last executing test programs: 14.109400402s ago: executing program 3 (id=662): socket$inet6_sctp(0xa, 0x5, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0xa, 0x4e06, 0x80000, @loopback, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000290000003900000000d502"], 0x18}, 0x20040081) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x1e, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000fc0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000001c0)=@newtaction={0x48, 0x30, 0x53b, 0x70bd2d, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) sendto$inet6(r2, &(0x7f0000000900)="582412748a9d54f5db757bc4bed58f792bd11ba21f27", 0x843e, 0x800, &(0x7f0000000240)={0xa, 0x4e23, 0xfffffffe, @loopback}, 0x1c) 12.986181456s ago: executing program 3 (id=668): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000049c7d958aec852291f8d579d42e00dd17ef2eb4391d549352765a17a009b92"], 0x14}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000940)=ANY=[], 0x44}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000006c0)={0x234, r2, 0x2, 0x70bd2d, 0xff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x21b, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x5}, @broadcast, @broadcast, @initial, {0xe, 0x5}, @value=@ver_80211n={0x0, 0x6, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, @void, @void, @val={0x3, 0x1, 0xb0}, @val={0x2d, 0x1a, {0x10, 0x0, 0x1, 0x0, {0xb, 0x1292, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x800, 0x9, 0xd}}, @void, [{0xdd, 0x3a, "a8779ee11f46b73a140419d96bc8de2971c04e3e1f35e546c07e0a8d319ee75e1a806cd0a00aa541d7969b97101cfe74f0a551c66444139787ea"}, {0xdd, 0xb2, "82fcc6b350719dc47488f8ef19ebcc09f00c8e1650324fa35c95dc4c462773657ca82eebdc27de1b99a2e37514f5a07300541f70fdecd44a90a038a4ce2de560b420f58d93d1f6a62a3f9a09bdf03eefd74c0158ace9614a323622e4b6f88731e6d9cd9e65337de1f73cd781785fb0326813b7c3445f8034049cb6c6edc73d81b6b544681b2ac714b621e67d65da601c8154a061c9f2edf09f23db6c2efff8a9d36f5d48552a5650193bb0174de8d5209385"}, {0xdd, 0xae, "85aa75718b41ba4a34af2ce9affbfe43d5c40901034b7fb8dc5d2ff3d38ee6d3ee9da0519799b37fc0d9ae96bcf1bc3f984f5a765adf2770720e3c017bb35aa7bafc20a414d3381057d362be85fa618943aff73c5196c1c70bb83ed93896866962ced545d4ecb510727e9636f1ed489e379f2381c67ba9fa1aaf92b4d182479b89e0016143460e5e97dc8d0244cf213df25b8f035cd59f4df51b1b5e0988866fa81463e3de633647fddc41b49320"}, {0xdd, 0x3a, "6814b7235791f362129f5a423649d6b1dc661923b0cdc39d3bc0e786bd512a8b653a059e1c60df8a38690a5b8424425f13a421e8665f3ed8b59a"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x234}, 0x1, 0x0, 0x0, 0x4}, 0x800) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 11.163827076s ago: executing program 3 (id=670): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d000005000100070000"], 0x5c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c00"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) preadv(r4, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0) read$FUSE(r4, &(0x7f0000005b80)={0x2020}, 0x2020) ioctl$BTRFS_IOC_ADD_DEV(r3, 0xff08, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getitimer(0x0, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r9 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f0000010300)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r9, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0, 0x85}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xed, 0x0, &(0x7f0000000300)="00004000487d23e68c4778cbb93b6b71672a20650a8759eba61efe399ae8bc6630d4e88314e415b7ff768ed92040c1300c548c58b4e8fe07668a6560a1a4d8b521e4d33bd1d3e5feace1b222fc74dce19c941d5b43f27e9d735d0e4f4038b0401d818785d2cf97fba3f4246957b22844ba2056efde7b03e6768161311c2d57d846caa1fa83995bc800a72317e0e6192e80aba8e9864e96b0fc26e8d37abffb67b029e97152e4a0f5d14821e67fae880e7cb02aee3a25acfec891c76fdfff4c4acd4339f6fc706a1195a3ae64e2c8f0b7f2fe19fba2d5945402328d90eb448e22f3a84d955dfced682731e6c452"}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) 10.254594545s ago: executing program 1 (id=673): r0 = syz_open_dev$video(&(0x7f0000000040), 0x1, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x0, 0x0, 0x42474752, 0x0, 0x0, 0x0, 0x6, 0xfeedcafe, 0x3, 0x0, 0x1, 0x5}}) syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000080)="010000000980ffff", 0x8) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000701, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0xaad82, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') setresuid(0x0, 0xee00, 0x0) 10.09505907s ago: executing program 2 (id=675): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x806, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{}, &(0x7f0000000240), 0x0}, 0x20) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000040), 0x2, r6, 0xcccccccc}) 8.969286335s ago: executing program 1 (id=677): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffb, r3, 0x1) open_by_handle_at(0xffffffffffffffff, 0x0, 0x1) close(0xffffffffffffffff) signalfd(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000001c0)=',*[+(\x00', 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x208800, 0x0) 7.566162824s ago: executing program 0 (id=680): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000049c7d958aec852291f8d579d42e00dd17ef2eb4391d549352765a17a009b92"], 0x14}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000940)=ANY=[], 0x44}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000006c0)={0x234, r2, 0x2, 0x70bd2d, 0xff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x21b, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x5}, @broadcast, @broadcast, @initial, {0xe, 0x5}, @value=@ver_80211n={0x0, 0x6, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, @void, @void, @val={0x3, 0x1, 0xb0}, @val={0x2d, 0x1a, {0x10, 0x0, 0x1, 0x0, {0xb, 0x1292, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x800, 0x9, 0xd}}, @void, [{0xdd, 0x3a, "a8779ee11f46b73a140419d96bc8de2971c04e3e1f35e546c07e0a8d319ee75e1a806cd0a00aa541d7969b97101cfe74f0a551c66444139787ea"}, {0xdd, 0xb2, "82fcc6b350719dc47488f8ef19ebcc09f00c8e1650324fa35c95dc4c462773657ca82eebdc27de1b99a2e37514f5a07300541f70fdecd44a90a038a4ce2de560b420f58d93d1f6a62a3f9a09bdf03eefd74c0158ace9614a323622e4b6f88731e6d9cd9e65337de1f73cd781785fb0326813b7c3445f8034049cb6c6edc73d81b6b544681b2ac714b621e67d65da601c8154a061c9f2edf09f23db6c2efff8a9d36f5d48552a5650193bb0174de8d5209385"}, {0xdd, 0xae, "85aa75718b41ba4a34af2ce9affbfe43d5c40901034b7fb8dc5d2ff3d38ee6d3ee9da0519799b37fc0d9ae96bcf1bc3f984f5a765adf2770720e3c017bb35aa7bafc20a414d3381057d362be85fa618943aff73c5196c1c70bb83ed93896866962ced545d4ecb510727e9636f1ed489e379f2381c67ba9fa1aaf92b4d182479b89e0016143460e5e97dc8d0244cf213df25b8f035cd59f4df51b1b5e0988866fa81463e3de633647fddc41b49320"}, {0xdd, 0x3a, "6814b7235791f362129f5a423649d6b1dc661923b0cdc39d3bc0e786bd512a8b653a059e1c60df8a38690a5b8424425f13a421e8665f3ed8b59a"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x234}, 0x1, 0x0, 0x0, 0x4}, 0x800) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f406", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6.945092487s ago: executing program 3 (id=681): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000001140)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c0311040000000c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES8=r1, @ANYRESHEX], 0x0) 6.875903994s ago: executing program 0 (id=682): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x24}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r6 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r6, 0xfffffffffffffffb, r6, 0x1) getdents(0xffffffffffffffff, &(0x7f0000000300)=""/132, 0x84) open_by_handle_at(0xffffffffffffffff, 0x0, 0x1) r7 = creat(&(0x7f0000000000)='./bus\x00', 0x0) close(r7) signalfd(0xffffffffffffffff, 0x0, 0x0) preadv2(r5, &(0x7f0000000280)=[{&(0x7f0000000400)=""/225, 0xe1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/4096, 0x1000}], 0x3, 0x9, 0x3, 0x11) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x11, 0x8, 0xffffffd6, 0x6, 0x80000001, 0xfffffff7, 0x6, 0x4, 0x8000}}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x208800, 0x0) 6.692229415s ago: executing program 2 (id=684): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x24}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r6 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r6, 0xfffffffffffffffb, r6, 0x1) open_by_handle_at(0xffffffffffffffff, 0x0, 0x1) r7 = creat(&(0x7f0000000000)='./bus\x00', 0x0) close(r7) signalfd(0xffffffffffffffff, 0x0, 0x0) preadv2(r5, &(0x7f0000000280)=[{&(0x7f0000000400)=""/225, 0xe1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/4096, 0x1000}], 0x3, 0x9, 0x3, 0x11) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, 0x0, &(0x7f00000001c0)=',*[+(\x00', 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x208800, 0x0) 6.606811605s ago: executing program 4 (id=685): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) getrandom(&(0x7f0000000400)=""/136, 0x88, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) dup(0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x400c004) socket(0x10, 0x400000000080803, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x1) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x80, 0x40) name_to_handle_at(r2, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x2, 0x0, @buffer={0x2, 0x4f, &(0x7f00000000c0)=""/79}, &(0x7f0000000380)="2593", 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x48380, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000068000000060a010400000000000000000100000008000b40000000000900010073797a3000000000400004803c0001800a0001006c696d69740000002c0002800c000240000000008000000108000540000000000c0001400000000000000008"], 0xf0}}, 0x0) 5.888021371s ago: executing program 0 (id=686): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 5.663019066s ago: executing program 2 (id=687): bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={0x0, 0x80}}, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='./file0\x00') 5.481778993s ago: executing program 4 (id=688): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x8453, 0x8000, 0x6, 0x88}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) move_pages(r1, 0x3, &(0x7f00000001c0)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000340)=[0x8, 0x8, 0x6, 0xffffffff, 0x7], &(0x7f0000000380)=[0x0, 0x0], 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) mkdir(&(0x7f0000000100)='./control\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000002) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0xa4001, 0x0) 4.818611662s ago: executing program 0 (id=689): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0xf5) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r2, 0x0, 0x32600) accept4$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2710, @my=0x0}, 0x10, 0x180000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="020000000400000008000000010000008000000008bf2200a247063a07b743d5c84882bba3453f1eeb216fff8fb012ad93364e66dbbbb0be3d3e62f264b215cc1f8b29d92e20670b14f1e13e9bfcab074030aefef99afde01e3c0bfd87cf5c365804d028059d952359fa4d11a0bee1458b36c45e36c27ed11fe318ad56e71391d61b3a8d596652e583b2c11412e18e29daaa6cd290ea43a65af3552f148cf3830362a6851d4508d682b363f8caec99cc966dd846e05338de9811b457647c6406570ef91fad3aac1bc257ece3", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=0x0, @ANYBLOB="00001039c7cec93d142e1f2da6a7602d47000000e176e700"/42], 0x50) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000006300)={0x2020}, 0xfffc) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x4000000000000, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) 4.374253409s ago: executing program 1 (id=690): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, 0x0, 0x0) r2 = syz_io_uring_setup(0x88c, &(0x7f0000000140)={0x0, 0x35a, 0x200, 0x3, 0xbfdff7fc}, 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r3, 0x0) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="320200007d00000005f100000000000005"], 0x232) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), r1) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r5, 0x0, 0x0, 0x60, 0x0) 3.909313452s ago: executing program 4 (id=691): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0xa, 0x4e06, 0x80000, @loopback, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000290000003900000000d502"], 0x18}, 0x20040081) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000001c0)=@newtaction={0x48, 0x30, 0x53b, 0x70bd2d, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) sendto$inet6(r3, &(0x7f0000000900)="582412748a9d54f5db757bc4bed58f792bd11ba21f27", 0x843e, 0x800, &(0x7f0000000240)={0xa, 0x4e23, 0xfffffffe, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) syz_io_uring_setup(0x1255, &(0x7f0000000040)={0x0, 0x5603, 0x10, 0x0, 0x7f}, &(0x7f00000000c0), &(0x7f0000000100)) 3.037555223s ago: executing program 3 (id=692): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000100)={0x28, 0x7, r4, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000000000/0x1000)=nil, 0x1000, 0x5}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r3, 0x3ba0, &(0x7f0000000540)={0xff02, 0x8, r5, 0x0, 0x2fff, 0x2, &(0x7f00000000c0)="7a16", 0x4}) 2.956878164s ago: executing program 1 (id=693): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xfffffffd) execve(&(0x7f0000000000)='./file2\x00', 0x0, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close_range(r3, r3, 0x2) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'gre0\x00', @link_local}) bind$netlink(r1, 0x0, 0x0) fchdir(r2) fcntl$getownex(r0, 0x10, &(0x7f0000000300)={0x0, 0x0}) syz_open_procfs(r5, &(0x7f0000000340)='ns\x00') mount(&(0x7f0000000000), &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0) mount(0x0, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000001100), &(0x7f0000001080)=0x8) 2.829332056s ago: executing program 0 (id=694): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x806, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{}, &(0x7f0000000240), 0x0}, 0x20) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000040), 0x2, r6, 0xcccccccc}) 2.813268428s ago: executing program 2 (id=695): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000800850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.609740401s ago: executing program 4 (id=696): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x200008d5}, 0x40088d0) io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0xc6b2, 0x3000, 0x0, 0xfffffffc}) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, &(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r2}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={r0, 0x0, 0x0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000200)=0x7ffffffc) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000080)=0x6) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 2.003927538s ago: executing program 3 (id=697): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pwritev(r0, &(0x7f0000000600)=[{&(0x7f0000000500)="0199b1072267d410cb3852da8e8ed7de7ed02f299fabd59e3b912151d38c0ef4c8737fbb1df84a6513459d7f88b3ab19cd10d1a67a49cd5dd634c84049db44c2fa7f411146988df22a714b3aade7059d0a21bc109eac68a7c61a287a87108d4aa39d1a5f63e8306a5739c4146b78f54f864c9b59c0393748354662e181899a291abd7e6c177ac5e8c92075df4cd854457e0da7a61a28cca6abdba0dbe16bee838ac8cdd1d22fab03a5c33d777b60913ca6b1c641b7db1f1a61a136ed3dc994449d696586a127fd13", 0xc8}], 0x1, 0x4, 0x1ff) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000012300)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000c) readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000ac0)=ANY=[@ANYBLOB="400111"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.879922218s ago: executing program 2 (id=698): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) getrandom(&(0x7f0000000400)=""/136, 0x88, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) dup(0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x400c004) socket(0x10, 0x400000000080803, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x1) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x80, 0x40) name_to_handle_at(r2, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x2, 0x0, @buffer={0x2, 0x4f, &(0x7f00000000c0)=""/79}, &(0x7f0000000380)="2593", 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x48380, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000068000000060a010400000000000000000100000008000b40000000000900010073797a3000000000400004803c0001800a0001006c696d69740000002c0002800c000240000000008000000108000540000000000c0001400000000000000008"], 0xf0}}, 0x0) 1.806760651s ago: executing program 1 (id=699): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 1.741637356s ago: executing program 2 (id=700): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f00000240c0)={0xffff, 0x0, '\x00', {0x0, @bt={0x0, 0x8, 0x1, 0x1, 0x8, 0x1, 0x6, 0x2, 0x4, 0x6, 0xf4ee, 0x0, 0x60, 0x2, 0x10, 0x8, {0xd, 0xffffffff}, 0x8, 0x16}}}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "95653bd5"}]}}, 0x0}, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x3, 0x1d, 0x100, &(0x7f00000000c0)="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"}) syz_usb_ep_write(r1, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x18, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@p, {}, {0x5}, {0x7, 0x0, 0x9}, {}, {}, {0x15}}, @ldst={0x1, 0x0, 0x3}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) eventfd(0xc) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74, 0xeeee8000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 1.676334901s ago: executing program 4 (id=701): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0xa, 0x4e06, 0x80000, @loopback, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000290000003900000000d502"], 0x18}, 0x20040081) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x1e, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000fc0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket(0x10, 0x80002, 0x0) sendto$inet6(r3, &(0x7f0000000900)="582412748a9d54f5db757bc4bed58f792bd11ba21f27", 0x843e, 0x800, &(0x7f0000000240)={0xa, 0x4e23, 0xfffffffe, @loopback}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xb}}, './file0\x00'}) 1.029624127s ago: executing program 4 (id=702): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001580)={0x44, &(0x7f0000001280)={0x40, 0xf, 0x4, "6496c0a4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001100)={0x84, &(0x7f0000000c00)={0x20, 0x30, 0x4, "aa8208d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000bc0)={0x20, 0x9, 0x4, "e12995f2"}, 0x0, 0x0, 0x0, 0x0}) 897.90246ms ago: executing program 1 (id=703): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0xf5) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r2, 0x0, 0x32600) accept4$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2710, @my=0x0}, 0x10, 0x180000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0xfffc) write$FUSE_INIT(r5, &(0x7f0000000200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x4000000000000, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IEEE802154_SET_MACPARAMS(r7, 0x0, 0x4008880) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 0 (id=704): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0xf5) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r2, 0x0, 0x32600) accept4$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2710, @my=0x0}, 0x10, 0x180000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="020000000400000008000000010000008000000008bf2200a247063a07b743d5c84882bba3453f1eeb216fff8fb012ad93364e66dbbbb0be3d3e62f264b215cc1f8b29d92e20670b14f1e13e9bfcab074030aefef99afde01e3c0bfd87cf5c365804d028059d952359fa4d11a0bee1458b36c45e36c27ed11fe318ad56e71391d61b3a8d596652e583b2c11412e18e29daaa6cd290ea43a65af3552f148cf3830362a6851d4508d682b363f8caec99cc966dd846e05338de9811b457647c6406570ef91fad3aac1bc257ece3", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=0x0, @ANYBLOB="00001039c7cec93d142e1f2da6a7602d47000000e176e700"/42], 0x50) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000006300)={0x2020}, 0xfffc) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x4000000000000, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) kernel console output (not intermixed with test programs): [ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.519111][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.533088][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.543938][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.558341][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.573153][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.576931][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.588648][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.597489][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.607447][ T5822] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.615187][ T5822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.625751][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.625854][ T5822] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.655434][ T5822] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.251987][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 71.273766][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 71.387713][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 71.392143][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.400974][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.510310][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 71.531358][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 71.616904][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.624527][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.631954][ T5816] bridge_slave_0: entered allmulticast mode [ 71.639659][ T5816] bridge_slave_0: entered promiscuous mode [ 71.709083][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.716559][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.724161][ T5816] bridge_slave_1: entered allmulticast mode [ 71.731123][ T5816] bridge_slave_1: entered promiscuous mode [ 71.754244][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.761356][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.768687][ T5821] bridge_slave_0: entered allmulticast mode [ 71.775708][ T5821] bridge_slave_0: entered promiscuous mode [ 71.784895][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.792446][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.799782][ T5821] bridge_slave_1: entered allmulticast mode [ 71.808229][ T5821] bridge_slave_1: entered promiscuous mode [ 71.825299][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.832447][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.840666][ T5829] bridge_slave_0: entered allmulticast mode [ 71.848753][ T5829] bridge_slave_0: entered promiscuous mode [ 71.913245][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.920448][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.927868][ T5829] bridge_slave_1: entered allmulticast mode [ 71.935738][ T5829] bridge_slave_1: entered promiscuous mode [ 71.946253][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.959833][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.020248][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.032035][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.052354][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.059885][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.067518][ T5830] bridge_slave_0: entered allmulticast mode [ 72.074693][ T5830] bridge_slave_0: entered promiscuous mode [ 72.108914][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.148407][ T5821] team0: Port device team_slave_0 added [ 72.154796][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.161932][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.169727][ T5830] bridge_slave_1: entered allmulticast mode [ 72.177140][ T5830] bridge_slave_1: entered promiscuous mode [ 72.198841][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.206253][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.213532][ T5817] bridge_slave_0: entered allmulticast mode [ 72.220505][ T5817] bridge_slave_0: entered promiscuous mode [ 72.233807][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.257562][ T5816] team0: Port device team_slave_0 added [ 72.265100][ T5821] team0: Port device team_slave_1 added [ 72.283487][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.290675][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.298542][ T5817] bridge_slave_1: entered allmulticast mode [ 72.305723][ T5817] bridge_slave_1: entered promiscuous mode [ 72.325878][ T5816] team0: Port device team_slave_1 added [ 72.360227][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.406077][ T5829] team0: Port device team_slave_0 added [ 72.424110][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.431086][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.457325][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.471696][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.484050][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.509190][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.516249][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.543609][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.556686][ T5829] team0: Port device team_slave_1 added [ 72.563487][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.570447][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.587170][ T5831] Bluetooth: hci0: command tx timeout [ 72.596508][ T5822] Bluetooth: hci1: command tx timeout [ 72.606241][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.645025][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.654857][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.661803][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.688341][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.688685][ T5822] Bluetooth: hci2: command tx timeout [ 72.698962][ T5831] Bluetooth: hci3: command tx timeout [ 72.726794][ T5830] team0: Port device team_slave_0 added [ 72.743395][ T5822] Bluetooth: hci4: command tx timeout [ 72.769806][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.777201][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.803705][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.817701][ T5830] team0: Port device team_slave_1 added [ 72.840947][ T5817] team0: Port device team_slave_0 added [ 72.847647][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.855064][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.881148][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.935821][ T5817] team0: Port device team_slave_1 added [ 72.974276][ T5821] hsr_slave_0: entered promiscuous mode [ 72.980579][ T5821] hsr_slave_1: entered promiscuous mode [ 73.011418][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.018581][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.044577][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.057878][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.064891][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.090854][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.119785][ T5816] hsr_slave_0: entered promiscuous mode [ 73.126783][ T5816] hsr_slave_1: entered promiscuous mode [ 73.132811][ T5816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.140822][ T5816] Cannot create hsr debugfs directory [ 73.159112][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.166669][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.192694][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.205431][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.212401][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.239174][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.302732][ T5829] hsr_slave_0: entered promiscuous mode [ 73.309489][ T5829] hsr_slave_1: entered promiscuous mode [ 73.316318][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.323955][ T5829] Cannot create hsr debugfs directory [ 73.476395][ T5830] hsr_slave_0: entered promiscuous mode [ 73.482652][ T5830] hsr_slave_1: entered promiscuous mode [ 73.489161][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.496806][ T5830] Cannot create hsr debugfs directory [ 73.506557][ T5817] hsr_slave_0: entered promiscuous mode [ 73.512846][ T5817] hsr_slave_1: entered promiscuous mode [ 73.519931][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.527626][ T5817] Cannot create hsr debugfs directory [ 74.005898][ T5821] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.020319][ T5821] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.031507][ T5821] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.042716][ T5821] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.097288][ T5816] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.122098][ T5816] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.132475][ T5816] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.145231][ T5816] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.248968][ T5817] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.279349][ T5817] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.291708][ T5817] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.312175][ T5817] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.441568][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.456831][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.474129][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.499671][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.517387][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.528891][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.570212][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.621026][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.635941][ T1001] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.643409][ T1001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.663322][ T5822] Bluetooth: hci1: command tx timeout [ 74.663370][ T5831] Bluetooth: hci0: command tx timeout [ 74.670605][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.682548][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.692187][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.706002][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.735160][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.742265][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.750834][ T5831] Bluetooth: hci2: command tx timeout [ 74.756391][ T5822] Bluetooth: hci3: command tx timeout [ 74.774535][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.781633][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.791772][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.798919][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.823509][ T5831] Bluetooth: hci4: command tx timeout [ 74.898691][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.956089][ T5816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.068507][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.132255][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.139514][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.160437][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.167731][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.191078][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.224818][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.310315][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.325628][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.348384][ T989] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.355604][ T989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.422834][ T989] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.430026][ T989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.440555][ T989] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.447702][ T989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.457294][ T989] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.464465][ T989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.487914][ T5817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.618782][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.672633][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.849925][ T5821] veth0_vlan: entered promiscuous mode [ 75.895934][ T5821] veth1_vlan: entered promiscuous mode [ 75.988127][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.020299][ T5821] veth0_macvtap: entered promiscuous mode [ 76.040037][ T5821] veth1_macvtap: entered promiscuous mode [ 76.161279][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.212812][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.250196][ T5821] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.261214][ T5821] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.275264][ T5821] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.284078][ T5821] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.302741][ T5817] veth0_vlan: entered promiscuous mode [ 76.321645][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.334916][ T5817] veth1_vlan: entered promiscuous mode [ 76.428945][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.500622][ T5816] veth0_vlan: entered promiscuous mode [ 76.539090][ T5817] veth0_macvtap: entered promiscuous mode [ 76.550160][ T5816] veth1_vlan: entered promiscuous mode [ 76.573789][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.581778][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.601712][ T5817] veth1_macvtap: entered promiscuous mode [ 76.611665][ T5829] veth0_vlan: entered promiscuous mode [ 76.640531][ T5829] veth1_vlan: entered promiscuous mode [ 76.672171][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.681164][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.685724][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.729952][ T5816] veth0_macvtap: entered promiscuous mode [ 76.744063][ T5831] Bluetooth: hci1: command tx timeout [ 76.744157][ T5822] Bluetooth: hci0: command tx timeout [ 76.757320][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.788090][ T5817] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.797416][ T5817] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.806647][ T5817] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.815570][ T5817] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.824524][ T5822] Bluetooth: hci3: command tx timeout [ 76.832833][ T5830] veth0_vlan: entered promiscuous mode [ 76.839095][ T5822] Bluetooth: hci2: command tx timeout [ 76.849290][ T5816] veth1_macvtap: entered promiscuous mode [ 76.872002][ T5821] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.904034][ T5822] Bluetooth: hci4: command tx timeout [ 76.918590][ T5830] veth1_vlan: entered promiscuous mode [ 76.935084][ T5829] veth0_macvtap: entered promiscuous mode [ 76.962419][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.025213][ T5829] veth1_macvtap: entered promiscuous mode [ 77.038959][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.080323][ T5816] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.092453][ T5816] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.101740][ T5816] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.115071][ T5816] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.157893][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.187049][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.219854][ T5829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.230869][ T5829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.244177][ T5829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.253159][ T5829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.263784][ T5904] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.272140][ T5830] veth0_macvtap: entered promiscuous mode [ 77.281177][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.293084][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.317234][ T5830] veth1_macvtap: entered promiscuous mode [ 77.352401][ T1001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.361933][ T1001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.424128][ T5904] usb 1-1: Using ep0 maxpacket: 16 [ 77.435642][ T5904] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 77.445175][ T5904] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.456748][ T5904] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 77.477324][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.485958][ T5904] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 77.498265][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.507256][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.511804][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.528112][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.531748][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.538187][ T5904] usb 1-1: Product: syz [ 77.551833][ T5904] usb 1-1: Manufacturer: syz [ 77.556435][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.569278][ T5904] usb 1-1: SerialNumber: syz [ 77.579005][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.604497][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.613315][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.622801][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.679823][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.711580][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.791367][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.815004][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.057730][ T5904] usb 1-1: 0:2 : does not exist [ 78.301376][ T5944] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 78.581967][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.826082][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.852831][ T5822] Bluetooth: hci1: command tx timeout [ 78.855160][ T5831] Bluetooth: hci0: command tx timeout [ 78.905246][ T5831] Bluetooth: hci2: command tx timeout [ 78.905260][ T5822] Bluetooth: hci3: command tx timeout [ 78.983733][ T5955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.000027][ T5831] Bluetooth: hci4: command tx timeout [ 79.518523][ T1001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.564366][ T5904] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 79.579476][ T1001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.818439][ T5904] usb 1-1: USB disconnect, device number 2 [ 80.425326][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 80.692546][ T5961] tmpfs: Bad value for 'mpol' [ 80.771354][ T5960] udevd[5960]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 80.818844][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.863518][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.969444][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 81.063356][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 81.233417][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.613051][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 81.626999][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.880688][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.920240][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.077536][ T5904] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 83.153101][ T5904] usb 5-1: Using ep0 maxpacket: 16 [ 83.497532][ T5904] usb 5-1: device descriptor read/all, error -71 [ 83.529941][ T5971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'. [ 84.363055][ T5904] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 84.517395][ T5989] Zero length message leads to an empty skb [ 84.535876][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 84.794210][ T5904] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.976407][ T5904] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 85.012188][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.138944][ T24] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 85.148900][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.165257][ T24] usb 1-1: config 0 descriptor?? [ 85.253734][ T5904] usb 5-1: config 0 descriptor?? [ 85.751585][ T5904] pwc: Askey VC010 type 2 USB webcam detected. [ 86.324374][ T6001] syz.2.14: attempt to access beyond end of device [ 86.324374][ T6001] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 86.338368][ T6001] qnx6: unable to read the first superblock [ 86.344732][ T6001] syz.2.14: attempt to access beyond end of device [ 86.344732][ T6001] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 86.357373][ T6001] qnx6: unable to read the first superblock [ 86.363302][ T6001] qnx6: unable to read the first superblock [ 86.378656][ T6002] warning: `syz.0.10' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.751792][ T1592] cfg80211: failed to load regulatory.db [ 86.979078][ T5904] pwc: send_video_command error -71 [ 87.004888][ T5904] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 87.041253][ T5904] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 87.289019][ T5897] IPVS: starting estimator thread 0... [ 87.541222][ T5904] usb 5-1: USB disconnect, device number 3 [ 87.665840][ T6009] IPVS: using max 52 ests per chain, 124800 per kthread [ 88.004839][ T5976] delete_channel: no stack [ 88.203308][ T5897] usb 1-1: USB disconnect, device number 3 [ 88.445365][ T6019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19'. [ 88.472736][ T6019] 8021q: VLANs not supported on vxcan0 [ 88.805211][ T6027] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 89.965484][ T6033] netlink: 'syz.4.21': attribute type 7 has an invalid length. [ 90.338439][ T6033] : entered promiscuous mode [ 90.914050][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.532876][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.626081][ T24] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 91.836247][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.869370][ T24] usb 3-1: config 0 descriptor?? [ 92.060997][ T6058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26'. [ 92.364965][ T6061] tmpfs: Bad value for 'mpol' [ 92.831550][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 92.863120][ T5904] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 93.093149][ T5904] usb 1-1: Using ep0 maxpacket: 16 [ 93.111382][ T5904] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1023 [ 93.122636][ T5904] usb 1-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.141849][ T5904] usb 1-1: config 1 interface 0 has no altsetting 0 [ 93.172804][ T5904] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 93.196431][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 93.209020][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 93.215483][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.215505][ T5904] usb 1-1: Product: 믋殁啓鱗根ࡑใ얪툏⊛Å녟鏷涟㝰铣ℾ婂忂俛鶴☇砀玭綺戲輁ݮ惡쀷ꇺ鹏볖令ᎌ鮓Ĥ弡寽 [ 93.215524][ T5904] usb 1-1: SerialNumber: 昄ˏ砭ⶍ঄矈볞쉐끯쬐஠鉅骙涻盼᱄馁밼䫵哦ᯄ쓓凫탩宙䧉嘐☀飗쟢㣫월 [ 93.261666][ T6061] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 93.492895][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 93.630722][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 93.638423][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 93.729912][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 93.769600][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 93.780875][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 93.801998][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 94.064993][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 94.072039][ T24] pwc: recv_control_msg error -32 req 02 val 2400 [ 94.081348][ T24] pwc: recv_control_msg error -32 req 02 val 2600 [ 94.089108][ T24] pwc: recv_control_msg error -32 req 02 val 2900 [ 94.121148][ T5904] usb 1-1: USB disconnect, device number 4 [ 94.312254][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 94.343634][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 94.390549][ T24] pwc: Registered as video103. [ 94.496893][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 94.545789][ T24] usb 3-1: USB disconnect, device number 2 [ 100.345899][ T6106] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.875124][ T5904] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 101.648733][ T6115] evm: overlay not supported [ 101.728105][ T5904] usb 1-1: Using ep0 maxpacket: 8 [ 101.782698][ T5904] usb 1-1: config 0 has an invalid interface number: 33 but max is 1 [ 101.870145][ T5904] usb 1-1: config 0 has no interface number 1 [ 101.875737][ T6117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.41'. [ 101.891709][ T5904] usb 1-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 101.910852][ T5904] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 101.928966][ T5904] usb 1-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 102.059952][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.606718][ T5904] usb 1-1: Product: syz [ 102.610933][ T5904] usb 1-1: Manufacturer: syz [ 102.615938][ T5904] usb 1-1: SerialNumber: syz [ 102.637682][ T5904] usb 1-1: config 0 descriptor?? [ 102.646746][ T5904] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 103.827871][ T5904] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 103.835599][ T2344] pvrusb2: Invalid read control endpoint [ 103.902863][ T5904] usb 1-1: USB disconnect, device number 5 [ 104.005522][ T2344] usb 1-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 104.025694][ T2344] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 104.273906][ T6142] syz.2.46: attempt to access beyond end of device [ 104.273906][ T6142] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 104.286671][ T6142] qnx6: unable to read the first superblock [ 104.292824][ T6142] syz.2.46: attempt to access beyond end of device [ 104.292824][ T6142] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 104.305502][ T6142] qnx6: unable to read the first superblock [ 104.311394][ T6142] qnx6: unable to read the first superblock [ 104.799558][ T6147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.868472][ T6160] fuse: Bad value for 'fd' [ 107.664450][ T6148] netlink: 'syz.0.50': attribute type 7 has an invalid length. [ 107.676540][ T6148] : entered promiscuous mode [ 107.779629][ T6169] overlayfs: failed to resolve './file0': -2 [ 108.592562][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.55'. [ 110.443143][ T6197] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.086107][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 112.004837][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.373250][ T6211] syz.0.66: attempt to access beyond end of device [ 112.373250][ T6211] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 112.403255][ T6211] syz.0.66: attempt to access beyond end of device [ 112.403255][ T6211] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 112.529502][ T24] usb 5-1: config 0 has no interfaces? [ 112.558360][ T24] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 112.590994][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.593420][ T6211] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 112.636919][ T24] usb 5-1: config 0 descriptor?? [ 112.735508][ T6216] overlayfs: failed to resolve './file0': -2 [ 113.499931][ T6211] syz.0.66: attempt to access beyond end of device [ 113.499931][ T6211] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 113.527579][ T5897] usb 5-1: USB disconnect, device number 4 [ 113.673287][ T6219] loop2: detected capacity change from 0 to 7 [ 113.697224][ T6219] Dev loop2: unable to read RDB block 7 [ 113.702893][ T6219] loop2: unable to read partition table [ 113.709030][ T6211] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 113.748950][ T6222] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 113.760080][ T6211] syz.0.66: attempt to access beyond end of device [ 113.760080][ T6211] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 113.774138][ T6211] syz.0.66: attempt to access beyond end of device [ 113.774138][ T6211] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 113.787994][ T6211] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 113.797891][ T6211] syz.0.66: attempt to access beyond end of device [ 113.797891][ T6211] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 113.810925][ T6211] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 113.878927][ T6211] syz.0.66: attempt to access beyond end of device [ 113.878927][ T6211] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 113.913541][ T6219] loop2: partition table beyond EOD, truncated [ 113.921003][ T6219] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 113.961959][ T6211] syz.0.66: attempt to access beyond end of device [ 113.961959][ T6211] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 113.992200][ T6211] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 114.012724][ T6211] syz.0.66: attempt to access beyond end of device [ 114.012724][ T6211] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 114.027235][ T6211] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 114.043698][ T6211] syz.0.66: attempt to access beyond end of device [ 114.043698][ T6211] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 114.060223][ T5189] Dev loop2: unable to read RDB block 7 [ 114.072648][ T5189] loop2: unable to read partition table [ 114.096798][ T5189] loop2: partition table beyond EOD, truncated [ 114.126204][ T6211] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 114.137178][ T6211] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 114.150291][ T6211] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 114.181078][ T6224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.70'. [ 115.916125][ T6240] netlink: 28 bytes leftover after parsing attributes in process `syz.3.74'. [ 115.944542][ T6240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.74'. [ 116.491055][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 116.520896][ T6238] Can't find a SQUASHFS superblock on nullb0 [ 116.737558][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 116.783226][ T5936] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 116.823518][ T9] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 116.870090][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.130139][ T5936] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.793957][ T5936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 117.804057][ T5936] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.817226][ T5936] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 117.823043][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 117.826392][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.907110][ T5936] usb 5-1: config 0 descriptor?? [ 118.135753][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 118.147243][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.175509][ T9] usb 2-1: Product: syz [ 118.187588][ T9] usb 2-1: Manufacturer: syz [ 118.200566][ T9] usb 2-1: SerialNumber: syz [ 118.611561][ T6260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.113263][ T9] usb 2-1: 0:2 : does not exist [ 119.132254][ T6261] overlayfs: failed to resolve './file0': -2 [ 119.472591][ T6266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.83'. [ 119.522587][ T24] usb 5-1: USB disconnect, device number 5 [ 120.873178][ T9] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 121.193335][ T5933] IPVS: starting estimator thread 0... [ 121.285269][ T9] usb 2-1: USB disconnect, device number 2 [ 121.323260][ T6280] IPVS: using max 35 ests per chain, 84000 per kthread [ 122.392199][ T5960] udevd[5960]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.799068][ T6270] syz.4.84 (6270): /proc/6268/oom_adj is deprecated, please use /proc/6268/oom_score_adj instead. [ 122.998211][ T6302] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 123.007476][ T6302] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 124.495608][ T6321] Can't find a SQUASHFS superblock on nullb0 [ 124.603064][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 124.924044][ T43] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 125.107308][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.232737][ T24] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 125.375930][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 125.395388][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.406624][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.434880][ T24] usb 5-1: config 0 descriptor?? [ 125.465334][ T43] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 125.493251][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.664459][ T43] usb 2-1: config 0 descriptor?? [ 126.865580][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 127.043215][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 127.061496][ T9] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 127.088653][ T9] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 127.253372][ T9] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 127.273762][ T9] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 127.292190][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 127.303378][ T9] usb 3-1: config 0 has no interface number 0 [ 127.312899][ T9] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 127.332762][ T9] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 127.351344][ T9] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 127.362642][ T9] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 127.485335][ T9] usb 3-1: config 0 interface 125 has no altsetting 0 [ 127.584856][ T9] usb 3-1: config 0 interface 125 has no altsetting 2 [ 127.656264][ T9] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 127.666548][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.679092][ T9] usb 3-1: Product: syz [ 127.684494][ T9] usb 3-1: Manufacturer: syz [ 127.690297][ T9] usb 3-1: SerialNumber: syz [ 127.861615][ T43] usb 5-1: USB disconnect, device number 6 [ 127.903296][ T9] usb 3-1: config 0 descriptor?? [ 127.944041][ T9] usb 3-1: selecting invalid altsetting 2 [ 128.139171][ T6330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.177126][ T6330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.192883][ T5870] usb 2-1: USB disconnect, device number 3 [ 128.462704][ C0] usb 3-1: async_complete: urb error -71 [ 128.468582][ C0] usb 3-1: async_complete: urb error -71 [ 128.474350][ C0] usb 3-1: async_complete: urb error -71 [ 128.488439][ T9] get_1284_register: usb error -71 [ 128.493879][ T9] uss720 3-1:0.125: probe with driver uss720 failed with error -71 [ 128.522321][ T9] usb 3-1: USB disconnect, device number 3 [ 130.715775][ T6374] bio_check_eod: 2 callbacks suppressed [ 130.715813][ T6374] syz.2.109: attempt to access beyond end of device [ 130.715813][ T6374] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 130.734603][ T6374] qnx6: unable to read the first superblock [ 130.741979][ T6374] syz.2.109: attempt to access beyond end of device [ 130.741979][ T6374] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 130.755046][ T6374] qnx6: unable to read the first superblock [ 130.761082][ T6374] qnx6: unable to read the first superblock [ 131.204059][ T43] IPVS: starting estimator thread 0... [ 131.443571][ T6377] IPVS: using max 30 ests per chain, 72000 per kthread [ 131.553436][ T6380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.113'. [ 132.184872][ T5824] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 132.493153][ T5824] usb 2-1: Using ep0 maxpacket: 8 [ 132.569709][ T5824] usb 2-1: config 0 has an invalid interface number: 33 but max is 1 [ 132.591894][ T6398] Can't find a SQUASHFS superblock on nullb0 [ 132.616193][ T5824] usb 2-1: config 0 has no interface number 1 [ 132.622357][ T5824] usb 2-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 132.669345][ T5824] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 132.709662][ T5824] usb 2-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 132.739372][ T5824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.762481][ T5824] usb 2-1: Product: syz [ 132.784617][ T5824] usb 2-1: Manufacturer: syz [ 132.818951][ T5824] usb 2-1: SerialNumber: syz [ 132.839732][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.846635][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.849747][ T5824] usb 2-1: config 0 descriptor?? [ 132.879928][ T5824] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 132.887680][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 133.096745][ T5824] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 133.109438][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.136007][ T5824] usb 2-1: USB disconnect, device number 4 [ 133.145433][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 133.169896][ T5824] pvrusb2: Device being rendered inoperable [ 133.184659][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.208216][ T5824] pvrusb2: Device being rendered inoperable [ 133.230597][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 133.258280][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.289056][ T24] usb 5-1: config 0 descriptor?? [ 133.394136][ T6405] syz.2.119: attempt to access beyond end of device [ 133.394136][ T6405] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 133.429386][ T6405] syz.2.119: attempt to access beyond end of device [ 133.429386][ T6405] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 133.471301][ T6405] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 133.506522][ T6405] syz.2.119: attempt to access beyond end of device [ 133.506522][ T6405] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 133.521077][ T6405] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 133.554504][ T6405] syz.2.119: attempt to access beyond end of device [ 133.554504][ T6405] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 133.582482][ T6405] syz.2.119: attempt to access beyond end of device [ 133.582482][ T6405] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 133.596364][ T6405] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 133.607245][ T6405] syz.2.119: attempt to access beyond end of device [ 133.607245][ T6405] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 133.620761][ T6405] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 133.635079][ T6405] syz.2.119: attempt to access beyond end of device [ 133.635079][ T6405] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 133.649506][ T6405] syz.2.119: attempt to access beyond end of device [ 133.649506][ T6405] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 133.662995][ T6405] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 133.676922][ T6405] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 133.700981][ T6405] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 133.714136][ T6405] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 133.723792][ T6405] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 135.091673][ T6416] netlink: 'syz.0.122': attribute type 7 has an invalid length. [ 136.619806][ T43] usb 5-1: USB disconnect, device number 7 [ 137.978764][ T6442] netlink: 'syz.1.127': attribute type 7 has an invalid length. [ 139.314798][ T6441] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.010030][ T6442] : entered promiscuous mode [ 141.142498][ T6448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.130'. [ 143.573308][ T5870] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 143.630999][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 143.843503][ T5870] usb 5-1: device descriptor read/64, error -32 [ 144.674852][ T5870] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 145.153358][ T5870] usb 5-1: device descriptor read/64, error -71 [ 145.243051][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.139'. [ 145.310931][ T5870] usb usb5-port1: attempt power cycle [ 145.714198][ T5870] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 146.049826][ T5870] usb 5-1: device descriptor read/8, error -71 [ 146.961897][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.144'. [ 148.575417][ T6505] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 149.757559][ T6515] Can't find a SQUASHFS superblock on nullb0 [ 149.787587][ T5933] IPVS: starting estimator thread 0... [ 149.983124][ T6516] IPVS: using max 27 ests per chain, 64800 per kthread [ 150.339404][ T5870] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 151.123741][ T43] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 152.164740][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 152.180419][ T5870] usb 5-1: device descriptor read/all, error -71 [ 152.199819][ T43] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 153.133398][ T43] usb 4-1: config 0 has no interface number 0 [ 153.139554][ T43] usb 4-1: config 0 interface 184 has no altsetting 0 [ 153.345502][ T43] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 153.356822][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.376288][ T43] usb 4-1: Product: syz [ 153.380477][ T43] usb 4-1: Manufacturer: syz [ 153.403001][ T43] usb 4-1: SerialNumber: syz [ 153.613096][ T43] usb 4-1: config 0 descriptor?? [ 153.625846][ T43] smsc75xx v1.0.0 [ 153.661888][ T43] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 153.675131][ T6548] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 153.684375][ T6548] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 153.937265][ T6549] bio_check_eod: 4 callbacks suppressed [ 153.937299][ T6549] syz.0.158: attempt to access beyond end of device [ 153.937299][ T6549] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 153.957013][ T6549] qnx6: unable to read the first superblock [ 153.985176][ T6549] syz.0.158: attempt to access beyond end of device [ 153.985176][ T6549] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 154.002648][ T6549] qnx6: unable to read the first superblock [ 154.015653][ T6549] qnx6: unable to read the first superblock [ 154.047710][ T43] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 155.066972][ T6557] syz.2.156: attempt to access beyond end of device [ 155.066972][ T6557] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 155.080380][ T6557] qnx6: unable to read the first superblock [ 155.086431][ T6557] syz.2.156: attempt to access beyond end of device [ 155.086431][ T6557] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 155.099054][ T6557] qnx6: unable to read the first superblock [ 155.104969][ T6557] qnx6: unable to read the first superblock [ 155.414633][ T43] usb 4-1: USB disconnect, device number 2 [ 160.162029][ T6577] delete_channel: no stack [ 161.368109][ T6604] syz.0.171: attempt to access beyond end of device [ 161.368109][ T6604] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 161.381177][ T6604] qnx6: unable to read the first superblock [ 161.388593][ T6604] syz.0.171: attempt to access beyond end of device [ 161.388593][ T6604] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 161.401852][ T6604] qnx6: unable to read the first superblock [ 161.407836][ T6604] qnx6: unable to read the first superblock [ 161.888903][ T6607] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 161.898355][ T6607] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 162.120060][ T6611] Can't find a SQUASHFS superblock on nullb0 [ 163.567179][ T6622] syz.4.175: attempt to access beyond end of device [ 163.567179][ T6622] nbd4: rw=0, sector=16, nr_sectors = 1 limit=0 [ 163.580002][ T6622] qnx6: unable to read the first superblock [ 163.586154][ T6622] syz.4.175: attempt to access beyond end of device [ 163.586154][ T6622] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 163.598829][ T6622] qnx6: unable to read the first superblock [ 163.604795][ T6622] qnx6: unable to read the first superblock [ 164.363051][ T1209] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 166.287931][ T6649] Can't find a SQUASHFS superblock on nullb0 [ 167.173346][ T6656] syz.3.184: attempt to access beyond end of device [ 167.173346][ T6656] nbd3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 167.186459][ T6656] qnx6: unable to read the first superblock [ 167.193588][ T6656] syz.3.184: attempt to access beyond end of device [ 167.193588][ T6656] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 167.206533][ T6656] qnx6: unable to read the first superblock [ 167.212464][ T6656] qnx6: unable to read the first superblock [ 168.827450][ T2344] pvrusb2: request_firmware fatal error with code=-110 [ 169.547374][ T2344] pvrusb2: Failure uploading firmware1 [ 169.552887][ T2344] pvrusb2: Device initialization was not successful. [ 169.559685][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 169.582077][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 169.605705][ T2344] pvrusb2: Failed to submit write-control URB status=-19 [ 169.605907][ T5904] pvrusb2: Device being rendered inoperable [ 169.614582][ T2344] usb 1-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 169.632187][ T2344] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 170.846721][ T6678] Can't find a SQUASHFS superblock on nullb0 [ 171.204423][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 171.263076][ T43] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 171.374662][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.523006][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 171.535919][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 171.559854][ T43] usb 2-1: config 0 has an invalid interface number: 33 but max is 1 [ 171.585832][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.607478][ T43] usb 2-1: config 0 has no interface number 1 [ 171.631607][ T43] usb 2-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 171.660223][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 171.701084][ T43] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 171.713828][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.754571][ T43] usb 2-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 171.767820][ T24] usb 3-1: config 0 descriptor?? [ 171.786504][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.825782][ T43] usb 2-1: Product: syz [ 171.830801][ T43] usb 2-1: Manufacturer: syz [ 171.863631][ T43] usb 2-1: SerialNumber: syz [ 171.892229][ T43] usb 2-1: config 0 descriptor?? [ 171.919464][ T43] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 172.632325][ T43] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 172.692041][ T43] usb 2-1: USB disconnect, device number 5 [ 172.730979][ T43] pvrusb2: Device being rendered inoperable [ 172.771743][ T43] pvrusb2: Device being rendered inoperable [ 173.638412][ T6702] syz.1.197: attempt to access beyond end of device [ 173.638412][ T6702] nbd1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 173.651559][ T6702] qnx6: unable to read the first superblock [ 173.658624][ T6702] syz.1.197: attempt to access beyond end of device [ 173.658624][ T6702] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 173.672065][ T6702] qnx6: unable to read the first superblock [ 173.678331][ T6702] qnx6: unable to read the first superblock [ 174.101378][ T6701] syz.4.198: attempt to access beyond end of device [ 174.101378][ T6701] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 174.120169][ T6701] syz.4.198: attempt to access beyond end of device [ 174.120169][ T6701] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 174.150813][ T6701] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 174.195670][ T6701] syz.4.198: attempt to access beyond end of device [ 174.195670][ T6701] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 174.251409][ T5936] usb 3-1: USB disconnect, device number 5 [ 174.263382][ T6701] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 174.326108][ T6701] syz.4.198: attempt to access beyond end of device [ 174.326108][ T6701] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 174.368946][ T6701] syz.4.198: attempt to access beyond end of device [ 174.368946][ T6701] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 174.384299][ T6701] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 174.394669][ T6701] syz.4.198: attempt to access beyond end of device [ 174.394669][ T6701] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 174.459761][ T6701] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 174.529427][ T6701] syz.4.198: attempt to access beyond end of device [ 174.529427][ T6701] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 174.560300][ T6701] syz.4.198: attempt to access beyond end of device [ 174.560300][ T6701] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 174.573510][ T6701] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 174.583303][ T6701] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 174.594218][ T6701] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 174.712261][ T6701] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 174.818372][ T6715] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 175.340006][ T6701] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 178.633051][ T6733] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 180.619887][ T6753] bio_check_eod: 4 callbacks suppressed [ 180.619943][ T6753] syz.3.210: attempt to access beyond end of device [ 180.619943][ T6753] nbd3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 180.639259][ T6753] qnx6: unable to read the first superblock [ 180.646661][ T6753] syz.3.210: attempt to access beyond end of device [ 180.646661][ T6753] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 180.659604][ T6753] qnx6: unable to read the first superblock [ 180.665965][ T6753] qnx6: unable to read the first superblock [ 181.121140][ T6756] syz.1.211: attempt to access beyond end of device [ 181.121140][ T6756] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 181.178912][ T6756] syz.1.211: attempt to access beyond end of device [ 181.178912][ T6756] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 181.214840][ T6756] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 181.293293][ T6756] syz.1.211: attempt to access beyond end of device [ 181.293293][ T6756] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 181.343052][ T6756] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 181.357699][ T6759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.212'. [ 181.385376][ T6756] syz.1.211: attempt to access beyond end of device [ 181.385376][ T6756] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 181.398855][ T6756] syz.1.211: attempt to access beyond end of device [ 181.398855][ T6756] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 181.412241][ T6756] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 181.422522][ T6756] syz.1.211: attempt to access beyond end of device [ 181.422522][ T6756] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 181.494205][ T6756] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 181.511703][ T6756] syz.1.211: attempt to access beyond end of device [ 181.511703][ T6756] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 181.580968][ T6756] syz.1.211: attempt to access beyond end of device [ 181.580968][ T6756] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 181.671664][ T6764] vlan2: entered allmulticast mode [ 181.677367][ T6764] bond1: entered allmulticast mode [ 182.640199][ T6756] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 182.759488][ T6756] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 182.797050][ T6756] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 182.899135][ T6756] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 182.960165][ T6756] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 183.254790][ T6775] tmpfs: Bad value for 'mpol' [ 183.416152][ T6778] Can't find a SQUASHFS superblock on nullb0 [ 183.474902][ T1209] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 183.653179][ T1209] usb 2-1: Using ep0 maxpacket: 8 [ 183.683037][ T5933] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 183.813954][ T1209] usb 2-1: config 0 has an invalid interface number: 33 but max is 1 [ 183.822076][ T1209] usb 2-1: config 0 has no interface number 1 [ 184.013374][ T1209] usb 2-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 184.043201][ T1209] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 184.077643][ T1209] usb 2-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 184.087021][ T1209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.105257][ T1209] usb 2-1: Product: syz [ 184.109448][ T1209] usb 2-1: Manufacturer: syz [ 184.122983][ T1209] usb 2-1: SerialNumber: syz [ 184.130740][ T1209] usb 2-1: config 0 descriptor?? [ 184.179266][ T5933] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.200566][ T1209] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 184.209953][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 184.230555][ T5933] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.257905][ T5933] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 184.305773][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.337289][ T5933] usb 5-1: config 0 descriptor?? [ 184.866728][ T1209] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 184.869603][ T24] usb 5-1: USB disconnect, device number 14 [ 184.949255][ T1209] usb 2-1: USB disconnect, device number 6 [ 184.964652][ T1209] pvrusb2: Device being rendered inoperable [ 184.972387][ T1209] pvrusb2: Device being rendered inoperable [ 187.855264][ T6806] bio_check_eod: 4 callbacks suppressed [ 187.855280][ T6806] syz.1.224: attempt to access beyond end of device [ 187.855280][ T6806] nbd1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 187.893188][ T6806] qnx6: unable to read the first superblock [ 187.899353][ T6806] syz.1.224: attempt to access beyond end of device [ 187.899353][ T6806] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 187.913150][ T6806] qnx6: unable to read the first superblock [ 187.919192][ T6806] qnx6: unable to read the first superblock [ 188.535663][ T6809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.223'. [ 191.067356][ T6821] sctp: failed to load transform for md5: -2 [ 194.413532][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.420547][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.530567][ T6864] netlink: 'syz.0.236': attribute type 7 has an invalid length. [ 195.820491][ T6878] syz.4.238: attempt to access beyond end of device [ 195.820491][ T6878] nbd4: rw=0, sector=16, nr_sectors = 1 limit=0 [ 195.833328][ T6878] qnx6: unable to read the first superblock [ 195.839475][ T6878] syz.4.238: attempt to access beyond end of device [ 195.839475][ T6878] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 195.852166][ T6878] qnx6: unable to read the first superblock [ 195.858097][ T6878] qnx6: unable to read the first superblock [ 196.534188][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 196.540248][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 196.546786][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 196.554266][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 198.643862][ T5831] Bluetooth: hci2: unexpected event for opcode 0x2031 [ 207.373827][ T6947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.258'. [ 208.316167][ T6956] tipc: Started in network mode [ 208.321234][ T6956] tipc: Node identity ac141425, cluster identity 4711 [ 208.333189][ T6956] tipc: New replicast peer: 0.0.0.0 [ 208.339672][ T6956] tipc: Enabled bearer , priority 10 [ 208.762113][ T6961] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 209.334182][ T5933] tipc: Node number set to 2886997029 [ 209.615395][ T6967] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 213.620129][ T6983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.267'. [ 214.814326][ T7009] syz.0.274: attempt to access beyond end of device [ 214.814326][ T7009] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 214.827134][ T7009] qnx6: unable to read the first superblock [ 214.833268][ T7009] syz.0.274: attempt to access beyond end of device [ 214.833268][ T7009] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 214.846619][ T7009] qnx6: unable to read the first superblock [ 214.852516][ T7009] qnx6: unable to read the first superblock [ 215.265339][ T7023] overlayfs: failed to resolve './file0': -2 [ 216.611502][ T7036] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 217.513157][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 217.520880][ T1209] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 218.684528][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 218.689731][ T1209] usb 3-1: Using ep0 maxpacket: 16 [ 218.825003][ T1209] usb 3-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1023 [ 219.212135][ T1209] usb 3-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 219.239047][ T9] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 219.252264][ T9] usb 5-1: config 0 has no interface number 0 [ 219.258526][ T1209] usb 3-1: config 1 interface 0 has no altsetting 0 [ 219.644368][ T9] usb 5-1: config 0 interface 184 has no altsetting 0 [ 219.655934][ T1209] usb 3-1: string descriptor 0 read error: -71 [ 219.665427][ T1209] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 219.707252][ T9] usb 5-1: string descriptor 0 read error: -71 [ 219.724047][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 219.736307][ T1209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.844713][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.893159][ T9] usb 5-1: config 0 descriptor?? [ 219.899922][ T1209] usb 3-1: can't set config #1, error -71 [ 220.464373][ T9] usb 5-1: can't set config #0, error -71 [ 220.481122][ T1209] usb 3-1: USB disconnect, device number 6 [ 220.489045][ T9] usb 5-1: USB disconnect, device number 15 [ 220.778002][ T7060] /dev/nullb0: Can't open blockdev [ 221.679470][ T7066] syz.1.288: attempt to access beyond end of device [ 221.679470][ T7066] nbd1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 221.692556][ T7066] qnx6: unable to read the first superblock [ 221.699955][ T7066] syz.1.288: attempt to access beyond end of device [ 221.699955][ T7066] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 221.713398][ T7066] qnx6: unable to read the first superblock [ 221.779129][ T7066] qnx6: unable to read the first superblock [ 222.410374][ T1209] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 222.632328][ T7076] overlayfs: failed to resolve './file0': -2 [ 222.719535][ T1209] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.850829][ T1209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 223.183432][ T1209] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 223.240214][ T7075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.292'. [ 223.277276][ T1209] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 224.444120][ T1209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.664292][ T1209] usb 3-1: config 0 descriptor?? [ 224.720576][ T1209] usb 3-1: can't set config #0, error -71 [ 224.733641][ T1209] usb 3-1: USB disconnect, device number 7 [ 228.154245][ T5828] Bluetooth: hci4: command 0x0406 tx timeout [ 228.487318][ T5897] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 228.767603][ T7126] syz.4.302: attempt to access beyond end of device [ 228.767603][ T7126] nbd4: rw=0, sector=16, nr_sectors = 1 limit=0 [ 228.781193][ T7126] qnx6: unable to read the first superblock [ 228.790041][ T7126] syz.4.302: attempt to access beyond end of device [ 228.790041][ T7126] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 228.803494][ T7126] qnx6: unable to read the first superblock [ 228.809552][ T7126] qnx6: unable to read the first superblock [ 230.187828][ T7133] Can't find a SQUASHFS superblock on nullb0 [ 230.199026][ T2344] pvrusb2: request_firmware fatal error with code=-110 [ 230.209503][ T7132] overlayfs: failed to resolve './file0': -2 [ 230.226360][ T2344] pvrusb2: Failure uploading firmware1 [ 230.232269][ T2344] pvrusb2: Device initialization was not successful. [ 230.246694][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 230.266411][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 230.275911][ T5904] pvrusb2: Device being rendered inoperable [ 230.453152][ T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 230.684867][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.750151][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 230.770375][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 230.810227][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 230.853850][ T7142] syz.1.305: attempt to access beyond end of device [ 230.853850][ T7142] nbd1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 230.866874][ T7142] qnx6: unable to read the first superblock [ 230.873880][ T7142] syz.1.305: attempt to access beyond end of device [ 230.873880][ T7142] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 230.886828][ T7142] qnx6: unable to read the first superblock [ 230.892760][ T7142] qnx6: unable to read the first superblock [ 230.929329][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.197730][ T24] usb 5-1: config 0 descriptor?? [ 232.433142][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 232.815262][ T43] usb 5-1: USB disconnect, device number 16 [ 233.396779][ T7167] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 233.416367][ T7166] fuse: Bad value for 'fd' [ 233.488625][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.690693][ T24] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 233.757941][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.914019][ T24] usb 4-1: config 0 descriptor?? [ 234.900170][ T24] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 235.032876][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0001/input/input6 [ 235.133070][ T5904] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 235.412653][ T7199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.319'. [ 235.598294][ T5904] usb 3-1: Using ep0 maxpacket: 32 [ 235.672639][ T7197] netlink: 'syz.4.318': attribute type 7 has an invalid length. [ 235.712370][ T24] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 235.765976][ T5904] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=66.3d [ 235.776736][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.826532][ T7201] vlan2: entered allmulticast mode [ 235.832194][ T7201] bond1: entered allmulticast mode [ 235.972466][ T7205] trusted_key: syz.0.320 sent an empty control message without MSG_MORE. [ 236.121618][ T5904] usb 3-1: config 0 descriptor?? [ 236.535064][ T5904] cx82310_eth 3-1:0.0: probe with driver cx82310_eth failed with error -22 [ 236.617770][ T5904] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 236.800721][ T24] usb 4-1: USB disconnect, device number 4 [ 237.528165][ T7211] fido_id[7211]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 237.597955][ T7221] /dev/nullb0: Can't open blockdev [ 238.636877][ T7230] overlayfs: missing 'lowerdir' [ 240.499118][ T7243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.329'. [ 240.612862][ T43] usb 3-1: USB disconnect, device number 8 [ 240.628536][ T7243] vlan2: entered allmulticast mode [ 240.633871][ T7243] bond1: entered allmulticast mode [ 241.749882][ T7265] syz.4.334: attempt to access beyond end of device [ 241.749882][ T7265] nbd4: rw=0, sector=16, nr_sectors = 1 limit=0 [ 241.763016][ T7265] qnx6: unable to read the first superblock [ 241.770253][ T7265] syz.4.334: attempt to access beyond end of device [ 241.770253][ T7265] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 242.013379][ T7267] /dev/nullb0: Can't open blockdev [ 242.035735][ T7265] qnx6: unable to read the first superblock [ 242.041796][ T7265] qnx6: unable to read the first superblock [ 242.060107][ T5936] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 242.261215][ T7256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.333'. [ 242.334777][ T5936] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.614026][ T5936] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 242.623785][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.638462][ T5936] usb 3-1: config 0 descriptor?? [ 242.792202][ T5936] pwc: Askey VC010 type 2 USB webcam detected. [ 244.426061][ T5936] pwc: recv_control_msg error -32 req 02 val 2b00 [ 244.446451][ T5936] pwc: recv_control_msg error -32 req 02 val 2700 [ 244.524145][ T5936] pwc: recv_control_msg error -32 req 02 val 2c00 [ 244.552532][ T5936] pwc: recv_control_msg error -32 req 04 val 1000 [ 244.615699][ T7285] overlayfs: missing 'lowerdir' [ 244.932779][ T5936] pwc: recv_control_msg error -32 req 04 val 1300 [ 245.359427][ T5936] pwc: recv_control_msg error -32 req 04 val 1400 [ 245.582288][ T5936] pwc: recv_control_msg error -32 req 02 val 2000 [ 245.863162][ T7296] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 245.937457][ T5936] pwc: recv_control_msg error -32 req 02 val 2100 [ 246.151548][ T5936] pwc: recv_control_msg error -32 req 04 val 1500 [ 246.168270][ T5936] pwc: recv_control_msg error -32 req 02 val 2500 [ 246.193092][ T5936] pwc: recv_control_msg error -32 req 02 val 2400 [ 246.204182][ T5936] pwc: recv_control_msg error -32 req 02 val 2600 [ 246.239542][ T5936] pwc: recv_control_msg error -32 req 02 val 2900 [ 246.283228][ T5936] pwc: recv_control_msg error -71 req 02 val 2800 [ 246.313741][ T7303] netlink: 12 bytes leftover after parsing attributes in process `syz.3.346'. [ 246.338363][ T5936] pwc: recv_control_msg error -71 req 04 val 1100 [ 246.388388][ T5936] pwc: recv_control_msg error -71 req 04 val 1200 [ 246.472975][ T5936] pwc: Registered as video103. [ 246.508520][ T5936] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 247.623670][ T7311] tmpfs: Bad value for 'mpol' [ 247.668733][ T5936] usb 3-1: USB disconnect, device number 9 [ 248.008821][ T5870] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 248.243229][ T5870] usb 1-1: Using ep0 maxpacket: 16 [ 248.261036][ T7305] vlan2: entered allmulticast mode [ 248.363506][ T7305] bond1: entered allmulticast mode [ 248.703339][ T5870] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1023 [ 248.769197][ T7320] /dev/nullb0: Can't open blockdev [ 249.294273][ T5870] usb 1-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 249.327322][ T5870] usb 1-1: config 1 interface 0 has no altsetting 0 [ 249.459004][ T5870] usb 1-1: string descriptor 0 read error: -71 [ 249.678637][ T5870] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 249.723174][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.768663][ T5870] usb 1-1: can't set config #1, error -71 [ 249.824712][ T5870] usb 1-1: USB disconnect, device number 6 [ 250.009220][ T7334] overlayfs: missing 'lowerdir' [ 250.387522][ T5870] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 251.238953][ T5870] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 251.248173][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.272056][ T5870] usb 1-1: config 0 descriptor?? [ 251.740022][ T7346] syz.2.356: attempt to access beyond end of device [ 251.740022][ T7346] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 252.013152][ T7346] qnx6: unable to read the first superblock [ 252.030895][ T7346] syz.2.356: attempt to access beyond end of device [ 252.030895][ T7346] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 252.044514][ T7346] qnx6: unable to read the first superblock [ 252.050566][ T7346] qnx6: unable to read the first superblock [ 253.922250][ T7366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.362'. [ 254.040585][ T7366] vlan2: entered allmulticast mode [ 254.046736][ T7366] bond2: entered allmulticast mode [ 254.053226][ T5870] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 254.266347][ T7375] Can't find a SQUASHFS superblock on nullb0 [ 254.376151][ T7355] delete_channel: no stack [ 254.492152][ T5904] usb 1-1: USB disconnect, device number 7 [ 254.561694][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.657512][ T5870] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 254.749102][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.945604][ T5870] usb 4-1: config 0 descriptor?? [ 255.712288][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.723027][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.055708][ T5870] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 256.361441][ T5870] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0002/input/input8 [ 256.947177][ T7399] syz.2.368: attempt to access beyond end of device [ 256.947177][ T7399] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 256.960271][ T7399] qnx6: unable to read the first superblock [ 256.967479][ T7399] syz.2.368: attempt to access beyond end of device [ 256.967479][ T7399] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 256.980401][ T7399] qnx6: unable to read the first superblock [ 256.986497][ T7399] qnx6: unable to read the first superblock [ 257.580317][ T7400] process 'syz.4.370' launched './file2' with NULL argv: empty string added [ 258.381763][ T5870] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 258.643285][ T5870] usb 4-1: USB disconnect, device number 5 [ 258.972833][ T7408] fido_id[7408]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 260.326555][ T7422] overlayfs: overlapping lowerdir path [ 263.695829][ T7436] overlayfs: overlapping lowerdir path [ 263.713123][ T5936] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 265.134881][ T5936] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.253089][ T5936] usb 4-1: config 0 has no interfaces? [ 265.269515][ T5936] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 265.360939][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.395513][ T7446] netlink: 'syz.2.382': attribute type 15 has an invalid length. [ 265.423964][ T7446] netlink: 666 bytes leftover after parsing attributes in process `syz.2.382'. [ 265.443455][ T5936] usb 4-1: config 0 descriptor?? [ 265.683982][ T7453] syz.1.381: attempt to access beyond end of device [ 265.683982][ T7453] nbd1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 265.697068][ T7453] qnx6: unable to read the first superblock [ 265.704159][ T7453] syz.1.381: attempt to access beyond end of device [ 265.704159][ T7453] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 265.717045][ T7453] qnx6: unable to read the first superblock [ 265.723023][ T7453] qnx6: unable to read the first superblock [ 266.757226][ T7432] netlink: 'syz.3.377': attribute type 1 has an invalid length. [ 266.787708][ T7459] dummy0: entered promiscuous mode [ 266.873023][ T5904] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 267.001589][ T7432] 8021q: adding VLAN 0 to HW filter on device bond2 [ 267.562079][ T5936] usb 4-1: USB disconnect, device number 6 [ 267.623024][ T5904] usb 3-1: Using ep0 maxpacket: 8 [ 267.643496][ T5904] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 267.660166][ T5904] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 267.697547][ T5904] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 267.717690][ T5904] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 268.614812][ T5904] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 268.628183][ T5904] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 268.637517][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.194791][ T5904] usb 3-1: can't set config #16, error -71 [ 269.273617][ T5904] usb 3-1: USB disconnect, device number 10 [ 270.068309][ T7479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.391'. [ 270.165542][ T7485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.393'. [ 270.301025][ T7488] syz.0.392: attempt to access beyond end of device [ 270.301025][ T7488] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 270.313848][ T7488] qnx6: unable to read the first superblock [ 270.319923][ T7488] syz.0.392: attempt to access beyond end of device [ 270.319923][ T7488] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 270.332836][ T7488] qnx6: unable to read the first superblock [ 270.339422][ T7488] qnx6: unable to read the first superblock [ 271.385681][ T7502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.397'. [ 271.707534][ T7505] syz.3.396: attempt to access beyond end of device [ 271.707534][ T7505] nbd3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 271.720332][ T7505] qnx6: unable to read the first superblock [ 271.726447][ T7505] syz.3.396: attempt to access beyond end of device [ 271.726447][ T7505] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 271.739153][ T7505] qnx6: unable to read the first superblock [ 271.745074][ T7505] qnx6: unable to read the first superblock [ 272.270422][ T7485] vlan2: entered allmulticast mode [ 272.275742][ T7485] bond1: entered allmulticast mode [ 273.825806][ T7510] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 276.953242][ T5904] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 277.207193][ T5904] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.318013][ T5904] usb 4-1: config 0 has no interfaces? [ 277.449913][ T5904] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 277.705321][ T7538] 9pnet_fd: Insufficient options for proto=fd [ 277.724158][ T7538] lo speed is unknown, defaulting to 1000 [ 277.731157][ T7538] lo speed is unknown, defaulting to 1000 [ 277.744375][ T7538] lo speed is unknown, defaulting to 1000 [ 277.779538][ T7538] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 277.851663][ T7538] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 278.033238][ T7538] lo speed is unknown, defaulting to 1000 [ 278.053864][ T7538] lo speed is unknown, defaulting to 1000 [ 278.072667][ T7538] lo speed is unknown, defaulting to 1000 [ 278.091916][ T7538] lo speed is unknown, defaulting to 1000 [ 278.110125][ T7538] lo speed is unknown, defaulting to 1000 [ 278.233257][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.253956][ T5904] usb 4-1: config 0 descriptor?? [ 278.360910][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.405'. [ 278.587368][ T5897] usb 4-1: USB disconnect, device number 7 [ 281.070725][ T7559] syz.4.411: attempt to access beyond end of device [ 281.070725][ T7559] nbd4: rw=0, sector=16, nr_sectors = 1 limit=0 [ 281.083918][ T7559] qnx6: unable to read the first superblock [ 281.091655][ T7559] syz.4.411: attempt to access beyond end of device [ 281.091655][ T7559] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 281.104670][ T7559] qnx6: unable to read the first superblock [ 281.110672][ T7559] qnx6: unable to read the first superblock [ 281.782248][ T7541] delete_channel: no stack [ 281.995469][ T7564] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 282.611381][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.416'. [ 282.686767][ T5824] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 283.093617][ T5824] usb 2-1: Using ep0 maxpacket: 16 [ 283.754565][ T5824] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 283.764093][ T5824] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.774277][ T5824] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 283.786443][ T5824] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 283.796549][ T5824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.806663][ T5824] usb 2-1: Product: syz [ 283.823049][ T5824] usb 2-1: Manufacturer: syz [ 283.830695][ T5824] usb 2-1: SerialNumber: syz [ 284.030052][ T7577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.420'. [ 284.696356][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.421'. [ 284.922016][ T5824] usb 2-1: 0:2 : does not exist [ 284.974104][ T5897] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 285.516898][ T5897] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.511151][ T5897] usb 4-1: config 0 has no interfaces? [ 286.684146][ T5897] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 286.734713][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.823903][ T5824] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 286.896466][ T5897] usb 4-1: config 0 descriptor?? [ 286.985299][ T7599] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 286.994281][ T7599] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 287.444766][ T7582] netlink: 'syz.3.422': attribute type 1 has an invalid length. [ 287.500080][ T5824] usb 2-1: USB disconnect, device number 7 [ 288.251697][ T5986] udevd[5986]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 288.384801][ T7582] 8021q: adding VLAN 0 to HW filter on device bond3 [ 288.411598][ T7606] bond3: (slave dummy0): making interface the new active one [ 288.422745][ T7606] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 288.501701][ T7612] tipc: Started in network mode [ 288.508427][ T7612] tipc: Node identity ac141425, cluster identity 4711 [ 288.528884][ T7612] tipc: New replicast peer: 0.0.0.0 [ 288.548861][ T7612] tipc: Enabled bearer , priority 10 [ 289.394397][ T5897] usb 4-1: USB disconnect, device number 8 [ 289.572844][ T5904] tipc: Node number set to 2886997029 [ 291.246331][ T7631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.435'. [ 291.792995][ T7645] netlink: 'syz.1.437': attribute type 7 has an invalid length. [ 292.557139][ T5824] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 292.755523][ T7657] overlayfs: missing 'lowerdir' [ 292.793090][ T5824] usb 5-1: Using ep0 maxpacket: 16 [ 292.808367][ T5824] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1023 [ 292.886446][ T5824] usb 5-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 293.713046][ T5824] usb 5-1: config 1 interface 0 has no altsetting 0 [ 293.874035][ T7664] Driver unsupported XDP return value 0 on prog (id 47) dev N/A, expect packet loss! [ 294.318125][ T5824] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 294.328186][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.337635][ T5824] usb 5-1: Product: 믋殁啓鱗根ࡑใ얪툏⊛Å녟鏷涟㝰铣ℾ婂忂俛鶴☇砀玭綺戲輁ݮ惡쀷ꇺ鹏볖令ᎌ鮓Ĥ弡寽䩜附鲨졾疭ោ㉝끡굑䁘喹ᨰ䑖끋쪞䐈盛⬢㫧㿗⨕幫堈ᐳ䆪勪₂郫濮㵙耍屻ꍞ겸꡵炫凲쵴혋⺦ᚧ黄诘섔麷駧娀飳㯟국⌗ﲡ㿡Ῡ躞ꋗﭴ [ 294.370351][ T5824] usb 5-1: SerialNumber: 昄ˏ砭ⶍ঄矈볞쉐끯쬐஠鉅骙涻盼᱄馁밼䫵哦ᯄ쓓凫탩宙䧉嘐☀飗쟢㣫월ꤧઆ⤝ [ 294.515834][ T5824] usb 5-1: can't set config #1, error -71 [ 294.557280][ T5824] usb 5-1: USB disconnect, device number 17 [ 295.068439][ T7674] syz.3.445: attempt to access beyond end of device [ 295.068439][ T7674] nbd3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 295.081959][ T7674] qnx6: unable to read the first superblock [ 295.091338][ T7674] syz.3.445: attempt to access beyond end of device [ 295.091338][ T7674] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 295.104297][ T7674] qnx6: unable to read the first superblock [ 295.110269][ T7674] qnx6: unable to read the first superblock [ 295.173099][ T5897] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 295.334871][ T5897] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.356196][ T5897] usb 2-1: config 0 has no interfaces? [ 295.368064][ T5897] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 295.395155][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.436875][ T5897] usb 2-1: config 0 descriptor?? [ 295.664354][ T7667] netlink: 'syz.1.444': attribute type 1 has an invalid length. [ 296.603749][ T7667] 8021q: adding VLAN 0 to HW filter on device bond3 [ 296.734087][ T7684] dummy0: entered promiscuous mode [ 296.759431][ T7688] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.450'. [ 296.843914][ T7690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.449'. [ 296.965751][ T7684] bond3: (slave dummy0): making interface the new active one [ 297.128420][ T7684] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 297.380614][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.451'. [ 297.386689][ T24] usb 2-1: USB disconnect, device number 8 [ 297.643046][ T5870] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 297.794180][ T7707] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 297.803024][ T7707] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 298.805201][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.870027][ T5870] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 299.033000][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.122506][ T5870] usb 5-1: config 0 descriptor?? [ 299.183171][ T5897] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 299.680064][ T5897] usb 3-1: Using ep0 maxpacket: 16 [ 299.710855][ T5897] usb 3-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1023 [ 299.722551][ T5897] usb 3-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 299.779894][ T5897] usb 3-1: config 1 interface 0 has no altsetting 0 [ 299.904278][ T5870] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 299.955277][ T5897] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 299.969044][ T5870] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0003/input/input9 [ 299.999621][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.493154][ T5897] usb 3-1: Product: 믋殁啓鱗根ࡑใ얪툏⊛Å녟鏷涟㝰铣ℾ婂忂俛鶴☇砀玭綺戲輁ݮ惡쀷ꇺ鹏볖令ᎌ鮓Ĥ弡寽䩜附鲨졾疭ោ㉝끡굑䁘喹ᨰ䑖끋쪞䐈盛⬢㫧㿗⨕幫堈ᐳ䆪勪₂郫濮㵙耍屻ꍞ겸꡵炫凲쵴혋⺦ᚧ黄诘섔麷駧娀飳㯟국⌗ﲡ㿡Ῡ躞ꋗﭴ [ 300.720941][ T5897] usb 3-1: SerialNumber: 昄ˏ砭ⶍ঄矈볞쉐끯쬐஠鉅骙涻盼᱄馁밼䫵哦ᯄ쓓凫탩宙䧉嘐☀飗쟢㣫월ꤧઆ⤝ [ 301.165806][ T5870] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 301.197622][ T5897] usb 3-1: can't set config #1, error -71 [ 301.215033][ T5897] usb 3-1: USB disconnect, device number 11 [ 301.233484][ T5870] usb 5-1: USB disconnect, device number 18 [ 302.521840][ T7738] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 303.098076][ T7748] Can't find a SQUASHFS superblock on nullb0 [ 304.433088][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 304.547333][ T7751] fido_id[7751]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 304.620936][ T7758] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.465'. [ 304.728401][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.759196][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 304.779005][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 304.792240][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 304.805215][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.817447][ T7763] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 304.826346][ T7763] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 305.194273][ T9] usb 4-1: config 0 descriptor?? [ 307.238030][ T7777] 9pnet_fd: Insufficient options for proto=fd [ 307.245889][ T7777] siw: device registration error -23 [ 307.606811][ T1209] usb 4-1: USB disconnect, device number 9 [ 308.363212][ T1209] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 309.202995][ T1209] usb 4-1: Using ep0 maxpacket: 16 [ 309.209281][ T7791] Can't find a SQUASHFS superblock on nullb0 [ 309.238615][ T1209] usb 4-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1023 [ 309.279537][ T1209] usb 4-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 309.336202][ T1209] usb 4-1: config 1 interface 0 has no altsetting 0 [ 309.587821][ T1209] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 310.554710][ T1209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.562742][ T1209] usb 4-1: Product: 믋殁啓鱗根ࡑใ얪툏⊛Å녟鏷涟㝰铣ℾ婂忂俛鶴☇砀玭綺戲輁ݮ惡쀷ꇺ鹏볖令ᎌ鮓Ĥ弡寽䩜附鲨졾疭ោ㉝끡굑䁘喹ᨰ䑖끋쪞䐈盛⬢㫧㿗⨕幫堈ᐳ䆪勪₂郫濮㵙耍屻ꍞ겸꡵炫凲쵴혋⺦ᚧ黄诘섔麷駧娀飳㯟국⌗ﲡ㿡Ῡ躞ꋗﭴ [ 310.709065][ T1209] usb 4-1: SerialNumber: 昄ˏ砭ⶍ঄矈볞쉐끯쬐஠鉅骙涻盼᱄馁밼䫵哦ᯄ쓓凫탩宙䧉嘐☀飗쟢㣫월ꤧઆ⤝ [ 310.795156][ T1209] usb 4-1: can't set config #1, error -71 [ 310.822360][ T1209] usb 4-1: USB disconnect, device number 10 [ 310.887878][ T7808] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.478'. [ 311.730508][ T7818] Bluetooth: MGMT ver 1.23 [ 311.963042][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 312.239632][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.333201][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 312.533894][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.932691][ T9] usb 1-1: config 0 descriptor?? [ 313.381971][ T7833] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 313.491413][ T9] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 313.813146][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0004/input/input10 [ 315.123443][ T9] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 315.902585][ T9] usb 1-1: USB disconnect, device number 8 [ 316.023518][ T5897] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 316.042784][ T7852] fido_id[7852]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 316.243143][ T5897] usb 3-1: Using ep0 maxpacket: 16 [ 316.256513][ T5897] usb 3-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1023 [ 316.309638][ T5897] usb 3-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 316.343510][ T5897] usb 3-1: config 1 interface 0 has no altsetting 0 [ 316.441998][ T5897] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 316.467536][ T7862] trusted_key: encrypted_key: insufficient parameters specified [ 317.048734][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.056996][ T5897] usb 3-1: Product: 믋殁啓鱗根ࡑใ얪툏⊛Å녟鏷涟㝰铣ℾ婂忂俛鶴☇砀玭綺戲輁ݮ惡쀷ꇺ鹏볖令ᎌ鮓Ĥ弡寽䩜附鲨졾疭ោ㉝끡굑䁘喹ᨰ䑖끋쪞䐈盛⬢㫧㿗⨕幫堈ᐳ䆪勪₂郫濮㵙耍屻ꍞ겸꡵炫凲쵴혋⺦ᚧ黄诘섔麷駧娀飳㯟국⌗ﲡ㿡Ῡ躞ꋗﭴ [ 317.393071][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.399830][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.011772][ T5897] usb 3-1: SerialNumber: 昄ˏ砭ⶍ঄矈볞쉐끯쬐஠鉅骙涻盼᱄馁밼䫵哦ᯄ쓓凫탩宙䧉嘐☀飗쟢㣫월ꤧઆ⤝ [ 318.215070][ T5897] usb 3-1: can't set config #1, error -71 [ 318.271032][ T5897] usb 3-1: USB disconnect, device number 12 [ 320.524952][ T7884] bridge0: port 3(syz_tun) entered blocking state [ 320.532073][ T7884] bridge0: port 3(syz_tun) entered disabled state [ 320.539659][ T7884] syz_tun: entered allmulticast mode [ 320.554789][ T7884] syz_tun: entered promiscuous mode [ 320.562352][ T7884] bridge0: port 3(syz_tun) entered blocking state [ 320.569401][ T7884] bridge0: port 3(syz_tun) entered forwarding state [ 320.631967][ T7884] xt_CT: You must specify a L4 protocol and not use inversions on it [ 321.230507][ T7888] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 324.041917][ T7908] capability: warning: `syz.1.504' uses deprecated v2 capabilities in a way that may be insecure [ 324.054498][ T7908] overlayfs: missing 'lowerdir' [ 328.137980][ T7941] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 329.223035][ T5824] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 329.230698][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 329.341799][ T7956] trusted_key: encrypted_key: insufficient parameters specified [ 329.423153][ T5870] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 329.503081][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 329.513479][ T5824] usb 4-1: Using ep0 maxpacket: 8 [ 329.564155][ T24] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 329.578799][ T24] usb 3-1: config 0 has no interface number 0 [ 329.588698][ T5824] usb 4-1: config 0 has an invalid interface number: 33 but max is 1 [ 329.597084][ T5824] usb 4-1: config 0 has no interface number 1 [ 329.608610][ T5870] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 329.613044][ T5824] usb 4-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 329.626322][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.629269][ T24] usb 3-1: config 0 interface 184 has no altsetting 0 [ 329.660399][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 329.669876][ T5870] usb 5-1: Product: syz [ 329.673001][ T5824] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 329.677692][ T5870] usb 5-1: Manufacturer: syz [ 329.683885][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.683905][ T24] usb 3-1: Product: syz [ 329.683918][ T24] usb 3-1: Manufacturer: syz [ 329.683930][ T24] usb 3-1: SerialNumber: syz [ 329.714893][ T5870] usb 5-1: SerialNumber: syz [ 329.754244][ T5870] usb 5-1: config 0 descriptor?? [ 329.761707][ T5824] usb 4-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 329.806881][ T5824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.823965][ T5824] usb 4-1: Product: syz [ 329.829077][ T24] usb 3-1: config 0 descriptor?? [ 329.847802][ T5824] usb 4-1: Manufacturer: syz [ 329.854730][ T24] smsc75xx v1.0.0 [ 329.858374][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 329.877704][ T5824] usb 4-1: SerialNumber: syz [ 329.941212][ T5824] usb 4-1: config 0 descriptor?? [ 329.950415][ T24] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 329.965632][ T5824] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 330.005661][ T5870] usb-storage 5-1:0.0: USB Mass Storage device detected [ 330.174582][ T5824] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 330.214179][ T2344] pvrusb2: Invalid read control endpoint [ 330.260569][ T5870] usb 5-1: USB disconnect, device number 19 [ 330.260637][ T2344] usb 4-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 330.293241][ T5824] usb 4-1: USB disconnect, device number 11 [ 330.326170][ T2344] usb 4-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 331.503198][ T5936] usb 3-1: USB disconnect, device number 13 [ 334.288134][ T7996] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 336.531630][ T8006] overlayfs: missing 'lowerdir' [ 337.664093][ T8017] trusted_key: encrypted_key: insufficient parameters specified [ 339.911191][ T8040] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 343.314271][ T8063] overlayfs: missing 'lowerdir' [ 343.578906][ T8057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.543'. [ 343.681118][ T8067] /dev/nullb0: Can't open blockdev [ 343.973361][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 344.206694][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.303518][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 344.393321][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 344.717425][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 344.728012][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.839497][ T9] usb 3-1: config 0 descriptor?? [ 344.917439][ T8052] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 345.532112][ T8084] netlink: 'syz.0.550': attribute type 7 has an invalid length. [ 346.358539][ T5832] usb 3-1: USB disconnect, device number 14 [ 346.733566][ T5828] Bluetooth: hci4: command 0x0406 tx timeout [ 347.269919][ T8101] syz.0.555: attempt to access beyond end of device [ 347.269919][ T8101] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 347.283307][ T8101] qnx6: unable to read the first superblock [ 347.292129][ T8101] syz.0.555: attempt to access beyond end of device [ 347.292129][ T8101] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 347.306568][ T8101] qnx6: unable to read the first superblock [ 347.313072][ T8101] qnx6: unable to read the first superblock [ 348.189767][ T8107] Can't find a SQUASHFS superblock on nullb0 [ 348.612903][ T8113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.556'. [ 349.009448][ T8117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.559'. [ 350.016540][ T8125] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 351.214075][ T5832] IPVS: starting estimator thread 0... [ 351.547993][ T8137] Can't find a SQUASHFS superblock on nullb0 [ 351.723471][ T8135] IPVS: using max 26 ests per chain, 62400 per kthread [ 351.843057][ T5832] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 352.265620][ T8151] syz.3.567: attempt to access beyond end of device [ 352.265620][ T8151] nbd3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 352.278722][ T8151] qnx6: unable to read the first superblock [ 352.284914][ T8151] syz.3.567: attempt to access beyond end of device [ 352.284914][ T8151] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 352.297605][ T8151] qnx6: unable to read the first superblock [ 352.303523][ T8151] qnx6: unable to read the first superblock [ 352.501168][ T5832] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.779029][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 352.810391][ T5832] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 352.855302][ T5832] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 352.878298][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.917386][ T5832] usb 3-1: config 0 descriptor?? [ 353.074623][ T8160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.570'. [ 353.434730][ T8164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.572'. [ 354.204876][ T5897] usb 3-1: USB disconnect, device number 15 [ 354.516438][ T8175] fuse: Bad value for 'fd' [ 355.099471][ T8179] syz.1.576: attempt to access beyond end of device [ 355.099471][ T8179] nbd1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 355.112851][ T8179] qnx6: unable to read the first superblock [ 355.120052][ T8179] syz.1.576: attempt to access beyond end of device [ 355.120052][ T8179] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 355.133402][ T8179] qnx6: unable to read the first superblock [ 355.139336][ T8179] qnx6: unable to read the first superblock [ 356.850707][ T8191] syz.0.579: attempt to access beyond end of device [ 356.850707][ T8191] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 356.863608][ T8191] qnx6: unable to read the first superblock [ 356.870245][ T8191] syz.0.579: attempt to access beyond end of device [ 356.870245][ T8191] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 356.883308][ T8191] qnx6: unable to read the first superblock [ 356.889209][ T8191] qnx6: unable to read the first superblock [ 357.477923][ T8199] bridge0: port 3(syz_tun) entered blocking state [ 357.488092][ T8199] bridge0: port 3(syz_tun) entered disabled state [ 357.494751][ T8199] syz_tun: entered allmulticast mode [ 357.501757][ T8199] syz_tun: entered promiscuous mode [ 357.507495][ T8199] bridge0: port 3(syz_tun) entered blocking state [ 357.514027][ T8199] bridge0: port 3(syz_tun) entered forwarding state [ 357.533020][ T8199] xt_CT: You must specify a L4 protocol and not use inversions on it [ 358.877962][ T8202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.581'. [ 359.273849][ T8213] Can't find a SQUASHFS superblock on nullb0 [ 359.986383][ T8214] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 360.155356][ T5897] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 360.385086][ T5897] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.431720][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 361.443081][ T5897] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 361.455945][ T5897] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 361.465346][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.515369][ T5897] usb 5-1: config 0 descriptor?? [ 361.532838][ T8224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.589'. [ 361.815676][ T8233] syz.3.590: attempt to access beyond end of device [ 361.815676][ T8233] nbd3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 361.828481][ T8233] qnx6: unable to read the first superblock [ 361.834682][ T8233] syz.3.590: attempt to access beyond end of device [ 361.834682][ T8233] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 361.847501][ T8233] qnx6: unable to read the first superblock [ 361.853485][ T8233] qnx6: unable to read the first superblock [ 362.433402][ T5897] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 362.635000][ T8231] vlan2: entered allmulticast mode [ 362.640827][ T8231] bond2: entered allmulticast mode [ 362.799176][ T5897] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 362.836549][ T5897] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 362.861235][ T5897] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 362.876388][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.416448][ T8242] syz.3.593: attempt to access beyond end of device [ 363.416448][ T8242] nbd3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 363.429779][ T8242] qnx6: unable to read the first superblock [ 363.435912][ T8242] syz.3.593: attempt to access beyond end of device [ 363.435912][ T8242] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 363.448731][ T8242] qnx6: unable to read the first superblock [ 363.454656][ T8242] qnx6: unable to read the first superblock [ 363.481332][ T30] audit: type=1326 audit(1750777049.859:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8221 comm="syz.2.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabc118e929 code=0x7ffc0000 [ 363.532678][ T24] usb 5-1: USB disconnect, device number 20 [ 363.596305][ T30] audit: type=1326 audit(1750777049.969:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8221 comm="syz.2.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabc118e929 code=0x7ffc0000 [ 363.843045][ T30] audit: type=1326 audit(1750777049.979:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8221 comm="syz.2.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fabc118e929 code=0x7ffc0000 [ 364.039309][ T30] audit: type=1326 audit(1750777049.979:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8221 comm="syz.2.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabc118e929 code=0x7ffc0000 [ 364.060517][ C1] vkms_vblank_simulate: vblank timer overrun [ 365.057737][ T30] audit: type=1326 audit(1750777049.999:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8221 comm="syz.2.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabc118e929 code=0x7ffc0000 [ 365.320352][ T30] audit: type=1326 audit(1750777049.999:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8221 comm="syz.2.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fabc118e929 code=0x7ffc0000 [ 365.343147][ T30] audit: type=1326 audit(1750777050.009:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8221 comm="syz.2.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabc118e929 code=0x7ffc0000 [ 365.971503][ T9] usb 3-1: USB disconnect, device number 16 [ 365.994230][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.597'. [ 366.008439][ T30] audit: type=1326 audit(1750777050.009:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8221 comm="syz.2.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabc118e929 code=0x7ffc0000 [ 366.088936][ T30] audit: type=1326 audit(1750777050.029:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8221 comm="syz.2.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fabc118e929 code=0x7ffc0000 [ 366.132022][ T30] audit: type=1326 audit(1750777050.029:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8221 comm="syz.2.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabc118e929 code=0x7ffc0000 [ 367.220543][ T8285] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 368.110595][ T8293] syz.0.603: attempt to access beyond end of device [ 368.110595][ T8293] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 368.123780][ T8293] qnx6: unable to read the first superblock [ 368.131059][ T8293] syz.0.603: attempt to access beyond end of device [ 368.131059][ T8293] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 368.144106][ T8293] qnx6: unable to read the first superblock [ 368.150038][ T8293] qnx6: unable to read the first superblock [ 368.779199][ T8297] netlink: 'syz.4.604': attribute type 7 has an invalid length. [ 371.388803][ T8313] syz.1.607: attempt to access beyond end of device [ 371.388803][ T8313] nbd1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 371.401862][ T8313] qnx6: unable to read the first superblock [ 371.409210][ T8313] syz.1.607: attempt to access beyond end of device [ 371.409210][ T8313] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 371.422282][ T8313] qnx6: unable to read the first superblock [ 371.428245][ T8313] qnx6: unable to read the first superblock [ 372.066745][ T8321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.612'. [ 372.648415][ T8329] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 373.189756][ T5870] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 374.315449][ T5870] usb 2-1: config 0 has no interfaces? [ 374.327173][ T5870] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 374.336361][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.344626][ T5870] usb 2-1: Product: syz [ 374.485781][ T5870] usb 2-1: Manufacturer: syz [ 374.490868][ T5870] usb 2-1: SerialNumber: syz [ 374.524028][ T5870] usb 2-1: config 0 descriptor?? [ 375.649873][ T8345] 9pnet_fd: Insufficient options for proto=fd [ 376.669535][ T8353] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 376.686084][ T8355] fuse: Bad value for 'fd' [ 377.050980][ T5832] usb 2-1: USB disconnect, device number 9 [ 378.670912][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.688296][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.443874][ T8376] tipc: Started in network mode [ 379.449234][ T8376] tipc: Node identity ac141425, cluster identity 4711 [ 379.463129][ T8376] tipc: New replicast peer: 0.0.0.0 [ 379.472024][ T8376] tipc: Enabled bearer , priority 10 [ 380.463082][ T5870] tipc: Node number set to 2886997029 [ 381.512698][ T8394] Can't find a SQUASHFS superblock on nullb0 [ 383.121036][ T8395] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 384.485450][ T8420] syz.0.638: attempt to access beyond end of device [ 384.485450][ T8420] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 384.559367][ T8420] syz.0.638: attempt to access beyond end of device [ 384.559367][ T8420] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 384.696791][ T8420] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 384.708101][ T8420] syz.0.638: attempt to access beyond end of device [ 384.708101][ T8420] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 384.721514][ T8420] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 384.736766][ T8420] syz.0.638: attempt to access beyond end of device [ 384.736766][ T8420] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 384.753477][ T8420] syz.0.638: attempt to access beyond end of device [ 384.753477][ T8420] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 384.769955][ T8420] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 384.784270][ T8420] syz.0.638: attempt to access beyond end of device [ 384.784270][ T8420] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 384.799717][ T8420] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 385.193663][ T8420] syz.0.638: attempt to access beyond end of device [ 385.193663][ T8420] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 385.348046][ T8420] syz.0.638: attempt to access beyond end of device [ 385.348046][ T8420] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 385.361717][ T8420] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 385.372195][ T8420] syz.0.638: attempt to access beyond end of device [ 385.372195][ T8420] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 385.385773][ T8420] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 385.401902][ T8420] syz.0.638: attempt to access beyond end of device [ 385.401902][ T8420] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 385.416317][ T8420] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 385.427223][ T8420] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 385.438427][ T8420] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 388.182188][ T8444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.643'. [ 389.036271][ T8453] Can't find a SQUASHFS superblock on nullb0 [ 390.524391][ T5832] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 390.827677][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 390.827697][ T30] audit: type=1326 audit(1750777077.209:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8456 comm="syz.2.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabc118e929 code=0x7fc00000 [ 390.882177][ T5832] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.915088][ T5832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 390.943331][ T5832] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 390.964406][ T5832] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 390.975079][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.030022][ T5832] usb 1-1: config 0 descriptor?? [ 391.264515][ T8474] Can't find a SQUASHFS superblock on nullb0 [ 392.562646][ T5832] usb 1-1: USB disconnect, device number 9 [ 392.992680][ T8487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.655'. [ 393.558665][ T8492] bio_check_eod: 2 callbacks suppressed [ 393.558682][ T8492] syz.1.653: attempt to access beyond end of device [ 393.558682][ T8492] nbd1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 393.577283][ T8492] qnx6: unable to read the first superblock [ 393.583416][ T8492] syz.1.653: attempt to access beyond end of device [ 393.583416][ T8492] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 393.596364][ T8492] qnx6: unable to read the first superblock [ 393.602406][ T8492] qnx6: unable to read the first superblock [ 393.944890][ T2344] pvrusb2: request_firmware fatal error with code=-110 [ 393.951778][ T2344] pvrusb2: Failure uploading firmware1 [ 393.962985][ T2344] pvrusb2: Device initialization was not successful. [ 393.969821][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 394.116281][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 394.143504][ T2344] pvrusb2: Failed to submit write-control URB status=-19 [ 394.151490][ T5824] pvrusb2: Device being rendered inoperable [ 394.161465][ T2344] usb 4-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 394.257097][ T2344] usb 4-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 396.251340][ T8519] fuse: Bad value for 'fd' [ 396.535184][ T8525] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 396.544833][ T8525] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 397.153180][ T8523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.665'. [ 397.251623][ T8528] overlayfs: overlapping lowerdir path [ 397.852922][ T8536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.666'. [ 399.705815][ T8561] 9pnet_fd: Insufficient options for proto=fd [ 399.727963][ T8561] siw: device registration error -23 [ 401.376365][ T8572] fuse: Bad value for 'fd' [ 401.500120][ T8573] syz.1.677: attempt to access beyond end of device [ 401.500120][ T8573] nbd1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 401.513256][ T8573] qnx6: unable to read the first superblock [ 401.519267][ T8573] syz.1.677: attempt to access beyond end of device [ 401.519267][ T8573] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 401.532109][ T8573] qnx6: unable to read the first superblock [ 401.538100][ T8573] qnx6: unable to read the first superblock [ 403.050854][ T8595] syz.0.682: attempt to access beyond end of device [ 403.050854][ T8595] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 403.063710][ T8595] qnx6: unable to read the first superblock [ 403.069804][ T8595] syz.0.682: attempt to access beyond end of device [ 403.069804][ T8595] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 403.082510][ T8595] qnx6: unable to read the first superblock [ 403.088444][ T8595] qnx6: unable to read the first superblock [ 403.153020][ T8596] syz.2.684: attempt to access beyond end of device [ 403.153020][ T8596] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 403.165931][ T8596] qnx6: unable to read the first superblock [ 403.172119][ T8596] syz.2.684: attempt to access beyond end of device [ 403.172119][ T8596] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 403.184874][ T8596] qnx6: unable to read the first superblock [ 403.190827][ T8596] qnx6: unable to read the first superblock [ 405.617889][ T8612] fuse: Bad value for 'fd' [ 407.629526][ T8638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.698'. [ 408.058477][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 408.435666][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.449394][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 408.459911][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.482411][ T9] usb 3-1: config 0 descriptor?? [ 408.905250][ T5870] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 409.243129][ T5870] usb 5-1: Using ep0 maxpacket: 32 [ 409.250777][ T9] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 409.260073][ T5870] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 409.279235][ T5870] usb 5-1: config 0 has no interface number 0 [ 409.293098][ T5870] usb 5-1: config 0 interface 184 has no altsetting 0 [ 409.302175][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0005/input/input11 [ 409.323906][ T5870] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 409.341885][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.360307][ T5870] usb 5-1: Product: syz [ 409.364785][ T5870] usb 5-1: Manufacturer: syz [ 409.369436][ T5870] usb 5-1: SerialNumber: syz [ 409.414630][ T5870] usb 5-1: config 0 descriptor?? [ 409.432701][ T5870] smsc75xx v1.0.0 [ 409.440468][ T9] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 409.495832][ T5897] [ 409.495843][ T5897] ====================================================== [ 409.495851][ T5897] WARNING: possible circular locking dependency detected [ 409.495867][ T5897] 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 Not tainted [ 409.495878][ T5897] ------------------------------------------------------ [ 409.495885][ T5897] kworker/0:5/5897 is trying to acquire lock: [ 409.495894][ T5897] ffff88801a4a10b8 (&buf->lock){+.+.}-{4:4}, at: tty_buffer_flush+0x74/0x2b0 [ 409.495952][ T5897] [ 409.495952][ T5897] but task is already holding lock: [ 409.495958][ T5897] ffffffff8e1330e0 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x28/0x220 [ 409.495998][ T5897] [ 409.495998][ T5897] which lock already depends on the new lock. [ 409.495998][ T5897] [ 409.496005][ T5897] [ 409.496005][ T5897] the existing dependency chain (in reverse order) is: [ 409.496012][ T5897] [ 409.496012][ T5897] -> #2 (console_lock){+.+.}-{0:0}: [ 409.496036][ T5897] lock_acquire+0x120/0x360 [ 409.496053][ T5897] console_lock+0x164/0x1b0 [ 409.496070][ T5897] con_flush_chars+0x70/0x280 [ 409.496081][ T5897] n_tty_receive_buf_common+0xc8b/0x12f0 [ 409.496092][ T5897] tty_port_default_receive_buf+0x6e/0xa0 [ 409.496101][ T5897] flush_to_ldisc+0x247/0x720 [ 409.496109][ T5897] process_scheduled_works+0xade/0x17b0 [ 409.496122][ T5897] worker_thread+0x8a0/0xda0 [ 409.496134][ T5897] kthread+0x70e/0x8a0 [ 409.496142][ T5897] ret_from_fork+0x3fc/0x770 [ 409.496153][ T5897] ret_from_fork_asm+0x1a/0x30 [ 409.496163][ T5897] [ 409.496163][ T5897] -> #1 (&tty->termios_rwsem){++++}-{4:4}: [ 409.496177][ T5897] lock_acquire+0x120/0x360 [ 409.496188][ T5897] down_write+0x96/0x1f0 [ 409.496196][ T5897] n_tty_flush_buffer+0x30/0x230 [ 409.496207][ T5897] tty_buffer_flush+0x1ec/0x2b0 [ 409.496214][ T5897] tty_ldisc_flush+0x6b/0xc0 [ 409.496227][ T5897] tty_port_close_start+0x2da/0x550 [ 409.496237][ T5897] tty_port_close+0x2a/0x150 [ 409.496247][ T5897] tty_release+0x389/0x1640 [ 409.496260][ T5897] __fput+0x449/0xa70 [ 409.496274][ T5897] task_work_run+0x1d1/0x260 [ 409.496285][ T5897] exit_to_user_mode_loop+0xec/0x110 [ 409.496298][ T5897] do_syscall_64+0x2bd/0x3b0 [ 409.496314][ T5897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.496323][ T5897] [ 409.496323][ T5897] -> #0 (&buf->lock){+.+.}-{4:4}: [ 409.496337][ T5897] validate_chain+0xb9b/0x2140 [ 409.496350][ T5897] __lock_acquire+0xab9/0xd20 [ 409.496360][ T5897] lock_acquire+0x120/0x360 [ 409.496370][ T5897] __mutex_lock+0x182/0xe80 [ 409.496383][ T5897] tty_buffer_flush+0x74/0x2b0 [ 409.496390][ T5897] __do_SAK+0x138/0x6d0 [ 409.496398][ T5897] vc_SAK+0x78/0x220 [ 409.496409][ T5897] process_scheduled_works+0xade/0x17b0 [ 409.496420][ T5897] worker_thread+0x8a0/0xda0 [ 409.496432][ T5897] kthread+0x70e/0x8a0 [ 409.496440][ T5897] ret_from_fork+0x3fc/0x770 [ 409.496451][ T5897] ret_from_fork_asm+0x1a/0x30 [ 409.496459][ T5897] [ 409.496459][ T5897] other info that might help us debug this: [ 409.496459][ T5897] [ 409.496462][ T5897] Chain exists of: [ 409.496462][ T5897] &buf->lock --> &tty->termios_rwsem --> console_lock [ 409.496462][ T5897] [ 409.496480][ T5897] Possible unsafe locking scenario: [ 409.496480][ T5897] [ 409.496483][ T5897] CPU0 CPU1 [ 409.496487][ T5897] ---- ---- [ 409.496490][ T5897] lock(console_lock); [ 409.496497][ T5897] lock(&tty->termios_rwsem); [ 409.496505][ T5897] lock(console_lock); [ 409.496513][ T5897] lock(&buf->lock); [ 409.496521][ T5897] [ 409.496521][ T5897] *** DEADLOCK *** [ 409.496521][ T5897] [ 409.496528][ T5897] 3 locks held by kworker/0:5/5897: [ 409.496534][ T5897] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 409.496562][ T5897] #1: ffffc900055cfbc0 ((work_completion)(&vc_cons[currcons].SAK_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 409.496588][ T5897] #2: ffffffff8e1330e0 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x28/0x220 [ 409.496614][ T5897] [ 409.496614][ T5897] stack backtrace: [ 409.496625][ T5897] CPU: 0 UID: 0 PID: 5897 Comm: kworker/0:5 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 409.496635][ T5897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 409.496642][ T5897] Workqueue: events vc_SAK [ 409.496659][ T5897] Call Trace: [ 409.496665][ T5897] [ 409.496669][ T5897] dump_stack_lvl+0x189/0x250 [ 409.496685][ T5897] ? __pfx_dump_stack_lvl+0x10/0x10 [ 409.496698][ T5897] ? __pfx__printk+0x10/0x10 [ 409.496707][ T5897] ? print_lock_name+0xde/0x100 [ 409.496722][ T5897] print_circular_bug+0x2ee/0x310 [ 409.496737][ T5897] check_noncircular+0x134/0x160 [ 409.496751][ T5897] validate_chain+0xb9b/0x2140 [ 409.496765][ T5897] ? ret_from_fork_asm+0x1a/0x30 [ 409.496774][ T5897] ? stack_trace_save+0x9c/0xe0 [ 409.496783][ T5897] ? __pfx_stack_trace_save+0x10/0x10 [ 409.496793][ T5897] __lock_acquire+0xab9/0xd20 [ 409.496805][ T5897] ? tty_buffer_flush+0x74/0x2b0 [ 409.496813][ T5897] lock_acquire+0x120/0x360 [ 409.496824][ T5897] ? tty_buffer_flush+0x74/0x2b0 [ 409.496834][ T5897] __mutex_lock+0x182/0xe80 [ 409.496847][ T5897] ? tty_buffer_flush+0x74/0x2b0 [ 409.496855][ T5897] ? __lock_acquire+0xab9/0xd20 [ 409.496866][ T5897] ? tty_buffer_flush+0x74/0x2b0 [ 409.496875][ T5897] ? __pfx___mutex_lock+0x10/0x10 [ 409.496889][ T5897] ? ldsem_down_read_trylock+0x14c/0x1a0 [ 409.496900][ T5897] ? __pfx_ldsem_down_read_trylock+0x10/0x10 [ 409.496911][ T5897] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 409.496923][ T5897] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 409.496935][ T5897] tty_buffer_flush+0x74/0x2b0 [ 409.496944][ T5897] __do_SAK+0x138/0x6d0 [ 409.496954][ T5897] vc_SAK+0x78/0x220 [ 409.496965][ T5897] ? process_scheduled_works+0x9ef/0x17b0 [ 409.496977][ T5897] process_scheduled_works+0xade/0x17b0 [ 409.496994][ T5897] ? __pfx_process_scheduled_works+0x10/0x10 [ 409.497010][ T5897] worker_thread+0x8a0/0xda0 [ 409.497023][ T5897] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 409.497036][ T5897] ? __kthread_parkme+0x7b/0x200 [ 409.497050][ T5897] kthread+0x70e/0x8a0 [ 409.497064][ T5897] ? __pfx_worker_thread+0x10/0x10 [ 409.497076][ T5897] ? __pfx_kthread+0x10/0x10 [ 409.497085][ T5897] ? _raw_spin_unlock_irq+0x23/0x50 [ 409.497096][ T5897] ? lockdep_hardirqs_on+0x9c/0x150 [ 409.497108][ T5897] ? __pfx_kthread+0x10/0x10 [ 409.497116][ T5897] ret_from_fork+0x3fc/0x770 [ 409.497128][ T5897] ? __pfx_ret_from_fork+0x10/0x10 [ 409.497140][ T5897] ? __switch_to_asm+0x39/0x70 [ 409.497148][ T5897] ? __switch_to_asm+0x33/0x70 [ 409.497156][ T5897] ? __pfx_kthread+0x10/0x10 [ 409.497165][ T5897] ret_from_fork_asm+0x1a/0x30 [ 409.497176][ T5897] [ 409.731694][ T8660] fuse: Bad value for 'fd' [ 409.955799][ T5904] usb 3-1: USB disconnect, device number 17 [ 410.107580][ T5870] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 410.107599][ T5870] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 410.323411][ T5870] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 410.323443][ T5870] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 410.323460][ T5870] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 410.323610][ T5870] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 410.633693][ T8659] tty tty1: ldisc open failed (-12), clearing slot 0 [ 411.553084][ T5897] usb 5-1: USB disconnect, device number 21 [ 414.575114][ T5189] udevd[5189]: worker [5869] /devices/platform/dummy_hcd.3/usb4/4-1 is taking a long time