_callback - control failed: -71 [ 198.160113][ C0] usb 2-1: yurex_control_callback - control failed: -71 [ 198.164168][ T24] usb 2-1: USB disconnect, device number 43 [ 198.194292][ T24] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 198.283290][ T7899] tipc: Enabled bearer , priority 0 [ 198.308429][ T7899] tipc: Resetting bearer [ 198.569365][ T5629] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 198.729497][ T5629] usb 3-1: Using ep0 maxpacket: 16 [ 198.741833][ T5629] usb 3-1: unable to get BOS descriptor or descriptor too short [ 198.756778][ T5629] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.772385][ T5629] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 198.788544][ T5629] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 198.802695][ T5629] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 198.813246][ T5629] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.821710][ T5629] usb 3-1: Product: syz [ 198.826092][ T5629] usb 3-1: Manufacturer: syz [ 198.842946][ T5629] usb 3-1: SerialNumber: syz [ 199.093585][ T5629] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 199.107697][ T5629] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 199.479814][ T5629] usb 3-1: 2:1 : can't get Cluster Descriptor [ 199.911445][ T7928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.577'. [ 199.946145][ T7925] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 199.955332][ T5695] usb 3-1: USB disconnect, device number 41 [ 199.971631][ T5723] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 200.150587][ T5723] usb 5-1: USB disconnect, device number 32 [ 200.174704][ T5723] usblp0: removed [ 200.599354][ T5723] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 200.717613][ T7946] program syz.3.587 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.764753][ T5723] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.795175][ T5723] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 200.823178][ T5723] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 200.839146][ T7942] CUSE: unknown device info ";n|zQC*" [ 200.849474][ T7942] CUSE: unknown device info ">2a" V|#ySioL89IܥѮÇ[<^Q>nHw'0KV,${\d+" [ 200.862728][ T5723] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.886179][ T5723] usb 5-1: Product: syz [ 200.897244][ T5723] usb 5-1: Manufacturer: syz [ 200.913231][ T5723] usb 5-1: SerialNumber: syz [ 200.931342][ T7942] CUSE: unknown device info "" [ 200.943605][ T7942] CUSE: unknown device info "LPt|%IOKu GǪ|QU˜DvF,*p(o9{u[赨gIPYV" [ 200.968279][ T5723] cdc_mbim 5-1:1.0: skipping garbage [ 200.998905][ T7942] CUSE: DEVNAME unspecified [ 201.151555][ T7934] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 202.033601][ T7934] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 202.058713][ T5723] cdc_mbim 5-1:1.0: setting tx_max = 48 [ 202.104927][ T5723] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 202.188429][ T5723] wwan wwan0: port wwan0mbim0 attached [ 202.237504][ T5723] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 66:0b:b1:52:e8:19 [ 202.292880][ T5723] usb 5-1: USB disconnect, device number 33 [ 202.306504][ T5723] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 202.441962][ T5723] wwan wwan0: port wwan0mbim0 disconnected [ 202.760527][ T8016] batadv_slave_1: entered promiscuous mode [ 202.799401][ T5695] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 202.971230][ T5695] usb 2-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 202.981975][ T5695] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.013623][ T5695] usb 2-1: config 0 descriptor?? [ 203.056341][ T5695] pwc: Creative Labs Webcam 5 detected. [ 203.254640][ T8004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.281063][ T8004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.557653][ T8008] batadv_slave_1: left promiscuous mode [ 203.739629][ T5753] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 203.769084][ T8004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.786392][ T8004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.957814][ T5753] usb 4-1: Using ep0 maxpacket: 16 [ 203.971110][ T5753] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 204.003909][ T5753] usb 4-1: config 1 has no interface number 0 [ 204.021823][ T5695] pwc: recv_control_msg error -32 req 02 val 2b00 [ 204.034412][ T5753] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 204.053229][ T5695] pwc: recv_control_msg error -32 req 02 val 2700 [ 204.066312][ T5753] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 204.081672][ T5753] usb 4-1: config 1 interface 105 has no altsetting 0 [ 204.098350][ T5753] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 204.116162][ T5753] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 204.140222][ T5753] usb 4-1: Product: syz [ 204.140455][ T8041] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 204.160028][ T5753] usb 4-1: Manufacturer: syz [ 204.174316][ T5753] usb 4-1: SerialNumber: syz [ 204.192494][ T8033] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 204.211224][ T8033] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 204.281156][ T5695] pwc: recv_control_msg error -71 req 02 val 2c00 [ 204.296656][ T5695] pwc: recv_control_msg error -71 req 04 val 1000 [ 204.316967][ T5695] pwc: recv_control_msg error -71 req 04 val 1300 [ 204.344950][ T5695] pwc: recv_control_msg error -71 req 04 val 1400 [ 204.364932][ T5695] pwc: recv_control_msg error -71 req 02 val 2000 [ 204.383970][ T5695] pwc: recv_control_msg error -71 req 02 val 2100 [ 204.400809][ T5695] pwc: recv_control_msg error -71 req 06 val 0600 [ 204.415658][ T5695] pwc: recv_control_msg error -71 req 04 val 1500 [ 204.430856][ T5695] pwc: recv_control_msg error -71 req 02 val 2500 [ 204.453452][ T5695] pwc: recv_control_msg error -71 req 02 val 2400 [ 204.488505][ T5695] pwc: recv_control_msg error -71 req 02 val 2600 [ 204.509295][ T5695] pwc: recv_control_msg error -71 req 02 val 2900 [ 204.531523][ T5695] pwc: recv_control_msg error -71 req 02 val 2800 [ 204.555703][ T5695] pwc: recv_control_msg error -71 req 04 val 1100 [ 204.578553][ T5695] pwc: recv_control_msg error -71 req 04 val 1200 [ 204.598299][ T5695] pwc: Failed to power off camera (-71) [ 204.599521][ T5360] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 204.634838][ T5695] pwc: Registered as video103. [ 204.667656][ T5695] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input21 [ 204.716997][ T5695] usb 2-1: USB disconnect, device number 45 [ 204.770348][ T5360] usb 1-1: Using ep0 maxpacket: 8 [ 204.777404][ T5360] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 204.823406][ T5360] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 204.864827][ T5360] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 204.911912][ T5360] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 204.958370][ T5360] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 204.991169][ T5360] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 205.019073][ T8049] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 205.035786][ T5360] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 205.058324][ T8049] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 205.078314][ T5360] usb 1-1: config 168 interface 0 has no altsetting 0 [ 205.090744][ T5360] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 205.101388][ T5360] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 205.113908][ T5360] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 205.127873][ T5360] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 205.141951][ T8063] netlink: 'syz.4.614': attribute type 1 has an invalid length. [ 205.155011][ T5360] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 205.188728][ T5360] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 205.207196][ T5360] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 205.221472][ T5360] usb 1-1: config 168 interface 0 has no altsetting 0 [ 205.230454][ T5360] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 205.239331][ T5360] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 205.252074][ T5360] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 205.264965][ T5360] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 205.278054][ T5360] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 205.289968][ T5360] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 205.302166][ T5360] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 205.304644][ T8063] bond6: entered promiscuous mode [ 205.316240][ T5728] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 205.329841][ T5360] usb 1-1: config 168 interface 0 has no altsetting 0 [ 205.341512][ T8063] 8021q: adding VLAN 0 to HW filter on device bond6 [ 205.348485][ T5360] usb 1-1: string descriptor 0 read error: -22 [ 205.355824][ T5360] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 205.387226][ T5360] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.411346][ T8066] 8021q: adding VLAN 0 to HW filter on device bond6 [ 205.424870][ T5360] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 205.428477][ T8066] bond6: (slave gre2): The slave device specified does not support setting the MAC address [ 205.450643][ T8066] bond6: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 205.471219][ T8066] bond6: (slave gre2): making interface the new active one [ 205.478679][ T8066] gre2: entered promiscuous mode [ 205.484505][ T5728] usb 3-1: Using ep0 maxpacket: 16 [ 205.492085][ T5728] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.505977][ T8066] bond6: (slave gre2): Enslaving as an active interface with an up link [ 205.515315][ T5728] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 205.552761][ T5728] usb 3-1: config 0 interface 0 has no altsetting 0 [ 205.564580][ T5728] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 205.587036][ T5728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.621796][ T5728] usb 3-1: config 0 descriptor?? [ 205.729035][ T8074] loop3: detected capacity change from 0 to 7 [ 205.732337][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.618'. [ 205.738357][ T8074] Dev loop3: unable to read RDB block 7 [ 205.759158][ T8074] loop3: unable to read partition table [ 205.765318][ T8074] loop3: partition table beyond EOD, truncated [ 205.773059][ T8074] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 205.801624][ T189] usb 1-1: USB disconnect, device number 39 [ 205.830246][ T5753] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 205.864388][ T5753] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 205.920692][ T5753] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 96:51:80:d0:d4:3d [ 205.938645][ T5753] usb 4-1: USB disconnect, device number 41 [ 205.968040][ T5753] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 206.051020][ T5753] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 206.064127][ T5728] cougar 0003:060B:700A.0009: unknown main item tag 0x0 [ 206.070309][ T5753] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 206.082083][ T5728] cougar 0003:060B:700A.0009: unknown main item tag 0x0 [ 206.091482][ T5753] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 206.116782][ T5728] cougar 0003:060B:700A.0009: unknown main item tag 0x0 [ 206.131580][ T5728] cougar 0003:060B:700A.0009: unknown main item tag 0x0 [ 206.146234][ T5728] cougar 0003:060B:700A.0009: unknown main item tag 0x0 [ 206.153741][ T5728] cougar 0003:060B:700A.0009: unknown main item tag 0x0 [ 206.164035][ T5728] cougar 0003:060B:700A.0009: unknown main item tag 0x0 [ 206.172361][ T5728] cougar 0003:060B:700A.0009: unknown main item tag 0x0 [ 206.180112][ T5728] cougar 0003:060B:700A.0009: unknown main item tag 0x0 [ 206.187242][ T5728] cougar 0003:060B:700A.0009: unknown main item tag 0x0 [ 206.203077][ T5728] cougar 0003:060B:700A.0009: hidraw0: USB HID v0.00 Device [HID 060b:700a] on usb-dummy_hcd.2-1/input0 [ 206.249322][ T5360] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 206.270024][ T5728] usb 3-1: USB disconnect, device number 42 [ 206.412713][ T5360] usb 5-1: Using ep0 maxpacket: 16 [ 206.433024][ T5360] usb 5-1: unable to get BOS descriptor or descriptor too short [ 206.454044][ T5360] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 206.470917][ T5360] usb 5-1: can't read configurations, error -22 [ 206.609545][ T5360] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 206.678547][ T8102] tipc: Enabling of bearer rejected, failed to enable media [ 206.703024][ T8102] tipc: Enabling of bearer rejected, failed to enable media [ 206.782565][ T5360] usb 5-1: Using ep0 maxpacket: 16 [ 206.810245][ T5360] usb 5-1: unable to get BOS descriptor or descriptor too short [ 206.837896][ T8105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.627'. [ 206.873145][ T5360] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 206.881318][ T5360] usb 5-1: can't read configurations, error -22 [ 206.908966][ T5360] usb usb5-port1: attempt power cycle [ 206.920169][ T8105] macvtap1: entered promiscuous mode [ 206.949800][ T8105] erspan0: entered promiscuous mode [ 206.969750][ T8105] macvtap1: entered allmulticast mode [ 206.986428][ T8105] erspan0: entered allmulticast mode [ 207.030607][ T8106] erspan0: left allmulticast mode [ 207.046259][ T8106] erspan0: left promiscuous mode [ 207.066040][ T8106] macvtap1: left promiscuous mode [ 207.086078][ T8106] macvtap1: left allmulticast mode [ 207.149384][ T8094] netlink: 5 bytes leftover after parsing attributes in process `syz.1.624'. [ 207.159852][ T8094] net_ratelimit: 880 callbacks suppressed [ 207.159870][ T8094] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.190602][ T5753] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 207.269417][ T5360] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 207.300013][ T5360] usb 5-1: Using ep0 maxpacket: 16 [ 207.314691][ T5360] usb 5-1: unable to get BOS descriptor or descriptor too short [ 207.337256][ T5360] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 207.355167][ T5753] usb 3-1: unable to get BOS descriptor or descriptor too short [ 207.355693][ T5360] usb 5-1: can't read configurations, error -22 [ 207.391046][ T5753] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 207.442098][ T5753] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 207.464838][ T5753] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.493901][ T5753] usb 3-1: Product: syz [ 207.507664][ T5753] usb 3-1: Manufacturer: syz [ 207.519394][ T5360] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 207.521726][ T5753] usb 3-1: SerialNumber: syz [ 207.566715][ T5360] usb 5-1: Using ep0 maxpacket: 16 [ 207.627566][ T5360] usb 5-1: unable to get BOS descriptor or descriptor too short [ 207.651126][ T5360] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 207.674614][ T5360] usb 5-1: can't read configurations, error -22 [ 207.693213][ T5360] usb usb5-port1: unable to enumerate USB device [ 207.749447][ T189] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 207.781409][ T5753] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 207.816403][ T5753] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 207.844997][ T5753] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 207.864733][ T5753] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 207.875503][ T5753] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 207.884413][ T5753] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 207.893729][ T5753] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 207.909823][ T189] usb 2-1: Using ep0 maxpacket: 8 [ 207.915577][ T5753] usb 3-1: failed to enable PITCH for EP 0x82 [ 207.925168][ T189] usb 2-1: unable to get BOS descriptor or descriptor too short [ 207.938388][ T189] usb 2-1: too many configurations: 128, using maximum allowed: 8 [ 207.948945][ T189] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 207.959339][ T5360] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 207.959451][ T189] usb 2-1: can't read configurations, error -61 [ 208.050150][ T5753] usb 3-1: USB disconnect, device number 43 [ 208.119307][ T189] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 208.139697][ T5360] usb 4-1: Using ep0 maxpacket: 16 [ 208.162437][ T5360] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.176689][ T6554] udevd[6554]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 208.193381][ T5360] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.205780][ T5360] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 208.240456][ T5360] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 208.249965][ T5360] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.263060][ T5360] usb 4-1: config 0 descriptor?? [ 208.299440][ T189] usb 2-1: Using ep0 maxpacket: 8 [ 208.307072][ T189] usb 2-1: unable to get BOS descriptor or descriptor too short [ 208.315815][ T189] usb 2-1: too many configurations: 128, using maximum allowed: 8 [ 208.319430][ T5728] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 208.326036][ T189] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 208.340245][ T189] usb 2-1: can't read configurations, error -61 [ 208.350684][ T189] usb usb2-port1: attempt power cycle [ 208.471235][ T8119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.479385][ T5728] usb 1-1: Using ep0 maxpacket: 16 [ 208.480282][ T8119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.489765][ T5728] usb 1-1: config 166 has an invalid interface number: 177 but max is 1 [ 208.501539][ T5728] usb 1-1: config 166 has an invalid interface number: 34 but max is 1 [ 208.510161][ T5728] usb 1-1: config 166 has no interface number 0 [ 208.516615][ T5728] usb 1-1: config 166 has no interface number 1 [ 208.523036][ T5728] usb 1-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 208.534742][ T5728] usb 1-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 208.546169][ T5728] usb 1-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 208.557123][ T5728] usb 1-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 208.569081][ T5728] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 208.580783][ T5728] usb 1-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 208.591230][ T5728] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 208.602661][ T5728] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 208.612859][ T5728] usb 1-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 208.613188][ T5753] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 208.626306][ T5728] usb 1-1: config 166 interface 177 has no altsetting 0 [ 208.640949][ T5728] usb 1-1: config 166 interface 34 has no altsetting 0 [ 208.650596][ T5728] usb 1-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 208.659794][ T5728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.667826][ T5728] usb 1-1: Product: syz [ 208.672202][ T5728] usb 1-1: Manufacturer: syz [ 208.676842][ T5728] usb 1-1: SerialNumber: syz [ 208.699423][ T189] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 208.715915][ T5360] microsoft 0003:045E:07DA.000A: ignoring exceeding usage max [ 208.729902][ T5360] microsoft 0003:045E:07DA.000A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 208.741535][ T5360] microsoft 0003:045E:07DA.000A: no inputs found [ 208.741723][ T189] usb 2-1: Using ep0 maxpacket: 8 [ 208.747949][ T5360] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway [ 208.764911][ T189] usb 2-1: unable to get BOS descriptor or descriptor too short [ 208.773943][ T189] usb 2-1: too many configurations: 128, using maximum allowed: 8 [ 208.784739][ T189] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 208.794589][ T5753] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 208.807710][ T189] usb 2-1: can't read configurations, error -61 [ 208.814270][ T5753] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 208.826707][ T5753] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 208.841312][ T5753] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 208.850599][ T5753] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.863694][ T5753] usb 3-1: config 0 descriptor?? [ 208.869547][ T8135] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 208.891211][ T5728] ums-realtek 1-1:166.177: USB Mass Storage device detected [ 208.914201][ T8119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.924278][ T8119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.933628][ T5723] usb 4-1: USB disconnect, device number 42 [ 208.969798][ T189] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 208.999997][ T189] usb 2-1: Using ep0 maxpacket: 8 [ 209.007553][ T189] usb 2-1: unable to get BOS descriptor or descriptor too short [ 209.023869][ T189] usb 2-1: too many configurations: 128, using maximum allowed: 8 [ 209.047230][ T189] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 209.055386][ T189] usb 2-1: can't read configurations, error -61 [ 209.063423][ T189] usb usb2-port1: unable to enumerate USB device [ 209.200848][ T5728] ums-realtek 1-1:166.34: USB Mass Storage device detected [ 209.283004][ T5753] dragonrise 0003:0079:0011.000B: unexpected long global item [ 209.291290][ T5753] dragonrise 0003:0079:0011.000B: parse failed [ 209.297545][ T5753] dragonrise 0003:0079:0011.000B: probe with driver dragonrise failed with error -22 [ 209.404788][ T5728] ums-realtek 1-1:166.34: probe with driver ums-realtek failed with error -5 [ 209.414097][ T5360] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 209.531675][ T5708] usb 3-1: USB disconnect, device number 44 [ 209.572322][ T5360] usb 5-1: Using ep0 maxpacket: 16 [ 209.594721][ T5360] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 209.616900][ T5360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.645658][ T5360] usb 5-1: config 0 descriptor?? [ 209.662930][ T5360] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 210.058462][ T5360] gspca_sonixj: reg_r err -32 [ 210.074077][ T5360] sonixj 5-1:0.0: probe with driver sonixj failed with error -32 [ 210.101317][ T5360] usb 5-1: USB disconnect, device number 38 [ 210.161299][ T8157] netlink: 28 bytes leftover after parsing attributes in process `syz.4.643'. [ 210.167968][ T8158] bridge0: port 3(veth0) entered blocking state [ 210.197782][ T8158] bridge0: port 3(veth0) entered disabled state [ 210.206005][ T8158] veth0: entered allmulticast mode [ 210.243832][ T8158] veth0: entered promiscuous mode [ 210.256480][ T8158] bridge0: port 3(veth0) entered blocking state [ 210.262957][ T8158] bridge0: port 3(veth0) entered forwarding state [ 210.343340][ T8164] netlink: 'syz.4.645': attribute type 10 has an invalid length. [ 210.360334][ T8164] ipvlan0: entered allmulticast mode [ 210.370872][ T8164] veth0_vlan: entered allmulticast mode [ 210.384573][ T8164] team0: Device ipvlan0 failed to register rx_handler [ 210.519310][ T5708] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 210.679352][ T5360] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 210.689654][ T5708] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 210.698654][ T5708] usb 3-1: config 0 has no interface number 0 [ 210.705304][ T5708] usb 3-1: config 0 interface 41 has no altsetting 0 [ 210.714152][ T5708] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 210.723355][ T5708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.731490][ T5708] usb 3-1: Product: syz [ 210.735713][ T5708] usb 3-1: Manufacturer: syz [ 210.740504][ T5708] usb 3-1: SerialNumber: syz [ 210.747343][ T5708] usb 3-1: config 0 descriptor?? [ 210.839315][ T5360] usb 4-1: Using ep0 maxpacket: 32 [ 210.846030][ T5360] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 210.858290][ T5360] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 210.867749][ T5360] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 210.876130][ T5360] usb 4-1: Product: syz [ 210.880567][ T5360] usb 4-1: Manufacturer: syz [ 210.885251][ T5360] usb 4-1: SerialNumber: syz [ 210.892570][ T5360] usb 4-1: config 0 descriptor?? [ 210.901172][ T8169] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 210.929434][ T5723] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 211.069430][ T5723] usb 2-1: device descriptor read/64, error -71 [ 211.220603][ T5360] usb 4-1: USB disconnect, device number 43 [ 211.228271][ T5728] uvcvideo 1-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 211.240340][ T5728] uvcvideo 1-1:166.34: No valid video chain found. [ 211.303728][ T5728] usb 1-1: USB disconnect, device number 40 [ 211.321913][ T5723] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 211.367449][ T8175] netlink: Failed to add helper -22 [ 211.380479][ T8175] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.391404][ T8179] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 211.461125][ T8183] fuse: Bad value for 'group_id' [ 211.466169][ T8183] fuse: Bad value for 'group_id' [ 211.479431][ T5723] usb 2-1: device descriptor read/64, error -71 [ 211.559759][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 211.589382][ T5753] usb 5-1: new low-speed USB device number 39 using dummy_hcd [ 211.597278][ T5723] usb usb2-port1: attempt power cycle [ 211.757021][ T5753] usb 5-1: unable to get BOS descriptor or descriptor too short [ 211.772749][ T189] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 211.792799][ T5753] usb 5-1: config 127 has an invalid interface number: 106 but max is 0 [ 211.801569][ T5753] usb 5-1: config 127 has no interface number 0 [ 211.808799][ T5753] usb 5-1: config 127 interface 106 altsetting 8 endpoint 0xF has invalid maxpacket 128, setting to 8 [ 211.829842][ T5753] usb 5-1: config 127 interface 106 has no altsetting 0 [ 211.846387][ T5753] usb 5-1: string descriptor 0 read error: -22 [ 211.855498][ T5753] usb 5-1: New USB device found, idVendor=0403, idProduct=e80a, bcdDevice= 0.b8 [ 211.864664][ T5753] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.887934][ T5753] ftdi_sio 5-1:127.106: FTDI USB Serial Device converter detected [ 211.903711][ T8191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.653'. [ 211.909084][ T5753] usb 5-1: Detected SIO [ 211.926609][ T5753] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 211.935505][ T189] usb 1-1: device descriptor read/64, error -71 [ 211.949677][ T5723] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 211.982122][ T5723] usb 2-1: device descriptor read/8, error -71 [ 212.189323][ T189] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 212.239446][ T5723] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 212.256139][ T8177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.265149][ T8177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.287353][ T8177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.301960][ T5723] usb 2-1: device descriptor read/8, error -71 [ 212.329862][ T8177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.339846][ T189] usb 1-1: device descriptor read/64, error -71 [ 212.409836][ T5723] usb usb2-port1: unable to enumerate USB device [ 212.461262][ T189] usb usb1-port1: attempt power cycle [ 212.601971][ T5723] usb 5-1: USB disconnect, device number 39 [ 212.624373][ T5723] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 212.637624][ T5723] ftdi_sio 5-1:127.106: device disconnected [ 212.819402][ T189] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 212.820804][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffe0 [ 212.839311][ T8162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.858989][ T8162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.871093][ T189] usb 1-1: device descriptor read/8, error -71 [ 213.091535][ T8162] bond3: option min_links: invalid value (18446744073709551608) [ 213.100994][ T8162] bond3: option min_links: allowed values 0 - 2147483647 [ 213.113236][ T8162] bond3 (unregistering): Released all slaves [ 213.119479][ T189] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 213.160548][ T189] usb 1-1: device descriptor read/8, error -71 [ 213.195694][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 213.223146][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 213.237686][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 213.250549][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 213.262260][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 213.274309][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 213.285593][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 213.289710][ T189] usb usb1-port1: unable to enumerate USB device [ 213.297801][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 213.314120][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 213.326388][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 213.338024][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 213.351091][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 213.362497][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 213.374668][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 213.385960][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 213.398157][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 213.411488][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 213.423962][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 213.436720][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 213.448707][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 213.461863][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 213.470415][ T5723] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 213.473909][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 213.491468][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 213.503380][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 213.514511][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 213.526536][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 213.538018][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 213.554180][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 213.565736][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 213.578036][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 213.589840][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 213.602354][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 213.615563][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 213.628143][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 213.640149][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 213.642005][ T5723] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.653295][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 213.666613][ T5723] usb 5-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 213.687552][ T5723] usb 5-1: config 0 interface 0 has no altsetting 0 [ 213.695740][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 213.698811][ T5723] usb 5-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00 [ 213.708783][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 213.728164][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 213.731175][ T5723] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.740945][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 213.771782][ T5723] usb 5-1: config 0 descriptor?? [ 213.803747][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 213.846519][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 213.880815][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 213.942155][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 213.968010][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 213.992411][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 214.009102][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 214.021852][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 214.033564][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 214.045904][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 214.057628][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 214.070117][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 214.081717][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 214.094148][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 214.105773][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 214.118130][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 214.129771][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 214.142147][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 214.155015][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 214.167388][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 214.179113][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 214.192371][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 214.204441][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 214.216808][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 214.229577][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 214.241719][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 214.253504][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 214.265840][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 214.277501][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 214.309662][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 214.321357][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 214.333801][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 214.345661][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 214.368072][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 214.380901][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 214.393180][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 214.395517][ T5723] usbhid 5-1:0.0: can't add hid device: -71 [ 214.404637][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 214.422629][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 214.434124][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 214.446546][ T5723] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 214.465015][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 214.489077][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 214.501584][ T5723] usb 5-1: USB disconnect, device number 40 [ 214.540236][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 214.569784][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 214.587408][ T8214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.660'. [ 214.607258][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 214.612472][ T8216] syzkaller0: entered allmulticast mode [ 214.640467][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 214.676086][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 214.699131][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 214.722435][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 214.754812][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 214.776188][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 214.789742][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 214.801885][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 214.813914][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 214.826594][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 214.838463][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 214.850743][ T8227] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 214.851021][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 214.880095][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 214.891516][ T8227] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 214.895085][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 214.926366][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 214.967970][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 214.980176][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 214.992654][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 215.018287][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 215.032619][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 215.047352][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 215.088878][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 215.115582][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 215.144794][ T8238] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.667'. [ 215.162903][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 215.187055][ T8240] fuse: Bad value for 'group_id' [ 215.192567][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 215.204270][ T8240] fuse: Bad value for 'group_id' [ 215.206527][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 215.223464][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 215.238888][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 215.250744][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 215.263568][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 215.275373][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 215.286967][ T5728] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 215.298177][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 215.332414][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 215.349723][ T8247] xt_hashlimit: size too large, truncated to 1048576 [ 215.355187][ T8250] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 215.358415][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 215.386774][ T8247] xt_hashlimit: invalid interval [ 215.395479][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 215.423138][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 215.436933][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 215.450379][ T5360] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 215.465688][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 215.488122][ T5728] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.498627][ T5728] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 215.517040][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 215.531968][ T5728] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 215.541549][ T5728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.551663][ T5728] usb 1-1: Product: syz [ 215.556540][ T5728] usb 1-1: Manufacturer: syz [ 215.562506][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 215.573402][ T5728] usb 1-1: SerialNumber: syz [ 215.578948][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 215.631056][ T5728] usb 1-1: 0:1 : does not exist [ 215.636945][ T5360] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 215.645404][ T5360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.658437][ T5360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.669143][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 215.680917][ T5360] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 215.695205][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 215.707296][ T5360] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 215.716876][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 215.729394][ T5360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.742081][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 215.754344][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 215.760234][ T5723] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 215.767787][ T5360] usb 5-1: config 0 descriptor?? [ 215.778652][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 215.794012][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 215.806840][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 215.827587][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 215.856436][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 215.869024][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 215.880884][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 215.892981][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 215.906833][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 215.918904][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 215.931829][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 215.945374][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 215.956866][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 215.967605][ T5723] usb 4-1: Using ep0 maxpacket: 8 [ 215.971856][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 215.984942][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 215.986577][ T5723] usb 4-1: unable to get BOS descriptor or descriptor too short [ 216.008396][ T5723] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 216.018837][ T5723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.021951][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 216.027100][ T5723] usb 4-1: Product: syz [ 216.042341][ T5723] usb 4-1: Manufacturer: syz [ 216.046999][ T5723] usb 4-1: SerialNumber: syz [ 216.062388][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 216.092747][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 216.107147][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 216.119937][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 216.131664][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 216.155050][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 216.180077][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 216.195212][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 216.207702][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 216.221412][ T8238] netlink: 10 bytes leftover after parsing attributes in process `syz.4.667'. [ 216.235618][ T5360] plantronics 0003:047F:FFFF.000C: reserved main item tag 0xd [ 216.244874][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 216.263078][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 216.272284][ T5723] usb 4-1: selecting invalid altsetting 1 [ 216.277617][ T5360] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 216.300590][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 216.312488][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 216.329440][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 216.341487][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 216.354019][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 216.365750][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 216.378166][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 216.389844][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 216.402030][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 216.413805][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 216.425772][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 216.450173][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 216.468306][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 216.479792][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 216.491801][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 216.503212][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 216.515251][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 216.526730][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 216.539584][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 216.551431][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 216.563895][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 216.575517][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 216.587737][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 216.599568][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 216.611867][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 216.625067][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 216.637328][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 216.637428][ T189] usb 5-1: USB disconnect, device number 41 [ 216.648939][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 216.667703][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 216.679628][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 216.697320][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 216.709039][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 216.721210][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 216.732646][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 216.744553][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 216.757362][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 216.769481][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 216.791906][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 216.804271][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 216.817391][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 216.839062][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 216.860187][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 216.872252][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 216.916181][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 216.933949][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 216.949182][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 216.961919][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 216.988733][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 217.000132][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 217.016538][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 217.030782][ T5708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0336:ffffffb9 [ 217.044764][ T5708] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 217.088211][ T5708] usb 3-1: USB disconnect, device number 45 [ 217.399683][ T189] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 217.441511][ T5708] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 217.486913][ T8289] input: syz1 as /devices/virtual/input/input24 [ 217.572680][ T189] usb 2-1: unable to get BOS descriptor or descriptor too short [ 217.587615][ T189] usb 2-1: language id specifier not provided by device, defaulting to English [ 217.599966][ T189] usb 2-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 217.609344][ T5708] usb 3-1: device descriptor read/64, error -71 [ 217.609552][ T189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.624184][ T189] usb 2-1: Manufacturer: ы [ 217.630483][ T189] usb 2-1: SerialNumber: syz [ 217.852180][ T8281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.859402][ T5708] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 217.869816][ T8281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.879409][ T5360] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 217.974351][ T5728] usb 1-1: 3:0: failed to get current value for ch 0 (-71) [ 217.984346][ T5728] usb 1-1: unit 13 not found! [ 218.001013][ T5708] usb 3-1: device descriptor read/64, error -71 [ 218.039430][ T5360] usb 5-1: Using ep0 maxpacket: 32 [ 218.054046][ T5360] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.065898][ T5728] usb 1-1: USB disconnect, device number 45 [ 218.072550][ T5360] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 218.089305][ T5360] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 218.098615][ T5360] usb 5-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131 [ 218.108919][ T5360] usb 5-1: Product: syz [ 218.113810][ T5360] usb 5-1: Manufacturer: syz [ 218.118560][ T5360] usb 5-1: SerialNumber: syz [ 218.123867][ T5708] usb usb3-port1: attempt power cycle [ 218.135423][ T5360] appletouch 5-1:1.0: Could not find int-in endpoint [ 218.147402][ T5360] appletouch 5-1:1.0: probe with driver appletouch failed with error -5 [ 218.158069][ T5360] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 218.211012][ T189] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 218.218053][ T5723] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 218.228097][ T189] usb 2-1: MIDIStreaming interface descriptor not found [ 218.238990][ T5723] usb 4-1: USB disconnect, device number 44 [ 218.261307][ T6553] udevd[6553]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 218.309171][ T189] usb 2-1: USB disconnect, device number 54 [ 218.432154][ T5753] usb 5-1: USB disconnect, device number 42 [ 218.474639][ T6553] udevd[6553]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.492277][ T5708] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 218.532548][ T5708] usb 3-1: device descriptor read/8, error -71 [ 218.570402][ T8308] netlink: 172 bytes leftover after parsing attributes in process `syz.1.692'. [ 218.581945][ T5723] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 218.590746][ T8309] x_tables: duplicate underflow at hook 1 [ 218.739533][ T5723] usb 4-1: Using ep0 maxpacket: 32 [ 218.752757][ T5723] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 218.764375][ T5723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.773791][ T5723] usb 4-1: Product: syz [ 218.779764][ T5708] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 218.782569][ T5723] usb 4-1: Manufacturer: syz [ 218.800432][ T5708] usb 3-1: device descriptor read/8, error -71 [ 218.801548][ T5723] usb 4-1: SerialNumber: syz [ 218.819181][ T5723] usb 4-1: config 0 descriptor?? [ 218.830405][ T5723] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 218.929718][ T5708] usb usb3-port1: unable to enumerate USB device [ 219.239370][ T10] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 219.399357][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 219.421818][ T10] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 219.435036][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.448772][ T10] usb 5-1: Product: syz [ 219.455445][ T10] usb 5-1: Manufacturer: syz [ 219.467199][ T10] usb 5-1: SerialNumber: syz [ 219.904104][ T5723] gspca_ov534_9: reg_w failed -71 [ 220.230184][ T5723] gspca_ov534_9: Unknown sensor 0000 [ 220.230250][ T5723] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 220.270366][ T5695] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 220.321142][ T5723] usb 4-1: USB disconnect, device number 45 [ 220.489633][ T5695] usb 1-1: Using ep0 maxpacket: 8 [ 220.505210][ T5695] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 220.533850][ T5695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.551001][ T5695] usb 1-1: Product: syz [ 220.557980][ T5695] usb 1-1: Manufacturer: syz [ 220.565780][ T5695] usb 1-1: SerialNumber: syz [ 220.578620][ T5695] usb 1-1: config 0 descriptor?? [ 220.791088][ T5695] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 220.800153][ T8373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.853883][ T8373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.089372][ T5708] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 221.253129][ T5708] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 221.280772][ T5708] usb 4-1: config 0 has no interface number 0 [ 221.304873][ T5708] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 221.367005][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.426196][ T5708] usb 4-1: Product: syz [ 221.454808][ T5708] usb 4-1: Manufacturer: syz [ 221.466209][ T5708] usb 4-1: SerialNumber: syz [ 221.513482][ T5708] usb 4-1: config 0 descriptor?? [ 221.686833][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.715'. [ 221.972651][ T5708] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 222.025451][ T5695] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 222.049037][ T5708] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -32 [ 222.071510][ T5695] usb 1-1: USB disconnect, device number 46 [ 222.131122][ T5708] asix 4-1:0.251: probe with driver asix failed with error -5 [ 222.200732][ T5708] usb 4-1: USB disconnect, device number 46 [ 222.248214][ T8393] netlink: 'syz.4.717': attribute type 2 has an invalid length. [ 222.322257][ T8392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.375292][ T8392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.406655][ T8392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.717'. [ 222.453301][ T8392] netlink: 'syz.4.717': attribute type 10 has an invalid length. [ 223.135329][ T8412] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.144817][ T8412] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.444732][ T8412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.467887][ T8412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.571454][ T8412] veth1_macvtap: left allmulticast mode [ 223.638213][ T8412] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 223.647275][ T8412] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 223.694352][ T8412] bond1: left promiscuous mode [ 223.729400][ T1172] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.750075][ T8436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.769548][ T35] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.786508][ T35] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.813631][ T8436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.820579][ T35] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.084438][ T8442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.733'. [ 224.365787][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 224.470601][ T8463] netlink: 48 bytes leftover after parsing attributes in process `syz.2.737'. [ 224.566067][ T5638] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 224.696118][ T10] usb 5-1: USB disconnect, device number 43 [ 224.838083][ T6554] udevd[6554]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 224.857087][ T8491] fuse: Bad value for 'fd' [ 225.206821][ T8455] workqueue: Failed to create a rescuer kthread for wq "nfc17_nci_cmd_wq": -EINTR [ 225.439321][ T5708] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 225.599347][ T5708] usb 1-1: device descriptor read/64, error -71 [ 225.839417][ T5708] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 226.006149][ T5708] usb 1-1: device descriptor read/64, error -71 [ 226.133958][ T5708] usb usb1-port1: attempt power cycle [ 226.480414][ T5708] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 226.516071][ T5708] usb 1-1: device descriptor read/8, error -71 [ 226.769533][ T5708] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 226.811000][ T5708] usb 1-1: device descriptor read/8, error -71 [ 226.932967][ T5708] usb usb1-port1: unable to enumerate USB device [ 226.941668][ T8553] netlink: 388 bytes leftover after parsing attributes in process `syz.3.748'. [ 227.397339][ T5708] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 227.572103][ T5708] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.594852][ T5708] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 227.604094][ T5708] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 227.614479][ T5708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.630451][ T5723] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 227.639466][ T5708] usb 5-1: config 0 descriptor?? [ 227.649951][ T5708] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 227.656767][ T5708] dvb-usb: bulk message failed: -22 (3/0) [ 227.666106][ T5708] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 227.680207][ T5708] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 227.689052][ T5708] usb 5-1: media controller created [ 227.697106][ T5708] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 227.717789][ T5708] dvb-usb: bulk message failed: -22 (6/0) [ 227.730467][ T5708] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 227.746496][ T5708] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input25 [ 227.774824][ T5708] dvb-usb: schedule remote query interval to 150 msecs. [ 227.789398][ T5723] usb 4-1: Using ep0 maxpacket: 16 [ 227.789752][ T5708] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 227.799953][ T5723] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 126, using maximum allowed: 30 [ 227.821025][ T189] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 227.832869][ T5723] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 126 [ 227.855510][ T5723] usb 4-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 227.863071][ T8556] dibusb: i2c wr: len=62 is too big! [ 227.863071][ T8556] [ 227.875138][ T5723] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.886629][ T5708] usb 5-1: USB disconnect, device number 44 [ 227.897539][ T5723] usb 4-1: config 0 descriptor?? [ 227.964633][ T5708] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 228.023900][ T189] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 228.041668][ T189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.056895][ T189] usb 3-1: Product: syz [ 228.062681][ T189] usb 3-1: Manufacturer: syz [ 228.067622][ T189] usb 3-1: SerialNumber: syz [ 228.081305][ T189] usb 3-1: config 0 descriptor?? [ 228.316523][ T5723] hid_parser_main: 32 callbacks suppressed [ 228.316544][ T5723] waltop 0003:172F:0032.000D: unknown main item tag 0x3 [ 228.347264][ T5723] waltop 0003:172F:0032.000D: unexpected long global item [ 228.357949][ T5723] waltop 0003:172F:0032.000D: probe with driver waltop failed with error -22 [ 228.560277][ T8562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.581325][ T8562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.656189][ T8587] binder: 8584:8587 ioctl c0306201 0 returned -14 [ 228.668870][ T8585] binder: 8584:8585 ioctl 40189206 0 returned -22 [ 228.670165][ T8587] binder: 8584:8587 ioctl c0306201 0 returned -14 [ 228.697809][ T8569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.710121][ T8569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.730846][ T5723] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 228.731214][ T5728] usb 4-1: USB disconnect, device number 47 [ 228.899549][ T5723] usb 5-1: Using ep0 maxpacket: 16 [ 228.908863][ T5723] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 228.921865][ T5723] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.943751][ T5723] usb 5-1: config 0 descriptor?? [ 228.956919][ T5723] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 229.157344][ T8600] netlink: 'syz.4.761': attribute type 3 has an invalid length. [ 229.335844][ T8569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.758'. [ 229.529443][ T10] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 229.709361][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 229.717893][ T10] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 229.727430][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.735615][ T10] usb 4-1: Product: syz [ 229.742021][ T10] usb 4-1: Manufacturer: syz [ 229.746681][ T10] usb 4-1: SerialNumber: syz [ 229.754714][ T10] usb 4-1: config 0 descriptor?? [ 229.764701][ T10] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 230.089881][ T5695] usb 5-1: USB disconnect, device number 45 [ 230.138404][ T8608] netlink: 40 bytes leftover after parsing attributes in process `syz.4.767'. [ 230.150789][ T8608] netlink: 40 bytes leftover after parsing attributes in process `syz.4.767'. [ 230.165780][ T8606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.179662][ T8606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.349977][ T8613] netlink: 'syz.4.769': attribute type 11 has an invalid length. [ 231.180670][ T189] usb 3-1: f81604_read: reg: 100e failed: -ETIMEDOUT [ 231.201837][ T189] usb 3-1: f81604_read: reg: 200f failed: -EPIPE [ 231.270407][ T5728] usb 3-1: USB disconnect, device number 51 [ 231.306740][ T8614] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 231.365044][ T5288] usb 3-1: f81604_read: reg: 100f failed: -ENODEV [ 231.383159][ T5288] usb 3-1: f81604_read: reg: 200f failed: -ENODEV [ 231.431757][ T5728] usb 3-1: f81604_read: reg: 100f failed: -ENODEV [ 231.513263][ T8626] loop4: detected capacity change from 0 to 7 [ 231.534495][ T8626] Dev loop4: unable to read RDB block 7 [ 231.556235][ T8626] loop4: AHDI p1 p2 p3 [ 231.568969][ T5728] usb 3-1: f81604_read: reg: 200f failed: -ENODEV [ 231.581654][ T8626] loop4: partition table partially beyond EOD, truncated [ 231.615334][ T8626] loop4: p1 start 1601398130 is beyond EOD, truncated [ 231.643594][ T8626] loop4: p2 start 1702059890 is beyond EOD, truncated [ 231.751652][ T8624] netlink: 40 bytes leftover after parsing attributes in process `syz.1.770'. [ 231.811174][ T10] gspca_ov534_9: reg_w failed -71 [ 232.069389][ T10] gspca_ov534_9: Unknown sensor 0000 [ 232.069479][ T10] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 232.134467][ T10] usb 4-1: USB disconnect, device number 48 [ 232.535961][ T8646] use of bytesused == 0 is deprecated and will be removed in the future, [ 232.536506][ T8649] netlink: 'syz.3.776': attribute type 32 has an invalid length. [ 232.576854][ T8649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.776'. [ 232.598159][ T8646] use the actual size instead. [ 232.758591][ T8649] bond1: option coupled_control: invalid value (28) [ 232.792208][ T8649] bond1 (unregistering): Released all slaves [ 232.862374][ T10] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 232.911338][ T189] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 233.039399][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 233.054865][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 233.086794][ T189] usb 1-1: unable to get BOS descriptor or descriptor too short [ 233.100743][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 233.117214][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 8438, setting to 1024 [ 233.139400][ T189] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.150216][ T189] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 233.165551][ T10] usb 2-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 233.178281][ T189] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 233.188818][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.204314][ T189] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.212800][ T10] usb 2-1: Product: syz [ 233.220400][ T189] usb 1-1: Product: syz [ 233.224680][ T10] usb 2-1: Manufacturer: syz [ 233.232755][ T189] usb 1-1: Manufacturer: syz [ 233.238009][ T10] usb 2-1: SerialNumber: syz [ 233.246605][ T189] usb 1-1: SerialNumber: syz [ 233.254868][ T10] usb 2-1: config 0 descriptor?? [ 233.285381][ T10] radioshark2 2-1:0.0: Invalid radioSHARK2 device [ 233.297039][ T189] usb 1-1: selecting invalid altsetting 1 [ 233.313336][ T10] radioshark2 2-1:0.0: probe with driver radioshark2 failed with error -22 [ 233.324667][ T189] usb 1-1: unit 6 not found! [ 233.378362][ T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 233.477950][ T189] usb 1-1: 2:0: failed to get current value for ch 0 (-32) [ 233.501687][ T10] usb 2-1: USB disconnect, device number 55 [ 233.719644][ T5728] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 233.772608][ T189] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 233.838084][ T6553] udevd[6553]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 233.879271][ T5728] usb 4-1: Using ep0 maxpacket: 8 [ 233.908023][ T5728] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 233.924570][ T5728] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 233.934360][ T5728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.943704][ T5728] usb 4-1: Product: syz [ 233.948245][ T5728] usb 4-1: Manufacturer: syz [ 233.953528][ T5728] usb 4-1: SerialNumber: syz [ 233.964441][ T5728] usb 4-1: config 0 descriptor?? [ 233.975820][ T5728] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 234.198095][ T10] usb 1-1: USB disconnect, device number 51 [ 234.218326][ T8698] batadv_slave_1: entered promiscuous mode [ 234.232233][ T189] usb 3-1: new low-speed USB device number 52 using dummy_hcd [ 234.337112][ T8701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.786'. [ 234.410001][ T189] usb 3-1: Invalid ep0 maxpacket: 16 [ 234.550032][ T189] usb 3-1: new low-speed USB device number 53 using dummy_hcd [ 234.709944][ T189] usb 3-1: Invalid ep0 maxpacket: 16 [ 234.726411][ T189] usb usb3-port1: attempt power cycle [ 234.819381][ T5708] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 234.996154][ T5708] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.025762][ T5708] usb 1-1: config 0 has no interfaces? [ 235.039800][ T5708] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 235.051140][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 235.064663][ T5708] usb 1-1: Product: syz [ 235.069340][ T189] usb 3-1: new low-speed USB device number 54 using dummy_hcd [ 235.069633][ T5708] usb 1-1: Manufacturer: syz [ 235.092309][ T189] usb 3-1: Invalid ep0 maxpacket: 16 [ 235.104739][ T5708] usb 1-1: config 0 descriptor?? [ 235.112860][ T8695] batadv_slave_1: left promiscuous mode [ 235.233725][ T189] usb 3-1: new low-speed USB device number 55 using dummy_hcd [ 235.271923][ T189] usb 3-1: Invalid ep0 maxpacket: 16 [ 235.277674][ T189] usb usb3-port1: unable to enumerate USB device [ 235.320542][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 235.320558][ T29] audit: type=1400 audit(1785838777.017:754): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A2F2F26090260 pid=8704 comm="syz.0.787" [ 235.988486][ T5728] gspca_zc3xx: reg_r err -32 [ 236.589292][ T5728] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 236.604450][ T5728] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 237.225738][ T189] usb 4-1: USB disconnect, device number 49 [ 237.572757][ T5360] usb 1-1: USB disconnect, device number 52 [ 238.213426][ T8756] batadv_slave_1: entered promiscuous mode [ 238.259823][ T5360] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 238.361552][ T8755] batadv_slave_1: left promiscuous mode [ 238.429330][ T5360] usb 2-1: Using ep0 maxpacket: 16 [ 238.453211][ T5360] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 238.490217][ T5360] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 238.504898][ T5360] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 238.548639][ T5360] usb 2-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 238.569824][ T5360] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.625365][ T5360] usb 2-1: config 0 descriptor?? [ 238.733859][ T8765] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 239.062625][ T5360] logitech 0003:046D:C293.000E: unknown main item tag 0x0 [ 239.078313][ T5360] logitech 0003:046D:C293.000E: unknown main item tag 0x0 [ 239.090375][ T5360] logitech 0003:046D:C293.000E: unknown main item tag 0x0 [ 239.100234][ T5360] logitech 0003:046D:C293.000E: unknown main item tag 0x0 [ 239.109344][ T5360] logitech 0003:046D:C293.000E: unknown main item tag 0x0 [ 239.122835][ T5360] logitech 0003:046D:C293.000E: unknown main item tag 0x0 [ 239.146788][ T5360] logitech 0003:046D:C293.000E: unknown main item tag 0x0 [ 239.168742][ T5360] logitech 0003:046D:C293.000E: unknown main item tag 0x0 [ 239.218817][ T5360] logitech 0003:046D:C293.000E: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.1-1/input0 [ 239.259443][ T10] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 239.284815][ T5360] logitech 0003:046D:C293.000E: no inputs found [ 239.344369][ T5360] usb 2-1: USB disconnect, device number 56 [ 239.362685][ T8787] fido_id[8787]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 239.399968][ T10] usb 4-1: device descriptor read/64, error -71 [ 239.659422][ T10] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 239.679440][ T189] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 239.799341][ T10] usb 4-1: device descriptor read/64, error -71 [ 239.831646][ T189] usb 5-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=ca.8e [ 239.849954][ T189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.910121][ T10] usb usb4-port1: attempt power cycle [ 239.931412][ T189] pwc: Logitech QuickCam Zoom USB webcam detected. [ 240.061252][ T5638] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 240.069874][ T5638] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 240.110587][ T8788] netlink: 'syz.4.809': attribute type 1 has an invalid length. [ 240.174142][ T8814] netlink: 60 bytes leftover after parsing attributes in process `syz.1.814'. [ 240.203522][ T8814] netlink: 60 bytes leftover after parsing attributes in process `syz.1.814'. [ 240.252757][ T8814] netlink: 'syz.1.814': attribute type 32 has an invalid length. [ 240.268083][ T189] pwc: Failed to set LED on/off time (-71) [ 240.281160][ T10] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 240.297572][ T189] pwc: send_video_command error -71 [ 240.310301][ T189] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 240.318081][ T8822] netlink: 236 bytes leftover after parsing attributes in process `syz.0.816'. [ 240.325209][ T189] Philips webcam 5-1:127.0: probe with driver Philips webcam failed with error -71 [ 240.337530][ T10] usb 4-1: device descriptor read/8, error -71 [ 240.362605][ T189] usb 5-1: USB disconnect, device number 46 [ 240.475039][ T8827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.816'. [ 240.581121][ T10] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 240.610123][ T10] usb 4-1: device descriptor read/8, error -71 [ 240.660046][ T29] audit: type=1326 audit(1785838782.357:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8833 comm="syz.1.818" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f292fb9e019 code=0x7ffc0000 [ 240.693943][ T29] audit: type=1326 audit(1785838782.387:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8833 comm="syz.1.818" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f292fb9e019 code=0x7ffc0000 [ 240.706705][ T8835] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 240.724852][ T29] audit: type=1326 audit(1785838782.387:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8833 comm="syz.1.818" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f292fb9e019 code=0x7ffc0000 [ 240.750010][ T10] usb usb4-port1: unable to enumerate USB device [ 240.757358][ T29] audit: type=1326 audit(1785838782.387:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8833 comm="syz.1.818" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f292fb9dd82 code=0x7ffc0000 [ 240.786418][ T29] audit: type=1326 audit(1785838782.387:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8833 comm="syz.1.818" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f292fb9de17 code=0x7ffc0000 [ 240.814278][ T29] audit: type=1326 audit(1785838782.387:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8833 comm="syz.1.818" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f292fb5ad11 code=0x7ffc0000 [ 240.839987][ T29] audit: type=1326 audit(1785838782.387:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8833 comm="syz.1.818" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f292fb9ee09 code=0x7ffc0000 [ 240.869316][ T29] audit: type=1326 audit(1785838782.387:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8833 comm="syz.1.818" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f292fb9e019 code=0x7ffc0000 [ 240.894340][ T29] audit: type=1326 audit(1785838782.387:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8833 comm="syz.1.818" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f292fb9e019 code=0x7ffc0000 [ 240.922952][ T29] audit: type=1326 audit(1785838782.387:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8833 comm="syz.1.818" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f292fb9e019 code=0x7ffc0000 [ 240.954502][ T8836] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 241.022384][ T8839] ------------[ cut here ]------------ [ 241.029663][ T8839] kvm_is_error_gpa(gpa) == kvm_is_error_hva(uhva) [ 241.029697][ T8839] WARNING: arch/x86/kvm/../../../virt/kvm/pfncache.c:267 at __kvm_gpc_refresh+0x1510/0x1710, CPU#0: syz.4.819/8839 [ 241.048454][ T8839] Modules linked in: [ 241.052746][ T8839] CPU: 0 UID: 0 PID: 8839 Comm: syz.4.819 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.063674][ T8839] Tainted: [L]=SOFTLOCKUP [ 241.068028][ T8839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 241.072761][ T8843] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 241.079734][ T8839] RIP: 0010:__kvm_gpc_refresh+0x1510/0x1710 [ 241.091167][ T8839] Code: c6 05 9b 2a 00 0f 01 48 c7 c7 b2 52 21 8e be 3c 04 00 00 48 c7 c2 e0 3f e2 8b e8 9b 3d 62 00 e9 81 ee ff ff e8 81 3f 86 00 90 <0f> 0b 90 bb ea ff ff ff 49 bf 00 00 00 00 00 fc ff df e9 4b f6 ff [ 241.111991][ T8839] RSP: 0018:ffffc900042df320 EFLAGS: 00010283 [ 241.118229][ T8839] RAX: ffffffff8140d2ef RBX: ffff888000000000 RCX: 0000000000080000 [ 241.126321][ T8839] RDX: ffffc90010f55000 RSI: 0000000000001ac0 RDI: 0000000000001ac1 [ 241.134537][ T8839] RBP: ffffc900042df4b8 R08: ffffffff90579d37 R09: 1ffffffff20af3a6 [ 241.142681][ T8839] R10: dffffc0000000000 R11: fffffbfff20af3a7 R12: 1ffff9200085be78 [ 241.150767][ T8839] R13: ffff888034521198 R14: ffff888000000000 R15: ffffffffffffff01 [ 241.158776][ T8839] FS: 00007f8f733216c0(0000) GS:ffff888124f4b000(0000) knlGS:0000000000000000 [ 241.167786][ T8839] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 241.174433][ T8839] CR2: 0000000000000000 CR3: 00000000752a8000 CR4: 00000000003526f0 [ 241.182804][ T8839] Call Trace: [ 241.186267][ T8839] [ 241.189711][ T8839] ? lockdep_hardirqs_on+0x7a/0x110 [ 241.194944][ T8839] ? seqcount_lockdep_reader_access+0xea/0x100 [ 241.202271][ T8839] ? kvm_get_walltime_and_clockread+0x2d7/0x370 [ 241.208546][ T8839] ? kvm_gpc_refresh+0x31/0x110 [ 241.213494][ T8839] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 241.219030][ T8839] kvm_gpc_refresh+0xe1/0x110 [ 241.223831][ T8839] kvm_xen_inject_pending_events+0xfb/0x540 [ 241.229807][ T8839] ? __pfx_kvm_xen_inject_pending_events+0x10/0x10 [ 241.236342][ T8839] ? __vmx_complete_interrupts+0xe7/0x640 [ 241.242202][ T8839] vcpu_run+0x6649/0x7940 [ 241.246581][ T8839] ? vcpu_run+0x362a/0x7940 [ 241.251193][ T8839] ? __pfx_vcpu_run+0x10/0x10 [ 241.255891][ T8839] ? kvm_arch_vcpu_ioctl_run+0x2ba/0x2010 [ 241.261968][ T8839] ? kvm_arch_vcpu_ioctl_run+0x2ba/0x2010 [ 241.267704][ T8839] ? fpu_swap_kvm_fpstate+0xcb/0x510 [ 241.273066][ T8839] kvm_arch_vcpu_ioctl_run+0x13ed/0x2010 [ 241.278695][ T8839] ? kvm_arch_vcpu_ioctl_run+0x2ba/0x2010 [ 241.284445][ T8839] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 241.290467][ T8839] ? __lock_acquire+0x683/0x2cf0 [ 241.295397][ T8839] ? __mutex_lock+0x30d/0x1550 [ 241.300329][ T8839] ? kasan_quarantine_put+0xbb/0x1f0 [ 241.305671][ T8839] ? do_raw_write_lock+0x11d/0x260 [ 241.310847][ T8839] kvm_vcpu_ioctl+0xa61/0xfd0 [ 241.315532][ T8839] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 241.320823][ T8839] ? hook_file_ioctl+0x1f0/0x5f0 [ 241.325807][ T8839] ? __fget_files+0x2a/0x420 [ 241.330466][ T8839] ? __fget_files+0x2a/0x420 [ 241.335088][ T8839] ? __fget_files+0x3a2/0x420 [ 241.339843][ T8839] ? __fget_files+0x2a/0x420 [ 241.344447][ T8839] ? bpf_lsm_file_ioctl+0x9/0x20 [ 241.349449][ T8839] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 241.354664][ T8839] __se_sys_ioctl+0xfc/0x170 [ 241.359348][ T8839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.365424][ T8839] do_syscall_64+0x174/0x580 [ 241.370045][ T8839] ? trace_irq_disable+0x3b/0x140 [ 241.375154][ T8839] ? clear_bhb_loop+0x40/0x90 [ 241.379875][ T8839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.385896][ T8839] RIP: 0033:0x7f8f7239e019 [ 241.390404][ T8839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.410061][ T8839] RSP: 002b:00007f8f73321028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 241.418491][ T8839] RAX: ffffffffffffffda RBX: 00007f8f72625fa0 RCX: 00007f8f7239e019 [ 241.426578][ T8839] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 241.434640][ T8839] RBP: 00007f8f7243500c R08: 0000000000000000 R09: 0000000000000000 [ 241.442728][ T8839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.450800][ T8839] R13: 00007f8f72626038 R14: 00007f8f72625fa0 R15: 00007f8f7274fa48 [ 241.458805][ T8839] [ 241.461934][ T8839] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 241.469315][ T8839] CPU: 0 UID: 0 PID: 8839 Comm: syz.4.819 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.480080][ T8839] Tainted: [L]=SOFTLOCKUP [ 241.484393][ T8839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 241.494444][ T8839] Call Trace: [ 241.497717][ T8839] [ 241.500639][ T8839] vpanic+0x56c/0xa60 [ 241.504653][ T8839] ? __pfx__printk+0x10/0x10 [ 241.509237][ T8839] ? __pfx_vpanic+0x10/0x10 [ 241.513737][ T8839] ? is_bpf_text_address+0x292/0x2b0 [ 241.519055][ T8839] ? is_bpf_text_address+0x26/0x2b0 [ 241.524256][ T8839] panic+0xc5/0xd0 [ 241.527980][ T8839] ? __pfx_panic+0x10/0x10 [ 241.532420][ T8839] __warn+0x315/0x4c0 [ 241.536388][ T8839] ? __kvm_gpc_refresh+0x1510/0x1710 [ 241.541673][ T8839] ? __kvm_gpc_refresh+0x1510/0x1710 [ 241.546974][ T8839] __report_bug+0x276/0x570 [ 241.551514][ T8839] ? __kvm_gpc_refresh+0x1510/0x1710 [ 241.556835][ T8839] ? __pfx___report_bug+0x10/0x10 [ 241.561859][ T8839] ? __lock_acquire+0x683/0x2cf0 [ 241.566799][ T8839] ? __lock_acquire+0x683/0x2cf0 [ 241.571738][ T8839] ? __kvm_gpc_refresh+0x1510/0x1710 [ 241.577025][ T8839] report_bug+0x16a/0x220 [ 241.581439][ T8839] ? __kvm_gpc_refresh+0x1510/0x1710 [ 241.586717][ T8839] ? __kvm_gpc_refresh+0x1512/0x1710 [ 241.592006][ T8839] handle_bug+0x9c/0x200 [ 241.596332][ T8839] exc_invalid_op+0x1a/0x50 [ 241.600831][ T8839] asm_exc_invalid_op+0x1a/0x20 [ 241.605874][ T8839] RIP: 0010:__kvm_gpc_refresh+0x1510/0x1710 [ 241.611772][ T8839] Code: c6 05 9b 2a 00 0f 01 48 c7 c7 b2 52 21 8e be 3c 04 00 00 48 c7 c2 e0 3f e2 8b e8 9b 3d 62 00 e9 81 ee ff ff e8 81 3f 86 00 90 <0f> 0b 90 bb ea ff ff ff 49 bf 00 00 00 00 00 fc ff df e9 4b f6 ff [ 241.631480][ T8839] RSP: 0018:ffffc900042df320 EFLAGS: 00010283 [ 241.637561][ T8839] RAX: ffffffff8140d2ef RBX: ffff888000000000 RCX: 0000000000080000 [ 241.645525][ T8839] RDX: ffffc90010f55000 RSI: 0000000000001ac0 RDI: 0000000000001ac1 [ 241.653505][ T8839] RBP: ffffc900042df4b8 R08: ffffffff90579d37 R09: 1ffffffff20af3a6 [ 241.661470][ T8839] R10: dffffc0000000000 R11: fffffbfff20af3a7 R12: 1ffff9200085be78 [ 241.669447][ T8839] R13: ffff888034521198 R14: ffff888000000000 R15: ffffffffffffff01 [ 241.677418][ T8839] ? __kvm_gpc_refresh+0x150f/0x1710 [ 241.682714][ T8839] ? lockdep_hardirqs_on+0x7a/0x110 [ 241.687908][ T8839] ? seqcount_lockdep_reader_access+0xea/0x100 [ 241.694059][ T8839] ? kvm_get_walltime_and_clockread+0x2d7/0x370 [ 241.700300][ T8839] ? kvm_gpc_refresh+0x31/0x110 [ 241.705150][ T8839] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 241.710634][ T8839] kvm_gpc_refresh+0xe1/0x110 [ 241.715314][ T8839] kvm_xen_inject_pending_events+0xfb/0x540 [ 241.721207][ T8839] ? __pfx_kvm_xen_inject_pending_events+0x10/0x10 [ 241.727704][ T8839] ? __vmx_complete_interrupts+0xe7/0x640 [ 241.733427][ T8839] vcpu_run+0x6649/0x7940 [ 241.737771][ T8839] ? vcpu_run+0x362a/0x7940 [ 241.742313][ T8839] ? __pfx_vcpu_run+0x10/0x10 [ 241.747104][ T8839] ? kvm_arch_vcpu_ioctl_run+0x2ba/0x2010 [ 241.752924][ T8839] ? kvm_arch_vcpu_ioctl_run+0x2ba/0x2010 [ 241.758650][ T8839] ? fpu_swap_kvm_fpstate+0xcb/0x510 [ 241.763981][ T8839] kvm_arch_vcpu_ioctl_run+0x13ed/0x2010 [ 241.769635][ T8839] ? kvm_arch_vcpu_ioctl_run+0x2ba/0x2010 [ 241.775372][ T8839] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 241.781348][ T8839] ? __lock_acquire+0x683/0x2cf0 [ 241.786286][ T8839] ? __mutex_lock+0x30d/0x1550 [ 241.791047][ T8839] ? kasan_quarantine_put+0xbb/0x1f0 [ 241.796346][ T8839] ? do_raw_write_lock+0x11d/0x260 [ 241.801462][ T8839] kvm_vcpu_ioctl+0xa61/0xfd0 [ 241.806150][ T8839] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 241.811357][ T8839] ? hook_file_ioctl+0x1f0/0x5f0 [ 241.816306][ T8839] ? __fget_files+0x2a/0x420 [ 241.820899][ T8839] ? __fget_files+0x2a/0x420 [ 241.825502][ T8839] ? __fget_files+0x3a2/0x420 [ 241.830194][ T8839] ? __fget_files+0x2a/0x420 [ 241.834786][ T8839] ? bpf_lsm_file_ioctl+0x9/0x20 [ 241.839728][ T8839] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 241.844921][ T8839] __se_sys_ioctl+0xfc/0x170 [ 241.849505][ T8839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.855582][ T8839] do_syscall_64+0x174/0x580 [ 241.860191][ T8839] ? trace_irq_disable+0x3b/0x140 [ 241.865213][ T8839] ? clear_bhb_loop+0x40/0x90 [ 241.869897][ T8839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.875880][ T8839] RIP: 0033:0x7f8f7239e019 [ 241.880288][ T8839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.899904][ T8839] RSP: 002b:00007f8f73321028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 241.908330][ T8839] RAX: ffffffffffffffda RBX: 00007f8f72625fa0 RCX: 00007f8f7239e019 [ 241.916297][ T8839] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 241.924263][ T8839] RBP: 00007f8f7243500c R08: 0000000000000000 R09: 0000000000000000 [ 241.932240][ T8839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.940222][ T8839] R13: 00007f8f72626038 R14: 00007f8f72625fa0 R15: 00007f8f7274fa48 [ 241.948293][ T8839] [ 241.951572][ T8839] Kernel Offset: disabled [ 241.955890][ T8839] Rebooting in 86400 seconds..